{ "Event": { "published": true, "date": "2026-04-05", "threat_level_id": 2, "info": "MalwareBazaar malware samples for 2026-04-05", "timestamp": 1775433782, "analysis": 1, "event_creator_email": "bazaar@abuse.ch", "distribution": 3, "uuid": "901d2422-a0a5-4864-b799-26fbe8a42141", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b45dc13-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354138, "uuid": "288cbf86-c616-4680-863f-b631317040b1", "comment": "Malware payload", "value": "6c5897cb7e27cf2927188d1b064d79fd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354138, "uuid": "0e88fd5d-d501-4dc2-8bfc-fd1b016c3ad8", "comment": "Malware payload", "value": "0077ed4380de2f3d6db00d566e94a7c8c28615abe3d5c2c446e6c0749ee2bd88", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354138, "uuid": "52e21ed2-4c4c-4c02-84d2-de1a962a2f10", "comment": "Malware payload", "value": "d9e0326f58819fc12ded8e401b234c2fabe8d516", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354138, "uuid": "57b4f9c6-2fb8-4b5e-8d74-7fd152b2810d", "comment": "Malware payload", "value": "6f2c302f851997fc1d074f435a1365fe208021ac39214429d7182418559fedfd62c7392a00261aa73ad309159ff3ca4a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354138, "uuid": "08618dd2-63f5-43e0-a033-087c41069d83", "value": "T181156D89E7C3D4F1F65300F1068FD7E71524A2265013F6F6EA8C2A977472B626E1632E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354138, "uuid": "6fb44505-f286-4741-a41a-49cd09210bc4", "value": "24576:uAFVCphZRhoKZH3wxeqtTsQimxUKN+nIs11ECmAhI5e:zCphZRhDH2zGmxUdnI/w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354138, "uuid": "4ed710d3-ac2b-4e62-90c5-15b809e38411", "value": 922688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354138, "uuid": "b3cb1196-3154-44d8-9d7b-69e07c202bbd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354138, "uuid": "9ee0bdee-4a26-4d46-98b2-eada9d6d986e", "value": "clienti386n", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b53e6965-30f4-11f1-a769-42010a9c0008", "comment": "Malware payload (Vidar)", "timestamp": 1775396299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396299, "uuid": "7d625699-a44d-47c1-b6ea-c409b4317b51", "comment": "Malware payload (Vidar)", "value": "531f845ff475beb225a17a0831f5753f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396299, "uuid": "f28808ff-fc40-4c4e-93f2-af77d2577eb7", "comment": "Malware payload (Vidar)", "value": "03a5c74e7175b281351b5bef087a53eb5d52e535f715011a747e2656761e3ee9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396299, "uuid": "938f4d61-8cdc-4fb0-9201-0b67ac756ed2", "comment": "Malware payload (Vidar)", "value": "10454fe636ddadca6fe850a861838a7f6af9e568", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396299, "uuid": "b47111a0-509b-4d89-abbb-905ab14e542d", "comment": "Malware payload (Vidar)", "value": "e172656ed7e78cb8dc4b1568e434262e28817a4b6f8603273f55b1d0fb9ef025a614960c8252f3230fc3276f966f9247", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396299, "uuid": "793bff97-1fad-4aea-9f74-964ba2083f0b", "value": "T1CFC6390266442DC2C8A91235C1DBA5FAB1D7E9A4B123C78F4038DFC61D9A64D8F7BCE5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396299, "uuid": "8ecfba65-7d65-423b-b80e-94675bca8b2a", "value": "a80cc177d6a82dac7c707b09e8d0b107", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396299, "uuid": "a97df575-d249-4a28-9d4c-decd5285e07d", "value": "98304:rJSBFWUfDxxIQmC32byYJRkZXaG43PQTUGN:0FWwDxxIQmIDYHG4K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775396299, "uuid": "d6628c9e-4e17-48ae-aa10-a8dcabada9d3", "value": 11778560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775396299, "uuid": "2f34dad3-abf4-4c09-b6bf-3f06b8d746b9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396299, "uuid": "04c39d72-a733-4d5a-ac1c-0a6671558e0e", "value": "libwinpthread-1.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c89f879-308e-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775352449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352449, "uuid": "aac922e9-9392-475a-8289-beda1bc4f7b6", "comment": "Malware payload (SalatStealer)", "value": "da8b3c7f4880e345a8ab9654e0a38f9c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352449, "uuid": "d756a1b7-1488-48ea-b2e0-24ea15e519f7", "comment": "Malware payload (SalatStealer)", "value": "04a053a53c306eceef1ec56b761796e98b10cc8e848a672c1bd3d95efb06683e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352449, "uuid": "ebea5eaa-c638-4f3f-995c-19db4627d5de", "comment": "Malware payload (SalatStealer)", "value": "e14611175f53896c12c5f8aa600226bdd88ef92a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352449, "uuid": "c898b9ec-343d-401a-8702-68f8d3462a3f", "comment": "Malware payload (SalatStealer)", "value": "7112ea6ff7e15b7605d836065a892461f7e91aeafccb51e7874144c0cb114621eba5527058c41e7e74d3375f5b1e5e74", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352449, "uuid": "400704d9-62b1-4c51-bdb4-6fde30e2b291", "value": "T1E1C66C11FACB54F5E9035831406BB27F23315D048B28DBDBEB183B6AF87B6A1197A705", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352449, "uuid": "78440c4e-7b51-47bb-b16f-84628d0a6cdc", "value": "1aae8bf580c846f39c71c05898e57e88", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352449, "uuid": "5fe7ef15-f419-4ddd-8b51-a73fb54824fa", "value": "98304:mUhSHKu1UL+2iy0NeDqgtou4sc3HX+6ElO/:zu1y0opuuyOlO/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775352449, "uuid": "103aa938-b2d0-40ae-9633-652c9c9a43c5", "value": 12571648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775352449, "uuid": "100d3042-42cb-4647-b93e-7a73880725ed", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352449, "uuid": "c5c1096e-8771-441e-ac4a-5ef864083a43", "value": "lbq40.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "107c3297-30c7-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775376695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376695, "uuid": "429078d9-2a3f-4aaa-b52d-93332584f4ed", "comment": "Malware payload (Mirai)", "value": "799227c42a451b2b10d2017c5140b36d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376695, "uuid": "0c8a62af-f77f-43ba-a8c1-1314533226ae", "comment": "Malware payload (Mirai)", "value": "05c5d5b026e976b85bef06be507c1d39cfc737a2539d6a085892ac4f8b92cf9d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376695, "uuid": "ae92ff68-34e9-42fd-972a-cd1556fa4b3d", "comment": "Malware payload (Mirai)", "value": "de3d20f24c9ed4291e6f79e2350a3c39d035fcba", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376695, "uuid": "8aaee591-5a93-4d68-81a9-68f28461a35e", "comment": "Malware payload (Mirai)", "value": "ce5726c052b225990b00e7d82b4a56797e2491f1e483edee9dc53a52f09b903853bea8761432b7e8f2d9a381b95ef9fc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376695, "uuid": "0dd7f9fe-80be-4839-99d0-3dbed4413e66", "value": "T1DC937C89FB83E0F0D85605B011ABF7399A31DD371014DD6BEB98FE72AD32612A11679C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376695, "uuid": "149c35c1-4f36-4f80-ac31-4b54db9ea79b", "value": "1536:N5aITYAehHb1Q7lpBbtrar81AFe8GG6/qoi489rUd31QgHLAVbCGzr:N53cAehHZQRpBbtrar81AFv2iWumK+G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775376695, "uuid": "55b19627-58b7-4721-92e1-b5f2e4619aa5", "value": 95444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775376695, "uuid": "bb8c7650-55c1-4ab2-8f48-cb9a1a4c9781", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376695, "uuid": "1c6c33f9-b684-4d5b-b241-cd273353bffb", "value": "titanjr.i486", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b02e49c4-30a2-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775361072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361072, "uuid": "970159f8-27ab-43d8-ae83-d37334fc0311", "comment": "Malware payload (Mirai)", "value": "04829f770c668275d3275af0e0599f5b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361072, "uuid": "c4d0b509-f36a-4e15-9f45-b1c29924f67f", "comment": "Malware payload (Mirai)", "value": "06c04733720e275e9444ed944be88568355bc6841405aa678d19466dc6b95acd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361072, "uuid": "477b2228-3901-4907-a303-8a3dbe27b9c9", "comment": "Malware payload (Mirai)", "value": "12f45e95eb9ff31ddbd364555a062ac5408eab34", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361072, "uuid": "37fe8b52-0b43-4240-9d1f-94631e3116c9", "comment": "Malware payload (Mirai)", "value": "e765520a22c337b88cbf6129abc14a3f5d2fd98121e96bb54a6fb44aa2396f1a78c25b0f481d1ec026bc8fcf55e71361", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361072, "uuid": "95d32e2f-76c9-4916-97b3-8675f5401e9d", "value": "T1EB230791BC829A2BC2D41379F5BE998D3360B3E8D2CB3227CD614B107AC551F1C66FA5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361072, "uuid": "6e4abb41-b4ad-4e2e-9331-23a708457105", "value": "768:5PwCxmKFReSIn9ygAGxc02k8c6ZQ48PHAmWun/RWFQ/MmUB1mA2EDEy0eYjW9THm:5DmKF7Gxyk8cqoHAmWurAufsG5x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775361072, "uuid": "5ebba43d-03df-4a0f-b7e9-613c5bddf14c", "value": 47096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775361072, "uuid": "f455400c-7ac3-476a-b340-e575781b5336", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361072, "uuid": "5eb2ba81-cfbc-40d6-9314-6841e33ae4f6", "value": "boatnet.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba7df8b1-3125-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775417353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775417353, "uuid": "5f982936-3a85-4d11-bce5-2361bf2340e5", "comment": "Malware payload (Mirai)", "value": "9dc170c5c5799c683befe055ad6b7b36", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775417353, "uuid": "032877d1-b245-40bb-9c32-231c9e8ebabe", "comment": "Malware payload (Mirai)", "value": "07d8e987a8da18546a3f99f17a4e93f963abb75d1f3d2ecb1596e3a4d67219e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775417353, "uuid": "5ebfd9ac-3ca5-483b-8d3d-a37d2c2ef9a5", "comment": "Malware payload (Mirai)", "value": "d637e6d70aa9a43c33a5da2881b627343c996e67", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775417353, "uuid": "e8a54a67-56f7-48d9-817e-5d1c0069b396", "comment": "Malware payload (Mirai)", "value": "8a762ef257e13061f7a97e22428021f7f8bb503b18b0703641f6b7d703c06ee4ec961d8713a856eba28ac502df1ad46e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775417353, "uuid": "6bc6ab7c-fe8c-4c75-b634-2ffa22321fd9", "value": "T1A0E36BC5E28FC0F6E80251312176BB3A5AB2FC3A523DDA87D7B89A71E8835C0D51675C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775417353, "uuid": "98d988f2-047c-490a-b4a9-264ea893ce3b", "value": "3072:iZ6vM0I0UkSJffFrpSrB6MgAqsdE8fh/g3PKYKCBq:iZ6vnI0UkSJ3JpQ+/KYKCBq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775417353, "uuid": "f148c17b-a6e9-485c-b98b-ffda50762c25", "value": 148556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775417353, "uuid": "cb047010-faed-45a9-8548-78d74f49e0b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775417353, "uuid": "b2b94328-8446-42dd-9aa1-d4bfa1ba7051", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c59121cd-3090-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775353377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353377, "uuid": "206d338f-afcf-49cd-bc27-70405f96f305", "comment": "Malware payload (Mirai)", "value": "b24a63f8c5f9c6830b65deca811ee9e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353377, "uuid": "ceb08849-cc58-4f2f-a1d9-a902adfeb379", "comment": "Malware payload (Mirai)", "value": "082121edb46ad791d60420d235560eeeb5a71520066c9fb0a1065e4e1d1879bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353377, "uuid": "ece003af-f853-45b4-b963-fcc729b951fa", "comment": "Malware payload (Mirai)", "value": "b378d8918beb6beba530dbe78cb249449e293148", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353377, "uuid": "85de73b8-79fc-459a-878a-68d37dfbf54d", "comment": "Malware payload (Mirai)", "value": "b07c375b32ae0812efcecd2cae26e9ca9975ea4eeca62f627db23c678c04cdda8c9e356540fe4657c66baf1eb3c87671", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353377, "uuid": "4f867dac-ea3c-4d39-a4fd-36ad7efdc100", "value": "T1246317A3F901DE7AF41BE2B744D30919B630FFB60D9306B272277856DE750E41862E62", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353377, "uuid": "05b07430-18d3-49ac-bcc3-f23ff6244115", "value": "1536:1pmhqexw+8XqLuUF9idktsLMazXRhxJrtXvPt9HHAzcwPdZMZnzd0yPoyo:/m5wnqLuUF0GtUzrlvPt9HHAzcwPdZMy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353377, "uuid": "d12c57c1-00d0-48a6-8ed3-da11b286cf93", "value": 72684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775353377, "uuid": "c5100a35-1ffa-474a-808a-da49b38648cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353377, "uuid": "45481b35-23aa-4f18-9ff0-88864da7508d", "value": "mirai.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "003edd3c-30bd-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775372373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372373, "uuid": "a20b70b4-e57a-4aa5-84ac-8ebcebb69000", "comment": "Malware payload", "value": "b9eceea419d048378fd8c5cfdc464027", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372373, "uuid": "f60d4eaf-f917-48ad-bad3-12f735c46f5f", "comment": "Malware payload", "value": "0865bc35c7eb69b4658858e09e55419f54c511b3a5b8df295dd0d1af38d56e3d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372373, "uuid": "be5f0de9-5641-4317-beff-3cc98b9f0486", "comment": "Malware payload", "value": "e9de6e82162d4750ab68a22ac2aada0ae94555a2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372373, "uuid": "6135ce8e-549b-430f-87c7-07a54abf7056", "comment": "Malware payload", "value": "0b0beffbb2f5391bd044eb164e14c99e8565ce3ecbf7e1543f2864fd870f514adf884d2df4c05063035d23a239188558", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372373, "uuid": "468a1aa1-417e-47c6-96df-661f491098f5", "value": "T1A3F46D1BB6E370FCC667C13043AB9A72B932B46502216F7F95C4DA312E26E602719F65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372373, "uuid": "44fcff56-7885-440d-8640-6461c9e745a5", "value": "12288:0WPp0/KePFLgl/4a45KqdT00DZwmUAhPyb7c5Hm:0WPpZePhgl/4aMdT00DimUz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372373, "uuid": "6bf0ca31-cff2-4de6-9330-c69f0d70192f", "value": 737536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372373, "uuid": "885bdfad-2aa8-4df8-aae4-eef1baa319e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372373, "uuid": "648e9185-d8cb-426c-919d-b86c721612a6", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8ceedc0-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354214, "uuid": "b0580a5b-30f2-4a3c-bd4c-2540ce531fc0", "comment": "Malware payload", "value": "c603a816a5f9a6a8c2f471a19c0315dd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354214, "uuid": "bd0cef3e-41d0-4d29-aa80-eb8b47deaf5d", "comment": "Malware payload", "value": "0a65892df4903823e00869e42a58403ef4e125bcb55838016e3cd227fb5f9635", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354214, "uuid": "f42682da-3c23-45b7-8e7d-668ccddc670d", "comment": "Malware payload", "value": "28d82880c905b9a8ca378c01fb32253c18c19bf4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354214, "uuid": "c47b0cd5-a7d7-4fce-9b20-6f35edc5c4a3", "comment": "Malware payload", "value": "06554e2d4361483006fd7105987669b18ccbc9f237d816a5f67f3572f4d96441e7b95048642409556bf36c9a95d17eb7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354214, "uuid": "925b945c-07db-49d3-bdd3-25d92f22c249", "value": "T137368D0AFD509F5ACA3C41B288A116D42734FC441F8397575A24F63CBEBE6C9AE913D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354214, "uuid": "4c778907-6d28-453c-b50e-d3e88aa61d65", "value": "49152:XX0oVe4ldWdV0GWSjAbeGVwFctjR8m25ET:XPPluhMbtNwET", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354214, "uuid": "48915042-4fab-4e76-9415-4e03c8dde214", "value": 5243042, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354214, "uuid": "28faf168-4da3-4f03-b9db-c19078570e2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354214, "uuid": "94f5c228-e41a-47f5-a3f4-45e3fb5fae8f", "value": "li7proxriscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acbdc770-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354624, "uuid": "bfe8b4a2-8a66-4b64-b703-d32b4f913e8e", "comment": "Malware payload", "value": "d0927bd23b0efded521d436fa57a4522", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354624, "uuid": "dc16a3b8-1789-4416-bc0b-630df9af94a4", "comment": "Malware payload", "value": "0b081d3c3292ce0fd391b4cfc533dc2f7a8f249e6fe76f4167ec5e3d36f2353e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354624, "uuid": "facd1879-b4ad-450e-af52-0aad574e939a", "comment": "Malware payload", "value": "c2aecd4547a681a35747e03af387a9bdf51c0ddd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354624, "uuid": "791da966-30b7-48a5-89ff-c90918a5507f", "comment": "Malware payload", "value": "95ccee0908aec0b68e030fce50ed4c54ed2ed669eb178f948e81cf402240132835eca4d497b82be85ac55694f5358734", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354624, "uuid": "c6d8c4a2-b931-4fb0-b879-a8ead9c04868", "value": "T159F47D623721DFA1E355D67008F3C6505AF621A20BE240DA72ACC7287E2166D6D5FFF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354624, "uuid": "3dadfcd4-1469-432d-b1f8-35c7bdde14e0", "value": "12288:alsmj7aEuogXX4FwGwYFFQS1EJVfHHXxsJiUfgpgVuFFWbz2pwVxbg6:als8aD4FwGw6FmxsXgFE6wVxbb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354624, "uuid": "33960d37-23ad-460e-a00a-11379ef38dcc", "value": 762416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354624, "uuid": "0efa7abd-11a2-482a-a5e6-bb1482ec2a1f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354624, "uuid": "54b369e0-5f5a-447f-8ce7-a22fe4b3dc0a", "value": "sudpmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87984b0d-30bf-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775373459, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373459, "uuid": "e0ddf757-1203-4a2a-9dff-a11227dd9b1a", "comment": "Malware payload (Mirai)", "value": "85a84300fc956d3fe6c78eba6877bfbe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373459, "uuid": "4d375967-3d6a-4535-8264-b70567beee6b", "comment": "Malware payload (Mirai)", "value": "0b21d3e3198185fdc466db84c25a778ce20ee14f0a3218f102a68632cb276597", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373459, "uuid": "2447c2ee-c9b6-40c7-b276-7b677b3d0471", "comment": "Malware payload (Mirai)", "value": "d8d6ab866db6840d87b19270d97c8047a7fad551", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373459, "uuid": "dad5e488-8115-48a6-800a-659e5b21f64c", "comment": "Malware payload (Mirai)", "value": "fd13a72bed1d618d05c2d849cd6882ba5ec4f0111d5c3b069cf90dd0f049efb7c8f0e38e0f4d0e845accb9be3b40cde0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373459, "uuid": "e831bb07-1fc9-447c-a80b-e5500f3e2db9", "value": "T132E329C7FD00DEBAF80AE33A48530905B630B7E145925B372257797FEC3A1991563E8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373459, "uuid": "e3ea1e53-2a32-43ce-839a-1722bc726d50", "value": "3072:9V8OkzPUBna4S7Ac6eVEjbicLk+78grOIwbn5gvwyyLbWKY:9V8O3na4KAcaLk08L54yLqKY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775373459, "uuid": "5463185a-9f51-472a-9fa5-c09902dadb46", "value": 144512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775373459, "uuid": "080d38d2-7e15-4a42-972a-2793f0fa49b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373459, "uuid": "a97e8cd2-e43f-4434-ada4-e10d60afa254", "value": "main_m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55fe2f5b-30a6-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775362639, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362639, "uuid": "2b914e08-4228-4182-8079-897ebca40ce5", "comment": "Malware payload", "value": "30d600549487af6e32b69f28401d87eb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362639, "uuid": "14720f75-2a6e-4858-ae02-dcf262c5f8a5", "comment": "Malware payload", "value": "0b55d648d53d5865de199eb1ebd72184036aea0857cebd347b6bb8eb4ccfd714", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362639, "uuid": "8d369310-ebe0-4201-975e-2d4ce32f99c8", "comment": "Malware payload", "value": "410e8cb32bdef923a6e87be03ebdf16bdd72db35", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362639, "uuid": "b30f70a6-e77f-4d7a-8753-b7f07dd72a88", "comment": "Malware payload", "value": "5f46a904bcb76c753fb30f17c118ff485b5b6c5d6c335f4bbc4cbb2f685f9b26c9b0c513ecc442799e1e9f76f0d797db", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362639, "uuid": "251849e7-60a9-426f-9a0f-92b3b8dae752", "value": "T1B5D31987FD229D2AC6945330D973537C9378CA15AB71A913533822382ED7E9CFB09B58", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362639, "uuid": "3577ecef-3a71-4342-95cb-e7fe9cc7ceeb", "value": "1536:afdMiXnEIGrpTNq4cX4P3b8goO8PyAtU+R9x82851G6ZtOJo:qMxIGZk4cX4P2yAFRb0MJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775362639, "uuid": "6143e498-4ba2-4c77-9b0e-97a9f01ac760", "value": 130336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775362639, "uuid": "883ba390-7cb6-464f-ab01-8afd0462430c", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362639, "uuid": "c8555df2-66f1-4add-bc4a-61e0db4199ae", "value": "per", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a6ea31d-3136-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775424413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424413, "uuid": "76ee0ecf-4798-4d5e-915b-055b58dc054d", "comment": "Malware payload", "value": "955af4d5135e9feecf433039f4006492", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f_ex86", "colour": "#9A8E4A", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424413, "uuid": "c9068e4f-00ae-416f-a228-c06eb00a476a", "comment": "Malware payload", "value": "0b90ede080e5fca2dc60740262932634dea6127af825c671c1dc5f384e75fe84", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f_ex86", "colour": "#9A8E4A", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424413, "uuid": "0c83b757-5f7b-4eb2-9c0e-daf402e8286d", "comment": "Malware payload", "value": "050866f41e5c3d6eb39f9fcd56848dd4bb76f675", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f_ex86", "colour": "#9A8E4A", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424413, "uuid": "14b95701-0c01-4f0f-b1ae-0d078e52fcd4", "comment": "Malware payload", "value": "e5ce73694652bda706d52c0e3f8c755ec618e899b553485965970daf0c480b643181981a796041528233993727d431ce", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f_ex86", "colour": "#9A8E4A", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424413, "uuid": "301f4307-69cb-4748-9d72-00055aa619de", "value": "T1AF756D43E2A620ECC05FC170975B6722F93174055B38BDFB92D0D7352AA3E906B7AB25", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424413, "uuid": "53035fb2-097e-4f02-b89c-089df1d068a7", "value": "b712b3f1f6f5dde070c523d4407e5a3a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424413, "uuid": "72197f89-f5e6-475d-9602-4cd126319625", "value": "24576:gds9Esxlce6k91UOld2LMxmeDozCMZyFFOeEymOCUwPPvIP:gdaEglcAHNaYczYsyL2PPv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775424413, "uuid": "f8b4f3b7-4d22-4c53-8beb-1998624afe1d", "value": 1566208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775424413, "uuid": "e9ad053b-78fb-43ae-8f82-f9ed51c7ff94", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424413, "uuid": "baafc3ca-4612-44f8-9750-ed702656a343", "value": "f_ex86.node", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54446ebc-30c7-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775376809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376809, "uuid": "346a277c-07fe-4edb-beab-d3d70acd6a86", "comment": "Malware payload", "value": "28f81e4e74a678fdd20191e763ba82b6", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376809, "uuid": "f2083d09-765a-45d8-a8ed-b140ea7a9ec9", "comment": "Malware payload", "value": "0bc35e3fb163db74c098ec1829004335ce1ff33e205b4daef375a071d0053b36", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376809, "uuid": "7151f7dc-f746-43cf-892c-13dd54ea01ec", "comment": "Malware payload", "value": "1bd063ef70ab05f92a1b1fb162d2827451da8aaa", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376809, "uuid": "ed80483e-ed9e-4769-82a0-28a30f28c3c9", "comment": "Malware payload", "value": "18d8ee57d17147bf4feff68394deede29ef61608e0bcca2bebc3a2509b67e66d9987b378481b768fd1db70bd4569af9b", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376809, "uuid": "86fcfa5a-6f5c-43fc-85d0-b69406f49d4b", "value": "T1C0E4BF6B764B8D61C1882337C5DB8810A3F19585B577EB0F788463E116273EADE0B2E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376809, "uuid": "fdff5a3f-f105-48cc-8dcd-2e4c7ce0f66a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376809, "uuid": "45f0ffec-9793-4dac-bc01-67a6f8417f57", "value": "12288:vRlQB9z0O6M1MQJqdEeInG6DzvM24zIAB1hHvOtPcq+:vRyBVx11MQ4ExDg/XBLX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775376809, "uuid": "dccb2d48-b546-467f-bd08-006d6f198847", "value": 679936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775376809, "uuid": "d88a9b84-eb4e-4785-a804-bf66bc55bfda", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376809, "uuid": "015bae99-6da5-4ea5-84a2-27026f4dadb5", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d6c6bad-3082-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775347243, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347243, "uuid": "12d965e7-f276-46a1-9a6f-e536ad6de03c", "comment": "Malware payload", "value": "98ded2ba403fc82f5764d182cf07e453", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "enthec", "colour": "#9E7429", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347243, "uuid": "a37fea5f-e9cf-4185-a677-8a72d3621672", "comment": "Malware payload", "value": "0ceea9dadfacd6da2935932c00d669624fa19a40762e34bb3b90ac85caa324c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "enthec", "colour": "#9E7429", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347243, "uuid": "07e04f77-2d88-420e-8e6e-bf77fe5be975", "comment": "Malware payload", "value": "58f0c0d451dd8ce4672420d73ce103a31103323b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "enthec", "colour": "#9E7429", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347243, "uuid": "a0666f43-8f07-4255-8683-1f805200d4bf", "comment": "Malware payload", "value": "faff718106f0645df37c7d6f8543bffdda5921a3ae16618691a281f0544bc5185482bebf4a0de6de9d9d27fd06b845b6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "enthec", "colour": "#9E7429", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347243, "uuid": "915c2821-d2e1-49ca-aadc-e7f0814af667", "value": "T13D57CF7792067CEDE9B98DB4C41015816DA878874778E3C7BAC870E6A6EB6D08D3D730", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347243, "uuid": "0a552d59-27b2-4d4a-980b-0aef9546845f", "value": "49152:c8nxDgC7g9rb/TBvO90dL3BmAFd4A64nsfJ7QQzjFHWkMNRCdQqzB0dSyG2VjMQg:cqYUQuVDt0TZEb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775347243, "uuid": "d45286f9-9519-4f6a-a5c8-10dedead8674", "value": 29130752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775347243, "uuid": "8540d865-f958-460d-801f-0a2ffeadeece", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347243, "uuid": "b58a963b-a8a7-4214-9e77-c61144d81e83", "value": "0ceea9dadfacd6da2935932c00d669624fa19a40762e34bb3b90ac85caa324c4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7dd7f4c-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354186, "uuid": "6e832b83-98a3-432b-b42c-73afb5312e49", "comment": "Malware payload", "value": "067d3f780eb9d217758eb1d76db445bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354186, "uuid": "bca820ba-70ae-4940-9755-00ebb79754a4", "comment": "Malware payload", "value": "0d07f7160f095100c05557cf3a6514c463caeb6d04bf3d4ff0ca53a76e7a38db", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354186, "uuid": "6e201a71-6a7f-4e82-b12b-9d08790ceb7e", "comment": "Malware payload", "value": "b20f42044b90c56856e4153a651144139e78fc8f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354186, "uuid": "fe9204d7-37e1-4dda-beaa-5377ee57eacd", "comment": "Malware payload", "value": "46c198dd32164a115f3a1410d0a4240d0fd325957a148280b2a380495806f6ffb96b86a9b0496d2d36f74c5f0c1d7343", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354186, "uuid": "d3eac6c9-cb11-45c7-a7b8-3350fb654855", "value": "T149F4BE29F8446B57C49B9234808FE018737AB244139237063846DA7D7E82BBDAF5F7D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354186, "uuid": "291a5630-df7f-479b-b7cd-abf098bbd7eb", "value": "12288:mv1HMLvK7+gTHgBlLQSBTrpXVnXCltZhxikP7ptvlJJWw54VVxGAKLsF76SUPa:mv1HIK7+wHgBmSBTVXNSltdikPlLJJ8s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354186, "uuid": "9255e8e3-5199-4bf3-9ccd-6898e9a2ae0d", "value": 745064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354186, "uuid": "3f3c2306-32e1-4171-8d34-e3b324ee6912", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354186, "uuid": "649a56a2-4a1f-4679-83f7-5f298367f425", "value": "clientriscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75f5d153-30bf-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775373430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373430, "uuid": "12892deb-a1de-42c1-a7a4-98d1c37f98ad", "comment": "Malware payload (Mirai)", "value": "1f78836824edc62ad36f748513ddf43b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373430, "uuid": "aa55cd72-f07c-4848-9e16-d4be532de9d2", "comment": "Malware payload (Mirai)", "value": "0d6de37790878c4eb5eef3191215e6d5258136db59240b699dd131a481e01236", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373430, "uuid": "aca0e127-fa41-45eb-a9ea-37f45f42d281", "comment": "Malware payload (Mirai)", "value": "1cbc9dbcc264564e0d2957a5a5a7f6ffad617b80", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373430, "uuid": "04c2d0c8-f22f-4ca8-87ce-813c7bf3030f", "comment": "Malware payload (Mirai)", "value": "0825cd3eb130372c7c67c2c7d5cc8b0761512a5abfe9e2cffcfa36e9b1ff8acda74827129e6bd1a9beb07117417dd04c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373430, "uuid": "c4be9e8c-79f4-48ef-b437-7e47def2c916", "value": "T12EC31906B30C0947D1632EF43A3F67E097EF9AC121E4F640255F9B8A91B1E325586EDE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373430, "uuid": "1bc8ebb5-f0d8-4e82-b50e-6efaf5cbf061", "value": "1536:h6sndGNS+Bvxu1RxFvIsroTpKvAD/TWeZad78/nqulPEQdmo58kkPhz:Sz41Rx2uoT9DtKwNOPhz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775373430, "uuid": "2dc10700-ef49-49c3-b385-d6790d171fe6", "value": 129716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775373430, "uuid": "77c14cf0-1984-40c3-81ad-40cc9061e1e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373430, "uuid": "af554d57-a2d2-4258-918d-bebfafe99390", "value": "main_ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71dbcaec-3112-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775409071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775409071, "uuid": "64876083-9231-4c19-9781-c4f48d0b1990", "comment": "Malware payload", "value": "fe84dc5422496710c9cb819c2ab1bf15", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#76AC5B", "exportable": true, "hide_tag": false }, { "name": "Trojan.Win32.Rekvex.sb", "colour": "#AA3F2D", "exportable": true, "hide_tag": false }, { "name": "Trojan/SilverFox.saf", "colour": "#0C60FA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775409071, "uuid": "da67576d-24cb-4f16-b0ba-5a954c7492c2", "comment": "Malware payload", "value": "0e9ecad8c7ebf9a3bf40ca53180c344a4a25fd8b415609607e6aaf05c7ae7b03", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#76AC5B", "exportable": true, "hide_tag": false }, { "name": "Trojan.Win32.Rekvex.sb", "colour": "#AA3F2D", "exportable": true, "hide_tag": false }, { "name": "Trojan/SilverFox.saf", "colour": "#0C60FA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775409071, "uuid": "df7f2768-a0f2-42f6-8f91-42982595aa36", "comment": "Malware payload", "value": "333011bb7b920ca8e644c605ded4f9fe48fc852d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#76AC5B", "exportable": true, "hide_tag": false }, { "name": "Trojan.Win32.Rekvex.sb", "colour": "#AA3F2D", "exportable": true, "hide_tag": false }, { "name": "Trojan/SilverFox.saf", "colour": "#0C60FA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775409071, "uuid": "ecd6ae35-336e-4114-9c94-80d21885f77c", "comment": "Malware payload", "value": "0a6c4484d2154bb78da4e28835924c7692ba820383bec829c90cae8a30fd28576d3d98a6f113e72951c650f7b4c01115", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#76AC5B", "exportable": true, "hide_tag": false }, { "name": "Trojan.Win32.Rekvex.sb", "colour": "#AA3F2D", "exportable": true, "hide_tag": false }, { "name": "Trojan/SilverFox.saf", "colour": "#0C60FA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775409071, "uuid": "7cf1d0b8-70b1-4450-a265-2487d4b1a4ff", "value": "T167D54A5B56ABA0D4C96AD174C5174A0BE3B17C330B31868B04657E4EEFF32F24E6A325", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775409071, "uuid": "560db23c-5170-4688-bc67-9ce59b27a5f6", "value": "2737060e70ccee2be3a5e5f56e2b6887", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775409071, "uuid": "ddbfdb12-815d-44be-a855-c2c021f51071", "value": "49152:dmwLnZKcd0E3pq3+yxSHjiD72V6+9u9F8CEqo+:dBZDjHjiD7YSFnLo+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775409071, "uuid": "35335814-960e-4b7c-a601-6be23b50970d", "value": 2993680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775409071, "uuid": "db7bf7f8-fef8-4871-a71e-6c50013e0bb8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775409071, "uuid": "fabb20c7-c54d-457a-afb2-205c954f170a", "value": "Uninstall.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68ebcec6-30ae-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775366106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366106, "uuid": "7294ef45-d776-4f2c-8692-2ee662289736", "comment": "Malware payload (Mirai)", "value": "01ca6f88d37733046800de1f7373fe5a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366106, "uuid": "cd1c80f2-7a68-40ab-8cd6-697f30d7f406", "comment": "Malware payload (Mirai)", "value": "0eec972341affce434bb697a0918a7c40bb76c693bdbb01bc46c17393e26b6cc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366106, "uuid": "d6e647f7-9899-405f-b857-8f5070b23203", "comment": "Malware payload (Mirai)", "value": "ea5ef1b0da7951482dd4cdc42b724780ee4339e2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366106, "uuid": "7b165c27-51c7-4cd7-aaed-49fbfb74a36b", "comment": "Malware payload (Mirai)", "value": "978a9f1a86c9bd4bf584c15e9959c87a7732afcacd7f9a452abc2d42d6d7c372c88a4ad7e9c1a3fa62479407b335e58c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366106, "uuid": "634a7278-7fd9-4276-a4fd-e70c65fa89fd", "value": "T1D2A2E17DFB20C18CF086847E2957127B456FF8A64B98420E6E15D0C701C3ADEE49AEB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366106, "uuid": "b1ee62c9-2f93-4453-898a-766dbd983c1f", "value": "384:TDYC95A2rM7RjFrvX2V6H2XJ8LaHYsbX1chiM4HhBJhpExUC03uhHB3QJmRxx+cj:TDZ5Dw7RjFjcU+O24sDS4HhrhpEguX39", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775366106, "uuid": "d8bc64fb-a932-402e-9af8-65104b8f7c3a", "value": 23260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775366106, "uuid": "5d5900b6-f470-44c9-b0a7-3e5bdc1b67b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366106, "uuid": "bd5dd9de-0c00-4b57-b5b8-1bb35e8279b0", "value": "boatnet.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da25d44e-3082-11f1-a769-42010a9c0008", "comment": "Malware payload (Gafgyt)", "timestamp": 1775347398, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347398, "uuid": "4bab80a3-af0a-4d96-8cd0-7cd923c288d7", "comment": "Malware payload (Gafgyt)", "value": "ea43f58b25717487f72852227cb5162e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347398, "uuid": "a0ba7f32-97fd-4ca7-a284-653270c4b25a", "comment": "Malware payload (Gafgyt)", "value": "0f641d5c2c241a051b1ca43ffa946ad7617255549238cc4103d1c2b344a4e6de", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347398, "uuid": "6960c89a-18dd-4955-810d-bfa7d77dc36b", "comment": "Malware payload (Gafgyt)", "value": "36565dbda42b0c63832079e57cd9ab39cbd87056", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347398, "uuid": "edb10e4c-25d9-4b15-88a1-62298b40646d", "comment": "Malware payload (Gafgyt)", "value": "209e8c94427ba3c6deb0ff3264cafc2395933b3cfbb810bcf327b22d6d877e0d65805b9aa267e3d73cbb7ce41c6d1fd6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347398, "uuid": "04cf6ab8-5a60-4da5-83f6-a31a89edf4c4", "value": "T1EA821953CD2A2E68D65DC0B470358F3C6723E616E7432EEA4527827DC403E8DB59A3B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347398, "uuid": "2d026854-c2ab-40d7-af2a-e3daa34cfee8", "value": "384:wpZKiBy4WU65RMFmNDSoVc3/HdqB4zeRCx7dle:weOyY1NoVcP9P6CF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775347398, "uuid": "eefc5fc0-bdeb-4e9c-90f4-1b43bffb19c0", "value": 18960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775347398, "uuid": "9a5b6501-0f6f-40c4-b90e-f227f44964a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347398, "uuid": "fbcf56e4-e1ba-4693-ac1e-d00e8df50c9f", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c69244ca-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354667, "uuid": "289088c8-c3a0-4e48-b651-31dbe6a05acf", "comment": "Malware payload", "value": "b8bc2e3053daef8b049b292cf1f608d5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354667, "uuid": "b3c0d96b-d7cb-47e5-9d3c-aaafef203fde", "comment": "Malware payload", "value": "0fc720dc79d1a52a3a6fa9802fd6b4dfde1d0f29af9569fffa0c27d83d73182b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354667, "uuid": "251a4dc2-6c13-46d0-854c-f4c40db3a6fe", "comment": "Malware payload", "value": "66ea99d33b968d098d83f2c38a048514fef12d96", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354667, "uuid": "515776ab-3523-4496-afc8-b1c55b61e6be", "comment": "Malware payload", "value": "c86ff575a0c331c45acbcbe7d161c7ef40e3aca76b3bc54507a035ae1155bb96c3438c719fe1c882a24cf5f941d344ae", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354667, "uuid": "5e440f07-98a1-4190-84d9-a53b8b768f4e", "value": "T1FDF45C06FF645FEBC45FCD31492EC30601EDD49399C1662A71FC8B8CBA9935A0AE3598", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354667, "uuid": "d21f0886-8785-406b-87a7-66a88dc48ce6", "value": "12288:KQJpjWuGGuIgnX+e+dEyZpjc4Nf51QDOBNJjO5QCZgiPym3p9hb3D25iGQrOAY1S:Mu/gnOtZBfD+JPhq38kqB7YaO6wVxb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354667, "uuid": "854ecbc1-7fb0-47f6-a338-3d3f8e9ff981", "value": 762416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354667, "uuid": "9ec8e35e-eca8-4322-9199-e3ae487fced9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354667, "uuid": "3c50b7a7-bdb1-4651-af61-35416645306f", "value": "sudpmipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d598158f-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354692, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354692, "uuid": "a0de6898-845a-49db-a0f3-59e18b3f4d8e", "comment": "Malware payload", "value": "efe27986735849546f0a362ba484a428", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354692, "uuid": "b55ee160-1d5e-4ed8-b9da-7f6d5f98ffc7", "comment": "Malware payload", "value": "108c9b18a4fae610e0de6aa513970e0c6a1bc6810e93eaafb538d1f7a172a1f3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354692, "uuid": "f2621af7-5f00-49a5-a36d-9f091c551f8f", "comment": "Malware payload", "value": "29ea5b5732c30692c984f9b9d36e74dec65ea66a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354692, "uuid": "44e1fe09-6b55-4223-97ea-862da08f8f9a", "comment": "Malware payload", "value": "9198d837c990f471dbbd2486d011c3d2a4a0f8ec83c3919e70808e4636c20bb0ba513fbe5add36d4ad0c7d3005a723ba", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354692, "uuid": "2e3df6f3-c425-4d46-88e0-ca10cb396b4e", "value": "T1FFD4AE1AF9447B07C8974275848FE428736BB28407533706394AE67A3D83ABDAF1D3D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354692, "uuid": "d7ea2513-5f2c-41bc-9886-789dd8ce975b", "value": "12288:6VN+jJTnfwf8gnd1utjtaWXyw+UJpaKXKw5WomjR/6mYxY:oN+1T40gnd1WjLCw+UJfXUlymYx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354692, "uuid": "636d8cc3-4170-43c8-98f3-0d231ec879f7", "value": 649256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354692, "uuid": "4c6eb07c-8042-4326-9f43-2fc919bc02c4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354692, "uuid": "813c4796-2daf-464f-93f0-2d7453a59f14", "value": "sudpriscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "979c280a-30a2-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775361031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361031, "uuid": "1b52f6bc-d697-4919-97ec-657146223cdd", "comment": "Malware payload (Mirai)", "value": "9b4c3f7ef5884cdd4cffd6efef993403", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361031, "uuid": "0818c6c7-718a-4212-bf56-2c0e5eb1e3ac", "comment": "Malware payload (Mirai)", "value": "10ce123919ff47a2d88a04a30adc73ec8b559efe5d9c363a0a1194e0986c8053", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361031, "uuid": "f0da4071-fbfc-43a5-b05b-f8157648d59d", "comment": "Malware payload (Mirai)", "value": "987cf3b94c3f588203391d824bc54244f5da19f1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361031, "uuid": "73569bab-1c31-43fe-a72a-7c755451a1c3", "comment": "Malware payload (Mirai)", "value": "79952efef7d7e09091ffba71d58c4dcd65851e76f53aeb724cc547e7856794d0fe38429ccaa8ecd7dca24e8711ecdcce", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361031, "uuid": "36b0f985-962a-4457-afdf-1988a6807718", "value": "T11DA2D1BFE8D64957DDAAE53B011D00CA50BB5C5413A783C23FA535B389678E8FC36680", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361031, "uuid": "74a1c147-8ac8-41fe-8fb1-68aeef650c2f", "value": "384:MccDqRfKUWFH39z+/49ETVQrGLruI8qB+eANnlBQpMr/uW7MM+v1RpW:NMkKJFH39CBVQey7qsZoMTv7EpW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775361031, "uuid": "a9a5cd3e-5cf3-4532-a243-0af297e5584d", "value": 22448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775361031, "uuid": "52ba1006-8a81-49dc-9389-14940f583b0c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361031, "uuid": "60dd0347-5a7d-4ca1-982a-7d4a0bb0b56e", "value": "boatnet.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddbf4c53-3082-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775347404, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347404, "uuid": "ec4a23f0-f9b8-449b-bd3f-d9c78eeb659d", "comment": "Malware payload (Mirai)", "value": "a427aac993a6e662bfcdada2fd94058d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347404, "uuid": "9fc1c13d-de42-438e-8639-f4b70c3417c3", "comment": "Malware payload (Mirai)", "value": "10f46fec5656fa4294c079b9627faf3b8ad922359f760d941fe168fbb8c5b245", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347404, "uuid": "ca50ae84-db33-45b6-b65c-dd5509fce381", "comment": "Malware payload (Mirai)", "value": "a3b0b3647393b9cd6c094606cf7fc868a32c9de0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347404, "uuid": "b3a683b1-500f-4849-b8c8-7d0c650a4d20", "comment": "Malware payload (Mirai)", "value": "4c487ba034ed37f2bbce16ec5f046628ed37613490a9b1d1d5520bb02f5fdb9ea667703044418eecaa51da0fa06d45ba", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347404, "uuid": "8ccf87e5-56fe-41c8-9d69-08f0888337c8", "value": "T13AD2414929328FEDF76CC63147B74A34675833D622E1D644E25CE9041FB034EA46FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347404, "uuid": "3428552b-6fee-4187-8c85-877bbaff7ca6", "value": "384:X+A2OtW8TjGBDWjmhd+3GbSLj6VFd+GHsdpPT/eodo0YanB2TJ300iyQANafZ:dtW6jgCmhwyUPKoyN3SkjNuZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775347404, "uuid": "25b7178d-257e-4c49-a95c-86c15f117f14", "value": 30552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775347404, "uuid": "26ff8d1d-01e6-4cff-901d-1b0bb796b1e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347404, "uuid": "e9113aa9-19ab-4093-a58f-cd16a8b1c7a1", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e19c416-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354572, "uuid": "9a68acc1-b36c-49c7-9f50-33c2ac4df61f", "comment": "Malware payload", "value": "62340d5d740af0a6a10253ffa6272575", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354572, "uuid": "dc1b8856-2095-455f-acda-dff2b236ba0e", "comment": "Malware payload", "value": "11314d5692147115129ea050df865a528f156c2dd570a64b0e59a44e9fdf1bc8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354572, "uuid": "1cf1c394-98c3-4f38-98e8-d6f603cdb6b7", "comment": "Malware payload", "value": "fa331f2dd57356cfa5757b54ec12c8b4aa038671", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354572, "uuid": "775c5f90-b0a5-49d2-b4da-f992894266e3", "comment": "Malware payload", "value": "9b9757723d6223c172b5f2eb338bec744d4b51b15d1d3fbe1a74ef06b2476744f532aa406e6b9deb7ad884d7ff53f48a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354572, "uuid": "48704f4f-617f-4bdd-b425-45a133763d29", "value": "T15FF47C5BFD6E3843D2D6D33E9B4A83B1622BB190D32350937582432C94C6AEDCFB1695", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354572, "uuid": "21d384be-0129-4311-a4ec-7f052b1e1a20", "value": "12288:CXCvf+UTy7wudGtXSAx0YtHK63kelk49w5+9Xy//iUe9+:Q23uGSK0Yc6Ueb4/Je9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354572, "uuid": "1283644f-475e-429c-ac0e-c772307fc916", "value": 788400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354572, "uuid": "6edb652a-876f-465c-87e1-a506dcd84227", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354572, "uuid": "2d9a569e-734b-4d7c-91a8-dad6f3965582", "value": "ovhaarch64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b3efd52-3094-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354782, "uuid": "e77b8824-bea4-4200-b438-c80db7610aba", "comment": "Malware payload", "value": "8fe9d552c8b4b211e2f61a011a137c69", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354782, "uuid": "53963bea-2602-48f7-8d61-072c152bb70b", "comment": "Malware payload", "value": "115918a43fb772036d6c16bcfd30394663db665d5161a46744a5ecc42a179b84", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354782, "uuid": "21f30c1b-ec17-4ac0-91d4-5a27fd5a53d0", "comment": "Malware payload", "value": "b472734f68fa079e53da296a3cbd03ab3779a37b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354782, "uuid": "63d101d8-c163-4d71-b0fb-72dc88f51f0a", "comment": "Malware payload", "value": "f194c2cfa93e8948d17bdff9260fc447f9c5a6db74f5942bac18da4604927aed8c2b261717877c23969b561f287919e9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354782, "uuid": "5f092e56-12d3-43f3-84fe-447bdd7e4341", "value": "T12C055B46FB1C4523C9470EF1193F53D5F7257A4341F8922A370E9B272662E3ADA8738A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354782, "uuid": "e57948e3-de0a-41cc-bc2f-6d36d08ec926", "value": "12288:0oEVRQiyrhrg8I0gI0eaEILwLu6M8HytIippMmi0QNZUiiipDKwfN5Wp:0nVRagp0gIBjI4E8Hytxi0QNZUQuwF5w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354782, "uuid": "734a2d56-b842-4aae-bc41-76f85bd651ee", "value": 857748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354782, "uuid": "62a6f114-64c6-426d-8dd2-9d73c8d2036c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354782, "uuid": "f0887ca8-5e06-4046-94e9-2b0c32340a55", "value": "ovhppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "640f547c-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354502, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354502, "uuid": "c0917de9-be20-43f0-a008-fb5a0ac6e4d8", "comment": "Malware payload", "value": "8a78ca719bced5468c77f141897e9832", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354502, "uuid": "02042659-a215-4579-a644-439dc282973f", "comment": "Malware payload", "value": "1211e8942ecc2dc8f32823e310223957849acbd243d7b9727168fa4dcd24630a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354502, "uuid": "aa8d99e5-d52b-44fe-b6c1-584ecc9dbbf1", "comment": "Malware payload", "value": "430a5093f53e963d3e5b9b30ee080056ba2a9e4c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354502, "uuid": "a5c17611-8156-4f4b-9da6-c9ff9b8ef518", "comment": "Malware payload", "value": "2ce79723a2c0ff11d9e57f11a7015961eded11bb167096d705f7fd25d78e167d8c104450d25852d2584aecd9a272f57f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354502, "uuid": "37ad8d2c-f989-471c-8a39-f98523dc5943", "value": "T17A155A42FB1C4523C9470EF1593F53D6F7257A4245F8922A370EAB672621E3ADAC3389", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354502, "uuid": "f899323f-880d-4a7c-94cf-449938024d25", "value": "24576:chE8twFOvkUwTqEbV8ipIpyhx5lQazrR1Uttx:c28tww8VuEbLp8yhhQazrR1q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354502, "uuid": "1358a5e6-ff70-40da-b8e8-efcee400ef71", "value": 928380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354502, "uuid": "5a010699-a364-4001-b857-2512314fc082", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354502, "uuid": "b35b2068-fd75-4c04-bf28-96a94b00eab8", "value": "clientppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1053d669-3094-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354791, "uuid": "e8e5a3f3-821b-4a96-a056-8f14f7a72031", "comment": "Malware payload", "value": "6f4914ba7dcce9b36ef00fc4b10539f4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354791, "uuid": "e6681c6e-4279-4f39-aef5-1f6b8456b5fe", "comment": "Malware payload", "value": "12dbfad7e8d9f342a1179e984081ff4bb111f9809f7cc108b527b6bd5c48a86f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354791, "uuid": "76a596b3-fffa-416e-be0d-5d083d6f40b4", "comment": "Malware payload", "value": "e83865a7f806a4ab6c76cdc83f536da1d5ff3dc4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354791, "uuid": "211e5b92-77db-4395-8039-039ce3b6b958", "comment": "Malware payload", "value": "d046acb272e91e02651130e6a7ebea1bc27ef73b7e13a0dc354ff320574c623a4a7a043b4ce25e1193480bf26e4c0ce0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354791, "uuid": "f60c912b-ac15-4278-9f53-f9dfd1415e8e", "value": "T1B7B56C81FBC89125D84B0B3348A30BA8B3515D46D6E4892F970DB77F16B26FE590BF90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354791, "uuid": "7ffcdfd2-1822-41bf-857a-9f0ac989c171", "value": "24576:uIZi8QaeOwAvckMIiG+ZCh0+snsxykYI1QDoZQXXRj8SRyv:G8Qalvhg4ykYI1QzA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354791, "uuid": "27d78dde-967c-42d4-b00e-ef2a029d7faf", "value": 2359458, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354791, "uuid": "85fda01f-3ea1-42f6-b242-705c7e5c806d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354791, "uuid": "11bfacf1-08e9-49e9-9fb8-6b7c37331e66", "value": "mtdppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bed0d173-3098-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775356801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356801, "uuid": "a60dc7f6-8696-49e4-aa1a-b8a35c459f74", "comment": "Malware payload (Mirai)", "value": "92df85a376cde334a134007a695e7455", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356801, "uuid": "b0ff2453-9f28-477f-922f-476e87b7c16e", "comment": "Malware payload (Mirai)", "value": "137051184f74bd7c7189f6901fb924865fa518b3e1ee9358f8b337ef22f36b63", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356801, "uuid": "d17087ed-0487-4c9f-add4-afaca1da8894", "comment": "Malware payload (Mirai)", "value": "d489e0a6877ae9b1e81c685db8b2c0dff2c62688", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356801, "uuid": "7455c077-6502-4e9d-b2b7-1e00404e2cf8", "comment": "Malware payload (Mirai)", "value": "38424404c98890b5596f1150922948aebbddfc12a1ba6eb0e184afeae6d665cc5d3676742266cf6084879e382686487c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356801, "uuid": "220b2a1d-f638-42ee-a3fb-b1aa57b636ed", "value": "T109133A31A9762E17C4D0A8BA61F70728B2F2065F66E8CB5E7D730D4EEF21A4065132F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356801, "uuid": "fccd31e3-2866-4e52-a4ab-505e72d3411b", "value": "768:n8oV1q9LtuTLW55TmNgc58la281dk3O+YDNYl2TC:n8eSLtuTLg8gcWldrYq/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775356801, "uuid": "2ee39c59-85de-471a-9e8f-3b31eae8937f", "value": 42304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775356801, "uuid": "3d76bd67-eb9f-4fc0-bb9b-1175c1a1e704", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356801, "uuid": "af4260c7-211a-4542-8b9d-a74bb3eeb4c7", "value": "pspc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8334e55a-3082-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775347253, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347253, "uuid": "7e96f553-539a-40d0-84f1-ce8549b1fb9d", "comment": "Malware payload", "value": "244ab153c5b6ec57fea482e34048cd6e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "enthec", "colour": "#9E7429", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347253, "uuid": "042a6fb3-074a-482e-be36-cdbe6917ae13", "comment": "Malware payload", "value": "14c1403b37d68c04e51a982c7562dee190fb795f485505c69f99b4839b9c31b3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "enthec", "colour": "#9E7429", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347253, "uuid": "8f8140f2-42d5-4a4f-b14e-e55400bb763a", "comment": "Malware payload", "value": "928196f242a56da87046585abb8ba2600f03f9e1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "enthec", "colour": "#9E7429", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347253, "uuid": "d0c3964f-61a6-4b48-b209-21caa479e2e4", "comment": "Malware payload", "value": "d5bf038896fd73f8493feb8518389592e9582790fc80c297ea2b751b331208296a58211bd3d33be3acd80d63bdd18942", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "enthec", "colour": "#9E7429", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347253, "uuid": "56c0b0a9-1787-4aa4-b3b9-9bd9d5cb4773", "value": "T151B67C73945334D8E5A88DB4D11416526DBC388B5738A3C7BAC471F66BBABE48E38730", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347253, "uuid": "438d9f83-9e42-410d-a64a-119f41d95234", "value": "49152:c8nxDgC7g9rb/TBvO90dL3BmAFd4A64nsfJ7QQzjFHWkMNRCdQqzB0dSyG2VjMQ7:cqYUQuVDt0TZEA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775347253, "uuid": "7fa9634c-a256-49c0-8adc-c6345bc826f7", "value": 10813440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775347253, "uuid": "c6264a43-e287-4c98-80e1-be00b95bf7f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347253, "uuid": "d82ca2a6-d3c5-492c-9da1-493f1f47ab68", "value": "14c1403b37d68c04e51a982c7562dee190fb795f485505c69f99b4839b9c31b3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d58feb3-310e-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775407319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407319, "uuid": "2b845504-d6bc-4efb-b153-71cedc6f5397", "comment": "Malware payload", "value": "00acf03f0760bb7c78071b7fb4a94cef", "object_relation": "md5", "Tag": [ { "name": "agent", "colour": "#33525D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win64/Malgent!MSR", "colour": "#0E33CF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407319, "uuid": "329aa7d2-32bd-4bd6-b303-a9258cf0eb25", "comment": "Malware payload", "value": "159b0a681a8e9addafec86615c815a0269a330d5337b6975bc5659296e4d29b0", "object_relation": "sha256", "Tag": [ { "name": "agent", "colour": "#33525D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win64/Malgent!MSR", "colour": "#0E33CF", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407319, "uuid": "a7e24934-8173-4aa2-afe7-2d865fa94caf", "comment": "Malware payload", "value": "7d81cda68dc076199ec45ac9f44a4d68dfaa542d", "object_relation": "sha1", "Tag": [ { "name": "agent", "colour": "#33525D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win64/Malgent!MSR", "colour": "#0E33CF", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407319, "uuid": "2ba44c9c-7044-4979-962e-f237d6746a2a", "comment": "Malware payload", "value": "0c13c5a5f5320458544309798ce3167bf45128cfe680f5bfc3324d84f6d43d5964adf0ad3ac0d9c2ca6897806d762f89", "object_relation": "sha3-384", "Tag": [ { "name": "agent", "colour": "#33525D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win64/Malgent!MSR", "colour": "#0E33CF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775407319, "uuid": "26181f8c-275b-471c-819c-0e4c93a9c893", "value": "T112741A4B73669ED5D0A5AD34DCDA12349B637CC00395CAC323A2BE254EF31E71C7A698", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775407319, "uuid": "7f2673b1-9dc5-444c-9199-760dee7bc7f1", "value": "76357333fa1b437e42958924bfab0868", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775407319, "uuid": "737703c7-c427-48ec-84d1-ccf1bf9f9af1", "value": "6144:tBaiM/stOlMNzuk+OUdjf57Pa6UVNcUMMUUMYUUUU/UUU7UMU4UUU0UUU6UUUAUC:j3mjMN0TicUMMUUMYUUUU/UUU7UMU4Us", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775407319, "uuid": "2e57f7aa-60f3-4649-b777-1ecd8a1a4c99", "value": 366080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775407319, "uuid": "163431f5-a52f-4e62-83fd-748d8bd06ff1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775407319, "uuid": "1616e4cd-3ba2-4b36-b322-a5e6507f5f0e", "value": "PasswordManager.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8db333b-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354698, "uuid": "58917a86-1104-4978-bd82-a15cbee09ecd", "comment": "Malware payload", "value": "425dbdd4f963e7b4b9446eedbf8fd610", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354698, "uuid": "457ea003-d103-408c-a089-f10d14271d41", "comment": "Malware payload", "value": "16c8b7322f3204e8ac30be56a4bc82c364e313905ed1a2f9cdc06de70416bdc3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354698, "uuid": "62dbd1f4-d084-4ef5-9e84-0a1a3e0d2520", "comment": "Malware payload", "value": "1cee3efa1dc1544b3779116b6a077b2260c39da4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354698, "uuid": "822a28bf-2f67-4384-ba6d-666d55e87895", "comment": "Malware payload", "value": "2457fc7700988fe42a00b99ac8d7689afef5f772e540e3ce9b2a5b75ee62b1c8e3be22aacf147c86e6b542432e46e73d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354698, "uuid": "78586de6-2ed1-47a6-bfa8-65c445817775", "value": "T1BC058D2AB2B3F17CD01BC03407DBCAA24535F47525212DBB27C4DA353E66DE22369B66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354698, "uuid": "d5f9fb2b-0680-4848-8639-89b764674240", "value": "12288:cvXpX3Hd8FQKdAH/CIyxNgxWNZrP1aGbQsFNnCqRVay1QETyHX:0H98tRxNgMfrPzbD6qCE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354698, "uuid": "39ed9837-207c-4b97-8e7a-74af24292e16", "value": 834320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354698, "uuid": "a6c3983e-4a91-4b7a-afda-24588f856d15", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354698, "uuid": "d680ba14-b8d0-4a70-a5c5-51f94dce37e2", "value": "ovhx64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a13c5147-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354175, "uuid": "c2ce1907-e5dd-4891-923b-385863f749ed", "comment": "Malware payload", "value": "a08f1071df2733e5f28aac2d9f447af3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354175, "uuid": "c13c27b6-12f0-4e63-81c2-b63e1001f192", "comment": "Malware payload", "value": "171caf1b5d70c1623e6e275f88aeb2505b5d284b4d07b95a4299ec1df2a8b543", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354175, "uuid": "08aa9f6f-d7ce-499d-82ca-864ac8febe73", "comment": "Malware payload", "value": "3fbb109973d26051f9a77f0f778df2c51c5e786d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354175, "uuid": "e389fb0b-1eaa-4063-b43f-6203500cf9c3", "comment": "Malware payload", "value": "8fe452b295bd3e9d08d3c760067dc6740c68b3b9ba65f96445790eef8f42069f2e661b145b47a40d3d5cb8cfe50bfbab", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354175, "uuid": "0e77858e-2fc5-48d7-99b8-9dd1b893468b", "value": "T1F06639176F18E70EE624223458B1CA846B2A0C5542D7A917B391F31CB9F30BC9DAEDF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354175, "uuid": "c9ee97c2-73cd-459e-88a9-b334e7a4e036", "value": "49152:gG7JU0SDlj3x+adsDdcaSZzheugxgE6K5PmjYNxi/WdjZZEI9bSYhjr5HH4t5EJ:bkMxWoDn4jEJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354175, "uuid": "4792cef3-df3f-43c8-9225-6899c8d3433a", "value": 6553793, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354175, "uuid": "2f44ee8c-4108-425a-a303-3a7d1cd16ebe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354175, "uuid": "7c407941-96c4-4941-85f3-dd44c95df4a3", "value": "li7proxmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92b5a10a-3138-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775425447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425447, "uuid": "56b13a2e-897d-470e-87fc-5926e816d331", "comment": "Malware payload (Mirai)", "value": "3aa7c744727d44dc7e227915b0e713a9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425447, "uuid": "46057575-c97b-4a1f-950a-4af175129c24", "comment": "Malware payload (Mirai)", "value": "1725c67bdd98feb0c6bd2ae568ee2a959e9b564f1e533f1cff8ec87bb2ce9c72", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425447, "uuid": "30fc87b4-9247-4455-b5be-6d834cd4acdc", "comment": "Malware payload (Mirai)", "value": "608ddcdc3677bbcbcce62a083ebc0e673578f910", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425447, "uuid": "ac611411-de51-4695-ab34-f3a736668d1d", "comment": "Malware payload (Mirai)", "value": "1ee2820ac4337891ff1ddec98fcb1c1b0f89d00ea77690ddb505e199295bfc9dc7a37803fc5f878726750255891f9c46", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425447, "uuid": "bd3ef6e4-cade-414c-84a5-e5c78c6e2ee3", "value": "T192731763F801DF7BF40BF2B784A30919B220FFB1699256B7762B78569E741D41823E42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425447, "uuid": "910718fa-2c28-4940-a767-048a965faa39", "value": "1536:hA8rGI0DfTZrLbT8YLE031WwkKXdTMaDbzJv36tseQKPy5a2z5:eDfTlb7LE031I2pzV/eQKPy5a45", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775425447, "uuid": "981b6e72-7aa1-4927-ac84-a79339fae0f8", "value": 78260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775425447, "uuid": "7fca4126-4e67-40ac-8094-8559facfdc74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425447, "uuid": "3edd32a6-a56c-4f14-942c-cef3721de782", "value": "mirai.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7e18ca8-3090-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775353381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353381, "uuid": "49332ab4-0c31-4921-bf40-0fccd3ba5dfa", "comment": "Malware payload (Mirai)", "value": "c0227dd49fa7ae6253bd30af6923ed18", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353381, "uuid": "f1e6d3cc-d751-4f59-991b-ac20daf0f1f8", "comment": "Malware payload (Mirai)", "value": "179a6adc0d6377ea4b8d76483574e69e973615a6476c46cd0276b604f2e89d92", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353381, "uuid": "31207116-4cbf-4366-a037-734f7986f231", "comment": "Malware payload (Mirai)", "value": "37a5aa87a62e890d14f008b203a7167bb8867c6c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353381, "uuid": "f27bb76b-e171-4897-a599-395cebe08776", "comment": "Malware payload (Mirai)", "value": "12ce2dcfa5de14cec920d35a17ada1382000cb000d66ec6d074cfc26bc01095591e5968d69a46f31cae720af7fac5652", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353381, "uuid": "0d1440b5-4995-4226-a571-e92620bda316", "value": "T1FF530942D353D4F5D44315B011BBEB799630EEA20530D95BCBA8FFE39E33AD26016A68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353381, "uuid": "4412c429-2666-442a-9174-ed623b94b8cd", "value": "1536:wvllDe3dP311AJdMFqt5kUK6QC4Qw5ffosIltUJ318+qxr:wNlMA80t5PJh4Qso2+H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353381, "uuid": "d79b592f-11e8-4bf6-9131-910f27272738", "value": 66316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775353381, "uuid": "6df9cc28-9596-42a9-93c2-d83f0999e521", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353381, "uuid": "c2c46da8-cc92-4887-8784-58c4e2942b2d", "value": "mirai.i486", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f85a69b-3089-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775350199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775350199, "uuid": "35577a14-6734-40f2-88b6-6f72aeb15ca1", "comment": "Malware payload", "value": "0e2f149837977b16fefa4d9bb1d069b5", "object_relation": "md5", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775350199, "uuid": "3813a125-008f-43dc-b5e6-8377518ad8a1", "comment": "Malware payload", "value": "17abb2fc33e5d297d42173bc0515078031a8119e9ae4edefc98c33be93e4f330", "object_relation": "sha256", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775350199, "uuid": "18540547-d05c-4d7e-8918-203bb3ed30f5", "comment": "Malware payload", "value": "19b06f51c65fff525eef2b0b7d3bd5b9ec0d0dc6", "object_relation": "sha1", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775350199, "uuid": "9a60c5ca-9594-4b03-a84b-378294b79340", "comment": "Malware payload", "value": "78e9164ca9155a4105cde310068afab0ea63364cd181d5edae6c19f6b6c8405574a81853ba6d6f55513f351913d40b27", "object_relation": "sha3-384", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775350199, "uuid": "fe27da13-e2cb-4d78-8090-dfbbf9dc77d5", "value": "T1CFB63321DBACAC59DD1C9B1A70EB4F0DA920CF8E64DEB3E945D1A4FF1166F00474A81E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775350199, "uuid": "cf421fd6-41e5-4f3d-bf42-ec704450dd55", "value": "49152:4nM4kCNC0wfcgfJVqMYxskfm9ju07+jYDXUpfurDly8G+E3ZN3ry2shjNmE4n8Xk:+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775350199, "uuid": "fe179de6-4519-4ebe-aa7a-b0d6254b1f8c", "value": 10931849, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775350199, "uuid": "16b2a5a2-9c81-43c7-9b55-b0252b4a23b6", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775350199, "uuid": "e5e4cd7c-5864-424b-8f81-1edf9458b93e", "value": "Uni.bat", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23fef689-30fc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775399491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399491, "uuid": "37667dbe-cecb-417e-a194-6815d22dd267", "comment": "Malware payload (Mirai)", "value": "782bf6b895b31b98b2c03415b5939328", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399491, "uuid": "f67034ed-bb63-45bf-ba44-89afb89b9f6b", "comment": "Malware payload (Mirai)", "value": "17ae998f4402c05125f27d1b859dd7c93cb488a2a3576c5e114f5f6b0564bdc4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399491, "uuid": "e31c9743-a393-48d0-8fdb-e6c631fa35ba", "comment": "Malware payload (Mirai)", "value": "d8a924a2ed1d75f11df4ac948e531fa12ed2bff3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399491, "uuid": "41ec02c6-c58b-4b8e-aabc-42d8198ef305", "comment": "Malware payload (Mirai)", "value": "71a4ea89ae9b66290656263e22acef7ca7a67af2253ce03ebb53a563c440c2d3ab7324f1f1abfa1b044414a91cac341b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399491, "uuid": "6fad1f99-bbcf-447a-a734-b05f15bcd06e", "value": "T1F3634C0332280D47D9621EB0352F07E093BEFD5123E0B68A274F7E954579E76158AFAE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399491, "uuid": "3de3b56f-c38a-4c55-8e23-de8edab5dd17", "value": "1536:Bz30OgRXOB+N2A+IVwa+pXtqd8Sv6pGnlvXpTzHd42+R:BzkOKOBiZVSAdu6TJA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775399491, "uuid": "4f7e5086-eaee-4cdd-9748-32af02dca734", "value": 72204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775399491, "uuid": "42c26d6e-72c9-43e2-a45f-ae92678263e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399491, "uuid": "455cdd7d-67f0-4d7c-b4a4-e5298ed00de1", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed178e56-30bc-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775372341, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372341, "uuid": "5d1a1849-d1bb-497e-82fc-b874e2cb297b", "comment": "Malware payload", "value": "43f66e34fc120e47ff1bd7a32dcd74dc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372341, "uuid": "aedb138f-8172-4c3c-89e8-73210a5e3eb1", "comment": "Malware payload", "value": "17dca9e7c21ca5fd55c5ad77a6e339258d7c664b7f3333e58aa4d35b9e71eb41", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372341, "uuid": "704b8cae-d098-4e16-a5c7-c2040ad55ed3", "comment": "Malware payload", "value": "18416a9bc02e354bbdf32c020d663827864030f0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372341, "uuid": "eb217852-3e04-4988-afb7-22fadcf36759", "comment": "Malware payload", "value": "8aec4fd8430aba9a80d93c3acfe579f4e6cbdbc6019b4e0858717bf40a734b3c6edbee0b97ab4f5486f9d526d2faf7ea", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372341, "uuid": "f2cff1fe-d115-4a02-a98f-d3375eb6ceed", "value": "T1ACE43A41BF1C0563C9531DF0293F8395F7257A5240F9C239331EAB573A22E36AA8779A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372341, "uuid": "52d776ba-22b3-457f-9281-aa6970fd17f6", "value": "12288:PhEFCdB+A1VVv1Jzm7Oc+W6uLX1qKon70HVKWLNsopSq83q4t:fXv1O61KoFWLNC3d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372341, "uuid": "8227bc9e-954a-402e-aeda-a5d12cfb4831", "value": 660336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372341, "uuid": "58a0d41a-3194-4e2b-80ff-c4b83d316cf7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372341, "uuid": "5b6d5309-c952-4764-9d03-cc34da9b7518", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f45c9955-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354744, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354744, "uuid": "d60ce7c8-d2e8-403a-8ee2-ab9784c221b6", "comment": "Malware payload", "value": "cd8b55af93999ed1258f27cd1972f7ae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354744, "uuid": "883eea58-fb63-44b9-aadc-1e73940ef13e", "comment": "Malware payload", "value": "185bcd726956b48fd8241715510c11175fffc751733e51b0ca5d4c87604d4a9b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354744, "uuid": "b77d7fac-25d4-409a-9bf8-70d9edbbb457", "comment": "Malware payload", "value": "21b51cd6c789eff56a1222bdc71e9cec0e76a3d7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354744, "uuid": "c73abd88-62fe-4329-99e1-653d50a43902", "comment": "Malware payload", "value": "debd54e9099081bb9b1a23bf7f86a928563ae8121001a766d14c58e61d361d38d2bd3579960911c5add11d52afbf1d8e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354744, "uuid": "6b10a2bc-5425-465f-84f2-b40a0714fb34", "value": "T111F46C5AFD6E3C43D2D6D37E9B4E83B1622BB190C32350937582432CA5C6AADCF71685", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354744, "uuid": "3fe1b615-6456-4d2b-9986-1f11f9d876fa", "value": "12288:8wsfvMjNOp583BDS/lGnn8sDS+cVIqTgw5l9mApdgNsBe9y:8RUO43B8GnLS+qwAYNme9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354744, "uuid": "3bca1837-1f87-47e4-9818-a6d3d2116efb", "value": 787112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354744, "uuid": "f437c8f4-e76e-472d-8419-916a4e647e22", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354744, "uuid": "f2045b81-be40-485c-aae0-df4e6d361b8f", "value": "ssynarm64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b04f7843-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354200, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354200, "uuid": "b125aacf-82db-4385-9c77-d957c8bb8b51", "comment": "Malware payload", "value": "951aa49d1a84afa262cbc8e025423222", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354200, "uuid": "53789fc4-9c90-465d-8861-2ca9dc1da08f", "comment": "Malware payload", "value": "18be83358d69d824bcbb6c5979ecac3199c3641890263f0f68f32ec21ed135d4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354200, "uuid": "0d719161-254a-404c-aa41-d5cd86935bec", "comment": "Malware payload", "value": "0d63cf814da95da7be2fed5e44090976e03bc297", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354200, "uuid": "986bbea6-89eb-4d69-9841-18882e4fa35f", "comment": "Malware payload", "value": "cef7a4ad7b1d7b0348658b5ff1721f033df41c6f50a7c494a7c722f7363e73e658fe990c8f859529084faa198cf0ce1d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354200, "uuid": "a624e7b5-5062-4a6f-810a-8125afd1cbb2", "value": "T176055B42FB1C4523C9470EF1293F5395F7257A4341F9922A370E9B672621E3ADAC378A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354200, "uuid": "c5940f09-865b-4dd6-bac1-248286d49e78", "value": "24576:ZByXx/K8PmDGtOnqmr5KxwZdbgsv6K25D:ZByXxNmDjn99KGjbgk6p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354200, "uuid": "933e595a-e9f1-45a8-8b68-7082f04ea997", "value": 857692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354200, "uuid": "c6775fab-ebda-4dd7-ab8b-097473061d66", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354200, "uuid": "97df9d09-b6e8-4cc3-a872-e1e8592e80e4", "value": "ackppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4eb06ab-3117-11f1-a769-42010a9c0008", "comment": "Malware payload (RustyStealer)", "timestamp": 1775411358, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411358, "uuid": "c1a33530-16e1-4b42-9772-5c0672ed9a26", "comment": "Malware payload (RustyStealer)", "value": "800486b26d889b6c251df70317c5cb26", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411358, "uuid": "de3fea6d-0d51-4645-9a41-ed4214b6b5e1", "comment": "Malware payload (RustyStealer)", "value": "1944f3f37a005217419b2b65ace90c81a54bea1cbd03d4d3693ca6a07c05c0e1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411358, "uuid": "5e17f148-6ab2-4723-9904-ea7a8ab56197", "comment": "Malware payload (RustyStealer)", "value": "76a8be058615560504a5c94f2e56771fd0566a52", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411358, "uuid": "5b4d60f0-4c66-422b-bdea-bad13a49dd1f", "comment": "Malware payload (RustyStealer)", "value": "1215090abef61df89e6e453572cfbdfdfb0a1044d0c63deab0a6e6e04a7f23de105f34679b4d23d1057fcbe23c6d5cda", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411358, "uuid": "c36c1789-6f60-48d1-9188-e844fd05934f", "value": "T19817CF03F356DA4DC52AAD3883A4A3A37351FC605736A35FE6C56F1C9C8B6C00E6D698", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411358, "uuid": "fc1ddfb9-7fe4-4798-a33e-641849050005", "value": "bd9d18d07a19dda4789fd9da615f0652", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411358, "uuid": "5e03c0aa-aee2-4047-ad22-8a1f440fc1e4", "value": "393216:9G9xr+i+HRdD+HgP+HDUK+Hq0+HW+H4x5/9q+HABm+Hb2Mvcyg:9G9xr+NP5Rn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775411358, "uuid": "da5206a8-e27b-431e-96d7-fe309b76ce75", "value": 19942400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775411358, "uuid": "40238ca2-e148-4a61-8bae-db507380f473", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411358, "uuid": "be06f7d8-9c5a-42ce-a56f-19b529107c3a", "value": "swiftpdf_v1.2.0.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "feffb6b5-30bc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775372371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372371, "uuid": "ea5fd287-11d5-4f69-9bbd-a9d49f221991", "comment": "Malware payload (Mirai)", "value": "5839365746803299833767a0de30e19d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372371, "uuid": "c2413e42-8f47-4aaa-8670-9768eef7a7f0", "comment": "Malware payload (Mirai)", "value": "1a74fbed399b0392452a4f907798b57ab992fb83b3f44135b43f328c699c28ec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372371, "uuid": "8a83fb86-7dd6-4d7e-be70-8c2fda0c0bd5", "comment": "Malware payload (Mirai)", "value": "501c6eeee682ba18313c48e7d9170d128d0619d7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372371, "uuid": "fb2412c7-de29-4627-b29b-17e0a69c84e5", "comment": "Malware payload (Mirai)", "value": "10a05bbd3e141611b688a566dfeef92b07c2fbe20548b4126df5363e543944cb9cd1a9a00614a8a260fdeaba6561d218", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372371, "uuid": "8222818c-d3bc-4744-b136-a459455eee8c", "value": "T178341902A9518E53C5C21B7ABB5F42593733AB3497DB3301DA24BFB42F4B6DE0E2A511", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372371, "uuid": "f754620a-12cd-4bcc-ba73-db4593ce420e", "value": "6144:SA0mTobygfgamgx/FWjqSNQ8ZuvZfljSpmWKhODZI0K11OoNc:SAwbDfgaj/kjqMExSpmWKhOD60K11OoG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372371, "uuid": "7542b093-9a4c-48d2-95ce-48f8d364f575", "value": 232166, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372371, "uuid": "1e0eaaac-e8c1-4bb6-a3ee-2c81418e0e0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372371, "uuid": "beb6121d-6e19-4859-ad3d-d2b0cb6d64b2", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc64841b-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354757, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354757, "uuid": "25bc71d5-f068-422a-b083-8e07d08e4838", "comment": "Malware payload", "value": "7eb12426feecdaa64a3132f3a9d283de", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354757, "uuid": "90d1037a-7785-4d04-869d-a671099bded8", "comment": "Malware payload", "value": "1ad9dd10f07666b6534408891c5ed129134adae7ebb65000adf1b835337caae9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354757, "uuid": "911cf2e5-9c09-41a4-9437-f87a6025e80d", "comment": "Malware payload", "value": "df9c05c0280c4567382ddae7fabadc58a48a53d6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354757, "uuid": "fd22d71b-0de1-4aec-ac3b-b1889957b858", "comment": "Malware payload", "value": "d424165f3580203e5f238a2445841bff8aa08daab577906dc1ffb6638456fc624330abd80f7e565eb23bc13841a556e4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354757, "uuid": "7d5fdf1c-6582-4dee-96f1-9fa11d4dbdf8", "value": "T1C8C59E06FC959E2BCA2E12B2896106DC2738ED446F82931B5E18F67C3CFF285AD513D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354757, "uuid": "2be89bd6-4f06-42e1-9b4f-7a61c221f5bb", "value": "24576:9HtQj/XOg0s9pa775ucgTNphM2dnE4X8VL/rT+V2IwP/IN8Gv+kA6a4e:cj2Ya76YRTIix4e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354757, "uuid": "a6dc46d0-d44a-4e3e-b70d-38471c462f3a", "value": 2556066, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354757, "uuid": "a1717b10-da8b-4d32-b691-64cf707df47a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354757, "uuid": "d4133efa-88ef-4ab2-8bc6-9433e1f36754", "value": "mclibs2riscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de11fb68-313e-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775428150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428150, "uuid": "700ed63d-772a-4530-998b-579ab50719b3", "comment": "Malware payload (Mirai)", "value": "aa3ef338a3eef467c1e06bbf35fefb2c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428150, "uuid": "d774d7d3-4eb3-41a9-9763-8b187ee3267a", "comment": "Malware payload (Mirai)", "value": "1c5e3ba974a43df9f4be576f7eeeb6c0621e90bf9d2d4310cca3d85b11156ed3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428150, "uuid": "afbf1b74-5a67-49af-8488-b584dbd1771a", "comment": "Malware payload (Mirai)", "value": "663485e946b33aa068fccbaf622a754fe8d6f81d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428150, "uuid": "c519a2e3-c387-4b6e-8f7e-408028ba1315", "comment": "Malware payload (Mirai)", "value": "e86daed6a1f142f45161f96bec89fe075fa1975c22734deb9612a1405b2e5061c0108363ad05cf6cc20a96cb65744ee8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428150, "uuid": "a73fd64a-2aa1-4fd6-838f-29e62e8d9a1e", "value": "T18833F945BD829906C6D84377FA1E42CD331173D8E2ED3227DD153F52BBCAA1B09AB162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428150, "uuid": "fa8d63b1-a407-45c6-a0e5-66930389ab98", "value": "1536:gcYZ7LMohtjgj4oa/RbYrdo8iCqwbZnH:hYZ7RhiEHRbJ+qwbZnH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775428150, "uuid": "327bcc3e-8f64-487f-b477-fc9b198c4d4b", "value": 51608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775428150, "uuid": "a579a868-c921-4adf-a7d4-5b2ace0fee09", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428150, "uuid": "d006d172-ba81-49e3-86f1-7a5b17cea535", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "075de5dd-30c7-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775376680, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376680, "uuid": "d5b97d34-9615-457b-aed8-6eb6f285cd23", "comment": "Malware payload (Mirai)", "value": "19e9c69d3da177df8fc428db287844f5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376680, "uuid": "6b54bbde-3327-4953-8a57-2c123f85d278", "comment": "Malware payload (Mirai)", "value": "1c9f23290946d42402cdbe81a7b47aba7e1219a3748f80b73814e8770633f1dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376680, "uuid": "360263d1-84cc-4abb-b278-ce667482e512", "comment": "Malware payload (Mirai)", "value": "db250ec38dbe865b0905db747a8ec3654f83b34e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376680, "uuid": "cc0b0511-62de-48ee-adfc-3d7e430edbb6", "comment": "Malware payload (Mirai)", "value": "2401144d1e97d0910526073b7a0f2d6c1a3a42c6b1b2584763eb3a030ce9d9193ce5517f97357a6d5d79e2006ec3254d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376680, "uuid": "ca4cf2ef-c5cb-4d5f-b19c-c166d6e999b2", "value": "T1E0935C42B30C0E43D1675DF02A3F27D1D3EEA6E021F4FA88691F9A4591B2E365586ECD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376680, "uuid": "b54524dc-776a-4c20-82bc-3a977e1eb6c1", "value": "1536:U5BEhAsKkfqTXorWz3giV+7p1sf7Hj1wl90tG0t3BA/K4ye8HtM2XyCADbZzxYlr:ULDnIqTzzTJCKfA/sNM9C4+1X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775376680, "uuid": "b7a28bf8-14f4-4742-8ba9-8b542ef90b70", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775376680, "uuid": "6dba082c-3406-4ed8-8a5e-f39714f64a74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376680, "uuid": "d9d2a31b-9973-4dfd-b8f0-5b90b2a0b51b", "value": "titanjr.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67d4f8df-30ae-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775366104, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366104, "uuid": "6fb4a2f4-2258-4e47-bf1c-03bd17de9282", "comment": "Malware payload (Mirai)", "value": "8bf972879064893308ad4726b8d02beb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366104, "uuid": "7494a4de-9fc5-47b6-a052-3267cb27ca6d", "comment": "Malware payload (Mirai)", "value": "1cfacd17e613b1738f31fac5b9d39398454427158b6a6430a3339ce6b9cab490", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366104, "uuid": "9fae023e-2136-4194-92d5-998296e814e3", "comment": "Malware payload (Mirai)", "value": "2b0d2658fa14e0c31ed242c753f402b1cd58503e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366104, "uuid": "c1fc9274-83d1-49c3-b2c5-0c4da0d361e8", "comment": "Malware payload (Mirai)", "value": "ba8947d86cb9419af7fd62092fceca33184391c772463f15ebe9ac8ea619df6b0609edc7f6ff7f20ce3fb04be6b4e2a9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366104, "uuid": "11007f60-8c00-4273-86aa-397e64fdffb8", "value": "T1B7B2D03C1B161BA8DA1EC0BE839D0B613CB81B3591829D4B6207FDD7AF964747453BE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366104, "uuid": "4ee49a80-fb2d-4648-a6c8-c68098be7a87", "value": "384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiqFmdzJgGlzDpH7uNj1JAF:neD8ZSWvZHZbs1row697qohQvg9wizJz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775366104, "uuid": "c9f0c9c4-a46f-4c51-ae19-5da05ba7e50d", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775366104, "uuid": "4b5ead8b-2c5b-477b-9505-86cbde8d6980", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366104, "uuid": "f62828ce-3a3e-419e-b6a4-ce729562ab9c", "value": "boatnet.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f93942ae-30bc-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775372361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372361, "uuid": "45b721c3-7c50-45c1-aa45-4414409144b1", "comment": "Malware payload", "value": "a368c82f11a7f0a6124c6de9fc772dbe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372361, "uuid": "ce3ef9c6-7e56-4d9c-bef1-0078765c0d1c", "comment": "Malware payload", "value": "1d1e497cfe079ff49903a7cf5b31b2333f79a3262a23da43f93cd3709049fb5b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372361, "uuid": "15e37d42-c08b-4f69-9ce3-32c3f09afca6", "comment": "Malware payload", "value": "ea6584d776460b7fbe54ed116a0e2ee5a57efb2e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372361, "uuid": "07340998-4bc7-4182-9f7d-833da4aa92e8", "comment": "Malware payload", "value": "fc105f7ecdb642a499f9be7219f1a784e09d9bb44d685be2f7d647e01464a4357b781007120f5ded3475110c40f44ad5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372361, "uuid": "d0e397f2-5bf4-4b2b-aba2-8c2bec33f188", "value": "T1F2632B81FC904E6BC5D87B79B66F519D3721A3F8C3CA3306D5108B342FCE99A0A65B46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372361, "uuid": "b1d79f3d-a8f4-417f-a575-0d27297840eb", "value": "768:6+vHi08v4VQTg9JVCTtJutXdHEDXgNX3O/ntyb3Gn8G12jnWOUndm6QJWDmu4Xsd:LaNuvj3GntyaaqOhXuWCOK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372361, "uuid": "d0f63ba0-e78f-4ca3-9d5f-d7799e97100f", "value": 67408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372361, "uuid": "df49058c-55cb-442b-83cf-35553eb8c6d9", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372361, "uuid": "2bec576d-aa14-4e1e-84df-428fac91e9ff", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec01b087-3082-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775347428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347428, "uuid": "1ab14832-2cdc-489c-a1b7-7772a2c9bb07", "comment": "Malware payload (Mirai)", "value": "3b3e248544331aa581c9fbae58f28003", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347428, "uuid": "350a138e-f07c-45a6-a667-b1ad8bfcb715", "comment": "Malware payload (Mirai)", "value": "1d6ca1a4324d442a28dbcf4675eab8cc10be7da7bde6d96e11b6207dc28e4a70", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347428, "uuid": "2c8ab6b4-bc84-498b-9a72-bfe8d87637db", "comment": "Malware payload (Mirai)", "value": "b8fd98a697821d0a36f32f348c5da9047ed31b90", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347428, "uuid": "2d69ff3e-9ae6-4738-b9cb-532a2ded4517", "comment": "Malware payload (Mirai)", "value": "3516cd04e97e52bbf96e132e5318391b4ba04039e61af99af5e723879fec2d53c1f03b8a423d9c294c181ac85fa12021", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347428, "uuid": "5f91bb5f-83fe-4cdb-b2ba-d63beb028093", "value": "T12F23F94AFD816F01D4D521BAFF4E124A33535B6CE3FE7112AE251B2567CAA2B0F7A401", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347428, "uuid": "072267b2-d1de-410a-b604-345b709c5ad3", "value": "768:cQnDlSiqwyg7cxeqt8RCnO6EKo91SsClpemipp253RDutm5aVIe:cQnJBFvRCnOYq1tClgmipe3NWI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775347428, "uuid": "388943a5-e4af-42bf-be9b-6c92bcb9c7c0", "value": 46704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775347428, "uuid": "73e7511d-f20f-4453-9635-3922578ca529", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347428, "uuid": "40d6df00-9b1e-420e-8c19-f5ed3c975a7e", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7063f6d0-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "3e774e65-f3c6-4210-acc3-f4d0d91d4d3c", "comment": "Malware payload", "value": "eb25e44331bf9140c99179da8c03b85d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "0380201b-b71f-40a2-b32a-f9da87a05b04", "comment": "Malware payload", "value": "1db18a88af54f1fcd233f7b71f0354c0be11957e91228ab142c243540735eb2c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "867ac8ae-8abe-4746-a4e0-868b01a28cb8", "comment": "Malware payload", "value": "c6c2e3e4cd435c6ed3d1fddb453a41fde7ed4d4d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354093, "uuid": "c7679166-c3d0-4464-bfb5-4359cf0d43de", "comment": "Malware payload", "value": "632eb56e35bea0ebe589f40d0c0cc14c7ef3a6c019936f4c30ae91c5828a2cdf2c9d83364bc305df60572f118b26fd1a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354093, "uuid": "a73541ca-2edc-4c0f-9eae-2581c8ed433a", "value": "T1D6F45C07BF505FEBC49FCD31492EC30601EDD4C389D1A62A71FC4B8CBA9965A4AE3598", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354093, "uuid": "ef6f6858-91eb-4c8d-b8fc-d209443946a8", "value": "12288:9JKNfIkDA1nMlBLqGKy/zM5j0/yfK34HJznWabXnlf+Ej1+ZowpHC5G4RpP8w19R:WN9DAsqGK+ABfKnzsoaBW40fOFfOVlj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354093, "uuid": "d7656ad0-9ca4-415d-b6a5-1953892dcc4d", "value": 763052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354093, "uuid": "5369723a-97e4-401a-b38c-be9094bb748a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354093, "uuid": "a2537398-a8f9-4bcd-8dcd-096dc8371f39", "value": "ackmipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6dbe3db-308e-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775352520, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352520, "uuid": "c0a6dbd7-c2b3-4d16-89ff-bb8e372f3712", "comment": "Malware payload (SalatStealer)", "value": "85ed6d5be0bc401e67b47a4b9144f351", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352520, "uuid": "cc7b8886-f6a9-4e9a-9a8c-ef903e5a9e6b", "comment": "Malware payload (SalatStealer)", "value": "1e8a25d26519f60db00b7fdbc4b686e2349cd5d3e3981b79454b639f8ebf7886", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352520, "uuid": "c5d57f23-2876-4c7c-ba0f-ec567cdc59e5", "comment": "Malware payload (SalatStealer)", "value": "933257c647a98e5173374768be428fd388371393", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352520, "uuid": "8057fdff-1a36-4cbb-803a-412a46829a8f", "comment": "Malware payload (SalatStealer)", "value": "5ba4a7b1b56a23ae29f892ceb229c64ad00d569903bc01a3bc81be51eb103fc637a14cf7e80800c7877cecb0048c732f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352520, "uuid": "08afccb2-ea2f-47a1-9674-3679c60431ee", "value": "T1AA473322CD7CE2F2E9AB13711D44A24C0FB74486ED63F5CA88B499850B7B0E7579F11A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352520, "uuid": "fc7eb189-bddb-4ade-b637-2f0f7d49991d", "value": "1db96144582817d71e88dc6778cf1533", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352520, "uuid": "72df6ec4-5b73-4a7b-a791-0f95418fcfed", "value": "786432:+fbfNFVWJTJladQTadwM1P1P1P1P1P1P1P1P1P1C:ybBGOdVdddddddddo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775352520, "uuid": "820255c6-d622-4036-91e4-ba5b9710667e", "value": 26074832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775352520, "uuid": "c8b32504-3367-43b9-b40d-3347494ea51b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352520, "uuid": "20f53c1b-5a00-460c-ae49-b833559834bc", "value": "SecurityHealthService.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "887bb012-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354563, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354563, "uuid": "d70a58e5-2c92-4122-ac19-35e7578dfcef", "comment": "Malware payload", "value": "455b72db546daf87f37ba85720a82166", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354563, "uuid": "9f9cbd28-f538-4135-985f-a35be84761c8", "comment": "Malware payload", "value": "1ec3fb0b73e25f208b550d882d3c08033c896b3a9a60faa36fff4d23457dec90", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354563, "uuid": "4aaffcef-a09a-45dd-a387-803f33991fe7", "comment": "Malware payload", "value": "91aa50af141b3b48f62ec8a341e65be96c7506f0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354563, "uuid": "e840bd51-351e-41f6-a8f8-a4817e1c80b5", "comment": "Malware payload", "value": "bb762e2970d62554c851d987f545c46ea6b93f4323d9484041f8309fd1a7fd64a3e1d13bf6422ea1747a7814460086ef", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354563, "uuid": "cb6ff7af-a530-4598-82f2-a49ccdbb3278", "value": "T152C5F857B9910946C4E93A37ACBE81C833664EB99F86631B5D05FA3C3ABF1D90E35304", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354563, "uuid": "8c9a6c00-c895-431e-8ffe-41b80b5ba7b9", "value": "24576:M3Q7IigE9K/8GnISe8jFQ/x5DuJWr0Sp8LVvEtJAXLTpFlg1xPtdHKcCO32EIIAS:qEtX/kzX+O0bDdD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354563, "uuid": "8c1c9a37-12df-4ab3-ba75-6683dff8955e", "value": 2621602, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354563, "uuid": "d95eb550-5a4b-420a-9230-4299685c2591", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354563, "uuid": "01dc9169-02d2-4d4f-a22f-e6756985d625", "value": "mclibs2arm6n", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "daa83d43-311c-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775413542, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775413542, "uuid": "ab8dbfa0-d3b4-4d62-bd81-f99f19c3683a", "comment": "Malware payload", "value": "91898a893438933aff3f23296deee7f2", "object_relation": "md5", "Tag": [ { "name": "dropped-by-phorpiex", "colour": "#6B8B5F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775413542, "uuid": "cfd011dc-7372-4575-8074-15e96f7ac68d", "comment": "Malware payload", "value": "1ecc19bbef88b49ec956e09c61338b78f8bfcadac776834bb0dd037e9d6b2def", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-phorpiex", "colour": "#6B8B5F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775413542, "uuid": "407c1df3-4a3f-497a-a234-7a6b7794f747", "comment": "Malware payload", "value": "f98aa99367ff180aef08b669ef104055fd88636b", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-phorpiex", "colour": "#6B8B5F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775413542, "uuid": "1168c4cc-f22d-4036-818d-09783371ace7", "comment": "Malware payload", "value": "ddf09c62f51d9b18ef56eaf867be5c7365f9e3690bb6cc333a10f570276929e596a4dcfbab5c0ac1a0257690901daade", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-phorpiex", "colour": "#6B8B5F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775413542, "uuid": "731dbe6f-0a33-4a91-af8d-651779cd3327", "value": "T149823A0FB842421AD0D10074A672877BDABD9876378824EBF7D48AED0A686D1FC3314F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775413542, "uuid": "9f6c84fc-4aac-48bc-9502-581f6448d734", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775413542, "uuid": "a7bb8429-cc7a-4452-b362-512fe08ca38f", "value": "384:5I7MVGgiBFqw3FshSZRu9NHRgNav8U9c8:iHZshU09Ua0Uv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775413542, "uuid": "300e344e-d535-4215-b34d-7d93c0e56fa4", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775413542, "uuid": "63b7be79-3053-492c-b16f-0bd3a6468f8c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775413542, "uuid": "9721bbac-c9f4-4692-8e6b-569c48afc06d", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c175b73c-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354658, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354658, "uuid": "5a79e34f-ddfd-4fdf-8db8-0a71c89ccec6", "comment": "Malware payload", "value": "81377ba3547dfb164c115c2ad98d6ac6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354658, "uuid": "b87a908f-ed11-43fe-b246-f5e28d2af7c7", "comment": "Malware payload", "value": "1f57cc884beb71fa66b710d5b5fb94113920ef3f82e68e310086c475a38f0a75", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354658, "uuid": "45901ce2-978f-4a08-ae96-374521545c09", "comment": "Malware payload", "value": "b184ab93ea8e22ba3da6c751f08f240b453cb9d1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354658, "uuid": "bd895c72-9b4d-4f09-ae94-efb881ffe0e3", "comment": "Malware payload", "value": "f82183bb7bab501ab171b54c24c641d563b581600514bd7374b4b348fabdc9a6ab5f59c5884aac750eeff60a7cef273e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354658, "uuid": "f9b07562-7bc2-4fe5-9c88-729cd2c4952e", "value": "T1B9F45C07FF405FEBC49FCE31492EC30601EDD48389D2662A71FC4B8CBA9965A4AD7598", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354658, "uuid": "2a4c6734-ff86-4fb2-aa50-bce86cb22e15", "value": "12288:jfpnrJ7aJPkkCDD8UoVMjb80fXuZ9w8BOCoEljr8YVomXohFKK+TRxYnByZy18UF:lUJPkuafXS7ZK77CmpRVh4V0j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354658, "uuid": "cc658d05-1754-4de6-b031-688bb1b41aeb", "value": 762792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354658, "uuid": "21b06eb6-86d3-4a09-9e2b-8aae7c97002a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354658, "uuid": "4bd3f99b-9ead-4d73-b166-04061b972b1e", "value": "rstmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0294515b-30bd-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775372377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372377, "uuid": "5ad2c09c-7e9d-4f0a-bd54-25097c5606fa", "comment": "Malware payload (Mirai)", "value": "c5bd4e19cb082e4d04f96ac2deef9049", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372377, "uuid": "bebdba54-3a36-4ae2-9444-136f31d0c9d1", "comment": "Malware payload (Mirai)", "value": "1fed4455203f013bed0cf2c48056bd58cd9dc4f1f5311e7264fad43a35a78fca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372377, "uuid": "b52893db-4b8c-4b28-9741-12ebdbca11d5", "comment": "Malware payload (Mirai)", "value": "4fbf2949e027953b6c77a39d305d0a22594684ea", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372377, "uuid": "0a064dcc-655a-408e-96fd-70f0f08e5ecb", "comment": "Malware payload (Mirai)", "value": "943449edeaa20dc079ec62bd9995134edc4a91d606dab8f33ed5342389d6d7b93ebb98fee9702fd27d437fb8294d218d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372377, "uuid": "b89935da-639c-4c1a-9cd0-9dc179a3e96a", "value": "T1CC056A85EAC3C0F1E45704F01CDFEBEA0A34A3264457DAF6D2DC2962B861B924E5736D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372377, "uuid": "1ce72fe2-0cf1-4f7a-b10f-0684bea82e75", "value": "12288:1z9EsM793vhLchXLMCRkHOg5DVrNe+CaHo5VOd60I1NUVB7pRyI5lpby:1elfhLchbMCRkug5DVrtC5VOdO+57", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372377, "uuid": "bf3c548e-5df7-403a-ba30-9c12821a214c", "value": 811784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372377, "uuid": "80eaf238-c4cd-42c1-9d63-48df98df8d7e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372377, "uuid": "54c3be2b-2cf6-41d5-9ce6-8c4f35be3a7e", "value": "debug.dbg", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d676e719-30f4-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775396355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396355, "uuid": "d6fcc398-f3d6-4ee5-bff4-622fed6d0b9a", "comment": "Malware payload", "value": "f436c3785fc94acbead348a3dc8f639d", "object_relation": "md5", "Tag": [ { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396355, "uuid": "e5be2cef-0fd5-456a-8ba2-adaccd810e86", "comment": "Malware payload", "value": "20145037430512b2c45c7127ae3fcc30d38ad6e44f7eb566938f9d37b86f9bfa", "object_relation": "sha256", "Tag": [ { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396355, "uuid": "1c0e07f0-1af5-425c-a0c1-139881cbc868", "comment": "Malware payload", "value": "63ab35b950aa31bdcb08c66e3e28711fc1b214bd", "object_relation": "sha1", "Tag": [ { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396355, "uuid": "167c479d-f083-4985-a7bb-9d21126ebed4", "comment": "Malware payload", "value": "3bae39a2736d429bf06e7b1d68e3d698acdb20e5389616e65c7b54d0050d5282978967670d1db11af4363365635953ec", "object_relation": "sha3-384", "Tag": [ { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396355, "uuid": "c4712a3e-7bfa-4ca3-a748-5003d3050cd7", "value": "T12645BFCED16E44D2DC053FF9A8242BC79B2446324A7800283A6F7D495F775FA805EEE6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396355, "uuid": "cdc8b105-68e9-4d96-9adf-9ddef2e5e9d0", "value": "14e33520bb423233f9f0bf2562a45886", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396355, "uuid": "b9863419-60f6-4e3a-95c3-eff6e42818db", "value": "12288:xQOHt5p7cuHqdfRPy8a2ag+Xr0jKob7uG7CJKWGGUDVSy9LU2Ax5tkD8BwA:x7t5fqdfByR2a9MlmQCdZCLUbxEez", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775396355, "uuid": "871ef6b8-7f97-48fe-bd5e-3d272b1d2830", "value": 1171687, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775396355, "uuid": "94c4e55b-f74f-4cfc-a44e-72d7c2844929", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396355, "uuid": "bff59cda-56fc-4677-9971-78f931433acb", "value": "chrome_elf.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c01ab543-312d-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775420799, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775420799, "uuid": "c625c2f7-4562-4168-90c1-37fd95680364", "comment": "Malware payload (Mirai)", "value": "56e725a176b7972695b78c0c25c1ee29", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775420799, "uuid": "668acb1a-3961-4c61-9db0-f9a35a73e788", "comment": "Malware payload (Mirai)", "value": "215cb89e6c95ba74ea76a8f51d13943fba308f97aa936a472a6741a15f1373a8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775420799, "uuid": "d0050060-91ff-47bf-ad94-41810bb74bff", "comment": "Malware payload (Mirai)", "value": "3c837bf1dffb85ac57b2d4187dde142d6ea39597", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775420799, "uuid": "993acd27-82d3-438e-b352-63b81de73414", "comment": "Malware payload (Mirai)", "value": "2205d50dcee225efde611a94a4393f7144d741ef77182fef07a016370adf185c6af0aa9aac593d932e846c02e914290d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775420799, "uuid": "e1d1fdae-f491-46ad-9c7d-a34d6ae57d4d", "value": "T15FF2F2EB7071564DF3E9133EAD7E775EA420C895C18A4BF698DC3CA7A803B401B9514E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775420799, "uuid": "89e04a6d-777d-428a-94a2-be3f0abe3289", "value": "768:tEded4T+1hjLDfdsiBiXNMViqLUklvmqQ3aqOe8TjG+rnbcuyD7UHQRjU:t7d4KLDfdhI9MVVLUkluqjqMjGcnouyO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775420799, "uuid": "84d0a526-971e-4818-82ff-922eeec0f275", "value": 35676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775420799, "uuid": "2e455c7d-dc5b-471a-ad9a-f9a45b61dd86", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775420799, "uuid": "cdf07563-9041-4ddc-bdc3-74b65c3e510b", "value": "tony.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b78415a-3119-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775411959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411959, "uuid": "2d6c8da4-eb7e-4320-b9c1-946885ed7ba7", "comment": "Malware payload (Mirai)", "value": "7f26b4f70cad7b277c6cf0f9ac3df463", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411959, "uuid": "20adb514-2c37-4a1b-8e1d-3aa04a6ece67", "comment": "Malware payload (Mirai)", "value": "21b64df578a76130796c0f503e0abe9020fca5322978744b7115969068c223f0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411959, "uuid": "8b416f3e-2861-4a81-8641-9a85471fcbfb", "comment": "Malware payload (Mirai)", "value": "e6b5432ff592ccaef61263e67c6e5acc028d7fc2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411959, "uuid": "5cbcd2c9-4f34-4755-a1da-be821640ab1a", "comment": "Malware payload (Mirai)", "value": "cc38f6c7bbb11ef5ca96b0bf0835023af33bfc4476d05642ab03ebb9150ae1c27e2f4eccb874f01557beda38d8aba825", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411959, "uuid": "45994f34-9034-45c6-b7ba-d53c8087137a", "value": "T10B242B01BD518F53C5D32BBBB79F42993732672887EB7302DA18BE742F4669D0E26211", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411959, "uuid": "d9faaaa0-9e29-4f5e-9610-ae4018e57316", "value": "6144:9FRCgku+f0TckrAKQk8c77htJytYKiKH3vtZmLE1SMyV+lH1:9FRCLorA41DIYKiKH3vtwLE1SMyV+lH1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775411959, "uuid": "e388f8ae-1d3c-4924-ba62-fe75d7a7b0d5", "value": 226599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775411959, "uuid": "fbe50b2a-d7fa-4707-bfea-302ec1f1b525", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411959, "uuid": "203c49cd-94ee-47d8-9b65-0a2b9d858f55", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "902f1db4-30f4-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775396237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396237, "uuid": "a8de1912-0bbd-4821-8047-c8ed8504e3db", "comment": "Malware payload", "value": "482c713b1332a9ed2cc13332c379b1b9", "object_relation": "md5", "Tag": [ { "name": "Aotera", "colour": "#499F8C", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396237, "uuid": "ecf7b446-6476-4554-b91a-8120cde3ba69", "comment": "Malware payload", "value": "22194cb9cf25fdfeae5f62bf2e40b105ccd229775ddd22fab5c1baedce2dbe4e", "object_relation": "sha256", "Tag": [ { "name": "Aotera", "colour": "#499F8C", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396237, "uuid": "c83fbe74-7992-4855-ac33-c7e4c24a120e", "comment": "Malware payload", "value": "a6e42ec26325afbb2970711966343411f3036fc7", "object_relation": "sha1", "Tag": [ { "name": "Aotera", "colour": "#499F8C", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396237, "uuid": "7f4029dc-4562-4992-a5f7-8beabd045be9", "comment": "Malware payload", "value": "d2866c589fca0d55ea4e007f745158acee5f924f25908675f5b2e886a2106ae32eab63b6b309e1eb2c6dad5f35cfa969", "object_relation": "sha3-384", "Tag": [ { "name": "Aotera", "colour": "#499F8C", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396237, "uuid": "47953ab4-782e-49ca-9cbd-c90813745054", "value": "T1803694DBDE97001EC461CE5D60F2A93F7102C959D28FC2983C6983E96D079A41F2B67E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396237, "uuid": "9c1b29ea-27c2-466e-a2ae-f747a5294129", "value": "b32030511a956fc0c12add63f0719c2c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396237, "uuid": "0100ac17-89c9-44ad-9b1d-bfc9f62d7d69", "value": "49152:IdIfz5PHS4QMujJAdSME31uargVGMWpMs0GjYcKrPHgxatwWHiRCll3ok1XdWOqy:HvPQTU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775396237, "uuid": "7261fa81-8c63-4a2f-a278-5d47dfe501df", "value": 5123584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775396237, "uuid": "036271f9-9986-4b9a-aa2d-11466ee2e6d8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396237, "uuid": "136f60b1-003c-48a8-b342-221e79a16a87", "value": "libwinpthread-1.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6d630db-3131-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775422528, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775422528, "uuid": "3fe4e83e-2d09-4153-acf4-8318d4d81b92", "comment": "Malware payload", "value": "ecedaf984d6299993655646635dee59d", "object_relation": "md5", "Tag": [ { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "machO", "colour": "#E5244F", "exportable": true, "hide_tag": false }, { "name": "m_macho", "colour": "#235DA1", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775422528, "uuid": "cab04349-8f1d-410d-a44d-61b1b804ec72", "comment": "Malware payload", "value": "22636bbb9e1f26a4ce31fa185d4a4add37580888b6376922aa364a8032490dcb", "object_relation": "sha256", "Tag": [ { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "machO", "colour": "#E5244F", "exportable": true, "hide_tag": false }, { "name": "m_macho", "colour": "#235DA1", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775422528, "uuid": "7ddbd7f9-c67b-424c-b213-f0d28f4f8637", "comment": "Malware payload", "value": "35f358449780af08e14ff437c41ffef7d3babf81", "object_relation": "sha1", "Tag": [ { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "machO", "colour": "#E5244F", "exportable": true, "hide_tag": false }, { "name": "m_macho", "colour": "#235DA1", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775422528, "uuid": "e1a60e8e-0013-43b1-927b-04e1f1e23aed", "comment": "Malware payload", "value": "0f430cd4d56d6e41da77fe8fc64686a15648f57eb716c2c485fffacd1b4bc66c71e2a8b697a4f4661a0141111078916e", "object_relation": "sha3-384", "Tag": [ { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "machO", "colour": "#E5244F", "exportable": true, "hide_tag": false }, { "name": "m_macho", "colour": "#235DA1", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775422528, "uuid": "18909396-5008-47ba-8adf-f019e351830c", "value": "T1C035F1A7CC1D2758D609F0309F6D861AF232FC150B17AF3B1668F5645AA37605BD7B80", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775422528, "uuid": "0bf535e5-023b-4275-b737-692fcc5592bd", "value": "24576:JIy4T+j0LCi0LCd0LCSZ8r70LCi0LCd0LCSY:wT+j2r2q2FE2r2q2dY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775422528, "uuid": "4350498a-0173-46d0-8a03-a7cdf54362dd", "value": 1130544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775422528, "uuid": "4b14c44b-108d-4677-bf38-e14313c8657c", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775422528, "uuid": "5d7b3301-1e53-4914-9dd4-6baaf9012388", "value": "m", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6b31ce9-3090-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775353379, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353379, "uuid": "98638880-da23-4055-8170-24b1dcbf1a1a", "comment": "Malware payload (Mirai)", "value": "40cc52e63aac0bfd3151eadb955417ac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353379, "uuid": "eef1b280-87db-425b-8dea-6774e45060ae", "comment": "Malware payload (Mirai)", "value": "228b01b7cbb4acff60ccf8894fb333efe662a445fc33f1347756e4fa0dd11c58", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353379, "uuid": "791447f7-5de0-4320-ae82-c64d3864b93d", "comment": "Malware payload (Mirai)", "value": "59783f0250e64f54290ebe2a5265f849e8976499", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353379, "uuid": "588a59d2-8efc-420c-94d4-ca483adfadef", "comment": "Malware payload (Mirai)", "value": "b2dffc54686ff3176e3f1ce21816ade19dff00466364a4195bd1f5db2bf9b6d08577a76eeb0193100707dc726ba2ac9c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353379, "uuid": "41217d43-07aa-4951-aadd-024df322192f", "value": "T10073C8467E228FAEF26982744BF30E31A75877D727A186C5E25CE9401F202CD545FBB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353379, "uuid": "4ddb8213-1579-48da-8339-1983c2043a01", "value": "768:dlzvJE2ynjMwI+9yt3US3rFwCw4yOHMWPz3lWJIINOyk+JexfdIjbNpRXg7Id:TbJXTtEW/64Pp6He2NnXQ6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353379, "uuid": "d57e432e-ee1e-458c-b39b-fd3e757bea8e", "value": 79112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775353379, "uuid": "01b36a2a-723b-4e8b-bd20-9f40ab41344e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353379, "uuid": "d0654959-738f-41a3-a68b-f89bc4ba9bbb", "value": "mirai.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a98bfabb-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354618, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354618, "uuid": "1d5b0de1-2ad6-415b-a6aa-cc2c869d4eb3", "comment": "Malware payload", "value": "ec0a681a8e25461f244908ce752a80ca", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354618, "uuid": "8570d74f-b6d3-40d9-b678-83edde6f95b7", "comment": "Malware payload", "value": "22d021a7967e2eefea61c969687acc198fe19f5aec9e28998b556d82f2b50908", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354618, "uuid": "27b6f948-94af-45b7-931d-13703ef702c2", "comment": "Malware payload", "value": "fbf13310bdf266184bada220ff5c4a9a0e9cbc68", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354618, "uuid": "511a7278-9b70-4b82-b16c-32900bf27370", "comment": "Malware payload", "value": "d389956f0c33e22ca4aee62656fd1aa0ec88a41d07ee20a8d2df65d8721f1c2a9a33e13070c699e6419fa910a4b868c0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354618, "uuid": "04b45f04-24b5-4842-8822-a60f01627b23", "value": "T1A7058D2AB2B3F17CD01BC03417DBCAA24535F47526212D7B26C4DA353E66CE22369F66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354618, "uuid": "5662f9b4-14d6-491d-b5a5-b3e0e14f418f", "value": "12288:SC9YdJ4JdPHfcb6uNgLpQW3R45/XZ+Nn6IayzZodHX:j9YJn6uNgl/3Ry/JDl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354618, "uuid": "898eeda2-e963-4c4e-919b-d282e649f905", "value": 834320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354618, "uuid": "12370e00-4aa4-4561-8e9f-f39bae098388", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354618, "uuid": "802074d5-13b1-4b9d-8643-9218a85fce43", "value": "siamd64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc96e962-3090-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775353389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353389, "uuid": "71d3a6ff-09a8-4a4d-9e49-5719ee68e3bf", "comment": "Malware payload (Mirai)", "value": "e9057075d15e325efa1acf6463e9583b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353389, "uuid": "4399baf6-4e83-478c-91f2-911fd4762316", "comment": "Malware payload (Mirai)", "value": "2301c22590b771b4283c13b8acb9e786e53f9e7e7e20fb558b8f969eac2afba9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353389, "uuid": "449c2223-22f5-462c-b091-a93779950e6c", "comment": "Malware payload (Mirai)", "value": "1f45eddd030d35dabfd3cb68cc998b24b58112d4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353389, "uuid": "6cb61bc2-d6a8-4de9-aeba-0e0ea6f36067", "comment": "Malware payload (Mirai)", "value": "5999379b92f8acc06fcfa21c7c60191c0f63cb239929c7ed367c5763de17d5b56c7f406d8be991511bec85054dd04a60", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353389, "uuid": "fb3105f9-a337-4e6e-b400-e41c922a7554", "value": "T126730802EF514FABC82FDDB306FA0A11348CA85B26B527767570ED68B7561C709D3CA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353389, "uuid": "766f7198-c3d9-4035-ac3b-da0ad733641e", "value": "1536:UlpF9lyxdP/bzcJXziKi8iXNpZfRqUiHos2w28nAFwWR6kXi:ypF9OBsOJX7IMbGbky", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353389, "uuid": "c9f94efd-b3e4-4dc9-9fb5-70fdf2246745", "value": 79112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775353389, "uuid": "83fe42d1-c4f2-4117-afaa-3c6061225a9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353389, "uuid": "3fdb6d32-48a9-4949-a0ef-8dc8743783ab", "value": "mirai.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cc62c32-3136-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775424417, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424417, "uuid": "902eb424-b7a0-42c5-8123-ea33ce10e4f8", "comment": "Malware payload", "value": "3916920b960e62f6699c1b37e3596743", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ext_sideloader", "colour": "#5765BD", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false }, { "name": "w_node", "colour": "#C4D305", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424417, "uuid": "9bf6f6f2-877e-4531-96db-e568a6b76f3e", "comment": "Malware payload", "value": "235dc9b79d455b87242482bedfc56f9def42c3976debbde6d3a4f1d998cedef0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ext_sideloader", "colour": "#5765BD", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false }, { "name": "w_node", "colour": "#C4D305", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424417, "uuid": "246fcc36-98a1-479b-b156-379cdf16776f", "comment": "Malware payload", "value": "068be5fa0a68572e490e693a6c51142f448fd5ba", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ext_sideloader", "colour": "#5765BD", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false }, { "name": "w_node", "colour": "#C4D305", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424417, "uuid": "68500c99-51ea-45a8-91e5-d0942b246f92", "comment": "Malware payload", "value": "d66b0454646102db822cefd2710da6634635a927d1bd6a15a849e4400a232bb40bd590bb3ffa408d219bf345278230ab", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ext_sideloader", "colour": "#5765BD", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false }, { "name": "w_node", "colour": "#C4D305", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424417, "uuid": "184e1d02-9a0a-40ff-8346-d86df0575ac4", "value": "T16625BF83D292915CF41AC1715B2EA273F537BC458B29AFE76390DA361633BD02B7A710", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424417, "uuid": "568b3b9b-461f-42de-9822-c698a4f32ae2", "value": "5119aa243ba31aa561ba123ac413a1c5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424417, "uuid": "523216c9-ee11-48d6-8cc3-d1da7379c577", "value": "24576:L+pqZ2T5OEe0JRh+w+BY5bsY5b5Y5bjEE:LoTsEeiRhkYqY7YBEE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775424417, "uuid": "5eacbf9a-6c2e-4f79-8c41-d87c8655b13b", "value": 1018368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775424417, "uuid": "c9b55eb1-8fbc-447f-bef3-e03ad30eaf55", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424417, "uuid": "4cd6f794-f0ff-4505-b06b-c365f42799b8", "value": "w.node", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b83dc77-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354514, "uuid": "a681da25-d1fa-4c85-94b8-5754374133c4", "comment": "Malware payload", "value": "2c13017694d8e2063ebdc32b35f18f3e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354514, "uuid": "91d82bf3-bc4d-4c7f-8131-856b959572e0", "comment": "Malware payload", "value": "236abc31c6affca696661e7f6af17fb7a7abb504cd4d6158dc1797a344e32af6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354514, "uuid": "fcf40e1b-e7a7-4688-bfcf-e274f6f7ca82", "comment": "Malware payload", "value": "32bb843c88e9535ed5ee767fbb1a70be4b258896", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354514, "uuid": "8098a1bd-bf9c-4c3d-b640-9846e8a62f0a", "comment": "Malware payload", "value": "6069b0b5925e5f64f051a73995120b66266cbf772441c82ed545755191396a879a8aa8d4ac7cc0c5f6034a7e7b294c87", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354514, "uuid": "54790411-4589-4f25-a349-f35418d6ba5f", "value": "T14ED43956F8808F62C5D1257AF65F82A8331747B9C3DB720689189B383BD786B4F3B641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354514, "uuid": "2264aa0d-1d6a-4317-b22b-b749c98506a7", "value": "12288:9QkNS05U8TroYjOmwstY9dmKgpT+IrxQbM2/G7bGbkGcC:OkNS05x+3stKQ7lQwTbGAGc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354514, "uuid": "56fb52ec-bd3f-490d-ac81-6f1137ce363f", "value": 650980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354514, "uuid": "a6bf8da3-eeac-46ac-964e-b412af444cd2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354514, "uuid": "46c58fe5-3a71-4f88-9da9-3343cf95ca95", "value": "shandarmv4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b55dad23-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354209, "uuid": "8805ca02-027c-4be3-a765-14e874caeb20", "comment": "Malware payload", "value": "d38fcdeb00bb49871564d04b4a3612ca", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354209, "uuid": "2326070c-8065-4f31-9077-a9efe2521b70", "comment": "Malware payload", "value": "23e25a1d55c9a6c99368798f937d47561d30a401ad98841f634e5e4c4383c5f1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354209, "uuid": "f0bd61ac-1f67-4418-b546-df8c6e28989a", "comment": "Malware payload", "value": "30ea92498e2d0d87d40dbab4c2ff7164ec3f4570", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354209, "uuid": "aec79def-e2cf-4753-bfce-3ba7fe34824a", "comment": "Malware payload", "value": "f9d02c10db26776bde2d94b9876997bc43ac3b74dc1811257470f754da99fe2b796b88cadffc013c93e2b0f6e58272a9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354209, "uuid": "d2c53d35-f0fa-4e8b-a7f3-1ce17f17f4f2", "value": "T1D7D5F814ADC43FE6C81D5F3854EA8A9613B08D144AF2976725A4FAAD7C7B2347F4388C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354209, "uuid": "2e2a264c-fc82-49a2-80d8-d478486b799e", "value": "24576:vwqy5sQJLTN7a6I06K+CN9oWE/N6Bd/m0KyTJDQ0UGDU:vwRhxW6QPON+9l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354209, "uuid": "f8be9bae-d097-418e-b3f5-59d3a3aae361", "value": 2949313, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354209, "uuid": "386df0ac-bc90-4360-9565-8c293ba8dc2f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354209, "uuid": "f658c06e-09e7-486f-bf29-fcf64c47bbdd", "value": "gofuckerv2mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a1517da-30ae-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775366135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366135, "uuid": "88ec786d-55dc-4c49-b45c-16e0b75c06cb", "comment": "Malware payload (Mirai)", "value": "cc8cf84a9e9e33d5cea7b847566450f3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366135, "uuid": "ff292545-89f5-4ec2-a9b1-07aedceb00cc", "comment": "Malware payload (Mirai)", "value": "240df9ab57143d19b8d7c3170e5be0002ff1d59d068cbe91f3209caf77d810d2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366135, "uuid": "2261a566-6c37-44e5-95a9-1a5f9d498423", "comment": "Malware payload (Mirai)", "value": "66505a2178f714607f60412913ce72d676779b86", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366135, "uuid": "b3448bd0-9591-42d9-8cd4-4fdb75c89ba3", "comment": "Malware payload (Mirai)", "value": "74eefd16a26a8ad97f811c7070290c8f8b1cc11e118763e365d95f9878724336930f7defea3ce6924d92dce3bab34c98", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366135, "uuid": "a2e1fa6e-7758-4026-8a65-49eb83579287", "value": "T15F334B42322C0F17C0A35974252F5BE487FFFAD122E4F685251F8B668A78E371489E9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366135, "uuid": "0770914c-7b3b-483f-96db-66fd781ec8cc", "value": "768:3SjbGSLlRrYj0a8C/dQOhPC/+I20Ja6ZZ+GwPS4yns96BktDgIPi8Tw8:ivW3jdQGqt7Y+Z+zN9cGgI6b8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775366135, "uuid": "72d303b3-6e35-4252-a770-bbd2d3333fcd", "value": 54364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775366135, "uuid": "15673f42-5513-4bf5-a66b-e398d4292aa6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366135, "uuid": "153f0169-954c-453b-8c49-ddc49c72478a", "value": "boatnet.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0950f42-3113-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775409579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775409579, "uuid": "5e25ec1c-88e4-4b15-88bb-49c92dd8bb6b", "comment": "Malware payload (SalatStealer)", "value": "a78044d5abefc63d82e54edebeb026aa", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775409579, "uuid": "6e64f704-1ac7-42f2-9c78-07a957d71949", "comment": "Malware payload (SalatStealer)", "value": "26ee2fa6364032041289c898dd7ff01cf0600b6315192201b53f41ca11b432a5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775409579, "uuid": "66d26e6d-5f31-4421-83d1-ead71ccb2d97", "comment": "Malware payload (SalatStealer)", "value": "257dd4325eed69a767502aa857a2cf5284be8de7", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775409579, "uuid": "d058765a-d335-4e06-a1f1-25ae8ed75ed4", "comment": "Malware payload (SalatStealer)", "value": "9f8602fc20e804ea21d9012b14ec591fb81cc2af6e7f6bba5db9461c4420efd83e2f3afc69ca5ab7bbba469fca6d2854", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775409579, "uuid": "273a4889-5dc9-49d7-8b4a-031c352de44f", "value": "T1EBC65B11FA8B59F6E9035831419BB23F63305D048B28DBDBFB587A2BFC776911876608", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775409579, "uuid": "28a577fb-b120-45f1-bc05-fafb36588db8", "value": "49152:y1kr0yKfowVc18HHS0IYzH8NkQ3NDAe5Syx5WPo+fTFCqzktNNI5ALeALahh+pQQ:+Q0yKU14yfO3rBnOPUyL5ldrvZu4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775409579, "uuid": "72f9eea1-9202-4c52-8e87-cd66cbbd2346", "value": 12046336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775409579, "uuid": "1b5e2f23-762b-465f-b53a-c73c7c40d436", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775409579, "uuid": "0d7ebfed-3f83-4c7e-bd3e-de3c89101276", "value": "26ee2fa6364032041289c898dd7ff01cf0600b6315192201b53f41ca11b432a5.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59872cec-312f-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775421486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775421486, "uuid": "fdde9fe5-172b-4478-80dd-512ffe22613d", "comment": "Malware payload", "value": "9f2c60262040802a0b420578bcec7ce1", "object_relation": "md5", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX7.file", "colour": "#7F7AB1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775421486, "uuid": "6a2563df-b0d0-468d-83a1-b50de4edf8b0", "comment": "Malware payload", "value": "270762c44b9a751386355362f46fcf047071f2402a777ddbfebe9fc68d57d2ce", "object_relation": "sha256", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX7.file", "colour": "#7F7AB1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775421486, "uuid": "a0ad51c4-aaea-4650-b5be-73c606f9aa77", "comment": "Malware payload", "value": "fa185454aa176014b70eb36622ed45e6098133e2", "object_relation": "sha1", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX7.file", "colour": "#7F7AB1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775421486, "uuid": "84aac5f7-79d7-46f2-acea-1df13dec2a08", "comment": "Malware payload", "value": "81c36e785644f52d15c4ed6f6655a6b737fb910a0e3a968ffb8cd531fed4fb6e41f189e8a0a93b478a990c730cd76e7b", "object_relation": "sha3-384", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX7.file", "colour": "#7F7AB1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775421486, "uuid": "d97ec857-7d2a-4202-abcc-56f4ad023259", "value": "T18606E15B7CD104B9D4AA533288AA55D2BB72F8190B3333D32E40B6B93F76BD05979720", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775421486, "uuid": "214e78ed-55c8-478b-9e50-225b73aac23e", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775421486, "uuid": "bbdb2a34-b32d-459a-947c-14e2b340ea7d", "value": "49152:TA9ny/h+xdrtcwU9UEBPWC8t0ZGHCm+R1Ct1o84+LYDW9SNJ+nnpDxy:T/6rpU9HW50GHC5R17BiEj+m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775421486, "uuid": "e1d6627a-4e38-4ec6-ab4b-048b6d2f11d5", "value": 3965072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775421486, "uuid": "91eadee3-61a3-4de4-924d-1b8a126b62aa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775421486, "uuid": "61bc9fd3-41e2-453c-a458-260a6e19c88d", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6b41c56-30bc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775372357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372357, "uuid": "8e53e655-0345-41da-a339-7b09157101f2", "comment": "Malware payload (Mirai)", "value": "44f57b8e823df2844b65399fa934c79f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372357, "uuid": "736dba97-f345-4b09-a907-f76f8553e383", "comment": "Malware payload (Mirai)", "value": "273cc74d5ad6460618d04958b76ca05c31e91b56458dab61d33e413fae949524", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372357, "uuid": "088a1e5c-a1fe-43aa-90d9-5f9daf221ce5", "comment": "Malware payload (Mirai)", "value": "89ad06085a8903f2ef10387a4652e92b25674b96", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372357, "uuid": "99c44de7-7e19-4b17-9aa9-1a5440476ed3", "comment": "Malware payload (Mirai)", "value": "20d2e3b168c14335cba5cf6b8d628f6d118331c26370aa18340f1c6740350a13623010fb96e7a24cd6b6f544ae0b8718", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372357, "uuid": "8df553a8-20c6-4db0-9ca8-9e0915eaa63c", "value": "T161433C92F89245AAC6D117B6771A978B33A26369C2CF7313CC080B5077C964F4E67F42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372357, "uuid": "cb1e1e95-f415-4555-ba48-fdaf3ad24ab1", "value": "768:L2uoWscL7J6liNNPrso8dqmFYEPhZaqTtsXr9PK8/4Q87MT2Fk0nEzyd:LABcLeijYPocPLSXr9PK8ckd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372357, "uuid": "8c85f83e-4922-4fd4-a22a-92652a98960b", "value": 55308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372357, "uuid": "96317e67-339a-41a8-8326-0caefb74c17b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372357, "uuid": "3def4c2c-c672-4bbf-8111-d8ce603d388a", "value": "titanjr.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d6c4a4c-30be-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775372905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372905, "uuid": "72104e2b-a32b-4b45-badc-833ba7033f18", "comment": "Malware payload (Mirai)", "value": "9f821f33bbf3103dc3ced67feda033a1", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372905, "uuid": "c11b58af-62fd-4846-aa0a-9a7e38edf4fd", "comment": "Malware payload (Mirai)", "value": "283bbdeea3fc35974cda8563327174dcfd65a7a1c2dba32bf7dff34543959bcb", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372905, "uuid": "ebccd78a-499a-42fd-a872-2cdd1606e0e6", "comment": "Malware payload (Mirai)", "value": "bce28e2869499603b36a4c49fd7477ebed2287c2", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372905, "uuid": "73bf4776-df90-4425-a32a-c2b2437b67cb", "comment": "Malware payload (Mirai)", "value": "bdc71014491550cb284b14f7225bb718cd4d36d800c166f5abd3bef7c921b46a17db5d6f81074af7bb54288b30ca345c", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372905, "uuid": "cc0d3245-0e45-42cb-9a6f-9f72e7cda30c", "value": "T12E01FC8921B0107275AB98EE4AB38C5D30C590653D863DFD3CEEA9D72595CD0B0520E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372905, "uuid": "552df64e-6ac3-4dcf-9cef-ddbcde2a2ce5", "value": "12:YkF1kcClZF70SIHFKHFpHFWHFS9kMFM5gFNHFSXkMFMDgFNA1LRPb:ZDkH/FbIHFKHFpHFWHFMFFM5gFNHFGFe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372905, "uuid": "231a133c-7513-4b63-b532-af5179182437", "value": 744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372905, "uuid": "84d79bae-f4ae-4210-995e-7f74d349451a", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372905, "uuid": "b96f2785-81cb-48c4-af8c-5fa9907fec21", "value": "all.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abb0c039-30f2-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775395424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395424, "uuid": "93d45a7c-1d96-4bc4-af06-69b3b8608ff8", "comment": "Malware payload", "value": "b928bd13269b1549f51cf664f78f6b37", "object_relation": "md5", "Tag": [ { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395424, "uuid": "2d9e56cd-ae36-4690-b285-fed628542fd7", "comment": "Malware payload", "value": "29254b685085aa7c72f1cf385525c59b9ab9a1009e92b38bdea8c3836b6673f4", "object_relation": "sha256", "Tag": [ { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395424, "uuid": "1a678b10-90b1-4d9b-9881-b56b95746d73", "comment": "Malware payload", "value": "c6170d057af6978f573274cf15902a6925b4c796", "object_relation": "sha1", "Tag": [ { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395424, "uuid": "126424c2-51a6-4351-9ca8-8944efe3db39", "comment": "Malware payload", "value": "696c42a56410f07fc5f896abd8a937fae33f60c43c970738550905608dfb34b20aec689586839e9ae7c027a0be3199c6", "object_relation": "sha3-384", "Tag": [ { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395424, "uuid": "e96cc655-a72c-4694-b03e-d6660975e7f1", "value": "T19005AFB876043DE6E66F577BC996ADDC137627239A8BA4CD4064B7C30663371FE02805", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395424, "uuid": "c6ea3fe0-92d5-4e99-883a-25ecc2a546a9", "value": "082d95568b2e734f659ed7efb17b46d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395424, "uuid": "e1a47b08-f11f-4a89-9640-0fd389c7967f", "value": "12288:Q3tve/kLJEcGt0mxVZxxS7Vpx0sqiUMOm9J9rJJ8SjWu1RRr8XlJsvi3jI1o:mtvWkLJEV5TLs7VXbD9J5Db28l1o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775395424, "uuid": "5b81e581-b43d-4bd2-a0c3-ee230af4eb72", "value": 796160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775395424, "uuid": "607be1a9-0daa-4585-91a7-b68105b83cd8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395424, "uuid": "290c5070-b97a-4928-a00d-93743196198a", "value": "chrome_elf.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a100187-308e-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775352364, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352364, "uuid": "e5009d0f-17fc-4812-a6de-2b2fd5bb6eaf", "comment": "Malware payload (SalatStealer)", "value": "89a9923508cca9e8613e197326f4dc91", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352364, "uuid": "a62afeb1-c249-4d6f-aac5-9acfb6dc9d2a", "comment": "Malware payload (SalatStealer)", "value": "2a3ae9de3f434bf0f02441db554175fb1437ce09e249027cd76b0c461ada7bb3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352364, "uuid": "3e247a04-1b4b-4b87-995c-762970610f71", "comment": "Malware payload (SalatStealer)", "value": "8b39490f541da42f6d67d0f2d0bf122e5009d28b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352364, "uuid": "cf4c46e3-0c29-4bfa-828a-706285a2dca3", "comment": "Malware payload (SalatStealer)", "value": "65d9a71b2c5b3e8e3a09e07fc973ccb64617b940592c66959ebba3312041eee9f5a699822d7bd21827427049bbba22aa", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352364, "uuid": "fdeec699-6b63-4bbe-99a0-467fef572952", "value": "T19B763386BD80D4B5F5D711F2B8AD8759873A59069F3CACDB2BD818B84CD0BE00B37526", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352364, "uuid": "ebdf0bf9-5f85-409e-a4ec-d46df7a92ad3", "value": "36f2db5b82b6c50a98306849357f8891", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352364, "uuid": "d4f06f8f-fc25-4773-8bb3-486e473c610a", "value": "196608:gIo+q6d77g2xBRrvNg3BonsEMZGrSoBT/rglp4Kpn:gGND7NVgaAEIEQn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775352364, "uuid": "cffea52f-4cce-4032-beb8-c25add61d9f8", "value": 7157912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775352364, "uuid": "d388ce97-6e4c-47af-96df-2826b6deadd8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352364, "uuid": "267947ef-f03b-4cc8-9d42-f0dc9eead403", "value": "Cursor.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c15253a0-3098-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775356806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356806, "uuid": "7068b3c5-fab7-46fe-8215-707373288e93", "comment": "Malware payload (Mirai)", "value": "823e524f8906b711663fa4d1046fb7a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356806, "uuid": "0890ffb7-e534-4b5d-9034-a255ef84d655", "comment": "Malware payload (Mirai)", "value": "2ae649c9a9bc6f224d414f581a4305a61d55c3aadfa28bc1dbbcb099116bec1c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356806, "uuid": "54b555b2-c011-4a27-af5d-7c9f05c931aa", "comment": "Malware payload (Mirai)", "value": "2663d0a366ba06e214779460db329189ad268c85", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356806, "uuid": "0071136a-0990-42a2-815d-5c9b6dc3d2f4", "comment": "Malware payload (Mirai)", "value": "706f06d85065a8a267e5146c0341b03a2662614c8ea80e194de62cabb178e83bbc3c6247fd69bf82a94d27c732fbbc25", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356806, "uuid": "62a068db-7bb0-4eb8-95fe-c5e03324f142", "value": "T1C433C402BB650EF7DCEBCC3346BA1B1034CC681E62E92B363534C95DB50B65B16E39A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356806, "uuid": "421a3a5d-dcb3-4683-a7c0-ff746b4a1a39", "value": "768:iOLFOcY22xG5XuU/TCKTTJishe5beeZez9BtZ8ycXiLhYXI:iOLFDY20G5XuU+dKEbnZI7Z8yvY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775356806, "uuid": "504a0465-2f7c-428d-957e-3a047495c70e", "value": 52380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775356806, "uuid": "6c4bb7fb-666d-4f39-a356-8563932e0abf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356806, "uuid": "147f9fb4-a4b0-4bdb-93b5-60341557d3cc", "value": "pmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "830f9a5f-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354124, "uuid": "60311d59-ba26-4714-8eed-7ea38d47a577", "comment": "Malware payload", "value": "a4cc8efeb7b26049660e0c890f5346bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354124, "uuid": "02ee1a40-9580-4c96-a9ed-191dc752c327", "comment": "Malware payload", "value": "2af9156c9758f56a5feaa9853559b7289cc2f85a953acf5485eca68d5a281367", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354124, "uuid": "fefa5151-aaed-43cf-84f0-148dc47a32cf", "comment": "Malware payload", "value": "b165a69cf1db3d78187ecf872b67e6db57c16610", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354124, "uuid": "be9dde41-e218-4521-b974-a3d359339bb0", "comment": "Malware payload", "value": "f9cedf96ca9138a2022d662e6c6ddafc3b7637d918c497be2dd9e5335b8caef7ea868e541fac055c3c9b736a973d0c2d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354124, "uuid": "8fbc2f0b-814d-4e85-ac78-091e88966523", "value": "T14FD54B17FCA114EAC4AEA236897351627BB1BC452F3023D72B90B6782F73BD09979714", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354124, "uuid": "de5464c5-a885-4290-adc9-637f9a19ba7b", "value": "24576:gVZSKSPsXvhdrSjcpHXAbXpr1HFnSQavqs+JSyOu9KaWFkA5tZkpDe9Qt3Yac:gV4hsXvhEjEkXhVavqs+Qy9pi5+3tc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354124, "uuid": "e5b80e1b-3361-422f-a8ff-e6dde42903ce", "value": 2760969, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354124, "uuid": "5d23144a-daa8-4bf4-9706-a97f76a46ede", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354124, "uuid": "79c190ee-504f-4f8c-b6eb-f763523d210e", "value": "gofuckerv2amd64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c053f00c-3131-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775422517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775422517, "uuid": "9553c910-9fa3-4618-b706-ff11204f0447", "comment": "Malware payload", "value": "190f934eff418b66214c38932a504089", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f_ex86", "colour": "#9A8E4A", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775422517, "uuid": "dbf879a9-bc38-402d-a4c4-ba15a9fcd4d4", "comment": "Malware payload", "value": "2ba01d4141fce7342a7f0cc330e6c08da83cfe5d4bfd1a79b69f20d2b1f4f7e5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f_ex86", "colour": "#9A8E4A", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775422517, "uuid": "2b905d1e-9620-4e30-a349-36a2b64e9b9a", "comment": "Malware payload", "value": "5d103f8e686a1933d9935c833cc8c9214ecb26ed", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f_ex86", "colour": "#9A8E4A", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775422517, "uuid": "e12a073b-68bd-45ac-b42d-ded886c15bc5", "comment": "Malware payload", "value": "f3ad49af0e3a440763c9308d3565803741552c045e62031906ade552a3436c8f85d062a6bda1c0dc3a6868777e054b20", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f_ex86", "colour": "#9A8E4A", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775422517, "uuid": "78e3fd9a-1fcb-4dc7-bf80-048fd7018654", "value": "T145756D43E2A620ECC05FC170975B6722F93174055B38BDFB92D0D7352AA3E906B7AB25", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775422517, "uuid": "7f09fab6-c4b0-4241-b41c-c49f5bfaf3a8", "value": "b712b3f1f6f5dde070c523d4407e5a3a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775422517, "uuid": "c61b5e30-968e-4aa6-8882-e58d0cab9657", "value": "24576:jds9Esxlce6k91UOld2LMxmeDozCMZyFFs2EymOCUwPPkSP:jdaEglcAHNaYczYGyL2PPk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775422517, "uuid": "2f4f3b39-00a2-4530-bc9e-f5c69e825792", "value": 1566208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775422517, "uuid": "498d3886-c360-413a-9389-192cecef5f8a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775422517, "uuid": "c0f22f6a-1ad3-47f9-b802-6760765aaf60", "value": "f_ex86.node", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca42fe58-3090-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775353385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353385, "uuid": "6c0ff5ee-19f7-4f08-8538-f4b8d1fdd909", "comment": "Malware payload (Mirai)", "value": "c9699797d4b800981c8201119c475195", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353385, "uuid": "194eda47-ebef-49cc-a90d-9966bb4b94fb", "comment": "Malware payload (Mirai)", "value": "2bfa803d1e3de85337e3014217cd696395b2fcd43df64faf08d486ef430bf50c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353385, "uuid": "9073ec96-222b-496d-9cd2-d13324e59fe8", "comment": "Malware payload (Mirai)", "value": "231b34efeb274acdc720fecb197e271790ab9ec3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353385, "uuid": "1ea792c1-ad75-44eb-ad80-d2490280975b", "comment": "Malware payload (Mirai)", "value": "a938c79c79b131336d9fb1c8f2ed5a97dd1bad4061994ec5d6c1db002b0737adb6915f61c3c8706ab4220f05fa929595", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353385, "uuid": "4cc05a1e-f466-4410-af3d-67844c8f70df", "value": "T1B9631A86BD419F03C5D220F3BFAF41483B166B69D6EB3243A925AFA423875D70D3B650", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353385, "uuid": "36a05e98-1c22-4acb-b96f-7c7d636f094a", "value": "1536:K5FomVbs6a7Mz0vuPFeozB4yoZvs51sLtptHmrA/8FrLfO6vvTiS:O74gss6KrZTiS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353385, "uuid": "ea97d944-9a7c-4f79-947b-b795bc2573d4", "value": 67928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775353385, "uuid": "27fd1e52-3b50-4b4b-8ed9-a6c6c03120b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353385, "uuid": "1478d01c-b980-4ef9-8c77-4079a58deacb", "value": "mirai.arm4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53dc7ca5-30f5-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775396565, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396565, "uuid": "9e31cfbb-fa96-4690-81a7-ac684aef7122", "comment": "Malware payload", "value": "5184883b52f530a7b7f2a6c9ccb4f9d0", "object_relation": "md5", "Tag": [ { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "rugmi", "colour": "#64B88F", "exportable": true, "hide_tag": false }, { "name": "TrojanDownloader", "colour": "#504DEF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396565, "uuid": "042e440b-cfe8-4b2a-9cb9-ff9f5e7e0924", "comment": "Malware payload", "value": "2c33b75d80dd3182dbbe2a3d979ec3553784a0b072e9738db28920ecc225c972", "object_relation": "sha256", "Tag": [ { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "rugmi", "colour": "#64B88F", "exportable": true, "hide_tag": false }, { "name": "TrojanDownloader", "colour": "#504DEF", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396565, "uuid": "371fb8a7-4819-4ce8-915b-d6023a7d2e5c", "comment": "Malware payload", "value": "f14c20166f80484a7d8ef84a93e2c18bab23751c", "object_relation": "sha1", "Tag": [ { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "rugmi", "colour": "#64B88F", "exportable": true, "hide_tag": false }, { "name": "TrojanDownloader", "colour": "#504DEF", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396565, "uuid": "0ccfffef-b9cc-4133-8c84-02bf43fccc88", "comment": "Malware payload", "value": "9f0220d35a209488137fc98ab8ae54599bcad9d2cd23287474b4e7fcc4949fad15dd6bba23c4667dd8dcf9bfcc239b04", "object_relation": "sha3-384", "Tag": [ { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "rugmi", "colour": "#64B88F", "exportable": true, "hide_tag": false }, { "name": "TrojanDownloader", "colour": "#504DEF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396565, "uuid": "19dfa207-a716-456d-ade3-881acf10ccbf", "value": "T168B35B47B7A400BBE0B793388AB39A16D77278521731ABDF465441AA1F377D14E38B32", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396565, "uuid": "0f3496cf-05f6-406c-afa2-a965b7a76b67", "value": "1c1a10a1396dbcbaebcbf840a6c50361", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396565, "uuid": "1a696a9b-4bd8-473d-87ff-cc5bb6871b47", "value": "3072:iGChyNQF5B4HLifklJgTJRQpGGUyZq5VDf0XYntr:ixyNNruRTwNUCq5VDf7tr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775396565, "uuid": "e2801e4a-5ca0-4896-898f-0a68bbb5b912", "value": 107520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775396565, "uuid": "8912ccdc-7555-458f-afd1-5bece95f207b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396565, "uuid": "b43a71c5-f780-4400-98e8-b7d6e4c1a917", "value": "amd_ags_x64.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22a97af0-30f3-11f1-a769-42010a9c0008", "comment": "Malware payload (Vidar)", "timestamp": 1775395624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395624, "uuid": "c97f809f-cd37-4393-ad9a-2220471dab6a", "comment": "Malware payload (Vidar)", "value": "007da0ece5dcfb22288b8b439e658d95", "object_relation": "md5", "Tag": [ { "name": "Aotera", "colour": "#499F8C", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "spyware", "colour": "#219679", "exportable": true, "hide_tag": false }, { "name": "TrojanSpy", "colour": "#809E1E", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395624, "uuid": "4fadb588-a965-462a-8b82-c7a010b210b6", "comment": "Malware payload (Vidar)", "value": "2d30175fe498605c65dcc18a66a2e62eb79527923787187b20b608d1c2681f2d", "object_relation": "sha256", "Tag": [ { "name": "Aotera", "colour": "#499F8C", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "spyware", "colour": "#219679", "exportable": true, "hide_tag": false }, { "name": "TrojanSpy", "colour": "#809E1E", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395624, "uuid": "f6efc967-2742-485f-a0fd-e74dc71e412d", "comment": "Malware payload (Vidar)", "value": "8af2fa13ece43fdc45a8406a673ff6c4105ca9b4", "object_relation": "sha1", "Tag": [ { "name": "Aotera", "colour": "#499F8C", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "spyware", "colour": "#219679", "exportable": true, "hide_tag": false }, { "name": "TrojanSpy", "colour": "#809E1E", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395624, "uuid": "e43d183c-a66d-46c0-8580-cacf33093927", "comment": "Malware payload (Vidar)", "value": "eb863d98775cf38e6c1ac047d0366948e0cb4f2990c1fdf91332e6f0fe0a836d62a2150384edbca02e65f33283298f84", "object_relation": "sha3-384", "Tag": [ { "name": "Aotera", "colour": "#499F8C", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "spyware", "colour": "#219679", "exportable": true, "hide_tag": false }, { "name": "TrojanSpy", "colour": "#809E1E", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395624, "uuid": "00661682-8109-4f99-b9f1-9b33be40c4b9", "value": "T1A84641C5B34EA9AD89F3909DA2D9C233E7F927110B0125F9C985C6973C65C7C43AE2D2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395624, "uuid": "49f5848f-bf2f-41dd-a4d0-438d3e41b03d", "value": "d3f21dae9381f52b4e334207c173a6a7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395624, "uuid": "b7e02691-44e0-467e-ae42-6a71d8fa42dc", "value": "49152:gL7TRRKlTBJUSUV5Vj7jrlb0ITearH3+R7ZiantfnIfUn6uzJYbriZjVxYnCEfcL:KwPQTU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775395624, "uuid": "8df0fc87-26b3-4173-86f2-c225399e61e2", "value": 5783040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775395624, "uuid": "ebef5c5a-801d-498f-8dc8-e3aa3f4ab3dc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395624, "uuid": "3fec0bcd-3ccb-40b6-a087-ac824dd086be", "value": "libwinpthread-1.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dddc7199-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354706, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354706, "uuid": "3a0b5864-5bfd-44f8-9bd0-503fd5688e94", "comment": "Malware payload", "value": "f1d2540707724596f749ba9e61daffe5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354706, "uuid": "fa16999c-b8e1-42b5-abab-84a1edf79022", "comment": "Malware payload", "value": "2e347956fe3cc3cb3e7960d13381484e2997d31c791c375d77faa69ed211350c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354706, "uuid": "b09a56b8-e431-48b5-bd33-461c3f53c474", "comment": "Malware payload", "value": "e425d250aa7d57f9214fe6da6f93eeb573830ac9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354706, "uuid": "1984f638-4516-4362-a114-a261a2958cbc", "comment": "Malware payload", "value": "dcf3eeab3b8892daf062cf88e13b8513c8b579dc30a69e8e6975e949b0c8069783b8fce80b48db3263e96e24a9171b52", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354706, "uuid": "eb5ebd77-59d5-4434-b9e7-0ce4411e1f48", "value": "T1ADF46C5BFE6E3843E2D6D33E9B4A83B1A22BB190D32351933581432C94C6ADDCF71695", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354706, "uuid": "a09aa188-9944-4c99-ad5c-54784db9cfb3", "value": "12288:icUvpg7801UHRGledT6DHbX3CWLCg3P6/gJLw50TBE44y6tgVu:7PIXH6edT6DHLyuCExJhY9tgV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354706, "uuid": "1250e08f-5dfc-47d3-b999-f21604549517", "value": 787544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354706, "uuid": "3cfbed5f-ba39-448e-a33c-979bc59bebf2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354706, "uuid": "85c2a74a-befb-474f-a539-a9774879ee65", "value": "sudpaarch64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff4ee941-30d4-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775382679, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775382679, "uuid": "54c86db3-b4fe-4824-83cf-34cb5fefc0bc", "comment": "Malware payload (Mirai)", "value": "b4e0607c597723e87eac8d7d7aa66796", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775382679, "uuid": "5160e495-ad70-4563-8102-9eb043cb73a7", "comment": "Malware payload (Mirai)", "value": "2e9a0babdb052ef2b863553e2a375090b32cc43230f421c92406c96746646425", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775382679, "uuid": "03e2f45f-0f90-4419-b4ac-e6d1f8f52b1e", "comment": "Malware payload (Mirai)", "value": "25b0a508d8d2ca34c6d542e4cb7c1aa9b4b8f56e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775382679, "uuid": "5415372a-f83c-449f-b213-d60f4b97154c", "comment": "Malware payload (Mirai)", "value": "6bc449478ebd42627f135a1e24d74e8683878239c895055c5172a1079f274c5585abddfa80bc2401b676daeef97af172", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775382679, "uuid": "9b264bea-f87c-42f4-8e98-e1e382254eb5", "value": "T1A4336C36E029DED0C6560134A4E88F751F13F1C883536EBB2AE546B2645396CFA19FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775382679, "uuid": "b3d814e9-00b5-4721-982f-6fe98c202992", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775382679, "uuid": "f2bb1584-afd8-4568-9703-cc16e69b617f", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775382679, "uuid": "84f94dcb-b509-42c5-a148-46a6977522f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775382679, "uuid": "41dc483c-72df-4578-85c8-48e280985ba9", "value": "boatnet.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bddf15a0-3098-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775356800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356800, "uuid": "c64acb3e-58bb-4b07-881a-fcb31df56c24", "comment": "Malware payload (Mirai)", "value": "9c39fdece6bfb638b731abe19bfd347e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356800, "uuid": "5e2b252e-f1b5-4bb6-bc4e-23e24c44e8f1", "comment": "Malware payload (Mirai)", "value": "2f898a1c2de250663f406d5f0d7001e6d904c2269075cce4802b7dda8ee583f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356800, "uuid": "af4885d4-1151-4730-ae9e-bc94ab8506df", "comment": "Malware payload (Mirai)", "value": "88495c6681cd89c86564ab095b241a7d65556821", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356800, "uuid": "f48d5b24-f83d-4e07-b86c-f8ca745d9a27", "comment": "Malware payload (Mirai)", "value": "152be51f29f5be02d00b4be8d73bd8faa1bcccf32942b7b07ff1a7ab519cda4ac747f319c6e4d75cb826f1db122b764f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356800, "uuid": "67d4cbfc-1f17-4d91-bfc3-977255c68c37", "value": "T1B7E23AC0A403D8F4EE2542752573F773AB7AB47E212DD997D3ADD636B881600A9033A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356800, "uuid": "958d804c-b4e7-41ef-b190-18ad2d20fefc", "value": "768:mAypuTPDCuChC6uSGbJ9TPWntxhrb/qIhdfNNyvem9iULZ2:mAypuTPDCuChClSu9Tuntxhvyr9iyZ2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775356800, "uuid": "31e92613-772e-4ff5-b8b9-fed88f912a83", "value": 33932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775356800, "uuid": "66633326-5e67-44aa-88be-304fdd0218e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356800, "uuid": "ae2bd14d-698a-4651-8c05-5e9bea1db5a3", "value": "px86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8251899-30c6-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775376655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376655, "uuid": "3c401ee0-3928-4843-85aa-41342369836b", "comment": "Malware payload (Mirai)", "value": "f802151a81b4d9041efca4760146b4bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376655, "uuid": "d7ad19d6-c881-45fc-a436-7d6077c0a175", "comment": "Malware payload (Mirai)", "value": "2f9a7fe5065b5afbd1f2037820937a791fbf3e3d214bc258ea3d4faafc4ea094", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376655, "uuid": "2f33638a-5f59-4a2a-9a5d-a8ef8f3992a3", "comment": "Malware payload (Mirai)", "value": "fa8eb5232d8ca901faa4000a255495c1f91a8e29", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376655, "uuid": "bb49ba1d-3f48-4a3b-8707-c3a48907faca", "comment": "Malware payload (Mirai)", "value": "2ee9badc963ce4c8af073a804f4ce7d10ef5096ec258bea820c1ec93e6ee0543a7fe07f00edc411cba86bbd767ed6142", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376655, "uuid": "539ec3f4-5086-499c-ba80-2f9b7d73140e", "value": "T1CCC3F909EB614FFBE86FCD3746E90B0529CC551712A83B7A3574D828F64B64B4AE3870", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376655, "uuid": "e13d3443-8094-491f-ac3b-53289882d27e", "value": "1536:DbARPjwIx5ptMn+g6z3jLVKQyRXoY6IyPOTMYvJZhed3yZLZZWqPHYmYFipM3BKR:HARPjwEW6T14Id3CLKGSA5L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775376655, "uuid": "15d4e498-45f9-40c6-8d39-be3692f88466", "value": 122496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775376655, "uuid": "170c2f5b-b2c5-49a9-9906-1d5f85d610b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376655, "uuid": "c2a0be9d-692b-4e37-bf64-b24bc3aa6b1d", "value": "titanjr.mipsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8921dd9c-30bf-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775373462, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373462, "uuid": "182f359c-2503-4599-937a-35030a1e08ab", "comment": "Malware payload (Mirai)", "value": "bbe2a6db3e2172d3e716c06a7827580b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373462, "uuid": "d77f6028-a196-419b-aa08-72b4439b99cf", "comment": "Malware payload (Mirai)", "value": "2fb1251286098d07723b3d9c94db25b72ab25ae837575c1d7bb2ecd1d2bcb54f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373462, "uuid": "e3a5be68-6ae5-4f43-a2c1-c10d188fda52", "comment": "Malware payload (Mirai)", "value": "1246a53f3b4cd3cbaa70899328551bc914b580b3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373462, "uuid": "1eb491cc-cee0-4b16-85c8-8c59222ea5ec", "comment": "Malware payload (Mirai)", "value": "61f9ded84619502bc1b1c7e504914daa214c0d839e33f2792c4af0f535d753d3d59e47879e2cf93fe645116208bd445e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373462, "uuid": "cddc09b4-b99c-406e-bc8c-052fda9df430", "value": "T15FD30A45F8819B12D5C111BAFE1D128E37231BB8E2DE73029D246F747B8A97F0E3A915", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373462, "uuid": "b77a3742-117e-44ec-8982-0913bb8206bc", "value": "3072:o6e7s+U4KJ+6XZ09+uatm6o/9hcga2ob2Zbh:pe7s+Lj6Xm9+ua+/9hcgaxcbh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775373462, "uuid": "12508e80-78c0-4dd7-8203-48f47992829d", "value": 141116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775373462, "uuid": "0f80a86b-3d27-4eca-a7dc-ed318aa0e0c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373462, "uuid": "986f4080-cd5d-474f-9881-bdfe690d6eb7", "value": "main_arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f4309d4-308e-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775352400, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352400, "uuid": "7209996b-aeeb-4c9b-94ce-8d206f26e3dd", "comment": "Malware payload (SalatStealer)", "value": "05bc0abcd95161f15fb16352df4d138a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352400, "uuid": "57ac1a97-7cc9-4cc0-9f15-82da25161a3f", "comment": "Malware payload (SalatStealer)", "value": "30c3e254548d6f3e7e75a2f99b5dba389431686d21d40f5d4b60e26273a7724d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352400, "uuid": "b9ead8e6-19af-4418-9cc6-02107ca9cb47", "comment": "Malware payload (SalatStealer)", "value": "18c9ec3601849577784ab6e945368ee6d53e4ecf", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352400, "uuid": "7a8df447-bd21-4a5f-bba7-d850835757c1", "comment": "Malware payload (SalatStealer)", "value": "dfd45fac25c54e5ee1fbe1d1c3b04d694ae44545a0317fae1b1c121c5a8acab556180931587d8b4beec94234455fc02d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352400, "uuid": "47035fa8-bd8a-4cb2-9448-7d7a2c055ddf", "value": "T18CC64A51FA8B54F5E9031831415BB23F63315E048B28DBEBFB547FAAFC7B681192A205", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352400, "uuid": "28fa48bf-9723-4d3d-bf5d-87bc10d1bc97", "value": "4f2f006e2ecf7172ad368f8289dc96c1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352400, "uuid": "9bcd874b-4d0a-4ae1-8b92-3111a1a7b0fe", "value": "49152:/JVHtUYo/X52lUeRJTH+UlUrfue2ft4iQQvrL6Rdp0NH+108qrmdEXowoY4No4qT:xJtUYUsUNCCRd4+14qtwojKR78Vy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775352400, "uuid": "0b4ec57d-8d3a-4793-8fe8-ab6a94ed69da", "value": 11671040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775352400, "uuid": "b0d752eb-7ed5-49e9-ad09-0974c9ebc10b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352400, "uuid": "e691ecb5-c1d0-4d1c-9283-ee1f76800d8d", "value": "gvl9pv5ys.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27f41dd2-3119-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775411953, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411953, "uuid": "e1b84a58-f321-48bb-b263-a1ebf1f8b567", "comment": "Malware payload (Mirai)", "value": "717c858f56a244894cea81281e5dcf66", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411953, "uuid": "47c28a39-c67b-40dc-bdd6-252f33bc0fbd", "comment": "Malware payload (Mirai)", "value": "317457766a6833e7983bc2bf7093f04ba830dff48569ae00afdb8907aaec2a03", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411953, "uuid": "e1283a56-95ef-4a13-9b84-75c8f8d1b3f8", "comment": "Malware payload (Mirai)", "value": "1a6738656abd7a8593e98dafc4858b1a14af41e9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411953, "uuid": "2de61c65-1e64-4d63-aa9a-47e663d9365d", "comment": "Malware payload (Mirai)", "value": "ed751771a018c532913c9d38043ce487ff1112466926d8dd68983816aaf3457845e45161d4201f0c9ab2f482303b3f23", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411953, "uuid": "1af1f394-cce6-4df6-8def-68218e4d6e6b", "value": "T193E32B81FA47CAF7D4470AB502A3A73A8632EC290A2BC655FB2DFDF59F175C47109218", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411953, "uuid": "eee87762-5843-4067-8fa4-13f410c9f772", "value": "3072:2w6w4A8/H8uFH1Cigkf1MpU5H7+YTv9nUtv:jtnczdYU5H7+YTv9nUtv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775411953, "uuid": "6861a48f-07a2-490e-97d9-cc021f5b3fb2", "value": 155807, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775411953, "uuid": "036a78d6-0955-486b-84ba-64c53f7e92b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411953, "uuid": "9a7d97ff-437f-4803-a14c-54a4e91c997e", "value": "x86_32", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4bd424e-30dd-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775386527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775386527, "uuid": "a052b184-a456-4e65-8bcc-5eba6f045a88", "comment": "Malware payload (Mirai)", "value": "3223d7554e8bf0680c2719457ad51c56", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775386527, "uuid": "d5a02727-5602-45a5-b746-508c21a9c92b", "comment": "Malware payload (Mirai)", "value": "3332abdd15cbfc0659862b78c40d962a95bde4a611980b4341cbceec07528b9f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775386527, "uuid": "97d5c107-00ed-4989-b51f-d4adc38f040b", "comment": "Malware payload (Mirai)", "value": "d6c4f8a7881123a7321a15bab726fe68c4a3e717", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775386527, "uuid": "243f4c74-b9ab-4e0e-b0a9-29b2a834eec4", "comment": "Malware payload (Mirai)", "value": "452508bd521f4da4e5665bf2a934c6497a8822308407a24d9f90ff6807abed73a11b11694783a7e24ec13cde89cc3c48", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775386527, "uuid": "1da19c99-4a94-45a0-9151-d370c0ae0b90", "value": "T158A2E01576A32D65E3ED1C3DC96A8317F9670BFCC0F5327679441620C94920A3E38A4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775386527, "uuid": "55605646-e115-4855-a962-0b81e1f0254f", "value": "384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjW/dhymdGUop5hX:vvQn4j+ZO5fKAlx4s3UozN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775386527, "uuid": "e89d1f86-fc72-43e5-80bc-adafdaec7ff2", "value": 22160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775386527, "uuid": "d2ceea93-bbff-4759-ae0f-5f99e397d6a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775386527, "uuid": "45f73d51-5dde-439a-9171-f8e98fda3a4b", "value": "boatnet.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20e10b85-30a3-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775361261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361261, "uuid": "d2faa103-2018-45cb-a9ef-c5e304a716da", "comment": "Malware payload (Mirai)", "value": "a04c8a5be73ad58a4d33524fbc75cefd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361261, "uuid": "b0b12665-c237-481a-8bbc-3510d5691710", "comment": "Malware payload (Mirai)", "value": "336c13f5f83a2dc65a58a4566850fbe6ad874267e9307b62260d318e05aaad21", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361261, "uuid": "8ddc024f-2acd-4a69-a909-9b540cef16c3", "comment": "Malware payload (Mirai)", "value": "6313b2469945fe09e5ff417fa5f124f9e7fefa9a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361261, "uuid": "c9ec888b-ea93-48c9-a812-f891a386cefc", "comment": "Malware payload (Mirai)", "value": "053e537c0546d639043a808db57b36c29797b6dfcd860c22a8e94fe4265c9ff943042c01ca6f68950f10c718b0ee4671", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361261, "uuid": "50d69124-bf20-4700-bd0f-9331f399cf40", "value": "T15A822887E982D9B6EC5212B4B1BA67E2AB33F43E1489EB07C7146C35CC52A05DB07749", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361261, "uuid": "832b8468-eee3-4519-986a-c336d43444ee", "value": "384:fctKNTih5XonRYGeKboF1G+IP9ayv4S2k46RFV:3NTSMeVFyv4S2k46jV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775361261, "uuid": "8ad32064-c254-412f-8772-60cbb733ade0", "value": 19056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775361261, "uuid": "407e7e28-2c13-4c62-a28f-415c61efc7a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361261, "uuid": "9a74d0a9-1c44-464c-8d97-0019b54fa0cc", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea0d135d-30bc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775372336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372336, "uuid": "d58c3ed2-54a4-48a6-abba-18a31cebd35e", "comment": "Malware payload (Mirai)", "value": "2e8fe660d953e01775c83964010340dc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372336, "uuid": "3c72a790-78ab-4d8b-9ef5-68ef0dde72b2", "comment": "Malware payload (Mirai)", "value": "33fb57042352799676a5ef7b99b0dd23ef62ee6b6285c154e6bdad9d40a249bc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372336, "uuid": "dbebd4b5-1e3a-47b9-aa4a-029d90cac914", "comment": "Malware payload (Mirai)", "value": "18464ce3f08bfa1464069e1d0fb1d402415df06f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372336, "uuid": "f65552e4-289b-4630-8384-536b5a2e83fd", "comment": "Malware payload (Mirai)", "value": "13e7730ad0e5ec8a4c7fa89b2d94b0964e3c8cdd7a868bb892e90e7e1fbb66a094b8b3d06df1de53da943a584b79196d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372336, "uuid": "eae8b377-5121-4a36-9c4c-e0fea40533a7", "value": "T1DE243A0775D08DFBC4C69AB40BE791328933F8291B32624BB7A4FD951F4EED86A1D610", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372336, "uuid": "1934fcc8-a6e7-4f5a-9831-fd111a1f2383", "value": "6144:qarStOXX9afdfyk4KHf+hetEKAM3pNcle:qarvkyk4KHf+hetEKAM3pNcle", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372336, "uuid": "09c48de0-dbd0-4b37-8aa3-6ea6ccce1703", "value": 220337, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372336, "uuid": "8aa1052e-655f-44e5-8767-c248a43860f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372336, "uuid": "d204573b-43cd-47df-a13a-110a6c5f951c", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41c1c732-30be-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775372913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372913, "uuid": "69585380-a8ee-4205-8958-db408e98eaf9", "comment": "Malware payload (Mirai)", "value": "4269ea8b1787afb0c8dc4ada78a452ba", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372913, "uuid": "06649bb1-4c79-4ac7-ad43-5e7c5aa83e57", "comment": "Malware payload (Mirai)", "value": "351ba524ddb47bfe00a8801d7b8f866967ee5756f5dfccf8c3dfee8c3f05b7a9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372913, "uuid": "b007c503-6f60-40d6-9cf8-d8a76820d394", "comment": "Malware payload (Mirai)", "value": "91dcf2b021ad6aa28f379b75fdc51f3621de3578", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372913, "uuid": "7426b26e-a14b-4ca1-8ed3-ac8cdefe88d5", "comment": "Malware payload (Mirai)", "value": "7585b8281d4428929859238e8a00a19a3db615b7df31bcaa9fac02f83ab2f0fb560da7c173f1df0fc6cf8658103c6812", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372913, "uuid": "65b63ec1-a7dc-4f71-af15-a7c1117e1778", "value": "T1A4517786003157781CF7AB2FF6F56198B0D1506634E56F48C6D839B54F8ED54BC40767", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372913, "uuid": "e1b11fef-b90e-404c-9535-902ecbf1c82e", "value": "48:vPmD0PPW9bPfAfFahPgAgFLhPdUfPlsHPZep4PiXsP90/PO7WPjy9PPWPPkR+PIu:vPmD0PPW9bP4NGPXu9PdUfPlsHPMp4Pe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372913, "uuid": "5523bda7-7916-4440-8d75-475389310b0d", "value": 2866, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372913, "uuid": "f9226cc8-6a19-4574-ba3a-3f6ad21c6260", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372913, "uuid": "9d972249-5938-49f7-bcca-bfde7eb93ef2", "value": "ohshit.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff379c4b-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354762, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354762, "uuid": "33cc11d2-0943-437f-a55f-701cd287e1b8", "comment": "Malware payload", "value": "771698c01986708ff65c1aaa68bea265", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354762, "uuid": "8e6e3a07-e699-42eb-baf8-7ad0bd2926d9", "comment": "Malware payload", "value": "353679288a9fcc829b4ac3eb0441de3588f5d4d5cb63bb6c4c5ab559abce2198", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354762, "uuid": "d34dfc36-77de-4d3c-95ac-06baf77e41c0", "comment": "Malware payload", "value": "cceda60dd2a996de08268de1edbd7d0b8e1fe836", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354762, "uuid": "5dbb781b-6914-4bad-bff9-e8a33ee73df7", "comment": "Malware payload", "value": "b7c062275585944bf9196640252e430b851ef25880987fe33222f55e79b9f27f68ca9c4ea11b519db12457f84cf7ba52", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354762, "uuid": "656c5edd-46f6-4fa4-a070-a18f24c47099", "value": "T16FF45C07EF505FEBC49FCD31492EC30701EDD4834AD2662A71FC8B8CBA9965A4AD3598", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354762, "uuid": "6031aec4-ac07-4a98-a520-c36abb45f957", "value": "12288:XQYzzwd8w5ngtnYfoqCGjlC1fkkwjKfoSekmLwB4h+N6I0XT+fMeRUsz9yRWVIqJ:cz5nubfkplvgFpLuugnh72G9Vnj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354762, "uuid": "54a61631-e9af-40db-9ff8-27e5221e1d7d", "value": 761964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354762, "uuid": "6ddbf3a8-8275-4f7c-83ce-64175f8b5f4f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354762, "uuid": "4232cf80-5a73-4c14-8ac2-fbb395831ed8", "value": "ssynmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f412ee0-30f4-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775396074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396074, "uuid": "23d0f73c-e1bd-4efd-8fb5-11acfd560a0e", "comment": "Malware payload", "value": "ca82afb6904fc24ac661a5fc9c08f637", "object_relation": "md5", "Tag": [ { "name": "agent", "colour": "#33525D", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396074, "uuid": "7a6cf93f-45eb-4fed-9522-7b840fca96ec", "comment": "Malware payload", "value": "358790aeb7b8f220786252b29f684d65d0e1b63ab4c5d7d8d084939011e7f70e", "object_relation": "sha256", "Tag": [ { "name": "agent", "colour": "#33525D", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396074, "uuid": "9641b135-d770-4edc-bf9d-ee63e83e8763", "comment": "Malware payload", "value": "729dfa49734ff664c19b708bac8fbe949fabc55b", "object_relation": "sha1", "Tag": [ { "name": "agent", "colour": "#33525D", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396074, "uuid": "157b6a44-bb98-4d7d-b155-682aed1c1163", "comment": "Malware payload", "value": "bcbcdf7092f2943429dc1c7c2868279398e428782e14c62174b875f3cbfbf67bec3b898766ffe5132119dc11ee9edfca", "object_relation": "sha3-384", "Tag": [ { "name": "agent", "colour": "#33525D", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396074, "uuid": "a852d35b-bb19-4c76-ab2d-4526ffbfbbd4", "value": "T17857336BD4991B92F9EFA071E8B6554DA6E27E219C030013721E374ED4F3BE1B4BC948", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396074, "uuid": "e9eb93c9-f995-4380-a7f0-7775f4f60e6a", "value": "786432:5zBEb69fokpra/JY29ALctbOh4FsjzEw:5zBEioCrw1ftbOh42vE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775396074, "uuid": "c49c75ed-ba5c-40ed-872a-48013f1305bc", "value": 27398144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775396074, "uuid": "8487d870-11bb-4d7f-95b7-698cde9a6c95", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396074, "uuid": "1d34fd60-1e28-4f2b-9ddb-4012dd9adcab", "value": "Script_v2.3.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac15c8ed-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354193, "uuid": "8e7cdaa1-8e14-46a8-97cb-aca65eb38a67", "comment": "Malware payload", "value": "d9e8c864e5ff6e6d7cdfc6ceee6b8e92", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354193, "uuid": "5fb123b2-7074-4284-a0be-9d0a77fae43b", "comment": "Malware payload", "value": "36215157d96aac7dac363433aea90a6ce1b3b4316ea7886806ecb9646ca4b606", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354193, "uuid": "f1e0c166-2348-4d36-b7cc-45915610ad74", "comment": "Malware payload", "value": "b137ee988a80d72caaf521259021bca361d49510", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354193, "uuid": "efa0d9d0-5bab-4164-8e67-022b37924628", "comment": "Malware payload", "value": "3ae205001a6175353a39058f1f389ae80dd90ae254e7ab6820b9495ff084436dc8bd4a8821de742a48380317e0467f79", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354193, "uuid": "8ad68277-0ccc-4b44-b000-7d05b2c7dfe9", "value": "T1E8F46D89EBC2D4F1F65301F20A8FD7E20564921A5053F6F2E78C2A977472B622E1736D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354193, "uuid": "e8bcf984-c2aa-4c3c-b29c-14eaf3e26432", "value": "12288:3fhE2Kmh3NhPpj2yE3LAGP5M7cG4e+4vL/l9DHjH4mHvBfPyh7Bd6PB7gLu:3fa2Ph3NhBj2rLAGbG4e+OLt93H4mHvj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354193, "uuid": "8cd50929-c2c4-4017-a8c7-2f5a7183bfb6", "value": 775232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354193, "uuid": "003f99ee-3f81-43b1-a59d-7b93bd3f83de", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354193, "uuid": "c2bf0240-f861-40ad-af66-500a87d2e064", "value": "library32", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c51c5194-3102-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775402339, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402339, "uuid": "1dc19da6-1f6e-479a-824f-b2d14e49c8b2", "comment": "Malware payload (SalatStealer)", "value": "e2e33d3a1ba8cc7ae6ea2b25f187bb84", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402339, "uuid": "3508ee64-ee3e-4549-ad4f-9e9314001067", "comment": "Malware payload (SalatStealer)", "value": "363909694401d0239f3a386e94c59ad2ba86eae2513b69c175ccbba0758197ca", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402339, "uuid": "a92cf10a-7ef2-4463-bee3-8abb60e6300d", "comment": "Malware payload (SalatStealer)", "value": "eb20fefcf5a24e6175d57a09ee3f42d72d706956", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402339, "uuid": "de31af2e-aa5e-4051-9d00-00dcb93f7dc1", "comment": "Malware payload (SalatStealer)", "value": "08b6e184caa87eed28547fff8e72b51854bfd852d5af6fe48dae1185b3de0565c3a5db14e6c9f5819db38db34334b0e3", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402339, "uuid": "356732b0-75ce-4fcc-8c27-01ad3dbba077", "value": "T18ED65B11F98B56F5E903983140ABB23F27316D048B28DB97EB547E3AFC776921C7A205", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402339, "uuid": "95487862-6c9b-4e43-bef6-c6ed13ab2bed", "value": "98304:07NBPtQZMDmigbDp1DC1KdV64AG20C6E:uPFPgfnCUL6wi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775402339, "uuid": "f7872e06-5fde-43ac-8bd3-a6c8c95218fd", "value": 12925440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775402339, "uuid": "f1192d55-63ac-4514-a849-13b6c047b5aa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402339, "uuid": "13762c1d-8484-48e2-b140-b2031816157a", "value": "c178l.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a47c248-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354110, "uuid": "1a7408ed-e60f-47c4-b4f5-8119264207d3", "comment": "Malware payload", "value": "0065e9292850dd02a145cd9c4f825821", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354110, "uuid": "2b132e8b-3b6d-4234-bdeb-dc2a7b749359", "comment": "Malware payload", "value": "3654d6a0e6c589c33a1f3ff653ea1907b06ff276bdf833717c7a491beaa0807a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354110, "uuid": "4a10e44d-6948-41de-8973-7671cb9f90c4", "comment": "Malware payload", "value": "c3dcaf263e020c5e36b95f8f6db9564efb41ad33", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354110, "uuid": "243035c8-af46-4feb-8357-55834311a6e8", "comment": "Malware payload", "value": "9a03ab66c1b72e0c479a122322e8e6b5493ede2a8ab0b69b450ed3d4eaaa6bab9c8faaf8adda3b248833e3e22962af88", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354110, "uuid": "ab843729-ce8d-4d54-ad44-1d550ec3f1d5", "value": "T168C52810EDCB18F3E5072E3119ABA2AF27315D454F20EBD3D644BA79FE7B6910836219", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354110, "uuid": "0b468b87-2084-49f0-aede-1ca3a5a12a63", "value": "24576:262wrfyaN8GzXzkYY4SzTe5yjDMhTwIrYmRsvuThXbAxoQkbPJ+8vF9YhdMkFiHx:2620mmNYzArII0cQ1YzLm6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354110, "uuid": "00849ad7-8064-4dbf-a340-8fcfec591315", "value": 2523298, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354110, "uuid": "2912e502-c522-4595-ab24-c8adab4e5ee0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354110, "uuid": "c0cff433-5ce3-4e6d-8591-e5bd078cc091", "value": "gofuckerv2i386", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b188a4d7-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354202, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354202, "uuid": "897d5c6d-36f4-4c21-91a2-10e0c751685d", "comment": "Malware payload", "value": "29f4e1bf51849f581bb124d9b7656eb2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354202, "uuid": "ac1ec933-d90d-4654-bf5c-06bd039e404b", "comment": "Malware payload", "value": "37b220a8bd543f1f47543b0bbe0821d974f90d18ea28925c915ae3cdfd9e6684", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354202, "uuid": "b7d038f1-c188-44d6-90cd-bb2e27e5664e", "comment": "Malware payload", "value": "53d32b2d0ec4822cfc9a0c3ba7d962d348161e09", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354202, "uuid": "8d3d49ba-9b7e-4fc6-844f-259735343aa5", "comment": "Malware payload", "value": "2f0215dfb2e21635111d8edc5e5ba08f1b3b8bc35c075ad7163faeea4f98374da9ba93198d8e9f293479f70844e22a16", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354202, "uuid": "b8021b00-6cec-4422-b78f-fbc3fa5c29c2", "value": "T181F46C5BFE6E3843E2D6D33E9B4A83B1A22BB190D32350937581432C94C66DDCFB1695", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354202, "uuid": "a7551fde-a0bd-471e-9587-a88575890563", "value": "12288:6fsvv1dLvFE5ORhgHfSBtplnlPwZYw50Tx+y/y6kgVP:60Tm5t/wtT6Z6N/9kgV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354202, "uuid": "903c3740-7b94-4b2c-94af-bddfe11fe7ae", "value": 787640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354202, "uuid": "c1279a04-0c70-478c-bd1d-bb42ac80c7bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354202, "uuid": "95781275-ba40-4581-b43c-88b14e37f98a", "value": "libraryaarch64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "103f9651-30b8-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775370252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775370252, "uuid": "9f0b7118-02ea-4dc9-9cc6-0606c3eb1b7b", "comment": "Malware payload", "value": "f3220705d4157d1548f86736266f9ca9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#76AC5B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Egairtigado!rfn", "colour": "#A24468", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775370252, "uuid": "a2d45f78-f66d-4597-ae6e-f86612717149", "comment": "Malware payload", "value": "37bad853faf9e1b96f152d66018187d3762d14f625b6d52e3ab8a93000560dd4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#76AC5B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Egairtigado!rfn", "colour": "#A24468", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775370252, "uuid": "b3e9e89d-0068-4a08-a9b1-6b5e04999b93", "comment": "Malware payload", "value": "c7c814fff3f79a68b1ed09dc97feeb45e51fd264", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#76AC5B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Egairtigado!rfn", "colour": "#A24468", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775370252, "uuid": "75f70c6b-0cdc-497d-b09f-0ebaba8673d5", "comment": "Malware payload", "value": "b3f894c8b157eabb8813bdde60de8771a53932eb52ccd4f7ae618608c8668f42d4b61dd92036a02ae16aee8c7214c598", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#76AC5B", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Egairtigado!rfn", "colour": "#A24468", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775370252, "uuid": "20c2ba3c-4c26-4678-bfb8-723655f0ee10", "value": "T1D397335FF647963AD22D873709E7E81854F75A2BA8539E23ADF4B4A8CF111042D3DB02", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775370252, "uuid": "8a7da9a7-ad9c-4381-bcb0-e34e0005ec19", "value": "40ab50289f7ef5fae60801f88d4541fc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775370252, "uuid": "034bf195-616a-4373-a258-408f421bf37b", "value": "786432:nWhAHYYIZAIJ/Aao0y3QaQEvLnb2IxnZkpe6Z+aRhxjEf+vxXFZsj:nmeYJIa10QXEvzSIxnRaCf01Zsj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775370252, "uuid": "778a7839-f512-468b-b536-9b8a33b773c2", "value": 41435002, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775370252, "uuid": "d01cdca6-eddc-414f-b4ec-243e006c2a67", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775370252, "uuid": "ed47ba24-5321-48cf-aec5-169cb0af7a56", "value": "\u7231\u7ffb\u8bd1\u2014AI\u7ffb\u8bd13.2.5\u7248\u672czR15.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "269e5359-3119-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775411951, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411951, "uuid": "3b904571-fd7c-4154-9ffe-81ae9ea77022", "comment": "Malware payload (Mirai)", "value": "f78bee8b9d2e673ed5693ba8c218f7fa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411951, "uuid": "bb6ec649-3e49-42a1-a29d-52f5a586f4a9", "comment": "Malware payload (Mirai)", "value": "38726e3038592921d8243abbd18488e65ddf6a8c160f3e0821af0d164c35651a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411951, "uuid": "28b0160e-c031-499c-a49e-2123b8e9b218", "comment": "Malware payload (Mirai)", "value": "aa85cbde554a7356496c8f6dc6bf177789a5b446", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411951, "uuid": "1c53ee0a-9ae6-488a-bc01-9cfaeb0ee5c8", "comment": "Malware payload (Mirai)", "value": "4dcfe006c784c1a8aa73c8e912b3e1926d8ff2d1f82b4e5338cb87a3026273f69ea27373afab75b94edc67853146feb9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411951, "uuid": "d374621f-639e-493c-b066-1c52ea8d0720", "value": "T1FD243A0775C08DFBC4C68AB50BD791328973F8291B36664BB7A8FD951F0DED86A1C604", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411951, "uuid": "c830cf6e-132d-4e83-b153-77076d864aec", "value": "6144:6t3nJv+YCUqes36ZH0rFTxpkvKHg+heN9KAM7pNNle:6pn5COmkvKHg+heN9KAM7pNNle", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775411951, "uuid": "6d5a44da-0229-4808-8419-fc3a506e47f1", "value": 221204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775411951, "uuid": "264e33cf-0733-41a3-99cd-e420177b2075", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411951, "uuid": "aa6b81db-de28-4d21-8f14-396618b678eb", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0435891b-3094-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354770, "uuid": "2a1e89c6-be65-4220-8bf2-35ae73d0770a", "comment": "Malware payload", "value": "38cf2b71f24092dd8c563a4a6b81f2ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354770, "uuid": "94b7341b-ffb9-4a36-9be8-535b8a6d98d1", "comment": "Malware payload", "value": "39c547a11826372209aff3abaa36517026f075922f58b8ebf5523ca1995b36ad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354770, "uuid": "7caf78f2-9a8f-4181-82ab-010b30cf8de3", "comment": "Malware payload", "value": "e4d2ea528028fa7f2f7f01dcd865395f6c985aaf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354770, "uuid": "afd22df1-a216-465a-b3cb-6aa6c0a3173f", "comment": "Malware payload", "value": "2a54d4487e1a7b0ecb3755c15d7a1dbc8cdde0b34e70bb4936bd6524b20ef923550f7eb2aba4687ac75544841a435c4f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354770, "uuid": "686249a6-0852-468c-824f-fac174aae2a6", "value": "T175155B42FB1C4463C9470EF0593F57D6F7257A4241F9922A370EAB672621E3ADAC3389", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354770, "uuid": "d5422d91-d83c-4717-b343-691568ffd510", "value": "24576:Akfw2w71NMDrcOAFisbv5L9a6mahw7yjOF4FmE+:AYw2w5KHrAF3vl9a6BcyjOFk+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354770, "uuid": "4be65259-02e5-42d8-a9f8-73ef71ba6468", "value": 928568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354770, "uuid": "017f5e57-e8df-4145-a114-35eb40cffadc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354770, "uuid": "756e7aa5-0ac7-4c08-9377-6dc6a99c0874", "value": "dropperppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99717258-313d-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775427606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427606, "uuid": "0938511c-50cb-45a8-9ea7-42f3b0c7f7eb", "comment": "Malware payload", "value": "8e5b5645d2c29cb9e49d9aa0b74d4921", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427606, "uuid": "4440b025-86ee-4b4d-9934-615efecb5818", "comment": "Malware payload", "value": "3ae188387dd8b01cd5595b9ad937dae48d90c4d17fa8ba7f85d3a1f34d1ef3c8", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427606, "uuid": "6e29b974-8e33-4e52-8c73-0b41395ac53e", "comment": "Malware payload", "value": "6054c64f659cf1ba7e6d40a5f1b7009ffdeeda69", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427606, "uuid": "2def60a0-9c87-4cd4-8396-45b3e2eaa698", "comment": "Malware payload", "value": "0806b3c8abd5292bbb5469944f5dec8f3f4c5de46b1d1574d2adb50d15d51bc7fdc1bf6902c33469ef9161222633290c", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427606, "uuid": "d1efdf5a-a7d3-421b-8175-e60ef88b6e29", "value": "T15BD423C342F49076F52EB8740B7BE675C7E16E619BA4C6C65708AF2848FF190EF02619", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427606, "uuid": "dfa65a35-750f-40b9-8b7f-29bc94e8efde", "value": "12288:SrXZkdamQrYUoucHASvRIA6lqW5LOeEzgWxk+886aVylhN4aW1:izrYUfOXvaxlfxOeEQR866y3A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775427606, "uuid": "afa922b2-20dc-418a-a1b8-df91a270fcee", "value": 627597, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775427606, "uuid": "be7f17d1-c2e6-4540-acdf-0ffc0076d0e5", "value": "application/java-archive", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427606, "uuid": "4057e0c5-2caa-44b6-adbb-512f8ce88411", "value": "\u043d\u0435 \u0442\u043e\u0447\u043d\u043e \u0432\u0438\u0440\u0443\u0441)))) _1.0.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d2061e8-30c7-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775376717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376717, "uuid": "41fdd80e-1d5f-40d1-9058-779a123384f9", "comment": "Malware payload", "value": "628286207df9768cecda6b980b2fd682", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376717, "uuid": "352f1e39-8956-452d-81b4-9bcb8a6e8af4", "comment": "Malware payload", "value": "3baaac814ab283c951b35d3f13d518e694627cd99c49e405003262140aa44ce4", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376717, "uuid": "430bc1b3-5bb6-4aa6-bdc5-1b5096f0fe8a", "comment": "Malware payload", "value": "5c24aa6127722fcf0428aec57256ea16dab49475", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376717, "uuid": "060d8fe4-d1ee-46fa-bc53-2a2c976d95a0", "comment": "Malware payload", "value": "e571148dce2a04fc6d6e7136fbf294f94803dec5ceafb9f4c2a83f18913337487bb4931aaf175896ff4b173ff9328a9f", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376717, "uuid": "e8272a88-91d7-4dcb-932e-29a064a423b3", "value": "T19FE0C2CE3820A356C424DD147073CA2F6003E2C862A9EB6DF84E05AA8C98508F23CF54", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376717, "uuid": "c32c9d5f-7e19-47e2-9dde-1e7892aad96f", "value": "6:L0Gjb8eFa0LKiVaMFbsCUoXbgItBHXbRJYU:gGjbE0LKAbbbP7HXbRJr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775376717, "uuid": "dd382240-98f0-4509-93be-ba98eced15bf", "value": 297, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775376717, "uuid": "1ee00a4e-0d0a-4b6c-84d8-9b8bd1f17afa", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376717, "uuid": "bfc90738-f5de-4da4-9182-b08168f6c64d", "value": "giga.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5b3db65-3114-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775410017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775410017, "uuid": "5a4d23cf-c69c-4d43-83cb-c770198c0f1a", "comment": "Malware payload", "value": "8fb1b85924ff01814bc6d47750c6efd1", "object_relation": "md5", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX3.file", "colour": "#8DAAA4", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775410017, "uuid": "80a081e8-91c4-412e-afba-2c341f07407b", "comment": "Malware payload", "value": "3bcdaa79cde384cbf61536ed7a5b0804b01e9cf97a6e927e91cc13e737885621", "object_relation": "sha256", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX3.file", "colour": "#8DAAA4", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775410017, "uuid": "ac1aad00-a06f-4a58-b1ed-3eb30df4e11d", "comment": "Malware payload", "value": "067a4f5283a48fd8c67ad1ac7291f3272b390e95", "object_relation": "sha1", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX3.file", "colour": "#8DAAA4", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775410017, "uuid": "7ed8927a-dd9a-4b8a-b986-ace0a22537e7", "comment": "Malware payload", "value": "1bc9f4a94a990add70bdebe8a15c866727bd0d28c4407abfb4cf94eae3ac21a7a53956cdede678be58f23a4b8f400350", "object_relation": "sha3-384", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX3.file", "colour": "#8DAAA4", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775410017, "uuid": "2f11e6f0-5024-4d9c-8f7c-6efa91fcf9b9", "value": "T151531B5396EC7CDBC038A3B033BB83D4D72EDC55A1A2C10E95D012A6D8BD52779227E8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775410017, "uuid": "2241e090-be9a-47d7-b466-9052bf1548d6", "value": "61961243e75558bc83650de0dc7c76e5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775410017, "uuid": "a2d4bdd3-4676-496d-b6cc-9b8df6e9a766", "value": "384:jue9F8R0QIBTyA+oQ5pVcO9HF57gzLAdqPH1G9W05YZa7gJXA2zWqwnS6v/E:juCpQuCpkzLAAthpw2qfnSW/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775410017, "uuid": "d2479b69-9ede-4ffb-97e7-d9601a1c3a83", "value": 66048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775410017, "uuid": "2da44a5d-60e8-4a07-ab9a-59301690aca9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775410017, "uuid": "a2ba8bb3-3abe-4f8f-8788-15cfe85e2885", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad8df511-3102-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775402299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402299, "uuid": "547746a5-9b5c-4f3f-a800-f15f7c163135", "comment": "Malware payload (SalatStealer)", "value": "c4c67ed4de95b1a92ce1cd1b8eb01a31", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402299, "uuid": "fed0fd51-4abe-4eee-95e7-b1c4aef97f1b", "comment": "Malware payload (SalatStealer)", "value": "3c09262a23b74a1ed2ab5c6c0a37719ea2fb3ea17fc348d8e3f10b5a58a90bd6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402299, "uuid": "e5c2a017-486f-489d-b921-3b65962a5ce1", "comment": "Malware payload (SalatStealer)", "value": "249cf79b555c8d8dec4e9617e06916127f7ac5db", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402299, "uuid": "b47b4fbd-8477-4a6c-a613-9050fd58f096", "comment": "Malware payload (SalatStealer)", "value": "488047ac2fd042cea8c240fb0fdd2cf3ee9105b5e539175c95c09018107cad8442b93803d634cfc9941b170707b3f24b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402299, "uuid": "7e8280ec-48ec-4c7f-b2bb-22b0c096f3d6", "value": "T10DD65B11FA8B56F5F903583240ABB23F23305D048B29DB9BEB447F3AF877691186A745", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402299, "uuid": "3ba512df-3da7-42f0-bb51-a460c1e440b1", "value": "49152:wHeTRMa0PQ4ElErv2yUEfpyGkSHIB8/PZ+rUe08dYMjeS7gjDomNEs3LjyNojrur:DTKaev2rMEGpIIatjt7sOsiX54/lE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775402299, "uuid": "f9833b36-f554-4e6f-bcda-4eb0a28a8128", "value": 12925440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775402299, "uuid": "e8b4e279-d2ea-4b71-b9ae-366afd6e836a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402299, "uuid": "6fc78a3a-5adb-4ece-9977-b94dd9b4d43d", "value": "3utjk5zn.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a17a65e-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354163, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354163, "uuid": "438ffc20-f3ea-469a-a5c3-fec93569a7ce", "comment": "Malware payload", "value": "1e999eaa6711b58d4a881bd203b6f6e5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354163, "uuid": "4209a1c1-33e9-461b-9ca9-8fee11982ea2", "comment": "Malware payload", "value": "3c4a1736fe93415b97cb7b8809fe58cb5693c33ddb2f1ae8cf13ebae1a69716c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354163, "uuid": "3763432f-c490-4179-b5e4-b669a186e0e7", "comment": "Malware payload", "value": "c1c17fb2862960d33d9b294c9879e91aa362971e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354163, "uuid": "e8e8fc7c-6559-44a8-9282-d0c27e4c1bee", "comment": "Malware payload", "value": "5cd08501f437107fc07bcfd3e797cef3c548a8aff62a57c55a97d16d6b37e21eeac234884188fd3dc0c0ed952436ace5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354163, "uuid": "adb6d6f8-f2cf-4d7a-882a-d0eb9e2699e9", "value": "T176F45D07EF505FE7C49FCE31492EC30600EDD8D39AC2662A71FC4B8CBA992594AD7598", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354163, "uuid": "bbed9528-e924-496d-a837-2c9b4f06de49", "value": "12288:trm9tgRA3DBjW7UGyOhqYji/QnfSPx7ghqSest2Z2ndb665o7Or/+E0asy+WpLaf:0aA3DBURAAfSnwbPaN8lpB9VcN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354163, "uuid": "528035ad-410a-4042-a5ab-3c648b733375", "value": 761540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354163, "uuid": "b2453111-0a11-49c8-a4cd-31cf04b2062b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354163, "uuid": "3529f8de-f8ec-4a66-8c8d-2a8b4c3baa05", "value": "library2mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c462ef67-3098-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775356811, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356811, "uuid": "839141fa-54dd-43bb-83de-49a8fac974d4", "comment": "Malware payload (Mirai)", "value": "475e658cdef2db65469cfc9948fbdca5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356811, "uuid": "5a4e9bfb-79f2-4a1a-a20a-b61e4b64f006", "comment": "Malware payload (Mirai)", "value": "3c6ca359fde5e6228369a9bffd54ebdc7a8ceed0006fef68255aa0ca21883ccb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356811, "uuid": "b70d5687-7f73-451b-bfd6-c735582792c2", "comment": "Malware payload (Mirai)", "value": "4ad48a81fdba141cab0aaf83b6e3a7b1fc25f493", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356811, "uuid": "605a043d-003c-4d4c-be08-f2c8ba6e583b", "comment": "Malware payload (Mirai)", "value": "d95b2dfde4d7a24635f1d09af75f7f0a887ff9b0b10ce85c94acf1ed1084a02cf1224fd94b00c66e700d45220b0f1fc6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356811, "uuid": "3fe2f450-07d3-446a-8057-7df01211f5f6", "value": "T1B70319A5F4029C2CF90FEA7E98124A09F571774651830B3627ABFE536D332994D32E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356811, "uuid": "a669d9b2-2a9e-4259-b2bd-cf0d25125721", "value": "768:LZYeeNWbD8DkUmyMw5CI8iRXHWTTYkjYGIlx:L6eMWImyX5CI8EmT8kMGo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775356811, "uuid": "9cd804a6-1ae1-4fd0-abb6-29335e4ce240", "value": 38436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775356811, "uuid": "e4c9d491-13f6-48bc-b5e1-97fbb605d9fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356811, "uuid": "68b02b5a-d36a-436d-ad49-c7b8fa3bf919", "value": "pm68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88b3ac64-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354134, "uuid": "07a72165-f2c4-43d0-aa0e-fc7bbd2c5db9", "comment": "Malware payload", "value": "5e571b38ac24a1d038433ac6ecaa1373", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354134, "uuid": "07a467dc-7cb8-4918-a9cd-12a6e56f8f69", "comment": "Malware payload", "value": "3c76a6ead44a6d16550aa5496dc94f6f96a4c797788f8005a112073128c28b90", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354134, "uuid": "11f08949-6c13-4fdd-8490-fce830c65f39", "comment": "Malware payload", "value": "c22feb02cbb3a4e01e5e849632915c2083bd7587", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354134, "uuid": "b5da8592-8a4e-4b7a-b17c-6b553acfd55a", "comment": "Malware payload", "value": "fc8c793beb3d23c45d9fbb725273fef8b458f9a914c168d17efc0dc3987686b9a7419d06fe0b2fccbab68d374e3e57eb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354134, "uuid": "dea38fb9-f13a-4f00-9a5f-2b35751d4c68", "value": "T176566B13EC9518E9C0AED1758A729263BB71BC490F3263D32B50F2386F76BD0A979710", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354134, "uuid": "75533322-194a-423c-bb4f-0d7b2c3341bc", "value": "98304:d3twHLzIfUdFSEpqLyDDD+/bIKLtqvopt9jM70q2pWDD5If6BW608A+zEy:5eracFSEpqLyDDD+/bIKLtqvopt9jM71", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354134, "uuid": "21933de8-5ab6-4699-af21-ad6bd025888a", "value": 5968137, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354134, "uuid": "bc939468-05b4-41af-b57c-2d899d914fb9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354134, "uuid": "4871ba5e-067f-42fb-9ec2-8977d43a5468", "value": "li7proxx64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7091d08b-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354523, "uuid": "0bab2f1f-dc4f-4cd4-b5bb-280483373d5a", "comment": "Malware payload", "value": "8e6bc8a540a9a0a32cc7d0c12edaf8d0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354523, "uuid": "62e7a291-c9b4-43ff-a0ae-8f80685ac814", "comment": "Malware payload", "value": "3d1b4760af9b65422f018516c52d8229b55c67f8de34d616502f51c4396dc3c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354523, "uuid": "edb83465-2932-46c2-b002-1eb26713f12f", "comment": "Malware payload", "value": "6f1b6e4e1ff2a11d69165f8cfcac268ba8b8ee58", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354523, "uuid": "aa3476a6-33f4-45da-adad-304c3fc0e6d9", "comment": "Malware payload", "value": "276d72861133977229ec571c403cc0cf63d0b86989dea506000535a24b9d8406c6743d61a35cd7c1d7dbb66d97c890dc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354523, "uuid": "233f8aea-ba61-4243-ad40-5ffa3023812c", "value": "T15EF47D88EBC2D4F1F65301F10A8FD7F21A24A21A5053F7F2EB8C2A5774727526E16369", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354523, "uuid": "84a965c2-0de5-4afa-9a55-8503b117d62d", "value": "12288:pQGJGDJ6hBLh3+ctnIP74NeuneHk8vo65f3mZQRsGPyEjdkWbTfnLu:2GQDJ6hBLhOctnIt6eE8voqf3mZQRTk8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354523, "uuid": "141320d6-0697-43f5-96d3-fd48d96da50d", "value": 775232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354523, "uuid": "ac7c6e1b-b568-4c4e-977c-98e2c225a449", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354523, "uuid": "40cb94ef-c26b-4641-8da2-73f0e7f4fb38", "value": "six86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cbd4dd7-3106-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775403935, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775403935, "uuid": "6cb5a303-6a35-4234-88f0-fcb1d3c08566", "comment": "Malware payload", "value": "5a271b5a4ce2ba9dafd58079065e99b0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775403935, "uuid": "8c63f229-0eda-4f26-bf67-e77b26da8b3b", "comment": "Malware payload", "value": "3dae8b7d3669d697b41b427a2bbc2918881c4a70453ad2cea376bd4c27a23529", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775403935, "uuid": "c4bed718-eeb9-47f1-9e96-8e9324545c27", "comment": "Malware payload", "value": "818af87654909393e36f8e7c799f33da7bc74536", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775403935, "uuid": "3199968e-371b-4f90-90aa-93d8b5749158", "comment": "Malware payload", "value": "662780a2da87a85ac1d1cd0c02739007a65bb4de673d4e72551abf6e94e0c924818f553134253c69a430db501fa8169f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775403935, "uuid": "509494a0-3f34-45b6-9953-ac32415b35cd", "value": "T15C18334F2EBFFC95F2244F3943A437620B5B6EF129515B1A002830B5A7BE55C5D3A2E2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775403935, "uuid": "8e5a5bfe-a948-4b2e-8c07-ae0e78cb67d5", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775403935, "uuid": "6a9a99bb-05e2-4a0f-98c8-8852408bc347", "value": "1572864:33rN+BWMFDe45krJS6hDRVO34XuIjt54CwPGBYOoJPzRPHF2tlFQKAiQ+7SY:33rkBFle45CDhDRVI4++34CwPGBYXRla", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775403935, "uuid": "0a98aa70-3851-4bd2-a76f-030e0d0881bd", "value": 88319553, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775403935, "uuid": "1f2e2b03-5055-46d0-a068-bcac1a6b8af1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775403935, "uuid": "cb63a5f8-dc16-4f26-a57c-6b9211351003", "value": "Testeee Setup 2.4.5.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f86cf4f-30f3-11f1-a769-42010a9c0008", "comment": "Malware payload (SantaStealer)", "timestamp": 1775395753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395753, "uuid": "e61a2f56-2080-4fed-93c6-3de2454170f9", "comment": "Malware payload (SantaStealer)", "value": "4efac2a0d00e7dca52e7482fc072c492", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395753, "uuid": "ca5e90c4-8554-4a44-97e2-861786221375", "comment": "Malware payload (SantaStealer)", "value": "3ddd57e8dfe5bffc0ad0fdee51c7779e7ce56163d7420caf74c5024bbfd7a4f6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395753, "uuid": "c17205fe-d26f-4b21-9335-05b455744643", "comment": "Malware payload (SantaStealer)", "value": "4334a6f9278f73aea98054cfb3e45305fe0cb26e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395753, "uuid": "0bfd242b-318f-4416-bbb7-6fef5ec6c95e", "comment": "Malware payload (SantaStealer)", "value": "a6738789342f88bc769ed9a30c6224ed90304630e135f1c843836ff45b358b3a220e5efb4a4cf1a6eeac8dff0eb6e45a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395753, "uuid": "32394a6f-d9fa-44c6-b671-88ab9a460ef2", "value": "T1BF16F103E2A320ECC167C274466B56B3B931B85951347EBFD5A0EB312E61F507B2AB35", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395753, "uuid": "0b21a19d-65f3-48f5-bcc7-a5070ba5c7dd", "value": "86decc6ebb11144606632964f65c138b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395753, "uuid": "e2353d16-036a-45a0-8b7f-5a367d8da131", "value": "98304:CrbKNNRB8/9i8xwp5YIvjfLpEMOIHTnA0yQaQjf1UTmgdwWRtBJx8pa:PNNgi5p5/rLvNHTnnyQaQj9UTmMJd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775395753, "uuid": "d31f4280-5b8d-46fa-9b62-194637eef6aa", "value": 4084264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775395753, "uuid": "435c3501-17f5-4703-8b08-3d51d6ebe8c2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395753, "uuid": "a74f935f-088b-4feb-9fed-ee4990958cf5", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0117b6ff-30c7-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775376670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376670, "uuid": "da0a6416-7485-4b1b-8832-3b3ab076a16b", "comment": "Malware payload (Mirai)", "value": "04339b8a19aee6e767b7335795673db0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376670, "uuid": "a9026b13-b977-436f-90e5-e10768a71ff6", "comment": "Malware payload (Mirai)", "value": "3e048e2af7015fdaf28ba17b0708d7b90987b590c81fc1ed43f7fa280f0972cf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376670, "uuid": "a3433e82-cf45-4201-8cea-39a684615a72", "comment": "Malware payload (Mirai)", "value": "6cc4cee0edc7795f52b2ec922e89c89f8f72e72e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376670, "uuid": "e2d0c608-1123-4e40-aa17-05bf4fb374a9", "comment": "Malware payload (Mirai)", "value": "4c1374a8102c9789d8d7100351f12de825cac772dd1a24f282afd436612917a3e8702acd409d1b2688f2a56660eea7c3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376670, "uuid": "8c731c34-d0ff-492b-a601-20005ed612da", "value": "T120736CC6A783D0F4E8674572217BF7314633E53E1069EA83C769A932ED13541EA2A3DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376670, "uuid": "820010bc-c628-4b13-9505-c93c7dcfbb18", "value": "1536:9ax2LeuRS0GihvGrqCBPJV7/yjU3A9vG4NKThsIsG/PS:9agLeDQh+rqCBPr/yjU3AJG4wtbFK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775376670, "uuid": "17119892-1bda-40e3-aad7-eb2da5576bb7", "value": 80688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775376670, "uuid": "3961de46-7410-4725-a0bd-a1d67ec2b2ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376670, "uuid": "9c12fff3-2ea6-40dc-a168-d440536ea12d", "value": "titanjr.x86_32", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfe89146-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354656, "uuid": "3c94958f-16ef-46d5-850b-dca608aa80ab", "comment": "Malware payload", "value": "0976a2fd9c5c437c1a9b0557526182ca", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354656, "uuid": "2efd54be-9ec6-4098-9340-f4098df79186", "comment": "Malware payload", "value": "3e90ad39051b8f9b03ddb6db6a8640368c7ad05ffb43ae140047694878a912e5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354656, "uuid": "b6b5e84c-bd2d-450b-ab52-56d7242bcf8b", "comment": "Malware payload", "value": "d696706fdff84cf8e2153b16958efaac46dd0119", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354656, "uuid": "449709b1-ccea-4f4c-97cc-cb740590522b", "comment": "Malware payload", "value": "2a7a23b977631dc5f09abff1419cea4bff645e47b96ec608a047c8de2c74bbd0f255177b1b180d7af683abfa4a554096", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354656, "uuid": "31e2ca68-b373-4ffa-ae00-6dc69a4bf910", "value": "T189D519127B28DB0ED51922304DB1CAD86B696C8502D2E917B349F319F9B30AC9D6FDF1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354656, "uuid": "7de78f19-6e2f-465b-909f-374be30c793c", "value": "24576:YB3jVAPJtjvRu1poHY4jj6MNYYFIsyHJ7xxOVKybMeQEviSP7k9O8d9fDEkGzivl:YB3sGXOgqfcFJMlYaF0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354656, "uuid": "0fb85942-6f82-4a7d-ab0f-cef38668c472", "value": 2949313, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354656, "uuid": "48ad7dd0-0cec-45d8-b2af-55c9cc10b032", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354656, "uuid": "3a67553f-4bea-48c9-86de-823cc9ecd96c", "value": "mclibs2mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60e607d4-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354496, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354496, "uuid": "4140e37e-6ac7-46af-ab4d-505a25bd3586", "comment": "Malware payload", "value": "b23513e1404099f107337c161983fa36", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354496, "uuid": "d0d99850-4742-479e-a943-acb445da18e8", "comment": "Malware payload", "value": "3f306fe2cac1495a88ca47b341cf12760c7339b7e4f52b25aa6c2241cf8eac17", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354496, "uuid": "506b504b-ba6d-4ca4-a07e-f33f35e96400", "comment": "Malware payload", "value": "731aa599532c2b7ad41c8c19d83a14e479ec786a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354496, "uuid": "9015cd4c-d792-4fb5-9782-249effa88dc6", "comment": "Malware payload", "value": "31fdb155614f3daf3a22556b22b3aa28465dd7e4a798a88a67d01de3c30ba8e1ff227c49bf74cc9d950ee372edf4cf87", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354496, "uuid": "b2143899-363c-416c-8b6a-e520be0ffbb3", "value": "T135F45C227721DF66D355C67005F3C6914AF624A20EE35486B26CC3287E2066E6E5FFF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354496, "uuid": "9656fc41-2510-4f8b-a888-58aacbe466a4", "value": "12288:b/P96/1hnLBBM+4ZlGaP0g471u8SJBWJ5EUcgphg1k/CPBmtv9VcNFF:b/PC1D4ZlGET40WJ5ErkHB9VcNL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354496, "uuid": "a5b2e616-893c-4c90-b76d-4ff015248fa1", "value": 761540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354496, "uuid": "63e9c0ea-fbb1-443b-8d6e-8df1c22ba15c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354496, "uuid": "f86a1897-34d8-4e61-bd7b-264edc4b1eba", "value": "library2mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03585c94-3140-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775428642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428642, "uuid": "2859dfae-d444-478b-a557-025f730ef566", "comment": "Malware payload (Mirai)", "value": "6f8260362f48d86a6ebe85d78b10b1d9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428642, "uuid": "9cb410ca-b731-46b7-997f-cd39c1ab6931", "comment": "Malware payload (Mirai)", "value": "3f87ce9708bf07f71e106a225dec9a4e7b38b87085737b70aa61371f066c31f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428642, "uuid": "18193c26-2985-4acf-a777-cd6c28086ed1", "comment": "Malware payload (Mirai)", "value": "35433e142d03c7b2a9ce3336d9ec7a5b8394a781", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428642, "uuid": "f470585a-d051-4174-be86-31062e87dc83", "comment": "Malware payload (Mirai)", "value": "98b85f4642801614b2577eaa7ac302830c6bc46e0365e75c04222ffb19bef4418dacb65bd72a076421cc36c88aedfd59", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428642, "uuid": "b15c4055-37d3-45bf-97d4-b16e8ab76e10", "value": "T13B93D706BF610FF7DC9BDC3705A92B05289C665A31A97B35BA30D818F64B21F19E3C64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428642, "uuid": "c421bf69-9c32-425a-84f1-9262f4f52ec4", "value": "1536:NF2GXYZ8a8fnwEvLNPENIdhs9WZx0ZCufqJhK:NFjXYyCEx0QhK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775428642, "uuid": "3ef2abbc-edc2-4079-bb50-2a995b48f168", "value": 89408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775428642, "uuid": "0ab48551-7ca6-4c2b-87eb-955eb0c43990", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428642, "uuid": "540f695f-5699-4de4-bcb4-c8e6aed31f8b", "value": "sora.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb60505e-3121-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775415717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775415717, "uuid": "b9386efa-4613-4cfb-87b8-ef9a5feb6e45", "comment": "Malware payload", "value": "92298e56393fe273723c1e2d8bab651c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775415717, "uuid": "3c2d8e1b-1759-46be-b047-50ff7748a5cc", "comment": "Malware payload", "value": "3fb5bec854ac2cecdd2b5bac0741272781596f2ec7904154d3ae477a1c9e1dad", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775415717, "uuid": "29ed450f-9b56-4a4a-8729-5df558382746", "comment": "Malware payload", "value": "23c8b917a0803057454dc8d914abaa63db6f95c1", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775415717, "uuid": "9388f296-52af-45ff-a855-9f2213200ba5", "comment": "Malware payload", "value": "8fa0246c9fa1d6f0db1eaf0e7650b7e3c5c24e615252bde289af3366f0df22292cf8aed74e850c9eb6660ca5a8da77fd", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775415717, "uuid": "b4f36074-8b12-47a2-aaaf-4f28acab365b", "value": "T10267BF5963DB26D9E02AC67B8696CE23C3B27412473690CF0D9143691E77ED2773EA03", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775415717, "uuid": "6bb7ef95-ffdf-44c0-a7f1-ccc5d64e2e13", "value": "92a57b403b78bf779162a78853380ec3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775415717, "uuid": "fc87258c-24fc-4426-b313-00677383569f", "value": "98304:xHEFZQPm3YIjiFXD0L4ibTsWAMxsXuxFPq5jn4Nj:xuljEs4nmu2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775415717, "uuid": "5ef3888f-545f-455e-8984-3fe17cff6f0a", "value": 29769728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775415717, "uuid": "ec806ab8-9a20-45cf-855f-e3e8b2a1ea54", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775415717, "uuid": "f1b856b5-431d-4b10-a810-1ee23ee1023e", "value": "libwinpthread-1.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "251f5598-3119-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775411949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411949, "uuid": "c12873f8-8911-4a9a-8e22-957a9dfae502", "comment": "Malware payload (Mirai)", "value": "3daea7cc35c580b6efaa02ec7bd58cb2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411949, "uuid": "5a63642d-b0e4-4625-b0a6-0281e60f9c47", "comment": "Malware payload (Mirai)", "value": "403b87bedcd04697436d00c3192d023cbe328adb78cd5bdd996bb0105848dc2b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411949, "uuid": "b3853389-8c9e-4c70-b473-4ec0d438cb92", "comment": "Malware payload (Mirai)", "value": "bc66a7af8644985adf5c944a5c690fe0c3b63e9c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411949, "uuid": "29161a45-43ca-4323-a04e-aaab5871cd72", "comment": "Malware payload (Mirai)", "value": "b4eb2e36f8b2fecafe6b56ffdbb4287a5e8bde69ce0842368e77be473bc982e49d6f2abff77dfabdcde696b21a0f7fe9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411949, "uuid": "024a3dcb-7062-48ad-83ed-0ad4d4c3ec26", "value": "T1A1243A46AA408B13C4D72BBAFBDF425633339B54D7E723059528AFB43F8679A4F22501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411949, "uuid": "4104c11c-4fa3-42a3-ad32-5fc6b3040a1e", "value": "6144:wdgyNMaG7FDdGePadwV8nausxs/K8dkxHKQdM/R+zGy:wuyiFdGePaKV8nausOCC5Qm/wzGy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775411949, "uuid": "5a41501c-6e0e-4d18-a9c7-ff3084d0ae17", "value": 214185, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775411949, "uuid": "9da7fe4a-aa5d-4ad8-a39b-53e758e930ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411949, "uuid": "b71b73fa-f502-499e-bf1a-13c5a92f9c83", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cec8425d-3102-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775402355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402355, "uuid": "26b2b2d5-004f-498e-b9d1-e0abbbc68cbd", "comment": "Malware payload (SalatStealer)", "value": "a675a69a6590fa6e99943e11bb02ca0e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402355, "uuid": "c36498bf-9cb4-4494-8e13-ae426fbfaa7a", "comment": "Malware payload (SalatStealer)", "value": "4043f7c1cb05fdad6e001e67ce1c5b097340cb9ee9b576e111ea978645496871", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402355, "uuid": "ca6ed2d7-1704-4f9a-83ba-84a2606c1728", "comment": "Malware payload (SalatStealer)", "value": "3c639f114c7b44d0d6d3ff2c8bea5213ab9fbda2", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402355, "uuid": "164b6eca-3269-475f-9268-f229eaf4d4a5", "comment": "Malware payload (SalatStealer)", "value": "74ec3ff6ff9e17010920f15c16bea0745f14d16105173922a6a8ffed371a9536250492b1d2e94a9864e9dda8ae79f8af", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402355, "uuid": "5d544cd9-16a6-4d50-9a64-995d7baec1b3", "value": "T1CEC65C11FACB54F6F9036831416BB27F23315D048B28DB9BEB583B6BF877691186A305", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402355, "uuid": "26826bf3-a6fe-42b0-8c32-cac919616d33", "value": "1aae8bf580c846f39c71c05898e57e88", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402355, "uuid": "ad140d5a-b3ae-4bcc-b1de-9263cc39596f", "value": "98304:kGsqTIVri2C3jGdD4/LoKU4d3HVdiEqO/:ZTx3jUDsLUWZqO/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775402355, "uuid": "106dd6f5-d79f-41ed-9418-e559fada90fd", "value": 12570112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775402355, "uuid": "cc1e50a2-c2a8-4b2f-9ae5-13f4db4ebcdf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402355, "uuid": "0ca0bc2c-daae-4ace-bd3b-72009836a0e1", "value": "efv30.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db446bde-313e-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775428146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428146, "uuid": "956cb48f-fb6a-4c41-b339-c0fcd0574120", "comment": "Malware payload (Mirai)", "value": "1dca74f46476c73e93322c550d85e610", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428146, "uuid": "3a6261df-44ec-49ac-9d36-869535dcfd62", "comment": "Malware payload (Mirai)", "value": "409a28ee8f332fbd042b8b5a1576796c054c307a45f9187676305edccedb5087", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428146, "uuid": "e49b69fc-4143-49e6-8008-b06aa647097e", "comment": "Malware payload (Mirai)", "value": "42f5e9c82a76f4cdca1bfa134995d55eb469e602", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428146, "uuid": "9949fc54-17a8-44e2-a422-f8776327d39e", "comment": "Malware payload (Mirai)", "value": "cb8b2a4d9d7d31e573104a8111d21873c4d4bf445998e28eafe356763c5313a1a98172b313d661d2885b1a126a73b529", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428146, "uuid": "8624bdd9-da3a-4cf9-b88f-01a961ceb919", "value": "T10A33F945BD829906C6D84377FA1E42CD331173D8E2ED3227DD153F52BBCAA1B09AB162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428146, "uuid": "d6cf72a1-19a2-45d2-bf1b-204e11856ecb", "value": "1536:GcYZ7LMohtjgj4oa/RbYrdo8iCqwbZnH:XYZ7RhiEHRbJ+qwbZnH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775428146, "uuid": "43cb69a1-9c37-4406-8710-b43ed016bd87", "value": 51608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775428146, "uuid": "4060cc11-da07-493f-997c-79665b46b271", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428146, "uuid": "fbb3aba4-d888-4b3a-9401-cc5c19c2cc6e", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d21bd6c7-308d-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775352109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352109, "uuid": "0e75c829-a841-48db-9c91-6ee89380559f", "comment": "Malware payload (Mirai)", "value": "d2aac4f017a705e1d5cf83fabd963872", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352109, "uuid": "3e61a189-2fdd-44fe-8e0d-7d74b8160949", "comment": "Malware payload (Mirai)", "value": "409fad8fa5203e0eeb4cbde4e6354cb4242c020c0874238593375dc1fd842ae4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352109, "uuid": "4a140b6c-0ddb-4e9a-82d9-40827854cd5b", "comment": "Malware payload (Mirai)", "value": "228fba9dd9d67c97da0106b29f628bb7849754a7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352109, "uuid": "e2ab5d6a-8c31-4c8e-ba51-ae7e0cb9f2e9", "comment": "Malware payload (Mirai)", "value": "7e2f210a70be2996bb8063ebea5e24f824be8869f4b6c13ce0f56ce296741e16b27712f68deb2fd48da618fc094bf4fa", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352109, "uuid": "4a786973-0558-4b70-ae81-096e94931ba9", "value": "T1EF33F942DB47DEF3E80314F102B7EB369930FE6B0C35D686D7647DA2A9219E06617368", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352109, "uuid": "ee58614f-85e9-449b-a9c9-48128a9ce735", "value": "768:PieS6+LnfrIYkpSUcfyehEdVd/xzScbF6IeqZH3tqLNCXehXI932Ki8Jif26s/KE:KesLsYhhgWJqB9TXehYJ2KrAd1TcK1m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775352109, "uuid": "fa7d3b72-e27d-47e9-bca8-a75ca2aef591", "value": 54028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775352109, "uuid": "3f43a2d1-1897-4155-bbf9-fd8ba4002b07", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352109, "uuid": "413bbbe8-1522-4b1a-b049-33b49f4c8690", "value": "mirai.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f30d193-30bf-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775373445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373445, "uuid": "ed958bb0-08f1-43ed-ad9f-000f97604f56", "comment": "Malware payload (Mirai)", "value": "9540f0b4f5583d363e257b541084f639", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373445, "uuid": "cdf410b7-33f9-4d7a-9078-8c347dc1bfb8", "comment": "Malware payload (Mirai)", "value": "40c529d64204c7c638484669b041c290a966b093effbcef4074f6035ef68322c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373445, "uuid": "7212212b-186f-45dd-a54b-27353e508a1b", "comment": "Malware payload (Mirai)", "value": "576a1d8032717143e0fb1c11e7b64da10423c725", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373445, "uuid": "b7ac4687-1309-42ea-a67e-a83c64534129", "comment": "Malware payload (Mirai)", "value": "9cdf75c81aa79a50cc85017c48005f427820e2f314f9e2e1dcbddef5fbd31cb21b238148549ba44454db8f575757c852", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373445, "uuid": "88b5c2c6-4ede-41b1-96fa-6b557b8e7bb7", "value": "T153D33A17B58180FDC4DAC6B44F9AF53ADD3275AC1238B16B27D4AB232E89E305F1CA54", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373445, "uuid": "7f740d93-b846-4617-b54d-6e030c5bd5de", "value": "3072:AD/XSWia2kU7JyCxlrwWxmASBa/U96mQduSHs9dnWHGek:AD/XSWia2kU7JyCxEQmQDook", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775373445, "uuid": "50483d26-3e4f-4ee3-adcc-e2b281a77917", "value": 139192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775373445, "uuid": "a3501be6-6f4b-442d-b16c-c2a1a72f0b9d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373445, "uuid": "d173c368-92b1-4f02-b747-4bfa7383ba87", "value": "main_x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4c2c55b-3128-11f1-a769-42010a9c0008", "comment": "Malware payload (RustyStealer)", "timestamp": 1775418659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775418659, "uuid": "deea7c74-fe7a-4459-b461-f91973a4ae4c", "comment": "Malware payload (RustyStealer)", "value": "71e70f10b480b0989f6419881aa83804", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775418659, "uuid": "689b3277-d346-4bb3-be1d-71f3240132da", "comment": "Malware payload (RustyStealer)", "value": "40c5e30919e4775bf58ef1f8dc13ab64cc8c62caa3a709bd5591687a0fdf0f23", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775418659, "uuid": "8ccf0dcb-b655-4531-9e9c-ab8c131cb87c", "comment": "Malware payload (RustyStealer)", "value": "1d30770026ca5740cb7f0b90878a49fd4220cb65", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775418659, "uuid": "a65cb2c4-bf07-48f6-9b35-8918eb9ed377", "comment": "Malware payload (RustyStealer)", "value": "2de6dcf40aba67ea50b821bf36835f2b74914d94d51adf3f43c413bc99683dc3aacac6499c991d3848b91388f25b9314", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775418659, "uuid": "ec340b31-1241-45c4-8f6a-2271349e51dd", "value": "T17E17CF03F356DA4DC52AAD3883A4A3A37351FC605736A35FE6C56F1C9C8B6C00E6D698", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775418659, "uuid": "eaeca5d2-0b67-40b8-8c45-ad116c8f00ee", "value": "bd9d18d07a19dda4789fd9da615f0652", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775418659, "uuid": "c8838cc6-d8a8-4827-8ad1-0ece8a26a12b", "value": "393216:9Gtxr+i+HRdD+HgP+HDUK+Hq0+HW+H4x5/9q+HABm+Hb2MvcyM:9Gtxr+NP5Rn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775418659, "uuid": "83f594f7-d96d-461d-896f-f66b4daacc07", "value": 19942400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775418659, "uuid": "9644193d-a3cc-443c-8fcd-7fdc83ae55fd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775418659, "uuid": "6edaf74f-91b0-48ac-bbc9-c3c56d499959", "value": "swiftpdf_v1.2.1.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d494c64-30fc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775399480, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399480, "uuid": "fc73fce3-9377-4e6f-b6c3-7b9c64da0624", "comment": "Malware payload (Mirai)", "value": "765575bdaf3a92931828960c8f6f6eea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399480, "uuid": "96e8ce0e-8a12-4339-8320-da28cffcc246", "comment": "Malware payload (Mirai)", "value": "41137009dde7a36251eb6042d8e8b6770a51bafdd2c259296203e62eba0779b5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399480, "uuid": "65de5c00-0e33-441b-86ff-115caca9dab3", "comment": "Malware payload (Mirai)", "value": "282c9fc15840c311f170e3e53265e20115d8f05e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399480, "uuid": "564d9059-2b46-491b-8078-4575371bd86c", "comment": "Malware payload (Mirai)", "value": "c0fbe1f2303630f271f9278ce77f86490d20108b8e1086fc6daf2a76353a18be085248d23c8c6610829c7051aff8c208", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399480, "uuid": "e7b2708e-4c68-4bea-9299-07e39516a6b3", "value": "T172D31941F9404E27C6C612BBFB5E42CC772A17A9D2EF72039D215F20378686B0E3B646", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399480, "uuid": "1668c07c-3d3e-4060-a4d8-42549c7e783c", "value": "1536:VrPrJUgXJ3EaZ9ozhfkQ8gAZ+PI+4VnasLTLKewrLJdsOTzMgUtvhPoCYv1GMlv8:VrPVdZ2lfd8gnP4sE6ewrlGDZ89Ho", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775399480, "uuid": "86e1154e-6997-4d1b-92a9-0bc1275eb230", "value": 142112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775399480, "uuid": "67e32cb4-c253-4d88-9c7c-303735dda727", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399480, "uuid": "f4579508-bd5a-4870-94b6-20117c933c5d", "value": "main_arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73e861e8-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354528, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354528, "uuid": "35c82bf8-a85a-40f2-a9fe-f82640ff6e40", "comment": "Malware payload", "value": "4361a46836352dfaf5adaa28f44347c0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354528, "uuid": "f2a974d8-b7d3-4e6d-b7b7-6f32c8a2a978", "comment": "Malware payload", "value": "418e9d582d3ec7449086f0e0c3c331531918d11088611db7b7466943471443ab", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354528, "uuid": "9fba4f36-cc63-4dfd-95f4-f121cd8c746b", "comment": "Malware payload", "value": "84d674ae10aaf8d2a69abd96177b076e95504295", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354528, "uuid": "98b72ec9-570e-458d-a1b3-897e0d96c2e0", "comment": "Malware payload", "value": "ea6b124a4510ed93f5e8e84a238ec31e2cc8d0cccf867c0fa953c4800fa796adfe6892e5af568d2450a42598d7ba6789", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354528, "uuid": "011ad419-0005-4117-8c2d-34a5d123c9a3", "value": "T193057D2EB2B2F17CD01BC03047DBCAA25531F47526212E7B26C4DA353E66DE22369B65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354528, "uuid": "91c2b6ad-8a77-4b1e-b25f-c980355b36a1", "value": "12288:GKwpxmuhId8HAv8TNgwoA/xOi5X3sJ+WVb9LTay2M9SIHXt37:TwTmINgz+0aX8J/XLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354528, "uuid": "efb86fa3-85e6-497f-a8b7-a7c0e72dbc13", "value": 830232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354528, "uuid": "d6e51fe8-b93f-4133-94aa-2e41d0c2406e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354528, "uuid": "76c2958c-6aee-4f59-90a6-0c9da91546da", "value": "sockamd64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8129996-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354670, "uuid": "5c731025-ee66-4427-b8b1-62d7ee756a45", "comment": "Malware payload", "value": "01b4b1271e78ed07b5b4669d02a2254c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354670, "uuid": "4bdf8899-dd5b-4ab7-b898-a8bd2541a98f", "comment": "Malware payload", "value": "41b5c8615a60241b8df3c38ff80e10ecad3e46459de61727f941ed42c5520126", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354670, "uuid": "ce45c99c-9db6-4e88-8733-7d494c4ecc35", "comment": "Malware payload", "value": "3117bab95a17eb5807269f2f11379c05a42c4902", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354670, "uuid": "375bffe6-4537-474e-85a3-0438b2f5a459", "comment": "Malware payload", "value": "630cd55caf4258f55fc8ec9888c7ba84d3de133cf392e5f2b2899a01615b46fade895023b93edbeb0241dc5563aade52", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354670, "uuid": "0011e24a-259f-4b3a-83d0-77ea87c989a8", "value": "T147058D2AB2B3F17CD01BC03057DBCAA24635F47525212DBB26C4DA353E66CE12369F66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354670, "uuid": "8eb87f37-2d76-4df0-9a4b-3e6f73e948da", "value": "12288:eSA1uM2n7vdFHnh+XNg7y/QOwLJZdkCqtIS0oo0RKAay1PHRHX:jAMM27wXNg2QzLJMCqWS7RPH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354670, "uuid": "14772e1d-2342-44ea-82e6-521e300315b8", "value": 834320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354670, "uuid": "fb51be69-735d-444f-ab0f-0c86996b4972", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354670, "uuid": "05afc5ad-5ead-475a-9fb2-d1d6699e48c8", "value": "siackamd64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "986827c2-30fa-11f1-a769-42010a9c0008", "comment": "Malware payload (RustyStealer)", "timestamp": 1775398828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398828, "uuid": "eaa7ace2-e139-43ed-99cc-8d35ff63cd52", "comment": "Malware payload (RustyStealer)", "value": "e354163a2c733056f4766deab2536cf7", "object_relation": "md5", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX5.file", "colour": "#573901", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398828, "uuid": "46cca65e-a87e-43a1-9d2b-db3382a9de0a", "comment": "Malware payload (RustyStealer)", "value": "42d6c957d6b5edc4e019bafb8a75ca7bc921b7aa7ab61cfc139eed3c0c906543", "object_relation": "sha256", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX5.file", "colour": "#573901", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398828, "uuid": "c4f202e4-7235-4561-8c95-c43548e56692", "comment": "Malware payload (RustyStealer)", "value": "96c1c05d8758869786f0701350d7c492c8ba7086", "object_relation": "sha1", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX5.file", "colour": "#573901", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775398828, "uuid": "ad509098-f669-4779-9c1b-3789ec68898c", "comment": "Malware payload (RustyStealer)", "value": "b7b8f31589e724b7bcf720cbc612bdbc0dfff16f7d99ec83a3e67f8bac7f2ec524bb81c35fc72e761b77c3686fdb5a16", "object_relation": "sha3-384", "Tag": [ { "name": "a", "colour": "#6A08FC", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX5.file", "colour": "#573901", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398828, "uuid": "9062cbb2-d640-4202-b01b-f4c1e0fac204", "value": "T1CF66BFB87554ACFA672F53BBC9933DDD43723723839A9CCD50A0A5C11A53A71EE2AC04", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398828, "uuid": "c511a380-d6a7-45ae-9492-603bc4448b7f", "value": "43bde8802b940524fb43cd661cade5e1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398828, "uuid": "f9a542d6-a0e2-462a-be1e-3c42d0c676ef", "value": "24576:C6W8R9sHQ7SA4S1flMDAxg6JKH7ZsTvtDDXLXW75uQXi7IWRQLtUgt12ZU075shH:i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775398828, "uuid": "2912800e-e430-4862-b221-aa8c4f819aa7", "value": 7056384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775398828, "uuid": "3f101041-e885-4a95-8d3b-2c41804cf576", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775398828, "uuid": "2a1cd00a-cff9-47cb-9c97-769f645de26f", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e3bc93e-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354116, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354116, "uuid": "bc100b05-d339-4218-837a-b38b0fa40032", "comment": "Malware payload", "value": "c4bb8587a68c05ece2b04c2a88eaea81", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354116, "uuid": "9b29a572-4d4f-41cc-93af-66939e7788f5", "comment": "Malware payload", "value": "42e0da1d702230d19a0e4802649adaec6847dd96880986589ffea6e2134e0912", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354116, "uuid": "cdf175dd-b726-4ae3-a4b0-861884526287", "comment": "Malware payload", "value": "179f8da7c36096e452dd51137d50b65897046609", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354116, "uuid": "fcfe8bf2-e88f-4509-ab75-da8d3cd6af90", "comment": "Malware payload", "value": "dd6e8bfc63e923c4c007d620dbedfa245be5946983adc8ae0ba4999787f3c3d37c289ea4b207610380e00c8e34cbb368", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354116, "uuid": "7e8cd8da-2732-4292-8094-f3e0b3c0ebaf", "value": "T109D51A12BB28D70ED51932304DB2CAD86B696C8502D2E917B249F319F9B306C9D6FDF1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354116, "uuid": "dfe1daac-922e-4063-9f41-9b639818e105", "value": "24576:rBjljElpuNHPHRSpUp1cPOCMNaYFFN4yb7RNUUKybMeSE9QCjblDEq9U98JkfyfK:rBjCiFUnXR87Zf8YHtQ/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354116, "uuid": "54862a94-2467-49da-b37e-5c676abfbf6e", "value": 2949313, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354116, "uuid": "e0bbc454-8738-4267-a56e-48ed7389fc77", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354116, "uuid": "23b163ad-b325-4f27-9b51-a6dc94de5fdf", "value": "gofuckerv2mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aabfd6ea-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354191, "uuid": "de2190dc-a13e-4627-903f-663447699e7b", "comment": "Malware payload", "value": "73bc93d5d6d8be6106e7f126cad23c21", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354191, "uuid": "511176ae-ed6c-4686-9562-ad62d9352847", "comment": "Malware payload", "value": "440fa88d7c73f6a974cdb8f4e4faf3a00d79828961c3cf44c2522e3b6b9b76df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354191, "uuid": "ec6ea146-a506-49e2-bbc7-693a64281dc8", "comment": "Malware payload", "value": "c1abbba455535bd654199830e9bbf442ef289035", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354191, "uuid": "6796148c-ae41-4cf6-a778-ccc21492ef42", "comment": "Malware payload", "value": "48872b631b8324d4e91aedb1199c7eecb86bd732a2a2c8ae23ff3e5ad6c677bf450ed0ca98f90867496c6bc07d07ed30", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354191, "uuid": "7e929cc6-6d55-4f39-8fc5-c70b9e638dde", "value": "T1D8166C15FC5D6863C5CD7A712F761298323DBC885F81C32B6608BB3DAAF23548F52662", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354191, "uuid": "272d3de5-3c78-46e9-952b-42d169cabf43", "value": "24576:5Skrlv1D2pezVxNrWzMclBej3P4ZCQ672oUsWwDxAdQYtmTwswNxNt/ovP+AoS9Z:5v1qkzgCPzQckNt/oXTOjsmAokaLx5Ev", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354191, "uuid": "47eccf1a-47c8-4255-bf21-20210ed72893", "value": 4260002, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354191, "uuid": "92ed6c27-dbb3-4bbe-ae51-d2de2385c0fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354191, "uuid": "d18f797d-7d7c-4937-a174-ef897c71f9df", "value": "li7arm64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "421254d4-313a-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775426171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426171, "uuid": "765fef6f-7ec3-439d-953a-0101ffff5bdd", "comment": "Malware payload (Mirai)", "value": "f3a8fab12462ed3d7354cc103178db6e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426171, "uuid": "6f9841a2-e172-42f9-81a4-905c952e0e17", "comment": "Malware payload (Mirai)", "value": "44f3e4569e2a76356e5d8195d97398119ac763c1b47a9f941eb98fa71e7dcfa0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426171, "uuid": "5f8c4f9c-0491-4e76-b25d-615cca5aa77b", "comment": "Malware payload (Mirai)", "value": "6cd59b21d3e547d5772b22343453cc08e4749634", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426171, "uuid": "e4c9871a-8656-4b51-9c9f-bd79749be789", "comment": "Malware payload (Mirai)", "value": "10bca5a2b515616f3de86bbd78d6c5e04c0e6edd3fd8449c75267d5d0b06090dc520ef2f1473f2836e9b4353a0fed0e5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775426171, "uuid": "f2a5f92f-8cff-44d1-a947-0704f1bac170", "value": "T12F832A86AD418B02C4C325BAFE6F444D33136BB8D3EF72129D25AF6427864E70A7B615", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775426171, "uuid": "6a1d55f1-b597-4a8f-bb0e-b0625a784cae", "value": "1536:7Gn/vYOMldU29xMCgqXut3MV3wnUkU7yYkgMI0+fTi21KxH5wuTBouFafDggMuiM:ICD+Nu+U5mTtFapJ9KJoOSqql7VPX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775426171, "uuid": "8e58ba71-7822-4da4-a0fe-71ed8161c442", "value": 82744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775426171, "uuid": "6b6f7b05-c1be-44eb-a8b2-3d1b0553eddc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775426171, "uuid": "02ceee99-2544-40ab-9c9f-7f78da989dfd", "value": "mirai.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f665ec87-3103-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775402851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402851, "uuid": "92e6b68e-a386-434a-a7e4-bff1583021ad", "comment": "Malware payload", "value": "0043b2241ee959092d9f3e3ac541c95c", "object_relation": "md5", "Tag": [ { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "caixaentradas1inbox-site", "colour": "#58F60F", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#6BDD9A", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402851, "uuid": "48de8f46-b7ab-4044-926a-b4bc0d6558d0", "comment": "Malware payload", "value": "45c1daaabc00ce9342f1235ed9d0d4f213970240bd5b52b22b78c9be59e2b4e6", "object_relation": "sha256", "Tag": [ { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "caixaentradas1inbox-site", "colour": "#58F60F", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#6BDD9A", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402851, "uuid": "33517be9-442f-4d26-81c0-bb548dd72442", "comment": "Malware payload", "value": "644838ef545c684cb31cafcb0628ae6feae9cc93", "object_relation": "sha1", "Tag": [ { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "caixaentradas1inbox-site", "colour": "#58F60F", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#6BDD9A", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402851, "uuid": "68492c4c-c4d0-42e4-bd94-f2f37fddc33a", "comment": "Malware payload", "value": "12ca6167657d14bbaa4b7bcf48cff567219e9c68cf6e926657404fbc70abf91b1718ddad53ffc630281d95c34129c991", "object_relation": "sha3-384", "Tag": [ { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "caixaentradas1inbox-site", "colour": "#58F60F", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#6BDD9A", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402851, "uuid": "cbe99319-af50-446f-ad63-52b5eae11c22", "value": "T108C18E6CE4DE2936EACB68715DBED75114CC88BE8A3301E5B61624C746821A6F1B18FC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402851, "uuid": "3be861e4-8e68-4668-8a16-4374cb175111", "value": "96:Qq2c0Z+LmuRHH+8m2CuB/TmOj97e0+14HFff+QfNg4bkJQLvJ/cpC9RNWG/2JxlU:3Zpmu11mV6/Tm0DV2JQzJfEJ7U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775402851, "uuid": "12967089-3195-40cc-a3e2-4a574d168915", "value": 6053, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775402851, "uuid": "8bde6624-56e1-4056-b16b-0995f618dc8f", "value": "application/x-7z-compressed", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402851, "uuid": "3c1b7666-76b7-4af2-91cd-7e1dace61e30", "value": "1214_INTIMAC_PROC_.7z", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a434c09-3102-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775402267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402267, "uuid": "f206d09d-8641-4dbe-b4e4-a441d2cf7a1a", "comment": "Malware payload (SalatStealer)", "value": "7bc36cc8226a2ef33fa0bdd4e740006f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402267, "uuid": "7134e837-e95a-4726-93d1-cee89197d0e5", "comment": "Malware payload (SalatStealer)", "value": "463ef458b3d244181f0d219451c6cc3bb4df70a91a987badfd745ca04fbc6538", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402267, "uuid": "07f1a1ca-cb63-47d6-ae27-f694f916a795", "comment": "Malware payload (SalatStealer)", "value": "cf9334e41707f003fa6c02b7494c528118b5a68e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402267, "uuid": "1988b38f-456f-4704-95fd-1b0d48888579", "comment": "Malware payload (SalatStealer)", "value": "1849de7bf17557a05c109ceb917716108e420a144cce536760c7ab2d5bba37a1994b7ca94afd2df96e3b7ebceba50ff2", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402267, "uuid": "64e5806e-cb24-4027-9c33-fddb30f5dd64", "value": "T1C2D65D11FACB94F6F9036971406BB27F23325D044B64DB9BEB583B2BF877691186A304", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402267, "uuid": "4700a35e-923e-43af-9c3d-499b571b8c9a", "value": "49152:jRpK6fWxZHGQAulw19JRgfFC3b7HJFlwNwrH6PfLsdRyzVeAXH1SX8wRanDyBZOl:jKkWvw1rGtCfHur4EbRyF34pKE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775402267, "uuid": "895e9da1-86a7-4485-b235-196e17dfae6c", "value": 13041664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775402267, "uuid": "d69dbb27-507e-4870-bc5e-4b108116a44e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402267, "uuid": "a767c4ca-10a8-4fe7-94c2-c538e845d609", "value": "Salat.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebaf8860-30bc-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775372339, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372339, "uuid": "bf785095-d17b-4e21-bf3f-880502bcc332", "comment": "Malware payload", "value": "5fc3674338d23e3157823791b9cf2fdf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372339, "uuid": "0e382b4a-a321-4ac8-a240-3a69d827f290", "comment": "Malware payload", "value": "468c3ef3a5fb93ded47e1e75534d3157dc7ddebdb592eefd5dc74d331f1ae964", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372339, "uuid": "39a00ab4-ef80-451d-9fc3-8354280170b1", "comment": "Malware payload", "value": "7b2b5fca3e703d191dd79f8f124b06c917325af4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372339, "uuid": "c3ca6392-a16a-4ae1-be1c-b687cbaf72c6", "comment": "Malware payload", "value": "23d4a5c0332707644a00de06e5462a642e50d89061c07926a1ba23dc3b105fd761d52d810c2394becebfa870cd0a7c9f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372339, "uuid": "fc09e946-1f23-46b2-8b6f-aaf8bf77c428", "value": "T18FD44A06EF951FDFD4AFCE30862E831B19ED899702C1A67561FC894CBA8D2994BD344C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372339, "uuid": "2438469f-bf5e-41ba-99a9-c9e8a0b0858f", "value": "12288:Bm3ZR/Oao6JEXCWtHywSfHDvUn+GOPXKfx1WXLmOdFk38Oeu6iu1TxnkNUohGH/4:2vUn+jPafvW7mOd6Wvy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372339, "uuid": "d761fe0a-d16e-4546-a0ee-26b543ccce68", "value": 646568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372339, "uuid": "4953a558-1089-4720-83c3-60cc909f9fd8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372339, "uuid": "ec2f7ab9-316c-41f3-955f-9f7f9ef0396f", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2774f672-30f5-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775396491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396491, "uuid": "de2cfc56-45d2-4d92-94cc-fda69472163c", "comment": "Malware payload", "value": "7dcec6f4757bded5e0db2ce736a31d7f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#288F7C", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#5F818D", "exportable": true, "hide_tag": false }, { "name": "spyware", "colour": "#219679", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396491, "uuid": "f482884d-dc90-44f1-9173-919797bc16de", "comment": "Malware payload", "value": "470cf6388c932d816cef5cc30e5e56cf97cf70fdd0b4bf272718e00ccd837495", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#288F7C", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#5F818D", "exportable": true, "hide_tag": false }, { "name": "spyware", "colour": "#219679", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396491, "uuid": "467da8e7-1c41-4ddd-9024-876bdd131b9b", "comment": "Malware payload", "value": "28e87fbca136e8c35f6472a7ae400c46dbfc5f2a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#288F7C", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#5F818D", "exportable": true, "hide_tag": false }, { "name": "spyware", "colour": "#219679", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396491, "uuid": "8b1bf31a-08a5-499e-88f1-8c2569f67c1a", "comment": "Malware payload", "value": "8b8ecc533c033cd9bdc25f225ee39c533d3fd6ff86bd48b07e6075243394b9069d26112fd8392c82a852290bbee63c8d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#288F7C", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#5F818D", "exportable": true, "hide_tag": false }, { "name": "spyware", "colour": "#219679", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396491, "uuid": "020d56b8-dae7-4279-a354-25740da9ebcc", "value": "T118F7494263EA05C4F9F7DA358AE65217D673BC166F3085DF220C172A1F736E08976B22", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396491, "uuid": "7dfb529f-799f-4878-a75a-7c5521f190dd", "value": "e05e31a5063c852520cc6950fe83ad1a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396491, "uuid": "c82689fb-442b-4cf2-93db-b85be2072cde", "value": "393216:oCiXXUnBSW775AreM46uFUzLcfNV5LWuvyFBQu58EASEhoIaE2lShuehsqo9xD5y:oKoYmQJhvsavZD5rs3wbqC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775396491, "uuid": "7c824e5a-c1eb-4e99-99d6-9703bd8a6420", "value": 71494040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775396491, "uuid": "c9d42746-9357-4904-b380-b4fc65affbf8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396491, "uuid": "ce1f3f92-7394-42e3-be9e-cdab01b5a322", "value": "setu\u0440.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "849a7f24-30bf-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775373454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373454, "uuid": "b7ebde97-b400-4588-b8fd-c195897b3e03", "comment": "Malware payload (Mirai)", "value": "e641dac1194a16f0f6a03fdf58449c61", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373454, "uuid": "abdffe2a-e7ed-489e-9708-47cac6872282", "comment": "Malware payload (Mirai)", "value": "4711da2fc9115e785a39c018b44de80e32822045724c48c6be6d6e52211aa1b7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373454, "uuid": "403d8937-feb2-418c-8a0f-2320d3def57c", "comment": "Malware payload (Mirai)", "value": "8b80707ac06a95c4bb2890101678d6974d06686a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373454, "uuid": "f6138ecd-d3da-44cc-8d48-3ef109637869", "comment": "Malware payload (Mirai)", "value": "54d00bd3aadcbf669c114be6de0a10f9b3a7557bd22618ceb04743197296aaacc0f585a333583033a226fe9054477eb3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373454, "uuid": "d2ff717b-af72-4c6c-b495-b2d260e2b748", "value": "T152835DC5F643D5F5DC4306B1603BEB335B32E0BA111AEA43D3659B32EC92641DA1AF98", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373454, "uuid": "8fc203cf-a273-4c4a-aeaf-1563301538a3", "value": "1536:rb9qnAElxhFY9A9x1S29zD9IVxhtIA892fS2yMq72W:v9AAEDHY9ux1SqzpOtR84a2yjSW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775373454, "uuid": "dc325cae-2a84-4664-9eaa-1f65978a2f74", "value": 84104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775373454, "uuid": "6a8823a2-fdbd-45a2-91eb-14fc89bd26f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373454, "uuid": "f04c508e-8e76-49a1-b824-eeef1e0ff621", "value": "main_x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0440371d-30c7-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775376675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376675, "uuid": "db908d36-8688-4245-a416-7e026aeba48b", "comment": "Malware payload (Mirai)", "value": "4fd39ed4c694ba8751fb803aff066bda", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376675, "uuid": "abdfad29-915e-4c8e-a458-c489ee1a3af5", "comment": "Malware payload (Mirai)", "value": "478611152058dc4fcb0f7a5e019b27351030eae1d6a24beff36f0ec2db7f9b8e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376675, "uuid": "ea26a563-42e3-42a6-bec1-028900e3bfea", "comment": "Malware payload (Mirai)", "value": "1acf084b3d6fd2822eae0e787cf92da443720028", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376675, "uuid": "d6e23be3-495a-4d03-a18c-88736285fe80", "comment": "Malware payload (Mirai)", "value": "529ede6387955b188e02b125b7e9d8c42ae432f2d0f7406633daf69dfde59e032c3277671efe08cdc8eb2d5621a26790", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376675, "uuid": "9c325d18-07d0-4f82-b8a8-fa14d8d131db", "value": "T142433C92F89245AAC6D117B6771A978A33A267A9C2CF7313CC080B5077C974F4E77B42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376675, "uuid": "4006f17a-c852-4d2b-897d-fa35b5501bfe", "value": "768:CuoWscL7J6liNNPrso8dqmFYEPhZaqTtsXrdPK8/4Q87MT2Fk0nEzic:cBcLeijYPocPLSXrdPK8ckd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775376675, "uuid": "3357fb53-0c37-4011-aa3f-653c943c04fc", "value": 55308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775376675, "uuid": "7705a061-3144-4893-b60d-036896ebdbf5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376675, "uuid": "97663637-52e9-4f93-8ac6-bf57866ef853", "value": "titanjr.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1739f8ee-3094-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354802, "uuid": "ac3552b2-6144-4ee9-80f2-bc38f880fe82", "comment": "Malware payload", "value": "035e5f967afa78c3b3b3d3b17d94f597", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354802, "uuid": "7666eb60-eca6-47a8-8a1e-353de91ccc93", "comment": "Malware payload", "value": "483da5be13c6fa89efde813e58d25ee69437cf7365d91078ee15ee481cd682c1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354802, "uuid": "4d113594-9522-49c0-894a-4dd8446b0c6e", "comment": "Malware payload", "value": "b59ddf07a6c7c989726436a0017e9a85511398bb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354802, "uuid": "19219658-2708-4ecc-baae-896c7d10bc03", "comment": "Malware payload", "value": "47e1b07fa6d60c5714af0fa1a20ca306295ffaa0a513501fa89d9075ebb440402adedd39c65988bd9aa34ec0423e8187", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354802, "uuid": "31d8b530-ccf0-431b-9faf-817cc2b6b74d", "value": "T19AD49D19F8447B17C89B9274848FE428736BB284075233063849E6793D83BBEAF5D7D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354802, "uuid": "8c162fcc-59bf-46c5-ae70-71a2552028b3", "value": "12288:s+2C5LfvLpCK7vq08/Lb5OmBjVa0lntw5WoJVYYYY4YYYYeiYYFYCYYYYYYaYsYn:s+f5npCK7vH8v0mBjV5nEO3DYl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354802, "uuid": "9567eeab-422e-4476-a1ce-fc54b1e1fcda", "value": 648832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354802, "uuid": "f51d68de-c5f2-4de7-879b-b85a267dfd75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354802, "uuid": "61ec86f0-f083-4a48-ae77-fd3027a4cfcf", "value": "sockriscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0601d1e0-3094-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354773, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354773, "uuid": "56dcf735-3fe6-46ce-b9dc-beccd1fea760", "comment": "Malware payload", "value": "9b2e769b400a59decadb490840c2ef6b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354773, "uuid": "15e7ce4f-8696-47d3-ad1d-439d9d7cea22", "comment": "Malware payload", "value": "49d19c88036e9f59548f77ae78800257c513b12c37929ea3069121e018319da3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354773, "uuid": "f7f05ea9-5032-4c08-9fad-ab54c2351631", "comment": "Malware payload", "value": "9815d9bca3355d88bd4f2a06c1d300e887cba11e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354773, "uuid": "f330fa11-9b19-430f-b346-238c874d9cc1", "comment": "Malware payload", "value": "8c7a344789835c34672a8d770f6b5c7dfe134609b097d251d8d8dd4124cafcb2df8397338c5c44bb584621a4a53a6d53", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354773, "uuid": "546976a3-c7e2-44c3-bcfc-277fa7f88856", "value": "T1ABF46B623711DFA5E355D6700CF3C6508AF125A30BE24496B2ACC7287A11A6E6D1FFF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354773, "uuid": "44028f2d-60b6-4f8f-8fca-4fa328e86db6", "value": "12288:BKQiH884TvUnw49CGcLB7JYHYIAp7mJCtWgpgVOUSLaw9n2ptVxbXW:oQi54/49CGIBAJCt1UBwp6tVxbG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354773, "uuid": "e657a735-3039-4f35-920a-b2f0770ab84c", "value": 762432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354773, "uuid": "1de63bba-abd8-41bc-aeb2-ef359809e866", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354773, "uuid": "e38485f2-7d78-4cd2-91d2-45f54ace0707", "value": "librarymips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b5671c6-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354165, "uuid": "379cd97d-bd2e-4806-9d65-63842ff8e4f7", "comment": "Malware payload", "value": "85946641a8c50ca6011f60ce58ef83bf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354165, "uuid": "31063835-8f46-4fb6-bbbd-70d614715c4e", "comment": "Malware payload", "value": "4a485a50aa0054b13cb36ae4e425927f43e9791f3769fd8fe458be6a2f9d2390", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354165, "uuid": "43340bb1-1ffa-4d24-968c-bcdae587868a", "comment": "Malware payload", "value": "b8f81fe3f782552a9a2a282b71a60e1b7df418a7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354165, "uuid": "54617530-f98d-4cc9-82f1-e9829a4c209a", "comment": "Malware payload", "value": "d15f49d79b6b917cc137f34fda7c7aea357a8f3c919ee3e350fe93a6698ab568983f28b5f671d705efcab1c0a5d08d2e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354165, "uuid": "8e4eee0e-a7a7-4e1c-8c89-f4b955499aa8", "value": "T132C58D02FD959E2ACA2E12B3896116D82738ED446F83931B5E18FA7C3CFF2856D513D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354165, "uuid": "5d3f9b14-6eab-46e8-bb5c-734a2d78ebe8", "value": "24576:55d8AR93wcyUKzDMTMyetzetx2dnuNZlDHAaWjOUWxkP1IN8Gv+OA664v:2AX4DIxpEX2i/4v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354165, "uuid": "0c845cf7-badf-47d1-b236-b266ac13cf6f", "value": 2556066, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354165, "uuid": "efb3f31c-76cc-4003-a2c0-1b09f91dcd97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354165, "uuid": "900ab76a-9801-4d20-8301-be6c538437e0", "value": "gofuckerv2riscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ccec5a3-3119-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775411962, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411962, "uuid": "0b081582-6824-455c-89bb-ceadf95fa6a7", "comment": "Malware payload (Mirai)", "value": "c314e17eead70c2b87cf065e3309d329", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411962, "uuid": "fe16dd0f-55a0-49dc-a493-df3ca62af822", "comment": "Malware payload (Mirai)", "value": "4bf7e6681068720845396d6202902a9af9f1255e917ed88a6b6cd57c5f6fcaf9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411962, "uuid": "7f93db7e-4949-464d-b77f-987cde9df112", "comment": "Malware payload (Mirai)", "value": "d5611e50c0202a75bb918713f10a38cfe894e446", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411962, "uuid": "97ea000a-8e38-41d3-927a-90b4837b3ab5", "comment": "Malware payload (Mirai)", "value": "e2f4685a7d588b3cbe897c1e5bb3ab3c19383efd72d9c8083a5c51baf27f99dd0a406a94d8dfc65da3202e92385fd898", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411962, "uuid": "d12faeee-5d22-41e8-a2a9-571685e7bfdb", "value": "T160144A13A8A55F97C096AFB662B38A740753E8150B571FBBB62AEDF40603DCCB409364", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411962, "uuid": "5857cdad-0e15-4caa-b8c5-a30d3c698bd2", "value": "3072:XRX260AfHBJqUQJflu/+tbdWoPa7oPLWQLM6D44+rhhxz1AMhONflN:XRJZHBJqlJ99o65Pid6D44+rhhxz1AMS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775411962, "uuid": "48ea0401-6723-44ec-ac2c-7094d96c905e", "value": 191977, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775411962, "uuid": "20330b0d-b5e3-422e-a8df-7f1079331a80", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411962, "uuid": "3c74872b-39d0-4b5b-ad3a-3bfdb158fffd", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0f2cff6-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354684, "uuid": "e07ee644-cd6f-4931-9799-06f01c839ead", "comment": "Malware payload", "value": "d35e1d83f753005fa495d14eacce8d69", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354684, "uuid": "cb620dd1-29dc-40e5-8317-caf642ce483c", "comment": "Malware payload", "value": "4bfd43906a0197031921c314fe28fe34fd1ecb301f66c9730ac037585f62b76c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354684, "uuid": "82d24c9b-32b7-44f9-bd17-65e5fbddc112", "comment": "Malware payload", "value": "fd8a935c6d341be0bb655f045979992993e98876", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354684, "uuid": "a7310472-2119-4c3d-a52f-e1d202a0c114", "comment": "Malware payload", "value": "8dd37f1ed2e11fd352e0c65318cc959a0252a3afc4b1536fdaf695bbd4a9978b461e473afcd69f280738c5dcaaa959a6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354684, "uuid": "d1e215ba-c70c-4af4-8e3e-30deb348d8e7", "value": "T12BF46C5BFE6E3C43D2D6D37E9B4A83B1A22BB190C32351937582432C94C669DCFB0695", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354684, "uuid": "828000d4-d613-428a-b31a-10d578145e48", "value": "12288:G/zvM1SRdoaLQ4yCQf1jK1SgcdeV6w5J9GDJv4hY9Y:ENRddQVf5IS/b1vQY9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354684, "uuid": "3c8f638e-6e58-4664-8a31-23d13b00489a", "value": 788568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354684, "uuid": "665cc670-e709-4e7a-b1d6-121693fd99e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354684, "uuid": "c209be31-f4ef-4d95-b314-5edf7498e939", "value": "shandaarch64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83b50a49-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354555, "uuid": "b272630c-0487-49e8-b0c6-49708d354e7f", "comment": "Malware payload", "value": "3c62ec4a7538a8c0a7fd9a9b44c33d44", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354555, "uuid": "0478858b-a004-46bf-8814-3fe3589a9866", "comment": "Malware payload", "value": "4c6b9d8333521053f5f203baa362c50e23d4ae5f520957309f928dc77945c3f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354555, "uuid": "1d8f1675-1946-46fe-92cb-bc51c520dd71", "comment": "Malware payload", "value": "4715bdbbad0914ff34666cf41228d50dca38e7a1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354555, "uuid": "abdda3c9-bf43-4c03-ab10-3a917dc84769", "comment": "Malware payload", "value": "1a28e387a83a04a38d3f575a8b9d20d8e7b2b0a6cd55962e3b69498b191fdb7a1017d5e8b0f6b37c0e63be285f961125", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354555, "uuid": "e195ba1f-b970-4778-b14e-e73169d429e2", "value": "T1E0F45D89E7C2D4F1F66300F10A8FD7F21964521A5053FAF2EB8C26977472B622E17369", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354555, "uuid": "95ae3084-33d8-4371-983b-dd2b274fad30", "value": "12288:P10Z0XhhxJhJcb1YKeee0XY9ttxA5cKkkEwEG6fMmua5rPyhRr8pMNULu:N0iXhhxJhybDeeeTttxAmKkJwafMmuaC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354555, "uuid": "be761c6b-9ba9-4706-8bd4-22b4d0e43f2a", "value": 775232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354555, "uuid": "ef37c7e9-2af7-4c9b-996a-f9215ce2d5f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354555, "uuid": "0db60b36-2bfe-445f-8a4e-a6911f0f2f46", "value": "sudpi686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12d3fedb-30e5-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775389584, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775389584, "uuid": "488279a7-58fb-487d-afca-6a2f9cf2d7f5", "comment": "Malware payload", "value": "8cdc27f1b1111c8a29324b857b77f1fe", "object_relation": "md5", "Tag": [ { "name": "adamrat", "colour": "#B066C1", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#3E0DF8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775389584, "uuid": "bb0c48c9-5efc-4e77-bb11-05c4792a6b48", "comment": "Malware payload", "value": "4c7ab766875cbaa5c8ab9bb3547b7d000dc793765825c35c6db01f5c73db9ab6", "object_relation": "sha256", "Tag": [ { "name": "adamrat", "colour": "#B066C1", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#3E0DF8", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775389584, "uuid": "e5e2ba3c-856c-4723-bbb4-06a80a6f5134", "comment": "Malware payload", "value": "28a7830b6c02df25aba3f0710666b0f752c44483", "object_relation": "sha1", "Tag": [ { "name": "adamrat", "colour": "#B066C1", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#3E0DF8", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775389584, "uuid": "6fc82ff0-0ae5-4de7-82b7-bcfba7c056f4", "comment": "Malware payload", "value": "e8f210451ee875cac0db1cbc8eb11a573897ad64f74e5e4f50102e018c54f551a09050f51cbf8ab410d91ea2a90c723d", "object_relation": "sha3-384", "Tag": [ { "name": "adamrat", "colour": "#B066C1", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#3E0DF8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775389584, "uuid": "c4786cfd-282e-4047-9ae0-4cae79351560", "value": "T195251273F0AC0E9EF57FC9FB4400656378ADA4EED44B70292670458694B388ED7263AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775389584, "uuid": "dcb5de36-1de4-4b5d-9f39-79b4df8445d5", "value": "24576:RDtxJ+pSreB+QTgXyrSH+wM1vPSlYyjVQ3YglTyD:R5XGTIyeewyPSldhENMD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775389584, "uuid": "2b61efea-1345-4e8d-b9ec-3ec471859040", "value": 1041426, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775389584, "uuid": "1a3dc6e5-a7b1-411a-8422-b8ff9bdabee2", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775389584, "uuid": "9cbce531-ece7-4d5e-b471-83cafbb96351", "value": "733184ba4_gambling-rig-121x2.jar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1c73421-313d-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775427620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427620, "uuid": "402c3a01-357d-4d58-a545-c744e1c3df24", "comment": "Malware payload (Mirai)", "value": "18ad8bea71bd2d0d4ced71b9779e11d7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427620, "uuid": "aeca5acb-eeac-4450-b7ab-fb708517a1a4", "comment": "Malware payload (Mirai)", "value": "4d3030180b580cb608199dfbb1b67381e77587ba0290fe881372ef1c4711c3ee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427620, "uuid": "24bc7924-2ad2-4879-a9dc-25d278450b98", "comment": "Malware payload (Mirai)", "value": "38d5fb297a33ccfc83fe9c7836ecb664ceae4c5b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427620, "uuid": "58707497-253b-47e3-b7e4-0bb640c208a5", "comment": "Malware payload (Mirai)", "value": "97b6cfae6ece1102c97137ef8e0fd23aaf2baa83f20539e63e4201d72e76edaa19a77f78c48432fa75cf75150646fc08", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427620, "uuid": "62402f4c-af58-48f1-a1ac-12136bb834bb", "value": "T178F21A8ABC81891BC5F451B75F1F52CC336243A6C2973227CC098B796B5B64B0E3B781", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427620, "uuid": "c2d63300-886b-4056-b8a1-fe2ab9c6f16d", "value": "768:1WrTrCwj5QbueIzP+T+Y+ZB4kr+I/+W+f+Ba/i+WoiATUAzQSlU02VoomrCAJLm4:s/CwijibZB4FIGBmIFWAWTjPYq2y+6m9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775427620, "uuid": "93ccc5a1-c6e4-4110-8dfd-e01444715cd0", "value": 36164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775427620, "uuid": "4172d033-1a85-4416-9dc9-85c009066507", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427620, "uuid": "ea01bd34-8e52-4dfb-aa7d-6cea2b87182a", "value": "mirai.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df87fdfa-3082-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775347407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347407, "uuid": "9a1b1048-db8b-4417-b7a4-629b2d539143", "comment": "Malware payload (Mirai)", "value": "f239881887a5be8baabd10750b35cdf7", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347407, "uuid": "37ff61eb-25e7-43ec-a522-6983ac750ef0", "comment": "Malware payload (Mirai)", "value": "4e578a9081b7063f8a5ae94db560cd5e913d65167b1378675fd0f411ef45d8b6", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347407, "uuid": "d888a708-7ab2-4522-a483-64138c38ca6a", "comment": "Malware payload (Mirai)", "value": "f763384657ad974489f01f9f9da841bd60ee7101", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347407, "uuid": "27036921-9055-42a4-a78c-98cd1ad11b70", "comment": "Malware payload (Mirai)", "value": "183d2036a8c3e664526196e13eec8afd16e027670b7c8c2e7f1518d8b275b8171bb67c64de0065729dfbcfc6dec3ca58", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347407, "uuid": "6f332cfc-939f-440d-8dc7-4773050cd937", "value": "T17B1188EF40A69BF048179D3EF62ED8C4F122C78A511B5F06BDCC14BD98E8D10F902A94", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347407, "uuid": "bfe64b43-b1c1-4d55-a3f2-5d06c2ab5d56", "value": "24:oVpVFnV4NIhVdV/VtVOkVFVtDc4TV1DVq:oVpVFnVrVdV/VtVOkVFVtA4TV9Vq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775347407, "uuid": "598ce99d-d802-4a12-8d2f-4a661be06778", "value": 925, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775347407, "uuid": "a930e7e8-fb41-4d04-b475-5155796afc55", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347407, "uuid": "ad12a46a-190b-4941-b1f6-dac89860d5b9", "value": "Ow.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66c0bf68-30ae-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775366103, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366103, "uuid": "13a1555a-b077-4527-9937-ccedf416ed29", "comment": "Malware payload (Mirai)", "value": "a51ceba65d71f6ec1349c71ba5618b12", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366103, "uuid": "a62e3219-614d-47c8-a53c-b007d5fb869a", "comment": "Malware payload (Mirai)", "value": "4ed74b9a2965fcb33d0132acff5f6256bc1d8919eee08fdb254d7c1ac6e4aead", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366103, "uuid": "58b55630-8d86-43a3-9ab4-bac37a6a4feb", "comment": "Malware payload (Mirai)", "value": "1d1bbc38d174d3b2f7b717d24ee41643751ae775", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366103, "uuid": "3b0e98dd-ceb5-4878-9697-6a6ca62b0168", "comment": "Malware payload (Mirai)", "value": "1e3261a968096300d31c875fd4a0e61bc2070801c017d12d3457cca760bbd83df0fd71d6bfa1e2912189307daeec58df", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366103, "uuid": "355e1746-2dae-49ee-95f8-599781b55e3a", "value": "T16AA2D029D3466EF4DBAF9C9493C2C2C276E547C7378AC8E240EEAF016506046B789D59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366103, "uuid": "808931ff-c8b1-47af-b062-ff15f9182813", "value": "384:9/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5RM4uVcqgw05VxJf:9RxsSVsMD6xiJJE5zRWN84uVcqgw09N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775366103, "uuid": "f1d6fa76-57b6-4f54-ac7d-8f54d2ae2190", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775366103, "uuid": "cdc05403-3d11-469b-8ee7-fd30e64fd020", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366103, "uuid": "8dcbbc82-2ee4-4ef9-9f95-68ab39142d0c", "value": "boatnet.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc12ce18-308e-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775352502, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352502, "uuid": "a3972a27-d8f3-44be-aa91-aae879f29830", "comment": "Malware payload (SalatStealer)", "value": "9e5a9d5ac805f7997e798783e8e9cbc3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352502, "uuid": "c11d9034-053e-4ef8-8756-1c4970043a2e", "comment": "Malware payload (SalatStealer)", "value": "4f4d8e8864fb23941cda13100af6abea8bbef06e5f0dbfea61385f5309955a51", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352502, "uuid": "98e35661-b47e-4d97-a932-7639e093a7d9", "comment": "Malware payload (SalatStealer)", "value": "6498314d3b0ab47d013a1fe9c10c3a5f3cba8a83", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352502, "uuid": "7f86af28-54e1-43ae-b609-08b09e4c5e51", "comment": "Malware payload (SalatStealer)", "value": "e316357f3445e6f165e83cd6ed84696d6012686c7ad34c5d069dd8d74c7542eb5d5fe3107f0c32e6035d8170666359a4", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352502, "uuid": "c3d6cee6-10cf-43d4-96de-91cabf2b8fa5", "value": "T145560146242ED052DF657871F901E1A3369CD6DD8CEC8B736AD06AB4A1CEE8FA4701C7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352502, "uuid": "61602218-d735-4b30-a7e7-85c386f19d8c", "value": "3ec40ef258012a6a096f45d9e8821282", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352502, "uuid": "953ff583-066e-4fd5-b979-d922393e177c", "value": "98304:laRw2Ocj95E5T2AnH+gZ1q4DySloqyDRw2lEPzkvyoXP7Pps4aR/MIvGF6OC23g:lqjOOE5iqegZw4D1loqOyyl7Ppjsp3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775352502, "uuid": "783fc648-5332-481f-95b7-fcffaadf517d", "value": 6455296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775352502, "uuid": "a0d8aa80-e293-4c93-a59c-7661ce9bdb17", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352502, "uuid": "338aeaee-788a-4ab0-b1af-6405e39d96a1", "value": "Load.scr.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d25d65c-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354544, "uuid": "dee5612b-5888-4616-90de-52f749151657", "comment": "Malware payload", "value": "b3289683fc598c5e821208c414087f03", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354544, "uuid": "3ae0c4d2-f108-4e6f-89f8-47c151277796", "comment": "Malware payload", "value": "4faa2e403cefd3cd21e344aa14a97942024635d4f3fcba3d8ed0ea0bdbb7d24c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354544, "uuid": "73c47f21-0af1-4820-ad77-3bbb438773d2", "comment": "Malware payload", "value": "0147921c1e971fb979429e4932ff74c75bd23841", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354544, "uuid": "a55b1f66-792f-4b72-9319-762e7647dfb7", "comment": "Malware payload", "value": "fed6bd80633cbff3de8e9758d518763cd40172789b2c7042764643cdb3beba80c23affcafe64eb3f723745b7e908e696", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354544, "uuid": "b5be6748-e5b5-482f-a185-27c3d64449ae", "value": "T142D54B17FCA154EAC4AEA132897355527BB1BC452F2063D72B90B6B82F73BD0AD79304", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354544, "uuid": "a5fcd3d3-d845-4837-bf0a-e48ecf84febd", "value": "24576:kf4S4iZlp3cgR28WpHTZtdQFb1HFHGQrfATw3kXmt28WipA5tZkpDe3QtvgYne:kfZxlp3ca2N7dYZrfATw3TtTa5Y4ce", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354544, "uuid": "8df68e81-0448-435e-84ca-505508974db2", "value": 2760969, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354544, "uuid": "cdf0d1ad-30b3-46cf-9ea9-c3d2c9d4cd66", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354544, "uuid": "c5f2cfb1-8abd-4ca8-be9e-9f2b61775339", "value": "mclibs2x64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6829e933-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354509, "uuid": "3881cca4-ec82-4993-bae2-b04bcfec0269", "comment": "Malware payload", "value": "1306443f0315bfa50c14c658e96e2dd2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354509, "uuid": "58adf116-7157-4b43-8a20-13dd6bfc4e86", "comment": "Malware payload", "value": "508f04e514c68443f88636fa0d88f54ed15c1a4099430f0b5b2768c618e42970", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354509, "uuid": "f15827af-ae31-4456-b6fc-1ba9b987300c", "comment": "Malware payload", "value": "214cbbb5590a8a6c677593b196bedf53b5f2736c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354509, "uuid": "234a3c22-bf32-4dc1-b41f-41cfa71a3ddf", "comment": "Malware payload", "value": "c7643cf9c0767f64fb417cb346cc5e6f776b8446a483ddcc1a17eacdcfdc3ceae6cca096a3532213f1a4d77d75737345", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354509, "uuid": "0b854f44-449b-4089-b47c-3d662c7c808e", "value": "T150F46C5BFE6E3843E2D6D33E9B4A83B0A22BB190D32351937582432C94C6AEDCF71555", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354509, "uuid": "2af63617-fa4f-43b4-924e-9d7ebf710a53", "value": "12288:8bBvLSvqfTrOesq94Td1B3kJBZMNqgzw50TL0AvJBGWg9y:CU0rpjoF3qBZ6T0S8Wg9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354509, "uuid": "876ad2dc-1aa5-420c-8deb-4077ad68f710", "value": 787080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354509, "uuid": "c4737b20-16b2-40db-8b22-e7abfd87ee1b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354509, "uuid": "1005fead-3afe-4872-913b-e21dc0caa3b4", "value": "sockarm64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f29856d-3140-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775428662, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428662, "uuid": "12b07b0a-b04b-45b3-b2bb-6cc8bfd51d00", "comment": "Malware payload", "value": "b9f08110f80ce870922c5229c61a718a", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428662, "uuid": "a83a0e08-a94d-443c-a3ae-98d4ac4e0a90", "comment": "Malware payload", "value": "5126f4c04c21f04f97515155875d6f8b409632bd9ff6b07f59ee4401fa8b654c", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428662, "uuid": "470df179-5ce6-442d-9001-8bdca4b8909a", "comment": "Malware payload", "value": "4189d28465d666eb8ffbf4a121e010a763c31e77", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428662, "uuid": "fb81f5b1-aff1-4eb8-b4d7-5bb57bf90c5f", "comment": "Malware payload", "value": "69ee91ddf3a60fd63011322d006d95b79c36dac3920911e3fc9adebb1d9d36285b280071c03a68698dc2c4562625452e", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428662, "uuid": "abaa1ca1-4ec0-448e-a457-29a72b6f6899", "value": "T10A6733A7C07C098FEC3BC830DA69DE2AD6A0FD3C690295166B25B3427D773D46AF9444", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428662, "uuid": "fdd0f161-25f3-482e-bc78-3b55461cfa37", "value": "786432:SwjMpo+v6ZALvdaOH9v/K5wzh3Kaa/0Chma1jxNYROSedO:SCMpo3AIOBK5wg0kmaxzYTe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775428662, "uuid": "15a81539-5d8d-4e73-82c8-03719a8ed298", "value": 29761536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775428662, "uuid": "7e04c01a-0953-4fcd-8dac-d83a576ddf61", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428662, "uuid": "afd41003-4b2d-46a5-aa18-e970182365ca", "value": "Butt_In_The_Toilet.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b644f149-30f5-11f1-a769-42010a9c0008", "comment": "Malware payload (SantaStealer)", "timestamp": 1775396730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396730, "uuid": "64ba3d3f-50af-4ad5-8903-217429854eb5", "comment": "Malware payload (SantaStealer)", "value": "756a3b6a5e4ae39eebdc23ebaaed37fe", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396730, "uuid": "ead58fab-d796-42a3-a1fe-b84178663d5c", "comment": "Malware payload (SantaStealer)", "value": "51e1e6b0795ad691c9341b4362ca9a1258b94c7b9b90252479c5cf2dec37ef26", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396730, "uuid": "86f7d640-b7ec-42c2-9a19-8adb3c38b021", "comment": "Malware payload (SantaStealer)", "value": "09028857ed323a03ab0053eb4d86d12760563b16", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396730, "uuid": "87a78323-7f2d-4626-8688-b5eb44a3d335", "comment": "Malware payload (SantaStealer)", "value": "a809610c5960942b10fbbdb287c5d38ae023d3840c97f98499409fcf8214ab87541de13d1d8f0e364c28b57c408d4634", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396730, "uuid": "ac7afefb-4781-41c7-9bac-5bb6fdc5dcd3", "value": "T16E06F153E2A320ECC26BC2744A6B66B3B931B85541347EBFD590D7312E21F506B2EB35", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396730, "uuid": "835b7fe2-3832-4c1a-bc18-14a5fc0de3b1", "value": "86decc6ebb11144606632964f65c138b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396730, "uuid": "ba156e27-b5f6-46c4-a367-9e5e28931935", "value": "98304:We/LNFiJ0XEb8xwK/z0JTy3U03PO5udmLodemiEsDvjiGQr:tNF+b5S/U0/WudmGAKFr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775396730, "uuid": "c7ef94a7-08db-442e-82d5-fade630a018b", "value": 3991128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775396730, "uuid": "a81b0232-bdea-4562-a6e7-8a62262263c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396730, "uuid": "348ff0c6-7c82-4525-8109-cede7190afbf", "value": "Installer.exe.bin", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe1cb03c-3102-11f1-a769-42010a9c0008", "comment": "Malware payload (AsyncRAT)", "timestamp": 1775402434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402434, "uuid": "fe8ba6b2-35cc-4c4f-91d0-68869693e4e1", "comment": "Malware payload (AsyncRAT)", "value": "35a8a15871c8e901133162f1dbb9a26f", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402434, "uuid": "14f97379-6b01-4943-badb-d658f1909ad8", "comment": "Malware payload (AsyncRAT)", "value": "520aa5f9f233057e70c40f9c7c3f417da4d0e1dd400a2dd4ff61d18b759ce8d0", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402434, "uuid": "b835b48c-d229-4cc2-b38d-d457326afdc1", "comment": "Malware payload (AsyncRAT)", "value": "e4aaf6ef956af48cb888c8e5c499bf944d148d97", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402434, "uuid": "b35c6199-bee5-4281-9caa-e1f75c6f1907", "comment": "Malware payload (AsyncRAT)", "value": "90fb7ea784d0381c21e38979a4d221167fd85cf1248748d6e51d69b464a50304d30d1cd6ec061f2ba4e55aafad6624aa", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402434, "uuid": "f7ce5370-5088-4ca1-9cf9-d6a16e1921c9", "value": "T147D24C483BE84327D6FE2FF229B2A10102759507D923EF5F5CD885A7AF67B8142003E6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402434, "uuid": "e2de9403-47dc-4c3b-8243-dbe3c1c9c948", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402434, "uuid": "2e1179a4-9194-4d11-a6dd-12268f391f17", "value": "768:qecbl/b37gMYAoRN9E2uBFE9RzOqh7bV:hcxS9E24FE9RzOqdx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775402434, "uuid": "28c299bb-5e67-4845-8e96-165397aafacc", "value": 30720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775402434, "uuid": "c9988ffc-5eb3-459e-abb5-4fc8d6af20a5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402434, "uuid": "d31c46a0-7e4c-4087-8831-37c8de3e9ad8", "value": "XClient.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb771a7c-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354729, "uuid": "ba11cda3-971d-47bc-af86-31d430b3d1f4", "comment": "Malware payload", "value": "c560440ef37371f9607cd5ec6da50695", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354729, "uuid": "f1a26833-5edf-4d77-848a-9d49db9024b4", "comment": "Malware payload", "value": "527d808a719c039fb0a581ec9772fa3c7e4d2256e6d1ba841cd373c33f5f5022", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354729, "uuid": "874b6539-96ad-46d9-9bd3-f648329bf84d", "comment": "Malware payload", "value": "659a29d0dcd996be1e5ae4feab24c43feb996526", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354729, "uuid": "526e56a5-b52f-4d22-95f2-029ef122f4af", "comment": "Malware payload", "value": "ec7d54cc910720973ad61d6ab43cc976e51689d95e3f8dda02c559bb3ab5799dc2f1e18e0f7d57dbaab16aaea3c6480e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354729, "uuid": "354b7a24-1855-4cbf-bec8-95a07471d18e", "value": "T180055B42BB1C4563C9470EF1293F5395F7257A4341F9922A370E97273622E3ADAC378A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354729, "uuid": "09be6cea-e339-4e06-90cd-b1f1a9fc0424", "value": "24576:57lG/Xh8QEPtfyKKsN3p8a6LzKhm8WTJ52:57lGfPEPpKA58DzKvW6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354729, "uuid": "88ca43d4-979a-403e-b887-40657bc1d5f1", "value": 857572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354729, "uuid": "e208da31-2857-44d2-9246-2b3bb3ddd25e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354729, "uuid": "09cf5a4a-d9c7-478e-ae6f-a7e8bcc958c3", "value": "tcippc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9b4bd19-30ff-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775401138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775401138, "uuid": "eae5a55f-c238-410a-be48-de3cc973835c", "comment": "Malware payload", "value": "9b1f06138512e7933d2a1b19a2e53063", "object_relation": "md5", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775401138, "uuid": "5a7e9e6d-ab19-4dd6-99f0-fa6d528d2537", "comment": "Malware payload", "value": "5280de85c204be9041d96d8e950ffe3555977c4c5743412342dd658248d82e7e", "object_relation": "sha256", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775401138, "uuid": "811f76d1-eac0-4b4b-8a7a-397501cf1e84", "comment": "Malware payload", "value": "bfb880df90b56e5f0fef04246c548beee845becf", "object_relation": "sha1", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775401138, "uuid": "33e7e568-f48f-4245-8252-66c64a477ba3", "comment": "Malware payload", "value": "2ccfe0ba2ef5981254a250341e23298f64f0d6b1902cd17858e5084703906b87b4f9bb0d2fe6edd2215e6334b42d8824", "object_relation": "sha3-384", "Tag": [ { "name": "joker", "colour": "#3BEB24", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "xapk", "colour": "#BBBE35", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775401138, "uuid": "3a38b6fc-fc08-43f1-8114-16b1d517377e", "value": "T16467230AFF0DA42FDDE3B0794D7A026275263899E241E753A511D12CBF83AD88F19BD1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775401138, "uuid": "f85d0380-f3f0-44ca-b396-6ccf294dc078", "value": "786432:aL5SkL0zPyPYDUQvhi4rzx+rQd6i0FqXF3n8zn:aEWXAg4HlUBe3O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775401138, "uuid": "2b58e4c7-68a0-4103-9611-fe67d174177d", "value": 30971049, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775401138, "uuid": "1c643aa0-d9a8-4d5e-af11-60425b401d25", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775401138, "uuid": "8f636331-5814-40e3-9c50-480a3018d6f6", "value": "Cool+Cleaner_2.66.xapk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd73122f-30e6-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775390300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775390300, "uuid": "e22a0318-57a9-4a15-aff4-9abe9eb3e3ae", "comment": "Malware payload", "value": "22817bf45aa3d8a00341c9e589863c4b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilentStealer", "colour": "#123ACB", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775390300, "uuid": "6e58d6b3-84be-4c12-9a8d-4240ba721485", "comment": "Malware payload", "value": "52f1721e891bd6a6c557523275b2411e1de83ec7fce5f3a295619a615a12db9b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilentStealer", "colour": "#123ACB", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775390300, "uuid": "890913ba-6035-4334-9248-125e9dd29492", "comment": "Malware payload", "value": "6ebd0e1ce5b19beec928dbfa110280bb1d0027ad", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilentStealer", "colour": "#123ACB", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775390300, "uuid": "b5e9770a-6720-4d56-ba7d-942b0e1d73dd", "comment": "Malware payload", "value": "cef6f08f3660de12366e3e1c28d91534989ebfc62b28060fff287a6b8f2d4b181105de8aee11e9a3e8ad2f4a7fdcff5a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilentStealer", "colour": "#123ACB", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775390300, "uuid": "9c93e817-0bcb-4167-97c2-3e6fd1c8db4f", "value": "T185E733D73464716BED0827F2E7320641D2089B1922B21B95B395BBFDB24DB4FE058EC9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775390300, "uuid": "d7ffcc39-88c3-4616-a2fe-465de8ff4ef5", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775390300, "uuid": "bbb24751-33b9-4e7f-9727-3fc330696776", "value": "1572864:IJATsCY41ihhP/t/4/bzuw0cxE+U8gaQSM8DsD3q+L7:IwfV1ihR/BoH0cxlrgaQSMmsD3q+L7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775390300, "uuid": "68d6f524-e8b0-439e-8538-16c4d6ce150a", "value": 69953542, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775390300, "uuid": "cf770bdb-2e3c-4d4b-bafa-530f7f722833", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775390300, "uuid": "d7340be2-8861-4591-a762-4ddc9eab3af1", "value": "JRbot.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57258941-30e1-11f1-a769-42010a9c0008", "comment": "Malware payload (AsyncRAT)", "timestamp": 1775387981, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775387981, "uuid": "ca779d19-957a-414b-821b-66e41a5f0c74", "comment": "Malware payload (AsyncRAT)", "value": "83e122db9e3b3dd9a4e40740d039818b", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775387981, "uuid": "8bd64ad2-4bda-459d-b229-c54784686ede", "comment": "Malware payload (AsyncRAT)", "value": "55179fcade854308f587291b9bb586f97758ed216a5d773610e3f5f38d25e5e9", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775387981, "uuid": "eaa79183-7026-40ef-aa4f-502495d592f9", "comment": "Malware payload (AsyncRAT)", "value": "1ae037f05d6c805d8a5b570fad024a1b8992277a", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775387981, "uuid": "992fd816-dc2f-49e9-8818-f39968bb31ae", "comment": "Malware payload (AsyncRAT)", "value": "93c4931d095b5b6e1792a3dfdf0cd1475717a6d5eddd3fc5174d700208bab923af2365cb72ddebefdee7f0c260ae58f0", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775387981, "uuid": "601aeecb-62da-4786-9bde-c0c0c6701cce", "value": "T1F6D3B49D766072DFC857C472DEA82D68EA5074BB871F4213A06716ADEE0C897DF240F2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775387981, "uuid": "cf27a83b-0460-4620-8044-7f46ee8ce1bd", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775387981, "uuid": "9700002a-a5f2-49e4-bf7e-e65071aefba6", "value": "1536:0LczzNjDjc3raLYKjrqf92sLYetoOfr+j88kuFOnoJN2DXgIhFVrFOR2MF:t5jncqrqf8CWYCj88Ko6jgwOR20", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775387981, "uuid": "4e3fbfb8-e4d1-467d-b4bb-4501164270fa", "value": 140288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775387981, "uuid": "67bcb8f8-3da7-469f-b77b-ee0be8669cba", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775387981, "uuid": "1a0fbb9a-d51c-409e-ba7c-19bff2b96108", "value": "fud.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7ef7d22-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354642, "uuid": "acdd5bcf-9626-4926-862f-461cc944b54f", "comment": "Malware payload", "value": "254dd69e9e7340563f738d9b1330eedd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354642, "uuid": "b3fffa6a-4c1e-4e58-b4af-5aa8923c920c", "comment": "Malware payload", "value": "5609ee0b4ef1bbc39323a542485e5bab1a40ff8ff32a106be6f0083442f99c5b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354642, "uuid": "a0be4822-f72b-4b27-ac6a-a30e66a1e126", "comment": "Malware payload", "value": "ca2e889b743686b3f291c46ee654638f925e40c5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354642, "uuid": "f156ec7d-d104-4027-94cc-3753b6a444b2", "comment": "Malware payload", "value": "64dfe839b870ec0cdd6b0a0cd1f9fc416c36c933f1f8e3431efaca0a638f124e6c3deb730dcd969e0825775a96380f9b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354642, "uuid": "b3920c56-e078-4eda-8520-c6d4587598d4", "value": "T1CBD44A56F8809F62C5D0257AFA5F8268731347B8C3DB72069A189B343BD786F4F3A641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354642, "uuid": "fea2c5f7-6472-4930-ab02-07d9e164a0a7", "value": "12288:lzPH4HLGWaEauI92bqD9Ngpg+RRZ0KpEKlLcm:JPH4Hqi02bia/DpEcLc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354642, "uuid": "c5d2f7b9-e715-446c-98d6-4155e506e622", "value": 645748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354642, "uuid": "da29f534-8f55-4e98-b3e8-498e1022cba0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354642, "uuid": "17a5c805-29d0-4b58-a3ae-35264cae09ab", "value": "tciarm5n", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f198191-30fc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775399483, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399483, "uuid": "2e8a7eb6-b85e-45a7-91e2-14cb4d5e356b", "comment": "Malware payload (Mirai)", "value": "f018af1aa36c34473eb4a4ab1500df28", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399483, "uuid": "30a7a5c0-019f-426d-94c0-950b630984c1", "comment": "Malware payload (Mirai)", "value": "5634afcb923cf5619f497c5dbe3ad7e597c9cfde98e84bf9772c1ed35ef555ea", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399483, "uuid": "76da89e4-e73f-445c-843f-f72448a79356", "comment": "Malware payload (Mirai)", "value": "c67294c32ab638630156e4692c0041453d57ad59", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399483, "uuid": "cb7c081f-4d96-4b0f-95fb-0b49ab07f312", "comment": "Malware payload (Mirai)", "value": "ebc71749bbedf776160ddeceeccd3ed2f4ef323309849d02c767a297101436cf2a149e4070f074519f44d1932a46c4e2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399483, "uuid": "76b8c897-92d1-45a5-a1c2-6a5e927f7996", "value": "T105E33A07B5C184FDC8D9C1B48BAAF53AE936F45D1138B26B2BC4AA171E9DE305F2D640", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399483, "uuid": "16db9f5e-4fef-4b91-8cc0-029a491333ce", "value": "3072:ADKPkibws4eOk6uMm+MCkLr/KkS0Se23pPSBOVVRE:ADKPkibws4eOk6ul+VZbRE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775399483, "uuid": "064a3043-5740-4199-be13-55ce1afcd888", "value": 146056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775399483, "uuid": "49a4ce1e-b922-4448-9b0b-6e4abc3ec747", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399483, "uuid": "6f9635bd-7745-453c-b29c-a4cbd9747b00", "value": "main_x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dfe47e5-30ae-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775366142, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366142, "uuid": "208ae50e-813c-4188-8d7b-6c6726a05334", "comment": "Malware payload (Mirai)", "value": "36c965b762a82fe4ccf0fb8547166d21", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366142, "uuid": "ab04a22b-43b3-4587-862d-c0ddf222caf0", "comment": "Malware payload (Mirai)", "value": "563643bec2f38c4647bcea847365fd6405d648d0316fd2c5d5ce1a106931b089", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366142, "uuid": "dc2d9e84-f7bd-45f8-ae51-1125018e5e78", "comment": "Malware payload (Mirai)", "value": "d066c2309b417e9f0136f5b5d57a93d7858bfe63", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366142, "uuid": "2fb223d4-9e20-4f77-96a1-0593c3dff7c5", "comment": "Malware payload (Mirai)", "value": "189a9d7f9ef47075d121d83035a8656b3e5d329190ff0932db4d3dcbbbe2fa032922fee46d03a76c8b9108051e0d245c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366142, "uuid": "cd68fd59-ce47-4b0c-99b7-7eb2a90f999a", "value": "T14133F707F84285FDC556C13417BABA3AE83671EE533CB6A777E4BB222842E614D0DD48", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366142, "uuid": "70d4d8f0-b073-47b1-a993-73995c9136e2", "value": "1536:gfHlPDdJaEcLAeF9TUDWog1HHJYC0QkiuVn4P:yHlPZMEcTFZ2A1HHJp0hVn4P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775366142, "uuid": "cea79bed-17eb-40f8-a9d1-ddbffdd81978", "value": 54528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775366142, "uuid": "4cf73233-3fb9-4011-8ccd-aa9a410265dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366142, "uuid": "d89d2858-296b-49b0-ad09-09d63b9b913d", "value": "boatnet.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40bcac05-30e2-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775388373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388373, "uuid": "1479053d-7d92-4016-a7a7-f480f4602573", "comment": "Malware payload", "value": "a6f72bac2293aed05fc96d1aeb64e9d8", "object_relation": "md5", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#3E0DF8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388373, "uuid": "34ac7e0a-9b0b-4c8b-877b-0b2e85988089", "comment": "Malware payload", "value": "56fe675d566e60c2711c7d699bf282e4795fcbc9fe749d1c5e89746f8247bb5e", "object_relation": "sha256", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#3E0DF8", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388373, "uuid": "6386f5c2-c79a-4202-9212-1a8632aa8e58", "comment": "Malware payload", "value": "0849e4b3d33b350740dd050367bdf9324699d69e", "object_relation": "sha1", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#3E0DF8", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388373, "uuid": "8a175f19-e4ea-4ac2-ad79-e6cf454aa5fa", "comment": "Malware payload", "value": "fa20d21783d8b6a444d1f4ba0a3c324d5e3c501761faad60856b987079866194816c21c9c5917ed0aa9b551a6d84c4a9", "object_relation": "sha3-384", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#3E0DF8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775388373, "uuid": "227e33b6-dbdc-4c77-be31-64fc4495520a", "value": "T182B622E6B5380961DE07EAB28710D9613C6F92CEE147313BE8FA0D63696B5DAC311F14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775388373, "uuid": "350d63f9-cedb-4b20-81c3-42878e36caf5", "value": "196608:wTzLAVTskXjH1F33WWsFru3mLP8Pn5hZ2Lk4S/MY2JCI1Nubki/4QlV6pGrveUVe:wTzGTsajHn33WTpben7f1MY2JDY4psva", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775388373, "uuid": "22d5aa39-23c7-479b-9dc1-81ef96a853ed", "value": 11065203, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775388373, "uuid": "85c6bc6b-6b36-43f1-9225-112110cfc139", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775388373, "uuid": "56407bac-55cd-4577-805c-43b990e26613", "value": "CatLean.jar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93ccfe1b-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354582, "uuid": "09479e3b-d2d5-40f4-b29d-430667973564", "comment": "Malware payload", "value": "f1c35d199d43b2f4dabb9e32d72db303", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354582, "uuid": "ce749513-12df-46e7-a0c1-a83640a43b64", "comment": "Malware payload", "value": "5738b85f72cc05f76b2148998d6a8d0ce8b3c781bb7b5d558c982d830002ec7f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354582, "uuid": "27e75895-23a5-47e6-b403-60d445f3ba34", "comment": "Malware payload", "value": "35166ebf467abe8fc440e22d66a43d7ee4367d78", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354582, "uuid": "8ab41fcb-ca7e-477b-9eb3-dc585d832e85", "comment": "Malware payload", "value": "0338d7403fdbdf7b8fb59b24b249850a7b00622e25e54f8d7026e69c34248700f2b9ae2c121eae5d3e771948f6d90887", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354582, "uuid": "e385181d-9b44-4cd2-bc3a-e2167aab281b", "value": "T187F46C89E7C2D4F1F65300F10A8FDBF20A6452165053F6F6EB8D2A977472B622E1632D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354582, "uuid": "c9d715ec-fb7a-41ee-b61e-5c33c3c0d1a9", "value": "12288:hf70Lk0BhKPhx2hju7fzChboLXPmYEn2UOoKvaEyimNqcPyh3uzAjiLu:hfALbBhKPh0hju7fz7XPhEnPOoKFyimT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354582, "uuid": "ba4acb77-b379-400d-b4bf-4f61a161e955", "value": 775232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354582, "uuid": "1b22878f-d9d7-4cb9-86b9-9d0879cb9e1a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354582, "uuid": "8842e22d-5825-4a99-b76e-4fe0be41d26a", "value": "siii386", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c47c22b9-3141-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775429396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775429396, "uuid": "76ba2e99-2d3f-49ea-9150-c03cc1fa8904", "comment": "Malware payload (Mirai)", "value": "f185afdb9b535dbd1accb54c5b8acd4a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775429396, "uuid": "9d887e8f-dcbe-481f-958f-85ab9ff399b2", "comment": "Malware payload (Mirai)", "value": "579e0bb67f37d7ca86a9e093f471bfa5505200de9ae05753e758b6980706bce3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775429396, "uuid": "5746890e-5ce3-454f-9754-47f03d574de8", "comment": "Malware payload (Mirai)", "value": "255e6fc90833dec7f8f8110434d881ccd4944e99", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775429396, "uuid": "d0061ab1-c968-4440-b0ab-36f81b1dc781", "comment": "Malware payload (Mirai)", "value": "2fae988ab98000350bf31ebb98e3a0fa88ee46cd7c4ef685ca162665daeec05c33239579bbad1d3c3eb9b953098d5f4a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775429396, "uuid": "6c250b16-2a9d-4f44-8c5c-7baed096a4e5", "value": "T1FA5319C29B53CEF3F44354F101B7BB275A30FD3A0836DAEBD7606DA6A5519D062123A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775429396, "uuid": "4296b4f7-32f9-4534-9cc9-d3239a420afb", "value": "768:WN0wlS6HZz9Ss+karclSLILWejCdxMd/eFnCXgPPY3jxnC5EhEmIdPItMDRw8dnx:Pl65k38jynZPwzGYEFFItMfl4k/3R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775429396, "uuid": "10f354de-2b9c-4fd4-9c97-683fe9f887a3", "value": 61356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775429396, "uuid": "78bfc0a5-caeb-4b51-8f29-2b80e915c24b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775429396, "uuid": "faa5423c-5f34-475b-a456-1b1bf431c135", "value": "mirai.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff7ce7de-30ba-11f1-a769-42010a9c0008", "comment": "Malware payload (Gh0stRAT)", "timestamp": 1775371513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371513, "uuid": "c87f4006-f01a-404d-ac95-dace7ebe1170", "comment": "Malware payload (Gh0stRAT)", "value": "ced691c3166e64e42c6893aefaef9bbc", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371513, "uuid": "b1de801f-bf08-4b33-a718-47a2f3367a89", "comment": "Malware payload (Gh0stRAT)", "value": "589a33f90aa5c137188dd7d45319967da0252d468b6f5c02e875c3b7cd86df4c", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371513, "uuid": "ec8a3219-761d-4cc4-ade2-5227b1f09ff2", "comment": "Malware payload (Gh0stRAT)", "value": "34e93ea668bfa12a4e1f800760213381e2e55083", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775371513, "uuid": "47402316-12a8-456d-8431-efcd85cc538d", "comment": "Malware payload (Gh0stRAT)", "value": "23afa44a211a5e7c95c7cd15f592a534d88d04f2515ba1de79057b3db02f5dd3d92146ab54f2caaee3cd285efa91b485", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "Gh0stRAT", "colour": "#8BEA32", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371513, "uuid": "a4be50a6-2708-4547-8c6f-4ab389e55706", "value": "T17A456C02F7C5B0F9E99C057C24BB77369D3B7DA486085FC36724DD991822161BA2A3CB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371513, "uuid": "d6943948-bfbb-42d4-b699-fc4e893a5d4c", "value": "a710aa172984a483bbfcb01e11558441", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371513, "uuid": "a538e339-1515-413b-ad62-09aa9926c134", "value": "3072:uARMwIzoF/2Mh49j7TkBsV9rO6LJqh/g4OOp/vIX7+8vk2:jM8l2Ma9Im/iOqmKI7+8v3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775371513, "uuid": "324fa9b0-3c13-48d7-8bae-4d8394a816ec", "value": 1196068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775371513, "uuid": "99f37c5a-157d-44ac-ae2a-81c7f379d70e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775371513, "uuid": "0ccf0758-0aec-46b4-ac65-5e81b6669f0f", "value": "CED691C3166E64E42C6893AEFAEF9BBC.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a422d060-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354609, "uuid": "a1bdaa3f-2dba-4844-8fe8-dbcf6aad11bb", "comment": "Malware payload", "value": "bd474a8f22329cc4e8d5cfb5aa1fdf96", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354609, "uuid": "2166aff0-c08f-4948-890d-beca6bc98e85", "comment": "Malware payload", "value": "5920efb5ab05455803dd7398d1c8de35b88dae8981142872e1270d714680c7d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354609, "uuid": "9478098f-da98-4dae-babc-c1721af097bb", "comment": "Malware payload", "value": "db3dab7836beb36e155f8f5669b2048fc2340537", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354609, "uuid": "e69fe2f6-b7db-4315-a08e-3315e8bae2b2", "comment": "Malware payload", "value": "25dfca3c4a9acd69a1136612a343bae3f2d357e1eb892a0572f3adcdcacd426a00ee768d7302457c02345fb90482a353", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354609, "uuid": "dc1fd316-ef87-4d8e-94a0-54238dbee401", "value": "T164F45D07EF405FEBC49FCE31492EC30601EDD4934AD1662A71FC4B8CBA9975A4AE3598", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354609, "uuid": "0fa986d2-8541-4ce6-98c7-1fb80c43aff6", "value": "12288:QuEZA/DOMo2yNG+HHgdQP2ujcAVfwTWn3uxn2xXiRNGd62Cn5yfW48QSLgtwKEyh:EA/DOMwNGczfwbxn2xXiRNwLtDKKMTSG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354609, "uuid": "2aef038b-1a88-4aca-9341-8c0bf357c18c", "value": 763036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354609, "uuid": "20681ed1-c3e7-47db-a25a-f62c1d4865f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354609, "uuid": "5f6044d3-4fdd-47de-a995-ef9f0ab82027", "value": "ovhmipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "726fb8f2-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354096, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354096, "uuid": "33c92ca2-ece0-4ca0-8b7f-f530c1e2aaef", "comment": "Malware payload", "value": "d9905dc0e7c44867c5df1af06915446e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354096, "uuid": "38319ffe-4450-43bf-9333-674f7b857ccd", "comment": "Malware payload", "value": "597bd6b5a59e36a4e6535796cce6bafa40616d7125450b37f7432e947e9ca1c0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354096, "uuid": "9e8e17b4-ae0d-4a95-bdb9-886f6b7f5fe8", "comment": "Malware payload", "value": "8e842e8e294679c39a305fe18eb2c22192a8c5fb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354096, "uuid": "72fcf84e-9e98-4b2f-a765-a905afe579bb", "comment": "Malware payload", "value": "1907df6412f13ed7db04310dea9415e918fc0d3d1762290e175c8a53ff0e9cf6ad598343e703c29dcc9792aad919d1bc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354096, "uuid": "0fc32f86-7eff-4b4a-b1a6-fc835f78628c", "value": "T1EDF47C5BFE6E3C43E2D7D33E9B4A83B0622BB190D22351937582432C94C6AADCF71595", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354096, "uuid": "0eac70bf-050a-41b8-abcd-9794926acaf2", "value": "12288:amSv8/lgeiwwzRbOqyYLGitlU9aNnWC6vRw5+9YpUyYCsCP5W:J0eiwEbP6iT+GTp9YCjP5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354096, "uuid": "6f48d116-f9b5-4e1f-b791-55c740a16ed9", "value": 786704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354096, "uuid": "f9763d64-4492-4cdc-a519-86f5d24ffb28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354096, "uuid": "7ced9e20-cb70-4060-8ff4-0e098dde3e51", "value": "library2arm64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63b76a7e-3143-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775430093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775430093, "uuid": "3d4e84fe-9a72-4202-aefc-5f963bfcb32f", "comment": "Malware payload (Mirai)", "value": "6930ed137b8a35fe100fc5e63b3f72b5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775430093, "uuid": "f00cb9a3-5cbd-49f8-ba3e-efb9a955f8bc", "comment": "Malware payload (Mirai)", "value": "59d5de268d7695d2b3238ce264d6e9826cc1ad5d4871d0789b81cc9ac02a7228", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775430093, "uuid": "6f4de038-fe55-42ba-b7b0-f4f91a00b097", "comment": "Malware payload (Mirai)", "value": "4836266f8c3a3b2f2df23a9e1da2f37974924224", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775430093, "uuid": "50ab4ae0-8fc1-48f7-b669-89da0bf50e12", "comment": "Malware payload (Mirai)", "value": "c6ca904cd19bdd7c5bb9d1f38af241ca65966a536ad1fcf9a5bfe221d511b0493ae7fe6c953dce125a30529fc0ed5369", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775430093, "uuid": "acec3c3d-c96b-4711-b51c-612c868e63ff", "value": "T150731996BD818B03C5D320F3BB9F41983B165B6AD2E73103992AAFA137465D70E3B650", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775430093, "uuid": "182c1dde-e47b-4976-92f3-0ba8e614f761", "value": "1536:8ArfQ8pB4wz8TLyVQRlZNRlJ98NpFeIA49sO+5fA+lp1bCmraObFYLfOmbvS9Sv:/4n7fAiB5Y5S9Sv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775430093, "uuid": "cc60c3b3-155c-45a4-9b2a-813330098a82", "value": 74792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775430093, "uuid": "d58a29ff-cadb-40d0-b118-e24262a19bd7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775430093, "uuid": "997f9a16-c1c2-4a33-b99b-2169988b7a30", "value": "mirai.arm4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a83b659-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354566, "uuid": "82abc21c-5f74-41c4-a465-febc955b5331", "comment": "Malware payload", "value": "1bce3121f9b88159c5eab98e6a6752a6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354566, "uuid": "202f65b6-b515-4bc3-a8b0-3e1e322c99c0", "comment": "Malware payload", "value": "5af1b359986a204d5a3273273066bffdea9f0a5b217ffab925623adcadd972c3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354566, "uuid": "8af04241-1982-4ab1-b684-e02bad336dec", "comment": "Malware payload", "value": "3a012d59c963c8ea66de10625d6ec8944d650aa7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354566, "uuid": "bd0857fb-fb7d-4fc7-a285-4e22a4236444", "comment": "Malware payload", "value": "d5adddf8cb57c9a6223593db5f8531946761d755b1a726f139142cc8183d73192fb7d6452bcc31c5bd51d82bef5a8ba5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354566, "uuid": "30364ed2-a467-4dbf-a802-a9d454d45b71", "value": "T15FC5D714ADC42AF7C81D5B3454EA8AD613B49D140FF1962A32A4FAADBC772347F0798C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354566, "uuid": "d8bd1e3c-b4ff-41dd-9c31-873a74bcde1a", "value": "24576:KnnHbJxVYOsYNVVfrMEN/VC0k/hmowQ/N4BdaDaXAGVjmC:AZY3tEbjmC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354566, "uuid": "19c44a90-6035-4f65-88e9-9c3ec525bf2c", "value": 2621633, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354566, "uuid": "ef57a7c9-1fdf-4411-be32-0d6488ee686d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354566, "uuid": "32409a49-7f65-44a6-adf8-750daa93474e", "value": "mtdmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c78fa40-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354570, "uuid": "8c36c580-4294-427a-83ee-ed5549187b86", "comment": "Malware payload", "value": "7bd20f8e5ea4e780ddbca8bd236f56ac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354570, "uuid": "ae7b2b3c-7015-4624-827e-20f56f5f62fe", "comment": "Malware payload", "value": "5aff3177b048e5b202170e4181cb3b7e675244897a6558e581f35527cf0511fe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354570, "uuid": "21b1b295-d29b-49c7-9f39-b333aed240b3", "comment": "Malware payload", "value": "7e1b81392f352624ed494a321dea97eab919e55f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354570, "uuid": "d53d256d-9a7e-46eb-a85a-083ad92a6705", "comment": "Malware payload", "value": "c1b59825876bea911d7847882b6f54bc0bc354e5cba98151f1f63445d69a1b9994fe726124142b03bbc015cbcd02f4eb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354570, "uuid": "96a7c233-132b-4be4-9736-17f9377f65e6", "value": "T198B55B58BC9C6872E5CE67716E6602983339BC495F81D3276908FB3C7AF27958F13221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354570, "uuid": "eea9d0e3-4c43-4eb8-ac18-886a5c4c7f2a", "value": "24576:9hYKr1UY/edkGkv9q5yrr86mMahqINhcVQMYcH+N/n583cXJuiGhfSimgPGOHXhe:daYozkv9jLIjc02g41mCvOR9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354570, "uuid": "424ac00a-38bd-4010-95f7-4742194200f8", "value": 2293922, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354570, "uuid": "5da1dd9f-a496-4491-a6f7-2f9c808e826f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354570, "uuid": "4e04b988-32db-4607-9034-85971029b585", "value": "mtdarm64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4471cf73-313b-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775426604, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426604, "uuid": "2972ebc4-46be-417a-96f2-73de0afe14a5", "comment": "Malware payload", "value": "76ad977cdbf28f1cf82bba1bdf67303c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426604, "uuid": "473bcd53-ce44-4eb0-a9fa-5db1a7798168", "comment": "Malware payload", "value": "5c5d29ea0ddadfb3f0efc069ba43e2e1b136167aae9759898b8d96b6d7861008", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426604, "uuid": "135fa678-d0d0-4fd3-b061-727bf7e85ec5", "comment": "Malware payload", "value": "73622243ac7d693a303ca6d3e3250be3d1051ee2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426604, "uuid": "2d363df8-e31e-45c1-8772-7a7496680f9b", "comment": "Malware payload", "value": "ca5ea0eee9d2ca967e48c3035e4463b92a1f40e9ca82dbee8579c6e90013b76aba3ccaac40e8274bc25e3f699db05f45", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775426604, "uuid": "5c4a96f0-eedb-4806-9af7-674359e38ab9", "value": "T156333A13258085FCC40982B147BFA62BF562F4BE4234F58D6BE87E26FD5AD310A5D4C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775426604, "uuid": "4df7cf24-0cd0-49e0-89ba-ef65deddf8eb", "value": "768:FnjJrbghrXpCJ9t3C0q0GNls1qtoNo7MM7a0KGxDopKXobZ7/cKYeTBn:xdwG/t0XNlEq2C/7a0xxMd97cBeTBn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775426604, "uuid": "9c2a8cf7-d625-4fac-9edb-69693e93ecdd", "value": 50176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775426604, "uuid": "4ab98ef2-82c9-4928-9fc7-a6917692e7ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775426604, "uuid": "cfd64de4-4dd6-4a1e-92ad-82b01e807c1c", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e92e689b-30ab-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775365033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365033, "uuid": "3d92eca3-b7d0-4608-98b8-b692b4d82903", "comment": "Malware payload (Mirai)", "value": "b622182fac195168ff50c2171305d1f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365033, "uuid": "a62d08d8-7059-446f-b52d-4c07a05904c4", "comment": "Malware payload (Mirai)", "value": "5c5e51d2eb14dc9f86e83bba993a0cc798916b59b386711d8972f51490b76b91", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365033, "uuid": "a10cbf98-1cc2-419d-96c8-8b8ffcf40997", "comment": "Malware payload (Mirai)", "value": "fe72d7e3c72be1a62d1ec6cbaaf9a1760867bec2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365033, "uuid": "3f014ae4-5994-4cc8-88e0-4454ad7eb035", "comment": "Malware payload (Mirai)", "value": "62e65a96ffe1cf30245f2f9144db91436711f265b228c5c53d9af0e2f1abee4aa965fb6889fea062727d35335b6359a2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365033, "uuid": "437c9301-d41a-43f3-b312-50c99703c0c8", "value": "T1382309C8F443D9F9DC5A09742036FB2BDBB2F6BA2329DE43D7A495236C51702A805D9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365033, "uuid": "bb1bd238-4c4e-4ffe-98f1-3e8097aa098b", "value": "1536:6nJRT4QPfZfW5XTOeY3Dve3AGX57/4Qw7bn2i5e:Gv4QPfZfW5XTOeoEzJ7AQwf2i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775365033, "uuid": "1345927c-0c44-4cab-93f1-12fd4b864cc7", "value": 49936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775365033, "uuid": "a5fe12f2-4af8-478f-bc28-1da32e027d10", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365033, "uuid": "319b14ac-5141-4d47-82a1-ecd6a1ba9926", "value": "boatnet.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1babce7a-30fc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775399477, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399477, "uuid": "c0202432-81be-4a10-80ac-65e15afa9703", "comment": "Malware payload (Mirai)", "value": "9035b06c73fa375b81ef439ffdbf1215", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399477, "uuid": "b6a5f699-6875-4a8a-b30a-718fed5faf9c", "comment": "Malware payload (Mirai)", "value": "5c6b8c92ba76d7da0a512a3cabbdb93db74a564636869c03fdae294c46fb1b77", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399477, "uuid": "90ea050b-465b-473c-8209-eea2506a8b2a", "comment": "Malware payload (Mirai)", "value": "b1ecc92b3b4af9af461fd530e6759b5a925decd6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399477, "uuid": "29cce861-a82f-4fe5-95b1-a8fb2235f8de", "comment": "Malware payload (Mirai)", "value": "d9c51e40aa9f79abcc0e6bd20db0fa90a2c408f73879439a172a56897e07ea415e07736fa6467c4a4245d1a86d28b87e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399477, "uuid": "b98ed8cd-00a8-4b61-85b1-39b2cea8ca42", "value": "T10AD32B41F9414F23C6D612BBFB5E428D772A17A9E2EF7203D9251F14378686B0E3B642", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399477, "uuid": "7abf1cb8-7977-4b74-9c8b-3999e564c1be", "value": "1536:23HUcG56LNAoAa6gfoM0aaWKA8uf4V3n9BTuVv4HlhdsOsGhmg3fZ4qlc8VNly8l:23HQ3a6qmJWKa45Hov4HznjR4u94zPo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775399477, "uuid": "ae966cf8-9b90-4d94-9047-6d414b044f35", "value": 138016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775399477, "uuid": "3be6df21-bc1a-4694-9a6c-c65381c63c58", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399477, "uuid": "0a60e409-c246-488d-ac73-c042fe6d4a4e", "value": "main_arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a50a0757-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354181, "uuid": "a3ee67d0-8c67-4d9b-9a08-b007cb0b9f80", "comment": "Malware payload", "value": "004ef652a8adc3a6797a1bfba237e59b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354181, "uuid": "687ef8bc-2d93-4c9e-9f93-5ed271a6eec7", "comment": "Malware payload", "value": "5dbcc320db818d105b751285b40f1ed46400c5950d400323d2f97826338fa67f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354181, "uuid": "a235a57f-4401-420c-b1f2-b539728ded7e", "comment": "Malware payload", "value": "4675095f12d12ce2dcff258f315ca211205e59c3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354181, "uuid": "9d169826-df5b-4e42-bf5f-f6c0157bcbc9", "comment": "Malware payload", "value": "f24384bb86aae4e18e01a711a93380a0b0f4bc9e8b9db1d74ee92cf78705e806eb4124a9f0bf51d5d0074a3ceef44d45", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354181, "uuid": "c52ef551-27ef-4e64-82ce-85cd57f68347", "value": "T19FD55B80FB489226E90B0F338CA30BB8B3515D46C6E4856F8709B36F15B15FB598FE95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354181, "uuid": "f8f54faa-9ead-4ad2-8715-14fdff2363da", "value": "24576:2Zmn8reCDWIIIEEGW8wWUFi0+PnsxPxori9sOY1D5LUVV7+3:2eCDWIIIJGWx1nPxori9sOY3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354181, "uuid": "2b35b812-b8a7-4c0c-a55b-8dc621d73ddd", "value": 2818210, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354181, "uuid": "7003b9a3-f246-460c-ab8b-2a6f28603e2b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354181, "uuid": "706f8677-057f-4db5-9910-984ffd4ffbca", "value": "gofuckerv2ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2283dfe3-30fc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775399489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399489, "uuid": "cf5a766d-a98f-4efd-8349-5d378b304e7d", "comment": "Malware payload (Mirai)", "value": "a83397df735d1c6886462b83af0524bb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399489, "uuid": "9438859b-f839-430f-92e0-24c04ec8ac63", "comment": "Malware payload (Mirai)", "value": "5dc6ab4d9c9f2b5fc47ac924f6d2027a20be5510bbc0fb46a15e263cee085e97", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399489, "uuid": "434eae10-9831-4e85-845a-d83228d78480", "comment": "Malware payload (Mirai)", "value": "9b7be3289d10306cd003c8d63274a84e930984f1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399489, "uuid": "3876eda8-018a-4106-9658-2e10311c74a9", "comment": "Malware payload (Mirai)", "value": "576c6a788611a375efc8a7fe5d99115fc3fc5bdd058a000a5ed6babc65f69264fa51fd3109646e6cd771ad778e0acc38", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399489, "uuid": "4658ddef-a89e-45c7-82c6-10519ee0f542", "value": "T1AF730841B8818A56C5D412FBFA2E018D3335A3E8D2EE7206DD216F683BC692F0D77756", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399489, "uuid": "bd090bc1-7ef5-4534-9163-89fdc2c4fcb2", "value": "1536:ubIleutg5xQ7vQx+hKzENLFtar7YS5a6bJjKJZrEylTiFbz65rQd42+:CIlim7Ix+YMmr0gzJuz4ylTiFbz65E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775399489, "uuid": "d7e4dcfd-da26-4429-a42c-dd209a573b65", "value": 75104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775399489, "uuid": "e8c085e6-ee13-4a49-92b4-2a9525d29f29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399489, "uuid": "d2511bbd-f63c-470b-b851-38bedb35f54a", "value": "arm4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01654580-30bd-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775372375, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372375, "uuid": "88cc8958-7d00-4918-a1a9-55899c24007a", "comment": "Malware payload", "value": "d3765b9346dbaff6655403c0c63d6422", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372375, "uuid": "cb64f5fe-987d-48c2-83d2-308f81f91401", "comment": "Malware payload", "value": "5f3a5f55199097cb797548e54412d69fcd0b29ca5ebf6feb6c000a3cbd7b9a40", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372375, "uuid": "d3279e74-2763-46fd-ba2f-c194e0786365", "comment": "Malware payload", "value": "13edb46db21743a98e0c3045673b804d50ff4ef5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372375, "uuid": "e3f94ffc-be1c-4ee9-b5c0-95c756141f9a", "comment": "Malware payload", "value": "c1bf463f32918e4fae6b967c47d45ad028655080b0205d8f863557b6d02f21c7ff4a64991b160608ee307ceb2545ab0b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372375, "uuid": "a9e878c5-85fd-40d7-bc69-706fdc1c61a4", "value": "T166B44B55F880DFA1C6C1257AF64D42AC33174BB9D2E7B20689254B343BEB86B0F3B645", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372375, "uuid": "049c5744-bfdc-4ddc-93bd-5e2d521e5acd", "value": "12288:4gk9FcgS0Xc3CzrEVnP9xdLtAk1S2mPHFzUC6pt2otvJ7:DpSOlt9S2mfpE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372375, "uuid": "7ccbbd50-2c55-4c8c-8475-e29b97673398", "value": 529596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372375, "uuid": "ef096071-ce24-4f6c-8c0f-fe466c3e42be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372375, "uuid": "e3d229d4-6a46-47e1-a066-f115da7c3d78", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ef66117-313d-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775427615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427615, "uuid": "8eca5ee5-d899-47dc-987c-0dc412edc26a", "comment": "Malware payload (Mirai)", "value": "0711a48612ac6635a25027ca9f9e240c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427615, "uuid": "376fcf1f-3778-40c2-82b2-f21435802ef3", "comment": "Malware payload (Mirai)", "value": "5f82cd6396f7b540336b955381981ffb04a5d4bb06b6a46b4f099ac5ff41cccc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427615, "uuid": "1d496b25-06d1-4baa-81eb-19f67076f7e2", "comment": "Malware payload (Mirai)", "value": "9a3bd7e1d52a749811e2466345aad8d7a6a74b02", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427615, "uuid": "9aca88be-fd3a-46fe-9b01-655ad52e44cc", "comment": "Malware payload (Mirai)", "value": "2fb5c4ea60c80e0a66f937c27a7362c7fe274b49e2c91c31110d94351263c01ac6829e67ba46406e7ecd5ccab5780218", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427615, "uuid": "c61a2ee7-6344-4a46-a94f-01d64a4fc9b5", "value": "T1C953E846B9829E11C5C8077BFE1E118D33137798D3DEB222DE116F21BBCA56B0A7B452", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427615, "uuid": "fe402e01-5444-43bb-87e6-d3f5f4c4894f", "value": "1536:wRn78zEyaRDCvEsDCbscC6CIrqrrYmPOIRiM/3qFsIwbZnE:aSEJDCv7SscJrs/3qFsIwbZnE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775427615, "uuid": "4ed556f3-a7c9-4293-9121-32e51762f7fb", "value": 62640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775427615, "uuid": "142e40e2-fb29-499c-88bf-819abf3e1425", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427615, "uuid": "ee2ac033-25c1-4d46-a3f0-d2f96612fef4", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "954fdb45-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354155, "uuid": "c5d7bccc-6a0d-4296-85d8-33321d16a91a", "comment": "Malware payload", "value": "a5475188af9ac7b1ca980b623b4e4c7d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354155, "uuid": "810873a9-c6cb-49b4-abf4-75b1b27229a0", "comment": "Malware payload", "value": "5feb26cfbef69a509d113420a240b62b9e107c380680fcbf4aecdadd06a5add2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354155, "uuid": "0ade8c3f-5ffc-46d0-bc17-4273ab48cecf", "comment": "Malware payload", "value": "a1c020de2c54e210e7e5d38309c4a3ae1cc85aa1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354155, "uuid": "127ea939-64a8-4126-88c9-dc176ce72366", "comment": "Malware payload", "value": "56c0e70bfc8c83f5264803f14c559481019b4d484e59675d46df2135905197d3ce2b79fa15366cf700ef958257613d5b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354155, "uuid": "c10f4d9e-9026-48d3-b6a4-0e83835bfae0", "value": "T1B3D44A56F8809F62C5C12976F65F82A8331747B8C3DB72069A189B343FD786B4F3A641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354155, "uuid": "420afeb4-2540-4274-9643-0e6cb129bb77", "value": "12288:iVzVzx77d6b+yGCMrvbFnggpL+ENBlkEnfQcS:MzVzx7JZTrvB1flkEfQc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354155, "uuid": "c8e3cf38-e7bb-47ab-b5a0-b2a397817448", "value": 645952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354155, "uuid": "bd008e1b-87e6-44cb-b835-91cb747723d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354155, "uuid": "1e0f9180-eac6-4cd6-9b5e-1c621a265d5a", "value": "ackarm6n", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a79d4694-3110-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775408302, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775408302, "uuid": "f1d9c5c5-d579-41f1-87de-5edcb67e7c55", "comment": "Malware payload (SalatStealer)", "value": "d8d656c8ea198e8facf1f6b6d3f3980e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775408302, "uuid": "a119a345-8371-4afe-b375-2f2e7112f0d5", "comment": "Malware payload (SalatStealer)", "value": "61ae7a7305b1befdd579b9a9363dee26a037d601a0ea965da7e89d0d8534181c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775408302, "uuid": "aa98b35a-049f-4caf-9e61-185be9ab06a0", "comment": "Malware payload (SalatStealer)", "value": "13367b519b68a96273401121855f84c253a9b660", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775408302, "uuid": "c81da97e-106d-44f1-9ea3-beb81ec05b2b", "comment": "Malware payload (SalatStealer)", "value": "4d73a1771027c4666d53ef8226f68ea64550a1b759995b859fea8e3ba7cfd3e05cd8e3047b5b68953d4f7f4a3faaffcb", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775408302, "uuid": "24e139cd-a3ac-49dc-9053-6f76ce99da75", "value": "T157C65B01FA8B59F5E9035831405BA33F63305E058B28DBDBEB587A6BFC776921DB6204", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775408302, "uuid": "8535e553-708f-45b2-8c7e-1122a323e2a1", "value": "49152:Lw5IUhfIxtCexbxJwylFvZ8NkzJdHge264FUr7DXpL1toeNM08DkOQ72dyum1UQR:8aU5InbA3Y1rJfG8APrTK8Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775408302, "uuid": "d0af60ef-00ec-48a8-af71-6f547008cde4", "value": 12034048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775408302, "uuid": "851b3eed-48b4-428d-a474-d7e4de4e5c37", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775408302, "uuid": "3d157cce-1d3b-415c-bcd2-121f24936488", "value": "61ae7a7305b1befdd579b9a9363dee26a037d601a0ea965da7e89d0d8534181c.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3eda4fc2-313a-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775426165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426165, "uuid": "660a1801-fa45-4bae-a527-7a9ed4258799", "comment": "Malware payload (Mirai)", "value": "5d8c721c042fc6443938da5842d8835f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426165, "uuid": "44c73527-b36f-4bb3-8bee-b530c4a8f0ba", "comment": "Malware payload (Mirai)", "value": "620ec0155acd9685c771a82e794da688dd0e278bed61ea9da89925453f8d336c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426165, "uuid": "8c0b6d63-9af4-425b-8924-481752eecc03", "comment": "Malware payload (Mirai)", "value": "edf29118e7164c29149e89721f60a898ecf2eaec", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426165, "uuid": "b67d68b3-44b0-4ffc-8b91-d20c79585ea9", "comment": "Malware payload (Mirai)", "value": "929ebb0e072ee1a5c8c389c54e66d94dfd2559ec28410d5941f9ae648adac1ed22f17d3c3b627b89fb33368c953508e4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775426165, "uuid": "c81c3e70-d35b-4123-84a2-b33a3c97e7e6", "value": "T1DB733B27BE224E17C4C265F522F30B34E5B5ABAE2C7C4516BD622DC9AF241D032577E8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775426165, "uuid": "04cff034-ed69-4189-8a57-56b7323c3dd2", "value": "768:hhSHFz1Gk4CkzaM5AmwSY+0EbO+s5VWHE/fgn1tjtTbxtVpofNIo:bSHFz1GnCkzaMqmwSYZYs50tDtVmfNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775426165, "uuid": "b12f3134-1936-4f2f-a215-5c04ef789285", "value": 74376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775426165, "uuid": "d97a42c0-f216-4935-86b7-609add19ad66", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775426165, "uuid": "78cb4d4e-bca2-4c44-a8ff-f66c52b2ab11", "value": "mirai.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae28f1f0-3086-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775349043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775349043, "uuid": "7b8ba29f-5460-4745-940e-06a9ce07aee2", "comment": "Malware payload", "value": "e0181028b9f17e438122ebd8bc4e2551", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "enthec", "colour": "#9E7429", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775349043, "uuid": "91e24565-110c-4313-9ff0-38f03b6a85b5", "comment": "Malware payload", "value": "626603a12f8c076747450a60b474f891f65538571cd8157df50a7ab7a3e703f5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "enthec", "colour": "#9E7429", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775349043, "uuid": "45106222-d6af-498f-8acf-c65e5c3404e9", "comment": "Malware payload", "value": "ac1e5e1e841c7272f2e5fe540a571fda4319a2f9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "enthec", "colour": "#9E7429", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775349043, "uuid": "b3c5d521-d2af-4629-adc9-a215e0525d2d", "comment": "Malware payload", "value": "d06ed653199fe695a8493c80df68e711b37f0f5e9c7121438855c33cae5165c95475b053e0deda5a7b0d833c652474a5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "enthec", "colour": "#9E7429", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775349043, "uuid": "b0758397-fdea-4e81-befd-8f1308724890", "value": "T12EC5E857E49590E4C0EEE174C726A213BEA13499073437E36FA19BF11B26FE4A6BC314", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775349043, "uuid": "225c6565-4312-466c-8cf7-4ceaa565890b", "value": "49152:c8nxDgC7g9rb/TBvO90dL3BmAFd4A64nsfJ7QQzjFHWkMNRCdQqzB0dSyGL:cqYUQuVDt0K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775349043, "uuid": "e349b241-8864-4032-8e4f-5c5b6156d0d3", "value": 2588672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775349043, "uuid": "0b940910-239b-46ba-8e7d-59178f4f7c24", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775349043, "uuid": "b967143e-b441-4711-924c-3f09d72b2c62", "value": "626603a12f8c076747450a60b474f891f65538571cd8157df50a7ab7a3e703f5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a651ae90-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354613, "uuid": "b9f3c4a3-39a7-4a12-b9db-c1a0bbaf6b43", "comment": "Malware payload", "value": "0c59d601dc72bd02f89b0acb3cb82c0c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354613, "uuid": "9946cb5d-0df6-4946-b9da-f5960085d1d8", "comment": "Malware payload", "value": "633315e06d44ef730787a423ef8cb22fd116f1e19b9f413d808e7ecfd9a4e5b3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354613, "uuid": "34275aec-9d23-46c4-abf9-8f9f423973b0", "comment": "Malware payload", "value": "bf7a07037a548943820caaa3681d5e7b658e7395", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354613, "uuid": "e0aeee56-6d95-42ac-9175-659b29357809", "comment": "Malware payload", "value": "35685ad8a41f6d595ac1dab0f2485fbe753c03c2807adeba582746fa05d0305ad0eacafef1df555b7811084de03f387a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354613, "uuid": "ec8a0ad7-cd03-4a97-8fea-4203769f3707", "value": "T114F45D06EF945FEBC49FCD71492EC30701EDD48386D1A62A71FC8B8CBA5935A0AD3598", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354613, "uuid": "650beee4-a1ff-4669-88b2-18089a50c1ea", "value": "12288:1WFH/D/9FlHk/jeYNFCj1DyjYm/f7NwruhMDldQZkFiG4uJ53LVXoVmWzKGg6xWb:UZcj+DCf1Kg3/LekQgiXFAYs5GGhVxj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354613, "uuid": "9c77687e-090c-48ac-b7f3-6c347a80686a", "value": 761876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354613, "uuid": "dbc0c54f-8ee7-4701-9d13-10c86e218dba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354613, "uuid": "9ce9a670-f735-40af-926b-335a87659f41", "value": "sockmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf7993b6-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354682, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354682, "uuid": "3d4b6cdf-6501-4c3c-8d47-7f090a0cb48e", "comment": "Malware payload", "value": "71b3da196e1eec9eaa8463f6b910878e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354682, "uuid": "dd63aa7f-baa1-43db-a166-35cde681f5a7", "comment": "Malware payload", "value": "64162192104e74a06b59528009a3fced08f204a7d9e75d8f4b1594af2fef8053", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354682, "uuid": "8b532828-01cb-4996-9b3b-302dd79f2b43", "comment": "Malware payload", "value": "e8bd000a6c4fa1ee7652afcc019fc917e04b8faf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354682, "uuid": "ec89f1c3-1656-4f8b-8e12-da0c8c843132", "comment": "Malware payload", "value": "2ddcf21d900840cb39ecce6db9d3bebc2a6f04eb4d5170a078abc06bce12fac1d545b3098ada73079c6897d41728fe17", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354682, "uuid": "8f078582-0dbc-491e-b5d8-43f0f68b1de7", "value": "T1FBF47C5BFE6E3C43D2D7D37E9B4A83B1A22BB190D32350937581432C94C6AADCBB1645", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354682, "uuid": "3bbddc0a-1214-4f08-86b5-f192f4d25c6c", "value": "12288:cppyvdXbHIiFhEhVjk+egZcmAoq1O8w5Y9uAtEYNZ6e9W:cnQHHhOkz6cVUTYNQe9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354682, "uuid": "3ffcc654-94a3-451d-9037-d0b76e0a2090", "value": 787984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354682, "uuid": "6a5d9148-f713-4f17-bb54-7ccfad68ca8d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354682, "uuid": "c30887e1-ccd0-46e8-b63d-6711aa2df16c", "value": "siarm64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da31e441-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354700, "uuid": "d8be1503-63be-4490-b1a3-8dd38cfe2d4f", "comment": "Malware payload", "value": "50726638d8b6c331b11e1d7e3967e326", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354700, "uuid": "19e25902-6e7d-4f30-a0bb-794df75fe92e", "comment": "Malware payload", "value": "6635ff226571d6bf2f0614587f634a632c68fb9fa6a651095c05c72dd122eca5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354700, "uuid": "2a776731-90f7-4445-bdde-bc6992da4ce6", "comment": "Malware payload", "value": "e4d18cb2e7b45820a53d3e5fef2f92cc4c8e370c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354700, "uuid": "83f459a8-1578-46ba-aa68-7c9e1fb38251", "comment": "Malware payload", "value": "dae7ae817c431f193a983676746a5ea23dd3793949b5381da6fa465072582ffc0fc163787bc5d3e28d1a0c847afa8640", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354700, "uuid": "fb8970e5-c942-47b1-93c4-624b6a703d74", "value": "T149057D2AB2B3F17CD01BC03447DBCAA24535F47525222D7B26C4DA353E6ACE22369F65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354700, "uuid": "6f2a4fd7-8427-4378-99b0-a4230b2689f6", "value": "12288:PAWjxnjAxAGijdHHPn4GPNg9fovimFisG91cohooC6DJwjayV/RmHX:PhxjAWt3PNg1mimDG9Go46DgR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354700, "uuid": "fecb4bd3-2b69-471b-bffb-d4ab0168f026", "value": 834320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354700, "uuid": "776b3e74-9295-449c-9409-d71422ee6059", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354700, "uuid": "911f9d35-35f8-4ccb-a1a3-642c2ebfc157", "value": "rstx64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "259aca6d-30fc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775399494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399494, "uuid": "9fbd3b77-65b5-48ef-bc91-cc37a5e9e8d1", "comment": "Malware payload (Mirai)", "value": "c1d9889f1394630552c5648d35d2ef7e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399494, "uuid": "507dc3a8-5df4-4ed0-86cf-fecda12f44e1", "comment": "Malware payload (Mirai)", "value": "66abf3dbfda5ae2e424356a48b98701e8c08b18d164ba6b62b06f182eace4dbc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399494, "uuid": "027de1bc-cba6-42c0-a019-74bbfb3feaef", "comment": "Malware payload (Mirai)", "value": "1a45732cfad13304593ccc10863bd4fc7378271d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399494, "uuid": "2d3b19ce-a799-4e83-a506-7a64f92dfd4e", "comment": "Malware payload (Mirai)", "value": "ae23039c755638d29377846aa6bae9cc095477735f265d2a5b5496ebc4d6c579d8c357a73a48595412a6b21524299118", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399494, "uuid": "b290dfc9-d9c2-4c7d-ae3d-3f90b38e58ff", "value": "T1BE04A71E6F228F7DF668873147B78E25975C23DA26E1D680E1ACC1105E6039E641FFE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399494, "uuid": "7c4040e4-9222-46f7-a26a-c20e44241b3d", "value": "1536:fmlcW4LXVVwIM6xBS//3FRQS/Z+aiuinlvfQ9IeilifVG9b4TXDHZWupLSG9Ai+:8D4LVo/VZ/ZauilvfQclifiE5WuNj+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775399494, "uuid": "87abe518-c0c5-4d44-a51e-0be5b951ff3c", "value": 182636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775399494, "uuid": "0e371c4d-2132-4a20-9bee-8b863f54855e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399494, "uuid": "28173342-0b72-4fce-aa76-a2e99bf46548", "value": "main_mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed1ac588-313f-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775428605, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428605, "uuid": "8ada8b95-b54e-4a1d-bcad-79231a85cea1", "comment": "Malware payload (Mirai)", "value": "a60da83d6bb2a5e245f3a42d6de6f599", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428605, "uuid": "da55d560-9b21-408b-adf6-def7473e1e8b", "comment": "Malware payload (Mirai)", "value": "67d3e6a4b65761fccb08e8cc5d63d76fc1a460f6b7e191fdeca7ad1f55a6cc72", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428605, "uuid": "57b27b2c-f376-4ca8-bfae-c2ad6a93d97c", "comment": "Malware payload (Mirai)", "value": "64256cd77545b6f5624a237869e3e2a2d36bce7e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428605, "uuid": "8ee88bf5-cd93-4199-aa99-7a6ba7bc54f1", "comment": "Malware payload (Mirai)", "value": "825453cb1c800de499c76effa8deac35632626a6e27e48b82b2ad557e43c5dbba0a8db8df2b0d9a3fe4f2a11dbea68e1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428605, "uuid": "bcea4245-6a8c-475c-be1c-165754b6a005", "value": "T1C2534A039E565F0AC557A8F121F28E714B23FC6649672EF6B032EDAA4547DC8B102BF0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428605, "uuid": "cfc814fd-68de-4442-90e7-1c7b3b3d2f58", "value": "768:R34i4HPbYumKiGDwCXjMdoF6flKCmrJa9o70GdL94BdfgUOtUFVHCzMMCvI:ynHPLZHBFMKCmrky7rLr+FVH4Cv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775428605, "uuid": "9361f94c-42f0-466e-afa4-cf889942a522", "value": 62636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775428605, "uuid": "c0b36ba7-58ee-4b1e-bcdb-a9182db3d417", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428605, "uuid": "a622a132-234e-4993-848f-be09439f9641", "value": "mirai.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92eec87b-308e-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775352433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352433, "uuid": "4943ff3b-f03e-44f8-8fcf-eeabc93059ad", "comment": "Malware payload (SalatStealer)", "value": "2cb9fcb7a058bf79c2bbda90f8d1c8d3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352433, "uuid": "662ecd07-efae-4247-8f34-46db0fe0e0cf", "comment": "Malware payload (SalatStealer)", "value": "67eac9f54eb7127821e5e932e34b2db8b08c4ffd4812dc31781b2bcccc4457df", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352433, "uuid": "5ce4d4eb-047c-475c-86b7-fc64cf13f439", "comment": "Malware payload (SalatStealer)", "value": "96f29f0a56c9645fbcdcc21a13816afcfe0d36c9", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352433, "uuid": "9d091b1e-563a-4567-91c3-9481a881e5a3", "comment": "Malware payload (SalatStealer)", "value": "3b1749398fa0102f45fd9e152a31bd8b78808172fe478f89b57f97ca352c60fba7de1b9342c1a114f8fbe7db57fd2d93", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352433, "uuid": "62a7ba1e-a512-4139-9bae-8e1840fe45b4", "value": "T1D0C66B41F9CB56F5EA034932406BB23F23315D048B38DBDBEB447A2AFC7768219B6645", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352433, "uuid": "57eb7961-1c0b-4e7d-aebe-44affaa1ad08", "value": "49152:mMLqD8Hv6Xmt6ruCnDQh9Hjj4oh4eEcxB61UVq7dN8q5Y7J+xU0UejlMKQnvme4u:P+D8H16RmBVqoq5k0UmlABqcH6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775352433, "uuid": "35c3fb4c-bf35-4341-b932-76494816438a", "value": 12105728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775352433, "uuid": "703da1ba-067e-4857-aa2a-b3d7ae8e16b9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352433, "uuid": "ae70b557-b91a-43ef-b950-1a96bd2cb48f", "value": "l7xkcq.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bd40a65-30a3-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775361467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361467, "uuid": "b1e54633-e659-4e5f-863a-84d3b30ccb75", "comment": "Malware payload (Mirai)", "value": "64aa377623d4c419269892ded4c904db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361467, "uuid": "93e47c67-2cd6-42f2-8911-825b0e70a415", "comment": "Malware payload (Mirai)", "value": "68e64325ed4619376d48309b3976914147a8aaeda4327db1e3b3b77bc8f1a065", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361467, "uuid": "bad1e7a3-df00-4b80-bb21-138537aa313f", "comment": "Malware payload (Mirai)", "value": "85629dfceb805bfc227d6a8053db4a6aa30b0ce9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361467, "uuid": "c02af4be-e839-4be6-bed8-c9b82e9192e3", "comment": "Malware payload (Mirai)", "value": "fb64819049fa7cc14bcda4d12a3dbdd3ba212ea1d6d35431f9a37cfadcc9bfe9c326dc5562edbe01f301898cab56cfe1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361467, "uuid": "5625c848-1177-4e69-a4a6-88bb595f4dc3", "value": "T185B39CDBF24701A0C8624AF007CB4BED3E2723815F27C5E72C6A657968791CF8906F96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361467, "uuid": "d04f22ee-2bc1-48bc-909c-9d744f944dd4", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg1i/LWy:c9sSyzz36YaWWgg1iq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775361467, "uuid": "4a1ba9a3-c0f4-4f4f-882f-9706252af759", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775361467, "uuid": "0a0b4524-c738-4dc5-ab53-e861b245b49d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361467, "uuid": "fa813efc-8a5d-4fca-bc41-8dbb4ca0f7ce", "value": "boatnet.arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8270a31c-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354553, "uuid": "4ee90b53-fb3a-4be8-943b-cd5fdb8f622c", "comment": "Malware payload", "value": "6ce3f7d31c567f83f320a86a82e0faff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354553, "uuid": "ef139ee3-36f5-413e-90b6-1f2627ed4b18", "comment": "Malware payload", "value": "69e1c626552dfd4a17dea52f60139ab9355a25cabd8dc25230bd83d1876d4db5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354553, "uuid": "5b5722b4-8565-47f1-b573-59744f6cb743", "comment": "Malware payload", "value": "29e40692c26a87bb09e8c14c9fc98dab3757c593", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354553, "uuid": "39b13239-d844-4e6e-8e7b-48edd5eacab4", "comment": "Malware payload", "value": "4b5a9da710e5a99cd086c80cbee3e5149f4f543128c3c3e141c0fb1825f0d3a75ee3aeb03ee66e64f1d62f212dfa5abe", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354553, "uuid": "8cea2d54-bda0-44a0-aa15-ea461bac369f", "value": "T1ABF46D98E7C2D4F1F65300F10A8FD7E21964A21A5053F6F2E78C2AA77472B526E1736C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354553, "uuid": "91a864b8-87be-426d-b584-cc71bcf83092", "value": "12288:7zmHbzgkJhHYhxm0MrHCtP8rek4wJxgBS/U0twVtg1mz0YePyKY2IzgLu:fm7z/JhHYhtMrHCt0hbgo/U0t+tg1mzU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354553, "uuid": "d999eae5-6594-4c7e-8f0e-cd73e062d14c", "value": 779328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354553, "uuid": "ee084e7e-4d5d-4026-9f6f-ade030983f23", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354553, "uuid": "2a8efe4a-6fe8-4ef5-af70-b3017130ef72", "value": "ovhi586n", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e105d4de-30ad-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775365878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365878, "uuid": "e6a1a3eb-786a-4858-afa3-fc056f382662", "comment": "Malware payload (Mirai)", "value": "7a120c2f77474d624de4e692b5a8eb12", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365878, "uuid": "94df1626-dcb9-4919-aee9-7969a422494a", "comment": "Malware payload (Mirai)", "value": "6b68eadd008b965b12b67db6b5569b2003d1b230aba584d48d3a2f719807a6df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365878, "uuid": "9147f6a3-5081-400f-8190-a5d0ee1c534b", "comment": "Malware payload (Mirai)", "value": "8890e0ba8b4c05e060d2b559ff24eda873ce93dc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365878, "uuid": "242c27ab-8b48-477a-b094-d2d7d9a1cffd", "comment": "Malware payload (Mirai)", "value": "5a21249440f1f20e7bca8c4a5150494aa5fc7fe4fb55c156849dc4a9af23f3f025656dc944c2ce690e8b221c953ac9b7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365878, "uuid": "b660c0cf-b768-4ec8-8556-05adc7d1206d", "value": "T12E332889F747DAF0CC4305B0115FFB37A936B8A12224DD77DBE0BAA37CB16425416A48", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365878, "uuid": "278a4b4a-1915-467a-b780-14b7fdc1aab1", "value": "768:AYZ8SfvufWuq96fu8zOoevR0sRlzhJdt9QgcpOR9s0Jel/iE+nKPaO+hTvlwas:oSfvufWuq96f58X3jJelSK3+hjlwn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775365878, "uuid": "5f9a331f-068a-48f7-8a8c-fd7d19bc7cdf", "value": 54204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775365878, "uuid": "10eab2e3-7eb3-453b-8630-faec86ec2e89", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365878, "uuid": "6e88a3b7-9733-42eb-ab06-d80cb45a1265", "value": "boatnet.i486", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ffbcef2-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354602, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354602, "uuid": "75452a88-5c8c-4394-ac3d-5d00e4f8c465", "comment": "Malware payload", "value": "75694f3a25f2f81585324ef3d93fed85", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354602, "uuid": "cd8399df-4f5e-454b-ada4-b7676963fbd8", "comment": "Malware payload", "value": "6bdbbbd6846615efda15158255e6855b311e2f2b2461688d4aa44879d27803f6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354602, "uuid": "41d2f439-f948-43f2-a863-6dbfe3252481", "comment": "Malware payload", "value": "1f830b3659539c7aa6cb97aefb878467f422df22", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354602, "uuid": "944b9b6b-8dff-40cb-8bf6-b869d71509a9", "comment": "Malware payload", "value": "da767979c873feb2024e48a1cb6835c64083134ab3efa60665389656980339b1d270da669c3fc49bb02feed5c3bc9560", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354602, "uuid": "dd2b2965-5ab3-4fc0-bf9e-41cb24bab450", "value": "T199D42916F8808F62C5D1257AF65F82A8731347B9C3DB720699189B383BD786B4F3B641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354602, "uuid": "ebdac4de-5f9e-4b27-a230-da8cb8ebe2ae", "value": "12288:Ymhj/s84ZcJjzjxTHWzcWl+USlgpNxDFkqF/mVc/:Lhj/szIj9HWzckzmq5mVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354602, "uuid": "57d790d1-d4cf-437f-88eb-5b734893f47a", "value": 641076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354602, "uuid": "76e57746-74dd-410b-a9b3-9a2645fa522d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354602, "uuid": "f8656ea3-2259-427a-a642-2ca7e7502f81", "value": "siiarmv6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c919d202-3090-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775353383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353383, "uuid": "0ab117be-667c-4315-8793-801f3175ee27", "comment": "Malware payload (Mirai)", "value": "69132aa576272644d8e7bddba97e4c04", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353383, "uuid": "04548f53-c608-42af-9a2a-8bcdef523db3", "comment": "Malware payload (Mirai)", "value": "6bfebb9caeb383e28af35f4429ddd9410f087ce33cebdcaa4c894db9a13ad30c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353383, "uuid": "c3ad5db0-2738-4cfa-8def-d9da4a7491fb", "comment": "Malware payload (Mirai)", "value": "5b98473233f79ff0ed7e85d5d24777dd5b04d4b1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353383, "uuid": "aeaded62-1c1b-4249-ae0f-97d02e7fe06d", "comment": "Malware payload (Mirai)", "value": "af6fd06ede33270b5c3627d895475977ab503fef39a1aac8936590e8b1b2c402c5b620eda62a22ea232640aed3efd1ea", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353383, "uuid": "89af40c1-1ff2-4950-9ab7-d7184805f4d2", "value": "T1434328539A269F0AD54778F025F28E720B52FC2A59631FF5B036EAE85643DC8B1123B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353383, "uuid": "78db9231-c9b9-43b0-ba42-cc47e50060b4", "value": "1536:d+ru8Z9Ww6JKRCGVe5c8FrTALYKaA7CJ:d+rDZ9nXRe5cMHA7K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353383, "uuid": "f1f69efd-6643-43e6-a41e-89a1f38752eb", "value": 57344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775353383, "uuid": "3b35b371-635c-41ee-a878-2a09ed2b98b9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353383, "uuid": "1a84f650-809a-446c-9cc9-fdf6a581252b", "value": "mirai.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c55b6d0d-3098-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775356812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356812, "uuid": "5223cf79-9eee-4970-bf6d-3597de25af8a", "comment": "Malware payload", "value": "69d01740607121233600096f32e652cd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356812, "uuid": "91fe2947-c317-458b-a820-c3f38f58de7c", "comment": "Malware payload", "value": "6cbff1d0f0ded1dc307c034efeb7f393b1d7a464a212f01ab906daaab01e72a2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356812, "uuid": "e5a1643c-ee7b-40f3-85e5-1aa5281b3528", "comment": "Malware payload", "value": "6a47562866e0b8382ba2f7fa5e2bc766727284b1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356812, "uuid": "6da0f259-ab50-483e-8ceb-92a631968e26", "comment": "Malware payload", "value": "6debb6c38b317b990edd22995ec9c70ea6990394db9da98d37e7f27561e5cb6ca7c29272389b434ba86598682cdc8487", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356812, "uuid": "22a3aa45-adbc-4cb5-b8e7-b4cd2d98e4ac", "value": "T1FD03E581B9815A17CAE413BBF66E41CE376567A8E2DF33079D222F10778AD2F0D63641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356812, "uuid": "4bcd8a78-3052-4f6f-8e46-c859fe6affba", "value": "768:YC/MSnxqmssbK5wOhHb0XEM6RMi7ZkBPq7xnn:ZMKxDsfb0XpBP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775356812, "uuid": "a0337768-4a52-4d90-b8a3-7821bc9c0d7f", "value": 38200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775356812, "uuid": "aae3bc9b-396d-419f-ac32-7ccb550b8f81", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356812, "uuid": "a02c3d98-81bb-4828-b6e3-46ae07094960", "value": "parm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74990bea-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354100, "uuid": "8e293c76-c6cf-403d-abc4-086d30c3ae0c", "comment": "Malware payload", "value": "184183a7c7ac29b9985677ce111c6a88", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354100, "uuid": "d38668be-7456-4029-8f12-962d14059241", "comment": "Malware payload", "value": "6d711e3b780abbdc7c07a523f499618b525414c30fa987aba23f1f1648699e19", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354100, "uuid": "1941640d-5417-450e-b38e-d9eea3e7c8fd", "comment": "Malware payload", "value": "24a8f08b184b44f031d13459bd39edfb82726ab8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354100, "uuid": "1282ce04-1dea-4b73-8157-5dacdc8beb46", "comment": "Malware payload", "value": "06d72d7c75a750d3d48d8a3e561c25792adf70a4cf3de0a7b038bf5282ba1238ae105c073d1ae5a435055c86868901f6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354100, "uuid": "efab4913-ec0d-4e9b-81eb-cde1dc8035f6", "value": "T1DE054B42FB1C4563C9430EF16A3F5395F7257A4341F9922A370E97672621E3ADAC338A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354100, "uuid": "a67ff391-f612-40d5-827c-6027aa52c5fe", "value": "12288:6MPNEl89l+h0gqNLebLwKx6rgGNiLwqxip3Mm0NXfiyTR7ITc1pNxxY:6oNErhFqNLOEKMziLwqK0NXfitA17xC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354100, "uuid": "f43f7787-be66-42a9-8162-2b944f50ab3e", "value": 856664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354100, "uuid": "a6e68963-4dc6-4e5c-a1a5-0ba7234a1a2f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354100, "uuid": "dd8789a8-905c-409f-95f5-f06888c29db6", "value": "library2ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80e43a4c-313c-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775427135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427135, "uuid": "92de16e2-6f61-4575-8d1e-84f32cd0273b", "comment": "Malware payload (Mirai)", "value": "bcf55959b6df05f47c050c85567127a4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427135, "uuid": "7a438026-4e66-4202-8633-04bb0a9b4bcc", "comment": "Malware payload (Mirai)", "value": "6e6c2828f728285084e1a4c81a7ca23e4f9be68bf4575de4b9003759a6444ee6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427135, "uuid": "00194c1c-d800-429c-a8d6-e66e319eb365", "comment": "Malware payload (Mirai)", "value": "a875b6259ad25275bc113c12115d0f43a5c7dbcd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427135, "uuid": "6a87ed9a-da66-4df2-bc93-79e32ea070df", "comment": "Malware payload (Mirai)", "value": "755d6ee1cea8f9cfdf80d5bea3b875e2457ef4b49b64f962c2557573f3f53b2637f8899d339cb767c227e4b730f1c363", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427135, "uuid": "25b6e24c-ad73-4f86-bdc7-362caf975007", "value": "T17973074AF9829F10D4D913BBFE0E018D33536798E3EE71129E116F11A7CAA5B0B7B452", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427135, "uuid": "e5478efc-7162-4234-ae1e-d4b721667a65", "value": "1536:K9nq3zwiiI5npnFUNh0n2pooZnknrw6iYhf8XllzfisgAXU5wbZn:5jwFI5pWNh0no2nrw6iYhMVgAE5wbZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775427135, "uuid": "eb744d6f-666e-4e56-aa47-714666a421d2", "value": 75616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775427135, "uuid": "f73db87b-f6f4-4b7a-a589-16b3b3af7119", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427135, "uuid": "b590cec1-0445-46b1-a327-28e449b21081", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a30ff6c-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354539, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354539, "uuid": "4853fc73-8cf6-4ece-b4ff-bfa2358fb6a3", "comment": "Malware payload", "value": "4e8bd1652c871ac5b67d92524137a7ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354539, "uuid": "697a2bfa-750d-4e18-8036-2dad15c7da49", "comment": "Malware payload", "value": "6ebcb4f2998a1a7aee92284dbf62a96fa0f897ed91ff262af6f43532798887b4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354539, "uuid": "ae66cf06-7879-47ab-a3ae-128423f7bfdc", "comment": "Malware payload", "value": "d2039965b8bcd5ea82460d8cd38bf4cf9b9c7171", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354539, "uuid": "08fd0414-70fa-4a45-8e88-9239c16f7833", "comment": "Malware payload", "value": "c4780b767d88cda0625b5ecb41b2748be5e61527ae5335f11b42ee280d8d7c4041095d99b09f3f8a09c9dee5a56182fc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354539, "uuid": "e1211207-dafe-4b5a-8044-b868794b65db", "value": "T1B4F46D98E7C294E1F66300F14A8FD7F2196492165053F6F2EB8C2A9774727522F1B36C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354539, "uuid": "69ed311b-3542-45b6-a70c-f0f9d42aac19", "value": "12288:tXsIDg1haKh4ARTFrujieT6oO/xs56Q/y6IEGLlmhhi0PyuCRHBLLu:tXNDg1haKhTRTFruji1JsIQ/y6IjLlmW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354539, "uuid": "ba28806a-9d33-4568-a44a-7a1668ed5d2a", "value": 775232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354539, "uuid": "e212f674-759f-4dcd-b61d-795ab891cdcd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354539, "uuid": "4276494a-e94d-4097-9b9c-a1e341b432fc", "value": "tcii386n", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4db0015-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354637, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354637, "uuid": "34d337a8-d6c3-4ee9-b961-216829c4562d", "comment": "Malware payload", "value": "f05cc8644cb4502909ac126292c878c6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354637, "uuid": "556efbd8-484b-42c2-8f1d-b7c3d43a30c4", "comment": "Malware payload", "value": "6f25aaf82c8591c3fa8af1ab229fe02b5db9079e096ae6ca42381594e365c51a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354637, "uuid": "ae49f9e0-5afb-48c5-a5af-09c99e2b374e", "comment": "Malware payload", "value": "9e007f1290f4b146666e3f8901444cc8ee568ca3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354637, "uuid": "0f6031f1-cde8-4a56-b397-877dfae1d1f5", "comment": "Malware payload", "value": "c9f987eadd81b75c4801519724aff734851b378a1e037669894df1418aa874a6f66bbb2668dbeaa68c1eb8a224c05905", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354637, "uuid": "8a5af021-ada9-4e12-91d2-b3701c26e69f", "value": "T1ADF45C07AF405FEBC49FCD31492EC30601EDD89389D2672A71FC4B8CBA9965A4BD3598", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354637, "uuid": "f871d223-a5c8-49cb-9d65-39b697315c33", "value": "12288:Y5fncphk1AKPlRc3NLuBIjBs9fF5yT8KIHy+eN2xziELaaVQC5znxK4xeM4FqhYF:UMhkXcdq9fF519m3X6jrE5f/RXaIdVlj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354637, "uuid": "41cc112d-e1d4-41c5-b07b-49435c299218", "value": 763276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354637, "uuid": "ce0c8fbd-3bcd-4b41-8f3b-1d77afd7aaf6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354637, "uuid": "2ca96d61-716c-4ef3-9b04-ff4a56b81eeb", "value": "siackmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fd25a41-30e3-11f1-a769-42010a9c0008", "comment": "Malware payload (AgentTesla)", "timestamp": 1775388881, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388881, "uuid": "c4111708-a064-4f43-8160-a7fd6bf6cb8f", "comment": "Malware payload (AgentTesla)", "value": "8e65d142051e11b9e5366f5f4ed88d9e", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388881, "uuid": "44fae9fd-6894-40c2-8ce5-c55fc20add61", "comment": "Malware payload (AgentTesla)", "value": "6f25b64efa6c3595eccd87c8c3a1f5265950b3f64bdcde882338ad9d84712f02", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388881, "uuid": "129fc488-f79a-4aa2-84cc-1da9dfebf2ea", "comment": "Malware payload (AgentTesla)", "value": "1774e43902d92c75f2a6101deda937c9c0117eda", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388881, "uuid": "9685d724-bc99-40a2-bc9f-17f861a6985c", "comment": "Malware payload (AgentTesla)", "value": "21de94cad71199ac5a298eac652116fa771cc16f7c56e73b80ba6e262ae6c8280b1a5acc0a6aebe3c0f1119185b40219", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775388881, "uuid": "38039397-f373-47bf-85bb-a2e794a09275", "value": "T16164CF07A3E64E10E6EA9F34D8F7612403F2F7562B33EB9F2A5401992D53761CE107A6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775388881, "uuid": "0e6513cc-ef21-4bd8-814a-ff5ebd6b87a7", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775388881, "uuid": "874294f6-30b2-437b-9e4e-fe1baea80eda", "value": "6144:HiVp6DGx4Y9lPFa5GIykgZ8SV/rwcj65BzLO2L4eK+:HiP6M4qi5GI9gZ88r16/e2Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775388881, "uuid": "9b955a66-debd-44b5-8ac5-32181965b475", "value": 323584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775388881, "uuid": "cf26398e-5edc-4b5d-a395-f34e9d868816", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775388881, "uuid": "5eed245a-98d8-4e4f-a365-25322ad33180", "value": "gnxLZ.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ac398fb-3112-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775409005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775409005, "uuid": "9b85bca5-9a3f-49f4-a346-fdad64e70d8c", "comment": "Malware payload (SalatStealer)", "value": "94ff227c237734ef3e3082f9e8fc43d1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775409005, "uuid": "f2b7a612-0410-4a49-ac91-6fd09d6a64a0", "comment": "Malware payload (SalatStealer)", "value": "6f367a99a5ca19b0d9602d09eae8d83396ed53af729b18be8fd29013c0bc870c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775409005, "uuid": "051475e8-1ed6-4c9b-b9f1-5a0d8720990f", "comment": "Malware payload (SalatStealer)", "value": "099d483f5d09df1d908c2394414be98c4dfd98f3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775409005, "uuid": "3e6c444e-fd74-4f3f-9eea-3fc5110c12fb", "comment": "Malware payload (SalatStealer)", "value": "6cf64321c22fa956e8d1529b3b9583beeaf13a7dbffd715a73501463b8cf99128e730c441ee2cb223b9018e8d4cc7a53", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775409005, "uuid": "26db9825-2d53-4cd6-aa11-67fe1936df57", "value": "T1A9C65B41FACB58F9EA031931446BA23F27315D048B28DBD7EB14BA2BFC776911D67608", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775409005, "uuid": "129590db-e9ff-4e7a-b543-b94d59b032ba", "value": "49152:HXzJlSpDyUsegr7XewXoMiH5Xb6+iUgEg0YeuITO++aMhBNx1Ql0aPk8mufZ9n/2:jzSpZ+XBXojF7kZvMfoFnf+UH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775409005, "uuid": "f1407755-1754-4cb1-b454-5751d3c7bb39", "value": 11780096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775409005, "uuid": "175823d8-2691-4433-ae80-ba0175064962", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775409005, "uuid": "82d65992-e7e8-40a9-a002-14d19c3d6f25", "value": "6f367a99a5ca19b0d9602d09eae8d83396ed53af729b18be8fd29013c0bc870c.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84ed9500-308f-11f1-a769-42010a9c0008", "comment": "Malware payload (ACRStealer)", "timestamp": 1775352839, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352839, "uuid": "39acc6a0-3a60-487c-986c-9287770d9697", "comment": "Malware payload (ACRStealer)", "value": "7c5db868a5b905ff51e91d9dd7cee8df", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352839, "uuid": "c0296798-0dd1-4ce2-b8d2-d360f88cc29f", "comment": "Malware payload (ACRStealer)", "value": "6f8d2c910be1d6a742c3875214f34bab52d6e3a62eab834126bf9f9cc00c97fc", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352839, "uuid": "d2e52441-6970-4ac1-ad9a-eac76c253912", "comment": "Malware payload (ACRStealer)", "value": "5993fc5b3c354718a229bc40a3ca7dfcc7b4b632", "object_relation": "sha1", "Tag": [ { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352839, "uuid": "bca14b5e-cccf-4016-afce-ae75a8f7d170", "comment": "Malware payload (ACRStealer)", "value": "522be82d3d291c59a585502d9ffe857e04ffd9ab7cc80f5bd207c1505c1d7a3a433d7cb82ff6beb4cea652cbe9c3758e", "object_relation": "sha3-384", "Tag": [ { "name": "ACRStealer", "colour": "#281442", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352839, "uuid": "33854aae-bb32-4c8f-9191-c1e3bd3681ae", "value": "T1D0164A0BECF94CA9C499E1348433A2167E2178844B3163D72BD5B3692F777F098B6B19", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352839, "uuid": "4eb32148-ed0b-412c-bebb-f61d4694bfaf", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352839, "uuid": "f11527c5-4ce8-4ba7-a4dd-cebb3ee7e4be", "value": "49152:JQtCPn66gRYr4xLMtL/zbUGUjsMzYMR5IuLWjkpZAcUorAlq:JW6SXEu3S4kg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775352839, "uuid": "b65b1870-7a89-4d5d-868d-9a93311186f6", "value": 4117504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775352839, "uuid": "2b13e717-182e-4743-80f1-6383accae90e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352839, "uuid": "ae6a32e0-fc97-40e6-b2a1-981405109f47", "value": "SecuriteInfo.com.Win64.MalwareX-gen.53694612", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d72dd25b-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354695, "uuid": "52513c8d-ea81-4fe9-a45b-854841278b87", "comment": "Malware payload", "value": "4a229edfa220ffa534e22e1e7dcae838", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354695, "uuid": "5b6bdc48-9168-47f8-ae86-cb32a7d55cda", "comment": "Malware payload", "value": "6fd8efc92d595363d2f35657d5c6a86b3874c75014e4317d9beeed31576d9d52", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354695, "uuid": "a4396153-9006-43d5-b6ff-c4057278ed43", "comment": "Malware payload", "value": "3b8245d21a210ee491db8ad72eea1d8576dbb0c1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354695, "uuid": "c6a6dcf7-7ca2-4887-a7e6-f98869478e85", "comment": "Malware payload", "value": "11d0443d091536809f19d9f45ac1c0b6f3277b7ec2161e48f42b6480a4eac86946fd45118d250d57abcc59d609173c07", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354695, "uuid": "7d78f17f-c8e6-45e3-a7da-66026cd97eed", "value": "T17F057C2EA2B3F17CD01BC03447DBCAB25532F07926212D7B26C4DA353D66DE22369B65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354695, "uuid": "fdf68879-5a68-4eab-9204-f20706ae4e74", "value": "12288:OYEKOZVsd5H1kNgUUBEUzZvNotFtjXY1vDZay26ROHXfhr:5EdZ7Ngr+2WtFhXsT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354695, "uuid": "d82862ba-8547-4fe6-8b90-ab5d4614eb36", "value": 826136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354695, "uuid": "c576078e-1354-40b4-823f-e4efcda30f98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354695, "uuid": "86001e6e-a8fd-41d7-aeae-0222e47e8293", "value": "siix86-64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14947bf9-30fc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775399466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399466, "uuid": "18af0732-a818-4642-bd72-03c24046f23e", "comment": "Malware payload (Mirai)", "value": "82b164552d147b6c355ddb06339f4026", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399466, "uuid": "60747663-c7c5-4a43-acda-c80ac94b3a49", "comment": "Malware payload (Mirai)", "value": "706f62db03bc3256062b918ef0609c1f59a6ce6e523a18ca70bbc5a742f99ed1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399466, "uuid": "099b0cda-5b06-467b-a5a4-abfdc40f57dd", "comment": "Malware payload (Mirai)", "value": "8bc67167a3b590f644beb195e7f1cbaa7fa9b979", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399466, "uuid": "84aceab5-052e-449f-aa6e-57a9ae1ba735", "comment": "Malware payload (Mirai)", "value": "6e3bb54c9e945ec90b49f7a7575556e3c4c63491fa50c0aec930d42cb31c6b3cac5237898970d1223f42c8784ea70a3e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399466, "uuid": "0d533a77-7648-409b-8c94-b69a8ab4b1bf", "value": "T124E30A46F8819B16D5D111BEFE1E128E73231B78E2DE72029D245F247B8A97F0E3B605", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399466, "uuid": "3b6cff34-2c57-4af6-9510-c5d89ff6c096", "value": "3072:oucP8GUZzpkEHXyZIRMYoaQUipboRx2Q+/:2PxqzpHXygMNaiQx2Q+/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775399466, "uuid": "459fe8f4-506b-4767-9383-e44a5cafd50a", "value": 150652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775399466, "uuid": "a8000949-dd2e-42a9-af0e-6fc5dcbbc602", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399466, "uuid": "222fe20b-5723-4b58-be28-244eb43e2022", "value": "main_arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da943de8-3102-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775402375, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402375, "uuid": "2489418e-ccbb-4449-9447-7bc9dd63e334", "comment": "Malware payload (SalatStealer)", "value": "d947bc6f971cc184d20d6cd5f0d0fd68", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402375, "uuid": "a58effed-6d43-49a2-a261-0a2a51257a5d", "comment": "Malware payload (SalatStealer)", "value": "725ba5377577a6d7cad4a61a06412e9517f362f0ebaf1bf8bf40a04d4246db2e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402375, "uuid": "ff843029-63c0-4d6e-8065-c8d537da34a4", "comment": "Malware payload (SalatStealer)", "value": "0c86db43bb96b30276ca9ed7d116717a0914b916", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402375, "uuid": "2e6be9dc-4f7a-4ce5-bdc3-429ee790c916", "comment": "Malware payload (SalatStealer)", "value": "3ec3df774945b39d47699700a9af5ff4a69ff27c0bda02b3d004a21cd5ad7743df281ffbd133eb39f36897b3a8449885", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402375, "uuid": "768f32ae-a448-479c-bf18-8e7a6eb0ad4f", "value": "T14DC64B01FA8B98F1E9035831555BB23F63306D048B28CBE7EB583E6BFC77691197A215", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402375, "uuid": "181587b4-5d14-434a-a131-f6639fb34729", "value": "1aae8bf580c846f39c71c05898e57e88", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402375, "uuid": "e04f6c26-1c4e-48a6-8dc4-c227089e5a4f", "value": "98304:xQ/GefkM50RfAVdshNgMHDuseOw/P54tl5+UYhPsNLGEr:xeeYshVVeOCk5+UYVsNLjr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775402375, "uuid": "4b332682-916b-48f5-a86c-845c266dccf6", "value": 12317696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775402375, "uuid": "71f8b635-d80d-4456-ab1d-b77c08e62e89", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402375, "uuid": "20c8c119-ae42-4314-ae02-8de6aa6a42f2", "value": "km9gux.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "940cfeed-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354153, "uuid": "cdfd9689-a8a1-4258-a471-70c78867b328", "comment": "Malware payload", "value": "70ebc77b98f919b53464d88e2e3ed86a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354153, "uuid": "05172107-7058-4bf6-b2e0-b78cee8c5f14", "comment": "Malware payload", "value": "73fcb8d5484450ac007b5781bd2181ba3b79b867205e2035e666c1dea01465a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354153, "uuid": "a5219969-b5b4-4514-8755-eb454380d995", "comment": "Malware payload", "value": "b16e0338a2ea31aaf5940258064271334ade80a5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354153, "uuid": "d255ec3c-2b1f-4f86-a251-f1a995ad159a", "comment": "Malware payload", "value": "0ba2fcd85324297e414ba208879ec7827318050f5e54c93ff249393799befae4d7e9023593cc462659ca7d2c83019451", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354153, "uuid": "cc79ebae-ef4f-4bd0-9192-2c5617495496", "value": "T197F46D88E7C2D4F1F65300F10A8FD7E21A64A21A5053F6F2EB8D2A9774727526F1636C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354153, "uuid": "bd6c0a11-accb-4b82-a709-7e6a36b985fd", "value": "12288:/m453rrhHKhmGuYvdBF+VPFHXJUhxO2NAV92qeIm9PcvPyKEfs3gOLu:/mS3HhHKh3uYvdBFoZU7O2NAV9heIm90", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354153, "uuid": "a5e97273-898b-4d6a-bcab-9ba176367d26", "value": 779328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354153, "uuid": "2c985e59-bc4a-463a-8c52-2a8d389812e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354153, "uuid": "f02c5e6c-c2a7-4c87-9b48-52b1cbb80525", "value": "acki486", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9fcdf51-3106-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775404065, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775404065, "uuid": "5715fd85-323e-4a1a-a9ec-577b5e25074b", "comment": "Malware payload", "value": "456b9edcd114ce925a822d5c09a6d5e7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775404065, "uuid": "498c08f3-0e01-4de6-b1d9-5e5f8dddd785", "comment": "Malware payload", "value": "74088d667d2a0216fbd22ada76a1c7b656383387d31299365d1cf4b3a12c3323", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775404065, "uuid": "965b708f-3303-4be4-a2b4-6f00f7609002", "comment": "Malware payload", "value": "987e5853b8112c400176e8f9dcd921d405f23110", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775404065, "uuid": "462fd2a3-dc4a-49a0-8249-1b13fe5cd04a", "comment": "Malware payload", "value": "ef177870728e26481beeb93453e0b4b99a003b4b96f2b39bbe4c48533bdd67e9f29a23612ddff3d25d1f7ba0ba1f64ca", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775404065, "uuid": "ce957938-3fa9-4b20-8f39-41a488be072b", "value": "T1F918330F2EBFFC95F2600F7543A837A2070B5EF169615B1A002974B5A7BE55C4D3A2E2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775404065, "uuid": "268efd3e-9039-43ef-bfc5-b2f9df312e02", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775404065, "uuid": "16600fb3-1456-4454-bec4-b65963961975", "value": "1572864:33g3+BWMFDe45k3+8Qgp6hDRVO34XuIjt54CwPGBYOoJPzRPHF2tlFQKAiQX7S+:33guBFle45qsHhDRVI4++34CwPGBYXRH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775404065, "uuid": "a3d82b5c-3e8b-4987-87f4-7ee98cf405b9", "value": 90027608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775404065, "uuid": "14aa0825-68df-4ca5-af3d-7d9aef83e337", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775404065, "uuid": "7ab4c1e1-0ae0-403a-8859-00a42437c69d", "value": "Testeee Setup 2.4.5 (1).exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82e93992-30bf-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775373451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373451, "uuid": "81e7b04e-b8c6-4a72-a6ee-6ff918396a1f", "comment": "Malware payload (Mirai)", "value": "1cd067bef73cc76e87d647ef182bd0e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373451, "uuid": "ada2e5f1-1959-44ac-9bff-7d39534bcfb4", "comment": "Malware payload (Mirai)", "value": "7575765147a3af17e5e83196091ea140c1e1aaf1bc179a516972e9fafff8b74e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373451, "uuid": "9062099b-8dfe-43fd-beb1-99d5fa5b7e9a", "comment": "Malware payload (Mirai)", "value": "1bcf7f9048ccf398e36bdc0227071a7e65d2c3d1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373451, "uuid": "560386ed-c363-480e-8190-cac2c415bee8", "comment": "Malware payload (Mirai)", "value": "feef9ed7cad8039e1cfb394f041d4d50e59d73254e3030e97ff71b3c1d3501a2f8178f3b44e1e3ee4faa2b50c837ae2e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373451, "uuid": "299eaf80-6ed8-43e8-92a6-f5a2f56c978e", "value": "T193C30A45FC514B23C6C612B7FB9E428D3B2A57D8D3EF720399216F60378695B0E36A42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373451, "uuid": "de193fea-7fee-4449-b7be-d2c15c180385", "value": "1536:oKwXuG541z3ksUTYuxcwoWzA2dJ4VR53TGAWJ3mdlUJwywO6/QrrYssanJ2i3Tk8:oKwHTR0IcxWzZ4B3qAWJ2crnbTE8UaH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775373451, "uuid": "0b76a209-27d2-446f-905e-716566a8d82e", "value": 125472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775373451, "uuid": "bb5b1169-a72c-4536-bc9e-51e128e7a326", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373451, "uuid": "ce9bcabc-3e58-415d-a3eb-2a74cd2b08d5", "value": "main_arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22b5c359-3119-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775411945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411945, "uuid": "6a03e859-66d4-4b78-8ac4-c4656597af53", "comment": "Malware payload (Mirai)", "value": "9502e630d64b5e457f6a7f69a9ba39ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411945, "uuid": "7929d9c2-29f9-4e4b-8efc-95b4fff10105", "comment": "Malware payload (Mirai)", "value": "757fc99349380676613da118461274ab495703b9848c432715f17192ebacf142", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411945, "uuid": "f2892128-c963-4770-bc6d-80eb89eebfd7", "comment": "Malware payload (Mirai)", "value": "e342a650a84c53c52325675f0d8ffcd8703e9ca9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411945, "uuid": "7201c8b0-ff0e-4f22-aedd-addbd802787d", "comment": "Malware payload (Mirai)", "value": "9fd7086d012843ddf5ad5aebda4fe8ba5f06666d269b064e11f7fa1915e560a3f7bd2d394e44f2aee90b20f82a3772a9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411945, "uuid": "846314d5-9b77-4eff-a04d-2a9af91390e8", "value": "T1E1C35BC5E793D4B2D8430B7001ABE7395631EC621329CE2BD76CFFB65F22682B546618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411945, "uuid": "c294182a-0d86-4c4f-a57d-ffbc53e19aed", "value": "1536:W1MXVwBrNbNOQLbdLkYpgbWxZ5S8g7Rkl9bdzUJ31Q6tNB5czZr1l9FGnBaUUkWG:nXa1Nb1RHNxZw0Wu84z939KUkWfSd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775411945, "uuid": "7782431d-cdf2-46d4-b984-1590c06631ff", "value": 119444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775411945, "uuid": "17dae35f-529d-42aa-93e8-66b030a34a0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411945, "uuid": "585380c5-e432-436f-bd97-25c590bc102e", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ef9e5d6-3144-11f1-a769-42010a9c0008", "comment": "Malware payload (RustyStealer)", "timestamp": 1775430595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775430595, "uuid": "6f0ce300-c2c8-4661-9405-9f0ea5dc7be3", "comment": "Malware payload (RustyStealer)", "value": "b96a9769d349b500887f931e8de9ddf2", "object_relation": "md5", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "BB4.file", "colour": "#68624C", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775430595, "uuid": "d8f4c508-70bf-4b7a-b6a0-60996595b067", "comment": "Malware payload (RustyStealer)", "value": "758713b7d5118b94c56112d118c87efe9f81fbe749e3fd20762c6a1810e7c2cf", "object_relation": "sha256", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "BB4.file", "colour": "#68624C", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775430595, "uuid": "534cc1e7-2f02-4e3a-8396-c0336de128ef", "comment": "Malware payload (RustyStealer)", "value": "7b8b0ca67bce1f13fc775559b042322f76dd1b1f", "object_relation": "sha1", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "BB4.file", "colour": "#68624C", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775430595, "uuid": "fb459e93-d5f8-42b3-bc15-bd27e15a5c32", "comment": "Malware payload (RustyStealer)", "value": "29384a50eb4bb8dfdc83db0f117704736815306aa291638d989179da7b67df347b451ae20584e26836fe4adca25d33e0", "object_relation": "sha3-384", "Tag": [ { "name": "b", "colour": "#F817F5", "exportable": true, "hide_tag": false }, { "name": "BB4.file", "colour": "#68624C", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775430595, "uuid": "b57a05b5-67e3-4ff9-b48f-f07f6f19ec86", "value": "T1D566B0B832546CF6BF2F537BDA663CAC13621223478A9CDD5074B2D50653676FE2A80C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775430595, "uuid": "620526c1-d069-4881-8a49-7505e2f5e294", "value": "ae3c2ea21d0a1fd83a33d73767c53bbb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775430595, "uuid": "0c10aaf1-fa1f-47d8-8369-c5b47cdd4f5f", "value": "24576:VsiCcjRJFutu6KusEdea7ZmUQaJ9eLDk/P7HLSdLTCzgDMuEoZt4ZAExiU/8SPD0:cZmr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775430595, "uuid": "e8674cb1-dd5a-4328-95fc-c49f21ad6a43", "value": 7111680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775430595, "uuid": "2302424f-8d3e-457c-9c25-03db65c34811", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775430595, "uuid": "c19259fa-318e-465d-b52d-53109733d607", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a38463c-3119-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775411957, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411957, "uuid": "e228a522-a03d-4390-a537-ab9b79cc163c", "comment": "Malware payload (Mirai)", "value": "17ad2cb9d7ad7d137cee1a867c285bf7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411957, "uuid": "27ec6c67-b6c4-4b61-b5a3-1ee7d4f41d54", "comment": "Malware payload (Mirai)", "value": "76221cbf101b1e73e3a471bb3c1c97c349d0bff6c160b85811ca842ccaaf8b45", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411957, "uuid": "8f0d4087-dc6b-442c-820d-acd205ba3758", "comment": "Malware payload (Mirai)", "value": "74597bca0f7cb617044223fa5237319e98fe08bd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411957, "uuid": "1350994a-bbc7-4698-8066-3df5f3ea3342", "comment": "Malware payload (Mirai)", "value": "931779e0a439ea970713c3c5bd18d01c6a435f4858af8a8774e6dbe9119351e509e77efb43fee72b952ff4a6624b7e3d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411957, "uuid": "67ebede6-d1b2-4c49-856e-fcbf23d5252c", "value": "T133241B01B8518F53C5C32BBBF7DF42993736671497DB7302EA24AEB42F4669D1E2A201", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411957, "uuid": "efc51564-a683-47a9-8fa1-236544628b85", "value": "6144:HlTTjg4qxAni22j1JpxUXyqKJKHtEqZ06L18Hts1QS1:HlTfixAqRJXUNKJKHtEqC6L18Hts1QS1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775411957, "uuid": "feccc6e1-ea63-49d4-9743-803671c5e9a8", "value": 218600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775411957, "uuid": "b15f074f-82da-4958-96d6-f3bd13da5b8c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411957, "uuid": "2819a248-c7af-47b6-8e89-8ba0644e4604", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "181e32ca-30fc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775399471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399471, "uuid": "5f7d27cd-0dfb-41dd-a3d3-10b5f1f640aa", "comment": "Malware payload (Mirai)", "value": "f265a24ab6737fe57bcbed3f9951150c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399471, "uuid": "2224cb01-14fb-4903-8af2-7c4f4b98899c", "comment": "Malware payload (Mirai)", "value": "785194c039df313a6cb1ef0a82f3bd84b9ba8094bfacb09aa91f5202f0254403", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399471, "uuid": "e1d6c9b4-fc8d-481d-8358-2b25907bc03e", "comment": "Malware payload (Mirai)", "value": "c02c49efff88b95e58c7fd18eef67184b00b4fa0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399471, "uuid": "6745887a-c8b4-41e0-b40c-b9fb1e648c65", "comment": "Malware payload (Mirai)", "value": "cec04b71fa53fa4d6792d8a0d4590e7f1993bd3c58464eb1709ca5104b1a8439f6a8ea7eb687e9916a8375bf146c454b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399471, "uuid": "8cb464fc-8640-4d67-b8eb-f35757edddf0", "value": "T154D33A06731C0A47D2632EF43A3F27E083EFDA8121F4F644655F9A8A91B1E361586EDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399471, "uuid": "5c60a750-a7da-4f25-9dba-09daefbd9c2d", "value": "1536:5WM4Crntg3tZVoBZgQMxfa1qITG5HGXmY+0KXc9f8vATpEX9lejtSqqVoLSG1Ayg:5WMtgPVegQMxxIgpY+7c9pTCGTg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775399471, "uuid": "50a977c6-1a0a-410d-bf40-72f2f29d597a", "value": 142228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775399471, "uuid": "005e7185-72c9-4c85-a518-9625b35e3c06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399471, "uuid": "ab83b666-5b72-411f-bc43-25cbeafc7ddc", "value": "main_ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ca79406-30a3-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775361469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361469, "uuid": "ed7f4816-67bc-4ff0-90f5-ffe577e474dd", "comment": "Malware payload (Mirai)", "value": "ca0826b5e3cfdec7c723397584278251", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361469, "uuid": "97398329-7e79-4ce0-a90c-c2d488af8c1b", "comment": "Malware payload (Mirai)", "value": "7938be55716b8e131cc9d113a5488b065ea6ce96c79fb810cb223b35fa5812db", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361469, "uuid": "1b236147-a54c-4839-9ff1-762aeb655adb", "comment": "Malware payload (Mirai)", "value": "957ab966e9972d83bc69ce9eaf312ddc1c43dfc3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361469, "uuid": "00eb3f55-50cb-4329-aeb6-6dac6134e9be", "comment": "Malware payload (Mirai)", "value": "c6a11b12d0713c134fbc4e9e4420337af4c88783567bf0c0de6495d6ae62b63200a9b21e3ecaffb44c4d743a8b1e1b1d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361469, "uuid": "19231ef6-2799-4ea7-90b4-ae678c980046", "value": "T1C8B32A46E7408A03C0D62779B6EF42453322EB5497DB73069528BFF43F86B9E0E67606", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361469, "uuid": "8e80e6ea-8985-4980-9073-1d243d5dac40", "value": "1536:7inxzdGsaMokqsXRXwqK6YjchNl3hiI6Ke4vJLx52dUkpUzA1zw/991dmroF:SAsmkqshXwqK6YW76KeCJLCd9M/9NO8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775361469, "uuid": "03000a61-5a4d-4a6c-87f3-8b4f8aaffa87", "value": 116586, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775361469, "uuid": "25e0f12b-8187-47e4-a1b3-de8d2e9c19cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361469, "uuid": "75613186-edc9-47e0-a42e-1263f20c95e2", "value": "parm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98e49baa-30d9-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775384655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775384655, "uuid": "ae9c0b90-edb1-4136-a3f8-ba16ff51aded", "comment": "Malware payload", "value": "ce02944ff8d5b4b89dc05f3df0448bb8", "object_relation": "md5", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX1.file", "colour": "#FFF7BF", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775384655, "uuid": "1ef3cf94-7411-45d4-a801-7255e9c95f6e", "comment": "Malware payload", "value": "793e3afbce88e9498cfdc273db4e40b57cae2bd6de10f392c83a162b94c7e1ad", "object_relation": "sha256", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX1.file", "colour": "#FFF7BF", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775384655, "uuid": "3994bd68-2e59-4fd5-8ded-6aead49adb26", "comment": "Malware payload", "value": "8d0a6659a74beea34bdcce60e3fc06759703b6fe", "object_relation": "sha1", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX1.file", "colour": "#FFF7BF", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775384655, "uuid": "61a557ff-3926-41ee-b2f9-bad315f5a1d6", "comment": "Malware payload", "value": "9972c02e4424f276975887c0eb5c4be2d417143ba771d56761c24913e7e8b6313d8d65b8dc88227cb02711aa4876453e", "object_relation": "sha3-384", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX1.file", "colour": "#FFF7BF", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775384655, "uuid": "8b178a9a-9aaa-472f-819f-4c87d8789375", "value": "T14A958D4B7CD104BAD06AA33388F6A2917B32F8190B3263D72F54AA783F767D05979750", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775384655, "uuid": "5cd44369-cb46-4b39-a8bb-34d2ce8d9191", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775384655, "uuid": "63ac191e-4f55-4927-837c-d98633a12b95", "value": "24576:OJ3CfH1WDnx1HbRnluvey/Oi9eIxu3Snm6kCGiWPrK5hX3Hd:OJSfHs7Rn2er1IxuCn2tE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775384655, "uuid": "28d609a7-089e-4fdd-b565-45855a2d3ae9", "value": 1917072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775384655, "uuid": "7f309bc3-5e5c-409a-8a33-a7c789492c9a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775384655, "uuid": "9fd56ed0-f53b-4ed7-bdc0-dda6fc7d2d1c", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9304c39b-30fd-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775400107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775400107, "uuid": "720a842f-5e77-4b54-9236-14ab4d2227c2", "comment": "Malware payload (Mirai)", "value": "642fe1b7cdaffa6fa919a55dd8d568b5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775400107, "uuid": "462dfd72-1e08-48a1-bbba-551cefa2956b", "comment": "Malware payload (Mirai)", "value": "79f950c27157c7046162de16174dbdcac5a209640a4b70ac263dc65b1e24f269", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775400107, "uuid": "afd337b1-02ca-4e15-993d-abccaa13d5ac", "comment": "Malware payload (Mirai)", "value": "d36258a39500d7c7e48bcf4808ef957ccba03e1b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775400107, "uuid": "07b28ef0-e454-43a0-945f-660470ffd1df", "comment": "Malware payload (Mirai)", "value": "3fb9ee7cc25ab109c493f0f5a6867203299be27aa67a155cad46a2f7f2ce7f063f44b76a013b7bc29f6e494afad2c018", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775400107, "uuid": "7941d528-bf38-40fc-9b32-69f93fd868af", "value": "T153F33BC7F800CDBEF80AE73748530905B130BBA255825B376297797BED3A0991977E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775400107, "uuid": "89640627-9d76-452f-b4de-2bf1257be0e5", "value": "3072:ZG5yc/y1IcSWqyAl9ed9/1qVM9uBSAsgcVljbiNLHbDLgi:ZG519yAfed9/1qVaursg3LHLgi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775400107, "uuid": "0bfebffb-99f0-4143-88d0-c64d2cae4ede", "value": 157504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775400107, "uuid": "a223f104-01f1-4c13-ab96-157e17cdcccb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775400107, "uuid": "22d91b30-92f4-4ffb-a5fa-93ad389e88e5", "value": "main_m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3093f87-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354661, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354661, "uuid": "47b68016-e54e-4b5f-95a2-adce95bfebe9", "comment": "Malware payload", "value": "6f7ae0ec491e5411b45c4b62d2a5451b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354661, "uuid": "0a699967-aab2-48b5-8186-54e40d53d743", "comment": "Malware payload", "value": "7afb8b3f632e3cdf511d258aa5ddf53631df088a1aa0c167b6ef3194e5a15d1a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354661, "uuid": "96476e15-62ff-42ad-a322-6f7f6b050f66", "comment": "Malware payload", "value": "d540f2a1d9d3c17c209a607920ad6026e8fd0327", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354661, "uuid": "10e82706-4308-40eb-828e-8dd5edadc6e3", "comment": "Malware payload", "value": "245e0236a1dda96a2cf03f4d9792b2af13cab467a68cf17bbb36c6adecc8317b9c1eb3ee60c95ddecd8c57fb80f8586f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354661, "uuid": "42081937-a2e0-4402-a8c4-91cae1942117", "value": "T147A58D06BD985E5BC57E12F388A112D82734EC45AF8697139E14F73C3CBB384AE4A785", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354661, "uuid": "bdd82551-8c13-48f2-916c-9d924acce546", "value": "24576:JOE1+tMkgdpgh7y4QGgQg23cGFL1IN8GNnvaXu0mYY:oE1rsHCiFQn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354661, "uuid": "04f11761-175a-45ff-9eef-5b3f9557a0e4", "value": 2162850, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354661, "uuid": "9500cdf9-ab3e-4f87-8f20-467a5c0af18e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354661, "uuid": "c8a35a0a-82a0-41b6-a140-8d9f63088eb5", "value": "mtdriscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4e459d8-30a8-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775363737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363737, "uuid": "ad60383e-024e-4181-aa46-cdeb971e65a8", "comment": "Malware payload (Mirai)", "value": "9ed8e66261579de0809f5ac32bcbba73", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363737, "uuid": "59cfb835-5a69-4341-9ceb-05b53d421e40", "comment": "Malware payload (Mirai)", "value": "7b7feb85d68a2bada82eef17309890f90de907332ac8cfd474708387f7ccf34c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363737, "uuid": "1b28dd70-7299-43e6-be47-5191d6a63507", "comment": "Malware payload (Mirai)", "value": "4a9c9b370dcf3b5e3c4767e294adf0f0122d6f3b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363737, "uuid": "0e3f7ce2-2e31-4392-a745-c7016e81e043", "comment": "Malware payload (Mirai)", "value": "aa340920ed57c2f4f20d0c2880ba83e189ebaa435e4652ccdf550b95fd1661ab518b9a0500f39d75867864f2523e87cf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363737, "uuid": "65467a13-f556-4097-82fe-c8060fee4197", "value": "T175432921B53A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943DB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363737, "uuid": "5b67204e-34af-452c-92b7-e10879192ede", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAwH:RqtmZPuutfbltZFBSJsBcfDSTFI+BEH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775363737, "uuid": "ea85e26f-f543-4718-9e83-bea05e932c25", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775363737, "uuid": "c8f5788c-8052-4a06-af57-42c263f6c85f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363737, "uuid": "36cbd214-8020-489b-a99d-efa394850dc3", "value": "boatnet.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8de3ee1a-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354142, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354142, "uuid": "b223c928-333b-4efc-99ce-3ceb17bc1a37", "comment": "Malware payload", "value": "3c1a7aa1dc46fd8e14be790f4fb3ec9b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354142, "uuid": "e03b874b-92b7-40c2-a36b-1dfdeed1a26f", "comment": "Malware payload", "value": "7b83538c1c70a39fd2b3d73088f35a099de009dce83e8d267511aaad5a6f507e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354142, "uuid": "f2007ba5-8e79-4f52-afb8-b6997c16cf52", "comment": "Malware payload", "value": "700bfc98151e3494eed1da6702b7f688d63075c8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354142, "uuid": "481a3c4d-37a6-4af4-b7a9-b352b8c8ef98", "comment": "Malware payload", "value": "36b399121ca9ff460ec741782897e80d86e72496e2d44af787667d18e6719d8596055d4bf382a348fd133fe52d25323e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354142, "uuid": "ce19cfc3-fdd2-427d-a0b6-80a7a957843b", "value": "T131265B53FC9518E9C0AEE1358A63A562BB71BC481B3123D71B90F6382F77BD069B9350", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354142, "uuid": "a594a13e-f678-449a-b41d-fddd62625082", "value": "98304:bu4C5nhK+4bblls4FOx+QJH44WcQxLxAvEH:a1/F4bblls4FOx+QJH44WcQxL7H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354142, "uuid": "1ac98bda-0139-4687-bcbd-30547302dd48", "value": 4702473, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354142, "uuid": "aa5ac567-9ceb-4c0b-8f0c-0e3f4e1eb279", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354142, "uuid": "6af4ce69-a54a-4cfe-95ea-7cc7c61316ae", "value": "li7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f69bb853-3102-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775402422, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402422, "uuid": "e0df741b-d0cb-4b7f-a99e-ddb89341ff16", "comment": "Malware payload", "value": "68faefa794c1ac0a4f5df31c04ad82be", "object_relation": "md5", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402422, "uuid": "f51d51fc-659b-463d-a2a4-6b49dbd70896", "comment": "Malware payload", "value": "7da21c516a6eeda43d9f530ccc6ad20d6699545e06a2ac433bb753212368c22f", "object_relation": "sha256", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402422, "uuid": "1b7248ae-bf2c-45e3-8dc4-404bd00dd9fa", "comment": "Malware payload", "value": "59a2422ffc2f93063e3c28db9c663d25aaa09ea5", "object_relation": "sha1", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402422, "uuid": "3a2fc367-6867-4371-921c-5b7a487b481f", "comment": "Malware payload", "value": "190b7dbc541091d82f43ca0a7d393aca973528fede382908a0e6068572e6e8183b99723958ddee36bf7384095f996c18", "object_relation": "sha3-384", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402422, "uuid": "93621c3a-460d-409c-8792-c9af1bbd850c", "value": "T1DA6723F8EEDFCDD8AD9DF87079EF03D058449ACAF223884552D9C678E203A4B06519D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402422, "uuid": "9b9ecafd-14ca-44b0-ac33-4e9a339b61e7", "value": "786432:CdXBq7ygqOB67Fcn1HZTeHR2HB3ezMsJgLoVppCdAyAQeU:CdRq7ylOBgQ1lQyLUp6sQeU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775402422, "uuid": "ccdfc96d-29ad-47a8-9d59-70a1dcab5c1e", "value": 31481767, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775402422, "uuid": "a634a45c-1dba-4907-82f6-aadbdfb78a95", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402422, "uuid": "31a04830-eab0-4267-8933-e6e67ed502d2", "value": "Setup.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71664896-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354095, "uuid": "e1e44f1f-fd97-4030-b264-7370baa51c33", "comment": "Malware payload", "value": "c3fdbbd981264eb2d9ef06f46c149e70", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354095, "uuid": "7e1dfecd-2a0f-4356-b2f7-d7f60a270901", "comment": "Malware payload", "value": "7ec477b3b0d302a02b5c5667218334b7c4bccb946318ba413d16a5f24f53fab6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354095, "uuid": "9ebcb1ec-41a2-490e-83d3-b5d45ec43ca2", "comment": "Malware payload", "value": "b481161e26cf4fafbaf9bfaefe9e9cfddfb8efa4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354095, "uuid": "6ce047d3-d0ad-47a1-91a5-26cdeef325ea", "comment": "Malware payload", "value": "e59638d634dd68607cb69e29db66826dfb83192447e334e67c443a08bd4626a6e648511dc301e21dae4092ef8ed1a3cf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354095, "uuid": "a86ca8fd-d0be-44ee-928e-ceb21aba8d79", "value": "T19CF46C5BFD6E3C43E2D6D37E9B4A83B0A22BB190D22351937581432CD4C6AADCF71685", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354095, "uuid": "96e59476-302b-43d0-8c7f-ac37aa4cb98c", "value": "12288:mWZvmf1YDz6XTos9vbz1j8u9dWs2Ehw5+9SEWDKTjzzn9I:lzyXTDbBd9cHkTjXn9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354095, "uuid": "e0d799d2-729b-4da7-a12a-0148951af537", "value": 788544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354095, "uuid": "430f7bb2-0e75-45c8-a94a-b1fe8946061a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354095, "uuid": "cd27b5f9-2f2f-4f60-ac4e-c487d945b9d5", "value": "ackaarch64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98b8ece6-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354161, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354161, "uuid": "cb3129b3-a3e2-456f-b376-b94f3201e358", "comment": "Malware payload", "value": "b1c8aa15023c656a7caf5fda630a9dce", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354161, "uuid": "33a9be6f-7384-4e2a-b5fe-36f12c3d01a6", "comment": "Malware payload", "value": "7edd58080fc861e2a949b1f33dc2256208bb87b99fb433e099d5322ada78aae5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354161, "uuid": "8c440aff-0a3e-4063-970e-ecaf16eb5286", "comment": "Malware payload", "value": "5a24f9348d1eba967e26ecd61a032491223ca372", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354161, "uuid": "55e56c44-c1f4-44b0-b6d1-575b91233e00", "comment": "Malware payload", "value": "6d5aae5b1a80e88c0b2e541d0fab7b3c59157e1169371e249e8f02e49f392ab0c73d6c27b2f1f19a02d66e424f61e905", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354161, "uuid": "3d7a2f68-4c31-4eaa-9617-f9a1d082b45a", "value": "T1D0F43A16F8809F62C5C1257AF65F82B8731347B4C3EB720699199B383BD786B4F3A641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354161, "uuid": "7f7a8d52-45c3-4388-8a06-6a5e19755997", "value": "12288:rniymMIA9Yp4KCmXomQrBUqzGLp2bgp+gpYWtMj7ZIOEfzw2im:DyMIA9qzBqCLpUgx+/COEbw2i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354161, "uuid": "3633b188-11df-467f-80b4-a4b1a646e82e", "value": 734296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354161, "uuid": "4754580b-e05f-4e2a-b404-2bdd82904a59", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354161, "uuid": "d2885808-f74b-4451-a8c0-2b22002e5d87", "value": "clientarmv7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69c1b65c-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354511, "uuid": "a1e8860a-5107-42f8-b49c-b4c7d5d1d4eb", "comment": "Malware payload", "value": "4f5fb8b866ea1299555b8559acfed3db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354511, "uuid": "2d23e723-9873-43b1-809f-a25316b1c4f3", "comment": "Malware payload", "value": "7f88b0819d638da0081aa466b633c40c01ee250fb4a3fbd8a16b33d6ea5b9f82", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354511, "uuid": "3e5755d2-c054-4cec-80d1-1f237feb1000", "comment": "Malware payload", "value": "3661923e13282929ff0889581cc5a0ae690479fc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354511, "uuid": "80f8ca00-94fd-42e8-85f6-97da84d159c7", "comment": "Malware payload", "value": "85f7a549595e3b97e4aaaa4d1bdbd4b4fb860d0607d4db95608f772218ef1deaeb2375bd72c35dbb632dff0b474c067b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354511, "uuid": "26b4d076-bffb-4006-a744-4796453ca3e8", "value": "T11ED43916F8809F62C5D0257AF65F86A8731747B8C3DB72068A189B343BD786F4F3A641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354511, "uuid": "9f1edbb7-7085-4812-852f-ad5b0dca83a7", "value": "12288:7EcBMLJQNc0aMoe081BuxFy/QZgpl+ha/nqFvBcewQcKm:AcBML2HKet1Y7yCgnEvBcebcK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354511, "uuid": "b1c74275-3445-448a-812c-b42d3fd7780f", "value": 645276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354511, "uuid": "05a0278e-ba98-47b0-8eae-296f70f8a5d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354511, "uuid": "e827d52b-517d-4c2e-9827-2ffe364c2b6d", "value": "siarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01e828c0-3094-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354767, "uuid": "640db9a7-84a4-445f-9e68-3d1a45109fed", "comment": "Malware payload", "value": "cca617e842e68c3461b3642e00dc37f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354767, "uuid": "dbdec9d9-14a3-4572-b8fb-c4fa29e42585", "comment": "Malware payload", "value": "7fafc231f542d866e206f600d1c3a5d0b7ff2a99e877444509fce881b432c867", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354767, "uuid": "58a94fc6-2e6b-4b39-93a7-b3ea5e1eb6a3", "comment": "Malware payload", "value": "71097f9a2e5c948a9e67db89170c11f68d49ea62", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354767, "uuid": "001a9a3c-a7d5-467f-a3ed-598918e82947", "comment": "Malware payload", "value": "d77e2676edbfed5354603a027362f97b6e764a4f4e34b9c1ac0a10d88cb4b4807f5087d1445666805e60f5f40f7bd852", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354767, "uuid": "36bee26e-377d-410e-929d-d54af24aa752", "value": "T129054B42BB1C4563C9470EF1193F5395F7657A4341F9A22A370E9B273621E3ADAC338A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354767, "uuid": "4685ad6c-6147-4043-b67b-595574fa9966", "value": "12288:h7NNNbKjCBeD0QsXv4eJ6/g/+itH41zR+ipyMfxrEHlRenUP0DSIrN5Q8:hpNNZewQsXgC6gFH41z5xEHlReTWIJ59", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354767, "uuid": "b8c3f81f-96f8-466e-9d8f-cc069540288f", "value": 857536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354767, "uuid": "587fe5e1-66a3-40e0-925f-bb8dad8341ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354767, "uuid": "2ad697fb-b53a-4b4b-80ac-71815a3ccb68", "value": "rstppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df552ed0-30f5-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775396799, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396799, "uuid": "4db3432f-ca14-4b48-a19f-4d873e644155", "comment": "Malware payload", "value": "a8c39d33a9e8f6d21d8413ea741a4c90", "object_relation": "md5", "Tag": [ { "name": "Androm", "colour": "#08C503", "exportable": true, "hide_tag": false }, { "name": "backdoor", "colour": "#D18BB0", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ShellCodeRunner", "colour": "#88D464", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396799, "uuid": "21f939dd-1053-4b84-bb48-c00ffdbfc035", "comment": "Malware payload", "value": "807f30b42ef9a9817889a868965c54816f3c538b4b1c64efabea6edcfcf282cf", "object_relation": "sha256", "Tag": [ { "name": "Androm", "colour": "#08C503", "exportable": true, "hide_tag": false }, { "name": "backdoor", "colour": "#D18BB0", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ShellCodeRunner", "colour": "#88D464", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396799, "uuid": "4e8fe41b-ad08-42d5-8b60-f93275d0a381", "comment": "Malware payload", "value": "e9363ebec6309a0c6f27db452d8acdef0231e9f1", "object_relation": "sha1", "Tag": [ { "name": "Androm", "colour": "#08C503", "exportable": true, "hide_tag": false }, { "name": "backdoor", "colour": "#D18BB0", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ShellCodeRunner", "colour": "#88D464", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396799, "uuid": "81119f18-c854-4b55-aff5-cfc9153adb30", "comment": "Malware payload", "value": "204e439d99d818693a853282f3f304f82e78e7ee74aafb8aab4143b96be67390f93779de5d5141b6e4778f5b6e5f7fc1", "object_relation": "sha3-384", "Tag": [ { "name": "Androm", "colour": "#08C503", "exportable": true, "hide_tag": false }, { "name": "backdoor", "colour": "#D18BB0", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ShellCodeRunner", "colour": "#88D464", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396799, "uuid": "c46f241b-dfa5-48d4-8757-8d3f88b6116d", "value": "T12885222373AB00FBE0A584384C775AC8D72664C2D2B0DEDB4B95B5392F473AC5C666D2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396799, "uuid": "dbec040b-4e4b-41cc-b3e0-9c03a70210fb", "value": "2404799470868b9e31fb62d90f3aa285", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396799, "uuid": "f880ebdd-daf1-4e47-b80f-c40a31d03d92", "value": "24576:aJanThebg6Z4MlfNxWQ//tvvagrk0oGRuHQ2Tf3j6lDQ2rzexfDYOt8zBJn1u7MW:lciSMz+7n1u7MH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775396799, "uuid": "e7eede0b-0235-4296-9e5c-d9ba9205f909", "value": 1785376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775396799, "uuid": "644e0c92-3e29-4ae8-8896-5577b7a28c05", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396799, "uuid": "8028edfd-d36c-49ab-a874-9603d7524105", "value": "msys-2.0.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e217c50-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354170, "uuid": "f68740eb-58de-461d-8cf5-327d3cbb4f72", "comment": "Malware payload", "value": "e936d3d8f92e3de746bc28a36c14ea40", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354170, "uuid": "52ac063b-ebf9-4818-81b2-916ba8523e9c", "comment": "Malware payload", "value": "8090ae3fb1993bfea61bfc5ae2b148d85ac742b91e356fd8479d166356d1122c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354170, "uuid": "e1872e01-d232-4d9d-81df-de31ffd35c42", "comment": "Malware payload", "value": "cfb7a9f799a3e694ec2a7b18c7cccf1f363ad509", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354170, "uuid": "2198ef86-0c70-42fb-89f0-8e8d0fac594f", "comment": "Malware payload", "value": "29edd06ebc9d30ce542ba57491ead285517c18b48318f7db45adcb82d7c6797505d75426e09386216964e91d5c78d6f2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354170, "uuid": "e797c154-41d6-4ff4-b0cc-d27e99adb5b0", "value": "T1AD36FA15ADC43AE6C41D5B3894EECAD613B05D104BF14B3A26A4FAB9BC772257F0788C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354170, "uuid": "d3b76d20-86b2-4411-9bfa-764fca7f5b15", "value": "24576:1v/Hzp+Q3zT5lF3WR+sQVqsaUk4uxEgc2ti9GxmAmt+DENZVp7DVViPobzexiyBm:NB1WJQ21iZLiZ8CZK5EI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354170, "uuid": "a93eaa8c-0950-4761-b287-e7da70ee441a", "value": 5177537, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354170, "uuid": "2ee610d9-a325-4139-8622-d7fd855ad1cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354170, "uuid": "065cfe07-14c7-4935-a86a-f4a1ecc8ef01", "value": "li7mipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "144430ac-30c7-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775376702, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376702, "uuid": "9cd79f5d-2542-4396-98e4-e03c6a22ba75", "comment": "Malware payload (Mirai)", "value": "ebf9ac7b3540d1056cd4e5642e3055dc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376702, "uuid": "6a9a1465-8743-4f9d-b6da-8cc7a34915eb", "comment": "Malware payload (Mirai)", "value": "81635455df829c7c5f7758d00b83ba875539f3fe344faf275bb64596f373c8d7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376702, "uuid": "1c5b225d-26b2-4e6d-b8d8-e846fc6f65af", "comment": "Malware payload (Mirai)", "value": "7dfef78f3d3a8213283876c57de4beee08328c25", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376702, "uuid": "7f299f4c-3ee0-45c8-b426-bca8bda9f7ac", "comment": "Malware payload (Mirai)", "value": "3e82c12e38f39bf53c8946116b00de0fe0925595259c629398bcc2be1a8f2c031b4aac13ff3da5630fdcfcb4c94a4ae2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376702, "uuid": "a1405c89-5bf0-42ab-97a7-5485acb7d444", "value": "T114933A52FD814622C6C516B7FB6E428E376713A9E2EE7203DC259F21338791B0E7B542", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376702, "uuid": "d97e80bf-0df6-4445-82d4-ed6c1a75ed3e", "value": "1536:JK4UrFTa22HNc65E6Mfee/2l9FB+oUVN95Jr1oAYPvdFu:JK4EFTa22twfee/WLkoUxpAK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775376702, "uuid": "ede64583-013d-4c8c-bc7c-3f9c1a097445", "value": 93092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775376702, "uuid": "ddd9123b-ce82-46d8-80b4-1c7029a7419c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376702, "uuid": "67c3ca44-598f-41fb-8cab-e54009ab689c", "value": "titanjr.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7650378-3098-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775356816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356816, "uuid": "9d21e039-be31-415a-9b49-67d8cc7f8c4a", "comment": "Malware payload (Mirai)", "value": "39e5e5744bf8013049a929a71e19cca8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356816, "uuid": "7b1523c2-327a-4b45-be62-bb76a4bde437", "comment": "Malware payload (Mirai)", "value": "8204ddd4d0773702a409868ee066f9d3e054672652e9000f00b57a0d87edfcbf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356816, "uuid": "cbed70f2-d273-4d95-bd82-f97919dfa451", "comment": "Malware payload (Mirai)", "value": "fd4f67e44ed28233034a7a991a300e8a0fc258e2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356816, "uuid": "f2a2a457-74fc-44fa-8e50-fb8f61bef8e8", "comment": "Malware payload (Mirai)", "value": "9757be34b61edfecbc3c9838c12002bc83f01513a065f0828081f7e02c1e8f41419200bcccbfa886c62b28d17bbf7d23", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356816, "uuid": "a9dfd771-ece0-45b2-a470-ba2571e136c3", "value": "T16C33A51E3E218FECF369C73446B78D21A798338626E1D646E16CD6101F6068E645FFB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356816, "uuid": "bd11216c-c516-4792-bd25-f2b585761557", "value": "768:MjU15QxYHALtV3uNa6OOZDCQaWfZs2E6bXMhgnUyi4mNi:V1bHAhka6bZDPs2b4kq4+i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775356816, "uuid": "a15231b9-c511-4538-8ccc-583e824decde", "value": 52380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775356816, "uuid": "22b37009-5e98-4771-82da-8b7ca6e1bbb8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356816, "uuid": "53a245a3-18ee-4922-9653-10d52ff51a88", "value": "pmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6cbbd68-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354721, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354721, "uuid": "f596540a-a6cb-46b8-82c4-f88e5add7aa5", "comment": "Malware payload", "value": "0f4466ed1266a22aa163589de7a40d50", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354721, "uuid": "0e4f1a2a-30b6-443e-be80-b0013ca7cf0d", "comment": "Malware payload", "value": "821b5cc7b6a2d2f40e7bb2ec054f763efcac7962aaa8f6274c8119c78a0a7b3d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354721, "uuid": "0e8a853f-f22d-41d9-b43c-a7e537838556", "comment": "Malware payload", "value": "8b5c748d72dabd617714757873330e7f4470e959", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354721, "uuid": "d1354ede-86fc-4ef0-9b58-0f43450b1e65", "comment": "Malware payload", "value": "270e1b68483bfba408aaa138ad1405cd204aa9d5d83b2cbeae0be72e9ea646462ace6ee2a519bf2e719ecb7b3aef0c08", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354721, "uuid": "2c34e644-9e7e-4c83-b1e3-0c0cf4a76bcc", "value": "T1B3054B42BB1C4563C8470EF1693F5396F725794341F9922A370E9B673621E3ADAC338A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354721, "uuid": "fecf4e3a-fae1-4326-a1d7-acd71c8e048a", "value": "12288:gB0CJY/9xS6ANGq234JXB0M/E4394ctHLipyMj8KkKV/DD2yoDmI0Nldj:gSCJl6AGq2IxBDn94ctHC8KkKV2qIClh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354721, "uuid": "20aef285-7d9a-4eef-8b26-4dc8c4c76f87", "value": 857044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354721, "uuid": "fc822898-feeb-4091-b8f2-15ca31487bb1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354721, "uuid": "68732ebb-419a-4bc2-b0d5-615782922dcc", "value": "ssynppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6ec48cc-30e7-11f1-a769-42010a9c0008", "comment": "Malware payload (njrat)", "timestamp": 1775390799, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775390799, "uuid": "a2c87633-e8f2-4290-9d82-36d8d65ea337", "comment": "Malware payload (njrat)", "value": "e5eab03abed91d6790129362597b2953", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775390799, "uuid": "f0d5017b-e6d0-496b-8d20-4982c619f1fb", "comment": "Malware payload (njrat)", "value": "82407811fbdc8699f81e246173d8bdc48faa9a0c2fd00662b2b3e2daa9d8e52f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775390799, "uuid": "bdebce03-40e9-4a4c-9ab9-13627b211915", "comment": "Malware payload (njrat)", "value": "0d7c40687185ec1e269c04d0afcac8cd84470e6c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775390799, "uuid": "c3d9b8dc-8ed0-4e87-a53b-830803c4ec32", "comment": "Malware payload (njrat)", "value": "9280790ba17f02cbe5abc46e01bf8e8c4fd86f9b5a0c6c774775311c1b461deafe888cc06d2e2fd336ff5a3be7c650ca", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775390799, "uuid": "af298d27-692f-45d2-8afa-d2b5c3e12e3a", "value": "T14925C09173F8861BE1FF1B75E4B249484BB7B9129936D74F0D8890AD1EB37808E107A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775390799, "uuid": "cc90578a-934b-445d-9821-7dcee4ded655", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775390799, "uuid": "16caa90f-7bed-409e-86fe-4f2ef5b4efd2", "value": "24576:EF/pxPxJzck+uGW/yFoBkkAQEwyD7qxENbJs:EF/p1TYjqqanTEw2qxWbJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775390799, "uuid": "8aa11fe7-50c3-4143-906e-76be47671821", "value": 976384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775390799, "uuid": "1bbd4e50-02ab-4417-bc94-c93afadc616f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775390799, "uuid": "f7e79217-b693-40b6-8451-f34169a7d8be", "value": "RedEngine.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23d76f20-3119-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775411947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411947, "uuid": "da9c725b-3316-43e6-862d-6c4290856d05", "comment": "Malware payload", "value": "7a9248f3420d8b3d6b94ba346aea6254", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411947, "uuid": "a96db17c-687d-4610-956a-d54c129fda8d", "comment": "Malware payload", "value": "8286493959e557d287d1a9b0ab9d3f9023bdaa9472f10a08662fead778566a29", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411947, "uuid": "9a48ef50-363c-42c5-aeb5-b3e88688933e", "comment": "Malware payload", "value": "3889994c6f49a59b68121c11c1fa81f08a829601", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411947, "uuid": "4468390b-7c18-4875-9cdb-0b16371103e5", "comment": "Malware payload", "value": "3a568722412a1992326bfb3e4c8a4dd3d2aba90f1d900300ad7de91b50d2c6ccd1fdc480686bde5014a3757466f77754", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411947, "uuid": "a0baba80-8f1c-472c-9604-c41968849d73", "value": "T1F8E086A2749290329AC9845B955AD49A748124033C86762CA47376718B89164F166FA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411947, "uuid": "c0c95ad6-591a-4c65-baba-c31a2d1c7f38", "value": "6:hZ+lfUzB+QFnTAJ3lqLeBsA+fW4nafpzfW4ne5plVyQJfRX50:SRpQFn8J3lf0fzafpzfzgpT1tk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775411947, "uuid": "e60d8520-3ebc-49c3-93e5-8b2d4cd4731b", "value": 322, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775411947, "uuid": "8072c620-db57-4718-b73b-f0158b782da0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411947, "uuid": "84c74d51-16e1-49f8-af98-39a9ed96a945", "value": "bins.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3627d21-3098-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775356809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356809, "uuid": "85c3460a-f562-40dd-8575-35b0d8c03a15", "comment": "Malware payload (Mirai)", "value": "0870d393e4a1975bc1bf989d44dff98f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356809, "uuid": "2aa1bfe7-2e31-44f9-b3db-60581e8d32a0", "comment": "Malware payload (Mirai)", "value": "828cb431f87445fb01189cbd608f7b260aea91579ba6386005f32ca2c6996825", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356809, "uuid": "8c062417-cd99-4d53-aeab-ffaffb3e19d9", "comment": "Malware payload (Mirai)", "value": "39111c67b37977f97c6eec7a3c19080a8f6e1322", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356809, "uuid": "e56df7cf-06ec-4d90-9c9d-242d5f3da3aa", "comment": "Malware payload (Mirai)", "value": "0e7dc7bdca66297550ba7ec16c1e15a2bf0c087d1233f2348f6b73b76735565f8ca9b43f2f81180fb761ea723fc46840", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356809, "uuid": "c159084a-9f84-481e-be52-e6afc08cf1b6", "value": "T1CAE25B77C52D6E94D284C274F8315E782F63F04982671FBB5B8A89A68043DACF6093F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356809, "uuid": "d0da9783-5290-4001-8887-94216847bcbb", "value": "768:aLaiwtg3PvLHWeyeLHUeSLXk/f81fmEC5oK6/z/k:aLaiwtgDWFuzSbkO5K4/k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775356809, "uuid": "86d96dc7-415b-4423-9686-23c1975f35c3", "value": 34100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775356809, "uuid": "99b03332-554a-44f1-856d-39c06f30fba1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356809, "uuid": "2a23415a-b2de-4a33-b851-64c64050181e", "value": "psh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81145de3-30bf-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775373448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373448, "uuid": "c0475303-0c6c-4cb7-95d1-2aff348a1dc3", "comment": "Malware payload (Mirai)", "value": "697d00cd9853293c6a30c7417fb22094", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373448, "uuid": "800bdcc4-09a2-47e1-9659-397b6d848421", "comment": "Malware payload (Mirai)", "value": "8399ce18d178b03fbbfdaf775e576255732064b492680fca51ae1b8f3efda5d2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373448, "uuid": "46331095-7a6e-4a5c-945f-6216fcdce006", "comment": "Malware payload (Mirai)", "value": "7eb551aa1083b59bed678f14b769b908ebc0a4b8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373448, "uuid": "f0d346a4-cecb-4e45-8063-c2823db94bc1", "comment": "Malware payload (Mirai)", "value": "dc21a4c35cc7ba02358982c605cc7989712dab05bdfd2cd03d46272da223f6f8d7ab7aca9f822719aaf7ad52eb5199a7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373448, "uuid": "f1d0ced8-0fc7-4e14-896e-80060979dea2", "value": "T16CC30A45FC504B27C6C652BBFB5E428D3B2A17E8D3EE720399215F20378695B0D3BA46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373448, "uuid": "ef00047e-316a-47fa-acb3-84171407322b", "value": "1536:oKEC4Q9t8WOnW4FqIL8kAL8k4Vlxp+TNuAEuE0lkgwywF6wuIiiLB8swrywr/9Gw:oKE9HoK8kk4tcJDEuQ/ix7sXAvpB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775373448, "uuid": "3e9dda1e-b7db-4e7b-8297-d7d61896c92a", "value": 129568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775373448, "uuid": "427c415c-8d22-4255-a03a-8920670abe01", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373448, "uuid": "854d80cc-30aa-4870-9730-e176158a1d53", "value": "main_arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4cde47c-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354664, "uuid": "e74cbecd-dca8-4007-a12f-b08e980dcd15", "comment": "Malware payload", "value": "94d8d80a19027fdb2464cde9dbf37ad2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354664, "uuid": "3ae5fd12-3a8d-4c70-a287-e2cd49a9901b", "comment": "Malware payload", "value": "844d796a941227a5aee8241aa77e111425c672c39948dd0602c325d179fa2f4b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354664, "uuid": "2f4144b3-a524-490c-972c-fc5131b32fd3", "comment": "Malware payload", "value": "07cf2e031d51d474f53ade463b0811fbecbc7935", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354664, "uuid": "aa984633-2cad-4901-8a88-f2953e800f6d", "comment": "Malware payload", "value": "a940a4e61dfc00e2388fc2eb54a324143d09cc8b3834ce9685941e83d27d58eb608d34ebf57df11594abb0fc436b3425", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354664, "uuid": "18ba2786-e9ae-4cba-8b4d-ed0ec97921f5", "value": "T155F45C06FF845FEBC49FCD314D2EC34611EDD48786C1662A71B88B8CBA9935A0BD3598", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354664, "uuid": "59c515f4-614a-4312-8e52-afcc951dfbe1", "value": "12288:NWunHXAwkI9QgtUaKPOiiZhjCa1fzmz4mG88K1tUSFt8782RaFhqzDchlQ31D79Q:OwkLgtNXZVf5rRIY2lzm87c7dNfoZPYG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354664, "uuid": "eb0556f0-ca02-4a5e-bc21-67aa970c82d2", "value": 762496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354664, "uuid": "5ca1b9ba-5917-40f3-8b7c-7c3efd936397", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354664, "uuid": "7e27e0ad-834b-48db-a0b1-784c08badd57", "value": "siimpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8d6e52d-30bc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775372334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372334, "uuid": "2a357b29-0308-4499-9c02-6ed7a4896ec5", "comment": "Malware payload (Mirai)", "value": "ffecc4f2e7784a757652be99b922803d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372334, "uuid": "5109b785-a9a3-48e8-a9f3-8388d4e7597f", "comment": "Malware payload (Mirai)", "value": "8516debe297544c76acf4fa3f1fb6fa23c01cacd8d35b4e7f7ae373c17b6fc68", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372334, "uuid": "259db686-c823-4e2f-9811-291a6636fb1c", "comment": "Malware payload (Mirai)", "value": "5171763e621efc97b037538d44d6442030d8ada6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372334, "uuid": "6d488a14-64a9-465c-9eac-8a1afd12e1d1", "comment": "Malware payload (Mirai)", "value": "ef6a4aaaa0f109bca7c7dee9f1c09934df22035185d3d2958b5b9b915322207a011923e0c60393cfa5734e278c7ef80a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372334, "uuid": "54f65795-96bf-4948-a5c9-b3aaabddd806", "value": "T162934A13B9C4C0FCC859C031479FA637D973B13E1239B69B6394FA167E89E512B6DA80", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372334, "uuid": "0c48a241-a770-42fb-965f-bf5d63e1e290", "value": "1536:Iaq2FRruLjGmf6hT1G8nXyOb6TJTV1+1pszgNv5JllKb8rvJz2:I0wjGmgT1dnl6Tf1+1psz85JjKuB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372334, "uuid": "422838e9-021c-49da-b642-c26d920be4f2", "value": 88928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372334, "uuid": "c5b626d2-9487-4c3a-803c-62c43e4c05ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372334, "uuid": "f7587ba4-d0a4-43c9-b02a-8f88ce784394", "value": "titanjr.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "181bf569-3102-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775402048, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402048, "uuid": "ede8db14-1bde-4b0f-8ad0-8ca2ff4f063f", "comment": "Malware payload", "value": "d92dc74406305bb4e09bdaeec7b256ee", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402048, "uuid": "6c69a38e-09dd-4214-8d5d-b5a701e68860", "comment": "Malware payload", "value": "855572a98530189a435fa86342676457be33d4fa1fc66df95cc298f61d216e26", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402048, "uuid": "56db8385-4cbb-4915-b6eb-edec32908c7f", "comment": "Malware payload", "value": "bffafb30598d9ac9d111b7e9bb91aeec315f02ff", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402048, "uuid": "e734c91c-57b4-4d99-a78a-6367c1791317", "comment": "Malware payload", "value": "f10b0c5626329895de62da92d5d2f0c6e4a254037cd6c7629f7e7b377dc8feaa555b71f53c84d85bc805c2ee2c442937", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402048, "uuid": "021cdc5b-ebe7-4fe8-8905-9487f8e85251", "value": "T11F57CF63A3F81695F42ECA398B15C32FC1B2782347369CCB5656170A3F77AD19B3A601", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402048, "uuid": "2a337321-274b-4358-821b-fb38c69e4d6a", "value": "502ffeb5c15b1e0761f492d0b4d21bfa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402048, "uuid": "7da1621e-e815-424e-8f84-bd759ebda08d", "value": "49152:GEdQWoorqmYC2XE4E7XVwPyQkXbPm3YjK7I0d9IOZqs3W2r0Jhy2vqmYC2XE4EX:GEBp+6Pm3YkI0d9IOZqs3W2r0Jhy2n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775402048, "uuid": "16d4e24a-0e08-482c-bf97-3edc008ae518", "value": 29634560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775402048, "uuid": "63f1de79-61b6-4ebd-9b05-b6c96d724d3d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402048, "uuid": "23b50bbf-cc05-44b8-a5b0-29ca12d24ea0", "value": "libwinpthread-1.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75629506-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354531, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354531, "uuid": "2380c4bc-df5f-4490-abaa-d225ea3a3851", "comment": "Malware payload", "value": "f659d0d9d78a4fe96ab409fbac19d67e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354531, "uuid": "1f33c1fa-b27d-4652-bd3f-9134de023cb5", "comment": "Malware payload", "value": "85aa433ad277dee063d59e4aa08108538c4290d4f550122c35eb3b111f4553e1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354531, "uuid": "18925ae0-f51d-4022-96c9-561d9b96b93f", "comment": "Malware payload", "value": "02d4689d05104a7aa928cea1b6ecd9e77f350c10", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354531, "uuid": "cdaee559-21a9-4646-abde-7e5d85a40cb4", "comment": "Malware payload", "value": "85bdcb5ce379eadd5ae3cfca409e759835a25924f6e3f86dc8de7ef4ac9fa2d080fae16659e441d8317d7672e19361e6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354531, "uuid": "7ed4b789-7e93-4297-8cf8-309d8273ab6c", "value": "T15ED4AD29F8447B07C8979274848FE418736AB2851752370A3846E6BD3D83BBDAF1D3D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354531, "uuid": "69b0fb50-0dbe-40db-a6c9-5d09eaf6fb47", "value": "12288:wiK+zj7b72LT9eGKdt/w7mSplcg46MPw53po/hK+QlcEklU:wiK+37ba9eGutI7ZrJ46MT/QNlJkl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354531, "uuid": "84c6fa1f-4fde-407b-9616-54dad70f50d5", "value": 654128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354531, "uuid": "37087a9e-ef42-4836-86c0-e0be406f9542", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354531, "uuid": "3c5dad07-1f3a-4314-bd72-4fd345340af0", "value": "shandriscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "999ed320-30f3-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775395823, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395823, "uuid": "e4654028-12b3-4fcc-80f5-5962ba69145a", "comment": "Malware payload", "value": "c810b8611b1c7969d6400a50181417c6", "object_relation": "md5", "Tag": [ { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395823, "uuid": "ff43c029-cc8d-49ad-8653-cdb1c4040104", "comment": "Malware payload", "value": "85d07bdd65eb84e3a8e7134286b4c398e602409e6be0d81e851a5a1f9710b524", "object_relation": "sha256", "Tag": [ { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395823, "uuid": "31f8541a-60e4-4b5e-a802-0889280f0fd9", "comment": "Malware payload", "value": "c5403a3394a1b53f4966c7dcbe7803229bb0c972", "object_relation": "sha1", "Tag": [ { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395823, "uuid": "15a267a5-341a-4cc5-99b4-8d4cf5de43e9", "comment": "Malware payload", "value": "26f1a88f9e8c2e39856b7bbf36f8c0b01af906df53230eafcfaa6a03c4fbfc42680c4e3fec9395ac934f1ef6307eebba", "object_relation": "sha3-384", "Tag": [ { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395823, "uuid": "9f729285-c8f8-4b6f-ba87-eedca9e13ebf", "value": "T17995BFB876043DD6E66F577BDA96ACDC03B626239ACBA4CD4064B7C305A3375FE02805", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395823, "uuid": "c7d236f3-b986-459a-87e6-2c38f638290f", "value": "ad72aec9efd201e91e27001d8bc8ee2f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395823, "uuid": "5812a816-fffc-439b-a9e2-010a4d926f13", "value": "24576:lXANuoFPuTdpV6Ot0nFHTGg/X/HzCy0OG4rMe/h3P0UwCOrIAjx/aBaRJBlXzKPW:", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775395823, "uuid": "73b65bc1-0fff-446a-92b1-20eee2fd2bc5", "value": 2055680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775395823, "uuid": "1c8d8fb3-ad75-4632-bb76-92cebd884a30", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395823, "uuid": "35ff4401-6181-4c2d-802b-53a6e2acd3a2", "value": "chrome_elf.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "656c030d-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354504, "uuid": "95193ac6-6abb-4dad-9618-ac5f9805875a", "comment": "Malware payload", "value": "4b9e1da725c0680c014ecadc4b442926", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354504, "uuid": "e113a04b-6226-4f29-89e9-1a791d8dae81", "comment": "Malware payload", "value": "870a64a45590639999060dfb605c58c7d67ecfb2b23d18618ed68cc271695b86", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354504, "uuid": "c6c2c7ae-2a16-41b2-a106-749f16f4420a", "comment": "Malware payload", "value": "88a5490396973296c621b6d729f456836cc5375e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354504, "uuid": "c74b40c5-4a96-415f-88cd-6bfe612b215a", "comment": "Malware payload", "value": "ba8012d09c0e5978724a0b2ce2aa89015956a9e99443221c0f423d38f493387f76fd94444fbc7b6440f93ff2347f4a9c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354504, "uuid": "45aeffb2-adf8-42a5-8e34-019f93adaaf4", "value": "T125D43916F8809F62C5D0257AFA5F82A8731747B8C3DB720699189B343BD786B4F3B641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354504, "uuid": "2b1f08eb-bae8-49af-8ff3-e1e6b14adb33", "value": "12288:rxc8R81vX/Ic0nolumivq/tiRkWOgpg+RdB0VF8EGiLcJ:28R81vvK21ivotiRH/0z8E5Lc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354504, "uuid": "a7834068-74a0-443b-af80-8f08e28d3e7d", "value": 645616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354504, "uuid": "c00b0e77-28d5-4bce-ab14-36b5864dcb02", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354504, "uuid": "5d16ca56-35d1-4e51-a5b2-f4c63a754450", "value": "rstarm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20c457ee-30fc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775399486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399486, "uuid": "f67d5194-1519-451e-bfc0-ba5cee850dff", "comment": "Malware payload (Mirai)", "value": "28be67f402f75b76698384bc12a80ff2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399486, "uuid": "14520af5-3589-4d40-b632-186f6d6e59a3", "comment": "Malware payload (Mirai)", "value": "87bf5a1ec28f63bf65bc6d19b859c09c85e81e43bbad5e361a5a7190ca53fb14", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399486, "uuid": "6d85b667-8371-45e7-9869-e25a2d1bdbab", "comment": "Malware payload (Mirai)", "value": "f3660b6f0ce00b25cded8aabbb9eb66129a93d83", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399486, "uuid": "ce702462-77cd-49a7-9cdb-2cda5446c8ff", "comment": "Malware payload (Mirai)", "value": "588b90f7ccd30a6529e1d6e54b082b2d3bc073aa6caff58f45d18cff0c19fe1795b288f86d5920b3ca54e3b89ce6b437", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399486, "uuid": "83fc09fe-9a1a-4342-b8a2-0acb4630479f", "value": "T19493C80A6E158FACFB9E823187F79B21535433A62AE1C545D26CDE001F7074E750BBEA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399486, "uuid": "78ec2d2c-49f8-4902-b7fb-afa6d71e6bed", "value": "1536:U2ExoFE2aU/vcoWociNwdXd9BpDG+GgwmOlU3b40OoOWnm1lA37gCd42+j:UFRU/UHi2dX5pggwob40OoOXSg22", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775399486, "uuid": "2a3efdf6-43b2-44e6-b7ab-3866da7d532a", "value": 96584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775399486, "uuid": "5b3e5b01-ba08-4a61-832d-305293a66adf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399486, "uuid": "203a0d09-aeef-421f-876e-d5e31cf245f1", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7bbafb84-30ae-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775366138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366138, "uuid": "e9dc0cac-6284-478c-b11b-e414cf8f3f0d", "comment": "Malware payload (Mirai)", "value": "da2e0596655e916b9316122b5cb3ee1d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366138, "uuid": "373cd8c4-77a2-4070-a709-3b54e1655052", "comment": "Malware payload (Mirai)", "value": "87dcac60d3c44ec21383601b2b6bf6edb855a94015e12bb875c3da549cebea6e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366138, "uuid": "5cc81b09-d0ec-49bd-b7c1-7464ee47b9d0", "comment": "Malware payload (Mirai)", "value": "503d15dca6ab2771d6b44f99358e2176a12828c2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775366138, "uuid": "93b0709d-54c7-43b9-80c6-5f3d7bd2a8ef", "comment": "Malware payload (Mirai)", "value": "78b3d4258347adb76d61a63148e0aefb59ba8ce737307f0239486f01907c44a618245cd25e8cb4a150ee0efdd7b3dfb4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366138, "uuid": "83a5d08d-9a8e-49da-9698-f2e34ee36f59", "value": "T15363951E7E219FBCFAAA863447B78E16564833DA37D1C581D1ACD6012E6064F340FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366138, "uuid": "986e10c6-4dac-4d34-94fa-3a7ab4e9ad8e", "value": "768:7ZmnnogDILQHYLQHPVVMr4mgYVVMwKykNVVM6r+g/RtrVSYogDOsS5siv5XLatAv:UnN4ZH2SyOyuIq8LMEIUq+cvtpvXzUL8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775366138, "uuid": "4c186a6f-f637-4989-ad91-94a06a0195d4", "value": 72024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775366138, "uuid": "163dc4f5-3b9a-4c10-8ac4-2e7129c7280b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775366138, "uuid": "ed7190f0-fbdf-470f-831d-cd8c4a823e24", "value": "boatnet.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d3e610b3-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354689, "uuid": "59825ced-ea64-4cd3-b9b5-c31d51d07ddf", "comment": "Malware payload", "value": "4f2ac39580ebb4e9fd56f2e79f699de4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354689, "uuid": "c20c67b9-effc-4307-afca-f0042679f03a", "comment": "Malware payload", "value": "882e0bf210abd584b556486a09df327a808de7f284752552f1c0b3d45bf7b191", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354689, "uuid": "79cb5dc5-711b-49b9-8dc8-e1c4583457f0", "comment": "Malware payload", "value": "3638a85b3eb3a29e36a6f0ac6243f344abfbae4d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354689, "uuid": "3ab79093-6f67-4399-96be-206999355848", "comment": "Malware payload", "value": "dc7e2d6c0a9e85ab872303332122b49796600884a6dbfee6e1e5b95ac414d987f840de9f595a55442c155b893060a761", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354689, "uuid": "558bf459-edbf-4f6b-a2c4-c4cddceda5ec", "value": "T156F45B623B11DFA5D355D67009F3C7505AF525A20FE2408AB26CC3287E20A6D6E5FEF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354689, "uuid": "49bc1929-c4fe-423f-ac42-56d89c631733", "value": "12288:YER2OE3aFTLDJ83sj4ZlGHn3CnYx8cICijbiDgphgaXOeD8zNYSN9VnjyY:YERw38V4ZlGeYSXCijbjXOGG9Vnjf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354689, "uuid": "208f8602-c9e0-417a-965e-97b16c6602d7", "value": 761964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354689, "uuid": "d291ec65-0517-464e-b7dd-4bf1f75de500", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354689, "uuid": "b497776a-cd6c-453b-9298-2da3f80fa976", "value": "ssynmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a292f4dc-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354177, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354177, "uuid": "b491c1b3-58ce-4a1f-84c1-9f8efb7bd8d1", "comment": "Malware payload", "value": "f984b01a82322ca2e4791fbc4f88b6b3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354177, "uuid": "6b85528e-9839-4d5f-bf9e-814304cd11b1", "comment": "Malware payload", "value": "88abbb13069a2efbcffd34e7fbd9d23989c968eafd37dc660536d5f22a749369", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354177, "uuid": "25dfd8d2-e460-4f03-b3f0-71e3029bb934", "comment": "Malware payload", "value": "7758beb4c70f1ab50e68eedf3b5a97670136cfdf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354177, "uuid": "d531b8b8-6028-48d0-a9fb-11e1f7296cab", "comment": "Malware payload", "value": "bebf1085a2c0d5cef40cda217c7a5977340e27bfaf537d531068190fdedbcf7f288d299c2e52888b3480117c5ccaf499", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354177, "uuid": "6ff99d19-1e2f-4b27-8710-85eceaa3dbc9", "value": "T1CBC55B19BC5C2812D5CE76726E7212C43339BC485F81D33BAA18B77C6AF27988F17661", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354177, "uuid": "6968a55c-b8c0-449e-bdcf-930ae66d32cc", "value": "24576:Znyvijm653EO1+wL5S0RBE4yojG3DFXPAZ0dwzGwHkkgRW0l6dqp9uFYpPtmseH:Tjm62OYo8oj8FnerWGY6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354177, "uuid": "5dd9e761-09fa-4550-858c-72af5ea28b2c", "value": 2687138, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354177, "uuid": "435d613b-5041-4796-82b2-d29cbfc843b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354177, "uuid": "8ef2c5bb-b9f5-4537-a38f-73b6274e27e9", "value": "gofuckerv2arm64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "292c846f-3119-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775411955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411955, "uuid": "8b3b681a-757f-4e57-a108-89968d49c8c3", "comment": "Malware payload (Mirai)", "value": "7a106493dfce3c825c2ddd29cf36c9ba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411955, "uuid": "add2c243-0b02-44ab-af4b-64ce3aae5495", "comment": "Malware payload (Mirai)", "value": "894672aa042023bae09eaedc121b948a8e23cec0f9d66957e86a8d1a0eb514ff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411955, "uuid": "38c42513-1cdb-45bb-9f7c-61030e80d7ba", "comment": "Malware payload (Mirai)", "value": "1b60f794d802d192cb9dfa53bcf2f93f6e54706b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411955, "uuid": "45c3872b-1191-41c5-9cb3-d600b3cb5b74", "comment": "Malware payload (Mirai)", "value": "978e30425ef5ae1c24a5806be7ab879790e696cf2ce73b7bdc3b6f48010a82da238e9d7d3536982d3bdc9914ceb79411", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411955, "uuid": "20dd8850-4b6c-47d8-9292-20f0418fbc86", "value": "T102341902A8528A53C5C21B79BB5F46593733AB34D3DB7302DA28AFB42F476DE0E39511", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411955, "uuid": "104bf293-9970-4198-922a-47361a4c8659", "value": "6144:XAUxEepEZDff/arM7s7z/OyC2uUkuyAnmW2hVDZI0/16O7Nc:XtxKZrf/agg7bOyCUpnmW2hVD60/16Oq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775411955, "uuid": "98918b52-4ed7-4d3f-95df-805afdfdb96b", "value": 234578, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775411955, "uuid": "f4b31451-0799-4d70-b4bc-fbe331f74e79", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411955, "uuid": "e396f277-e39d-45d9-a0f4-15c9f770c779", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73454bf1-3111-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775408644, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775408644, "uuid": "040ba152-1fb4-4446-b23d-ba15b93b995e", "comment": "Malware payload (SalatStealer)", "value": "dab9cd70843edb0249920cb14534eba5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775408644, "uuid": "34452fe2-17eb-42f0-ab76-fdb0a2f0d5c2", "comment": "Malware payload (SalatStealer)", "value": "8996a1bb7610556efe883f3009584beb5ee9ad5aa8ddb741b3238f81fcf76686", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775408644, "uuid": "cf208f37-200a-4264-bb4d-e7a120338eaa", "comment": "Malware payload (SalatStealer)", "value": "bac859e2632bc5a624ddd4aa3515b69513585327", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775408644, "uuid": "848d0b9e-736a-44d7-83a7-e9ac573a9eff", "comment": "Malware payload (SalatStealer)", "value": "3ec2f19754c0ee889a53d83f21fe99e8ea8b448048c1b6a13427c90ba6c4c65de2a540e8161b7d26baefb595d56bd91e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775408644, "uuid": "e418c4f2-6c26-41df-a827-fbdabd6caadd", "value": "T106C65B51FE8B55F6E903183140ABB23F63305D048B28DBDBFB543A2AFD77691187A609", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775408644, "uuid": "dec8e593-b062-492e-9e1f-8785c5bfaa92", "value": "49152:/cbimoqKmB8ZgDgW5NBXzkJxMOJlk1Fy8xIk3oizHyWNPlMMuKxB6/uunuRXh5K2:0mmoqMWgWlXzG6ti/uWuBYw0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775408644, "uuid": "efbf4cde-15aa-4ec6-bbc8-1bc8441437f2", "value": 12046336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775408644, "uuid": "0c7b7fa8-2dc8-45eb-b105-6076fbf17007", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775408644, "uuid": "f350ff71-af15-47c4-ad9b-c7ff35a6dddc", "value": "8996a1bb7610556efe883f3009584beb5ee9ad5aa8ddb741b3238f81fcf76686.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f94aead2-30fb-11f1-a769-42010a9c0008", "comment": "Malware payload (LummaStealer)", "timestamp": 1775399420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399420, "uuid": "ffed0ffe-c916-4df5-9ae0-b680bb44b2a3", "comment": "Malware payload (LummaStealer)", "value": "4ccafd3e3519ea2402bbcf933f9305cc", "object_relation": "md5", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399420, "uuid": "8fe8ecad-e356-49f3-a4c1-23075c8453b8", "comment": "Malware payload (LummaStealer)", "value": "89afd27e138c25b0ff4d320aa877174fa4bdfcde934f5b6eb310568ebb7120cd", "object_relation": "sha256", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399420, "uuid": "8ca13c5b-5986-46b4-8e69-d4117d42e173", "comment": "Malware payload (LummaStealer)", "value": "377243e17b5cea108236eec9a4988be90692a021", "object_relation": "sha1", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399420, "uuid": "82ed2467-5287-49ed-92f8-1e4bd9c75e12", "comment": "Malware payload (LummaStealer)", "value": "f175bfec2444e7d52d29cab5603476f27b215c9953df3e87edb2935ca2f8f28e97a14131478e35107c89373a7e0b54b1", "object_relation": "sha3-384", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399420, "uuid": "366681ef-5327-413b-9d33-c21013c4cf17", "value": "T1EB655D40FDC784B6E416173299F762EB23359D094F32AB97EA007A79F9B72D21932311", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399420, "uuid": "7525d2b5-5950-41b9-bc8e-48d0cea30386", "value": "1aae8bf580c846f39c71c05898e57e88", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399420, "uuid": "04b1fba9-23d8-4035-9302-371480f5e57e", "value": "24576:G1gr63GhoHQvLoOQ9+H5o3lwenesL7pICs1wN1/2elJH61iHHsSoa/XyP4+pXK4O:G6P1UOYhIaoa/Xyppa46ES", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775399420, "uuid": "4c634c6e-c881-4a94-9979-711089acd53f", "value": 1488896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775399420, "uuid": "892086c8-0bf9-4683-9513-c88d4076faa2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399420, "uuid": "883b7034-aeec-4d93-b826-6210b99bbabc", "value": "cx-programmer 9.1 free download full.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d891ad1-30bf-11f1-a769-42010a9c0008", "comment": "Malware payload (Gafgyt)", "timestamp": 1775373442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373442, "uuid": "f0d40c45-8077-4dbe-af69-dcded5209ee4", "comment": "Malware payload (Gafgyt)", "value": "05cd451ba4be2d15445583e5dbbeecd5", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373442, "uuid": "f102ce45-e0cc-4073-859f-dd051b8bd157", "comment": "Malware payload (Gafgyt)", "value": "8a80b1d8cb6ddbd86dfff5bca5bc5a95df4501a3d299d7460f14d3cc9fa521ea", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373442, "uuid": "c164a962-c3cf-445c-952f-f5fb1e06954b", "comment": "Malware payload (Gafgyt)", "value": "5b4368c7cff37e13bb289df4956592d34cbb3931", "object_relation": "sha1", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373442, "uuid": "86d4413d-91cb-4e6c-8342-d6e5219c7ca8", "comment": "Malware payload (Gafgyt)", "value": "906b881baac21c1a1e74c230c0499d224a4918e9a7e6baacb9ea872f9e7a82f4cbc2ac2c3957e64d56cb4d38eec6844d", "object_relation": "sha3-384", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373442, "uuid": "5420f4ce-08ec-4dae-bd61-e7761335b087", "value": "T18241589AF19159F06DA4D81333F9944031D4A0CEA9C6AF1F28DFBBE9488DDC82A04697", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373442, "uuid": "b6977767-d7eb-435c-8746-a8b2e104be2a", "value": "24:vGkAhGr0dSxG7GBpogG/G7TGjGvjGm8GosGvjG3GY:vDAh+ymVeeTqy589sy+1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775373442, "uuid": "7a5d9c5b-b2c4-4723-a0b1-82995e718607", "value": 2085, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775373442, "uuid": "c2fcb131-f1c7-40d4-8eca-87505e587a08", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373442, "uuid": "44fba182-1fbf-4415-800c-ce7c3ec2f5fd", "value": "SnOoPy.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d63cb2a5-30ab-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775365001, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365001, "uuid": "f92596eb-99bb-4d5d-b582-cc8bc94c2be0", "comment": "Malware payload (Mirai)", "value": "0a9adb66083d623333499b96d529d413", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365001, "uuid": "9ace55e0-4afd-4696-8057-2960a64ed88c", "comment": "Malware payload (Mirai)", "value": "8b74aa24a15e7e52e7a97b84486ee3a0ce24e22e0183f978e70b7fdf2fa68cf6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365001, "uuid": "b86faaf3-da29-4a47-b1f4-09aa7175b6a2", "comment": "Malware payload (Mirai)", "value": "d8372a7f8249f12da5d0465640a834f8f4dbcb36", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365001, "uuid": "f61a8205-0602-4a01-af0d-7b75b089698d", "comment": "Malware payload (Mirai)", "value": "249644166a1cacb32355d3f39322effe3f6a1aa4252b879ee7d6946468c1f7bedfa7777259565cdcbc5b4883b7cce7bd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365001, "uuid": "82169ad6-620a-4799-b1d5-81b624746e5f", "value": "T1D3A2E029BF68828BC832797455E9F5D21397FCA1F29DCC4E2940C15FF0A33A96474E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365001, "uuid": "7b3d4971-1a5d-4a11-970d-b9815cd37655", "value": "384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTp:798o08kxofBE+ZkXaITbp2F2TWul0c5N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775365001, "uuid": "29caab47-ea99-4f86-8122-c01cf21e397c", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775365001, "uuid": "983e8a8c-4030-4480-bc86-182fb0fdbb2c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365001, "uuid": "400d000b-19f1-47f4-a356-b83476f5eff8", "value": "boatnet.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "adfda6aa-30a5-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775362357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362357, "uuid": "6f3754d1-0b1c-4c8b-bac0-94af1963a39d", "comment": "Malware payload", "value": "e49dbcebf4ba87e706c83aa6374de649", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362357, "uuid": "d18963f5-2f10-4d73-9f7b-d01295253ab6", "comment": "Malware payload", "value": "8dc79c044f08ba417cbec8a4e50d71de29351e9a657121fcdad3f32041a74ff7", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362357, "uuid": "33e86dea-157e-457c-a251-f91818df4e61", "comment": "Malware payload", "value": "205a21bbc8eb07bd987b49716c8d7714e1fa016a", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362357, "uuid": "55f24cf6-86a8-449d-af34-57883be0145d", "comment": "Malware payload", "value": "61da0b1a5de4603d16a4a9e62c50cc4cab7e9b8d1036d0a05439bcb001398722059c0f064902814337abb8b86c604933", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362357, "uuid": "6664e001-0e29-4612-a4f0-de78d8cc8650", "value": "T19A51C7C17DA49AB06F4BC835157B371AF017128A2B432968B09B2049DBFC8D253BED72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362357, "uuid": "9cf43920-dbe8-40dd-98b5-983d7febdb1f", "value": "48:eNJn57KOnWhNRv/BCslwTvIRbz3QPvlId/IkKj4651dF8q3o6yvM18rC6oXFd:Cp0mWRv9lwBPNCwzjRXj8q3o6ee8rRkd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775362357, "uuid": "c165918c-e9d7-4b8f-ae07-ccab7cef8ae8", "value": 2532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775362357, "uuid": "8c4e4f92-e4c6-4894-9305-96473e4c0f61", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362357, "uuid": "5fb6d397-0a7b-48dd-96ce-e23d97808414", "value": "proxyv2.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbf28452-3082-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775347401, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347401, "uuid": "4b3fb412-b781-4058-9ee2-cd422f30624b", "comment": "Malware payload (Mirai)", "value": "4277573a9afa14982cb7d58d548e8717", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347401, "uuid": "3bce9fc0-d84b-4c12-98ef-3c74e86295db", "comment": "Malware payload (Mirai)", "value": "8e7de037c5eeeabe6ddab0d8efc7124605bfea1530b32544fa88c29c0bc2e2c8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347401, "uuid": "db00cbad-9bbc-4a8a-980e-e6603a1d7475", "comment": "Malware payload (Mirai)", "value": "76452dd8ed710205e831d6946e6ffa3c788f8081", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347401, "uuid": "35b188f5-d869-40d9-b758-34f014fc8798", "comment": "Malware payload (Mirai)", "value": "cedd2e06e268105161c562c1f847faa96ce615a2e8f24a11acc7b40806d79e8e252a9dacd9b47cc718913ddbe8888ed0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347401, "uuid": "a52aeb8c-f5d6-4747-8a1f-72623ab87c52", "value": "T1E5E25A45EB42F0B5FC1301B6A237B7635A36E56C1153EA26C32C2835DC52A40EB67B9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347401, "uuid": "d48ea03b-5e65-4782-9700-7fbbe50255bf", "value": "768:Xo32vIvPjOs33gM/guNx/TFSS8bxVuSlDIze:XxQvbBHCuNlZSpuSRA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775347401, "uuid": "4dd53513-05cc-4ef9-9a34-2b2dc3f72bd5", "value": 32112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775347401, "uuid": "75f127ea-4227-4f61-a945-43b66e0adcfa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347401, "uuid": "ff95e260-917e-4526-81a5-3fde9a302273", "value": "debug.dbg", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f06a1d1-30c7-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775376693, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376693, "uuid": "a0009e2d-4499-41ae-a5e2-a40724e8fd07", "comment": "Malware payload (Mirai)", "value": "b82a3b075701b7b8f5a2eb8676fc1cac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376693, "uuid": "4d6d88c2-f683-4861-aab9-081f5e085f4b", "comment": "Malware payload (Mirai)", "value": "8e95b36f28ed2c72164706d969fc04dc4dcf140d13654341d74ea9e69416a824", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376693, "uuid": "e27fd0b5-66c0-4c88-87cd-e7793d829f86", "comment": "Malware payload (Mirai)", "value": "346d6c6143b81c26e4c40dda43bdeccadcccd0a4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376693, "uuid": "d1be4aec-9b73-477e-95b9-96cd43c5a6a3", "comment": "Malware payload (Mirai)", "value": "49017bebb7367af79832309c2b6c7cef7ddc1d20f8c83556418a3343112dd52e383007c8029734fbc1c5f9ef97071d3d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376693, "uuid": "7869b24d-1c95-4a14-9c4b-a36b77a44f04", "value": "T162C3C75E6E218F7DF368873047B38B25A35933D636E1D685E2ACD6045F6034E241FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376693, "uuid": "f52a9307-cb39-4632-bc04-a24fef1a3cde", "value": "1536:0+AZvMfRae4eKmjkv99IcFloKr7uh5pa5AYkHQHZ/KMAqeR2qiE6ppf:yZvIRavIk1bHMEkHQHgMAQEuf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775376693, "uuid": "a5a64aa1-055c-43b0-92ea-d64cba9210f9", "value": 118400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775376693, "uuid": "cdecc117-5d45-4e6d-bdf7-b2132be4dd5d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376693, "uuid": "a00cf62d-f4a0-4977-8392-d0d6573755df", "value": "titanjr.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad990bf8-310a-11f1-a769-42010a9c0008", "comment": "Malware payload (QuasarRAT)", "timestamp": 1775405735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775405735, "uuid": "e5515225-0e87-4153-a711-3b3ab512d56e", "comment": "Malware payload (QuasarRAT)", "value": "1cd5ba8a52b3b095f93d6e45b4fc1b38", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775405735, "uuid": "8f722348-e888-4e19-aa44-c49b948cd26c", "comment": "Malware payload (QuasarRAT)", "value": "8fa996aa98960834f1b64f07948d4d989715b7a39074081ee3b773a384926ca8", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775405735, "uuid": "577e17c0-045a-4ca5-8260-76587f68516a", "comment": "Malware payload (QuasarRAT)", "value": "cb9e78acaf7f32d99c86d6b48d2a55798ee27aef", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775405735, "uuid": "9a9ebbad-550f-468b-a585-005a9d6768da", "comment": "Malware payload (QuasarRAT)", "value": "f0e87999961c5db9c31e4a2659fa53410024e0d5f85d590a1ac46ef15c41dedd30dd06eebee3dcd5b041b064f495e2e1", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775405735, "uuid": "8e643ef8-f778-47fa-bedd-0320b65442bb", "value": "T16936338C9C8BB09BED84BDFE34F48BED0A2C9FA514DD244428D44F3CB795A791214B69", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775405735, "uuid": "c3f60b4a-a0df-4d65-8810-a5e59065a42d", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775405735, "uuid": "67a095ae-7ef5-4119-8023-a31eb719ddb3", "value": "98304:axjP649XpmJBMEg9ZhK4dN75qNMliFDagUiKjkk46LXBzkO/DHj7N0A8FFE:axTr9cBHq75q8waZjZxjBf7/NV8FC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775405735, "uuid": "2c886d44-0ba7-417c-b046-a613bf9ae29e", "value": 4935680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775405735, "uuid": "56381dea-5aba-425e-8566-97682c042ce1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775405735, "uuid": "48753665-8bc5-46e3-ae5b-db653f36bd4f", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ced5c17d-3090-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775353392, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353392, "uuid": "957d6df9-9099-4135-8735-d6f8da101ac8", "comment": "Malware payload (Mirai)", "value": "4e94c84d9032e2c49fb2d57acfebe11b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353392, "uuid": "36b1bc2c-f07f-43ce-97cb-98084c32de6b", "comment": "Malware payload (Mirai)", "value": "908a90f59dfcead5fcc6a8ad7eaac7799dadf1ebc083306c0b4c5b5ae23c9e63", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353392, "uuid": "b66a9701-413e-42c4-93bb-357f1dbc5f15", "comment": "Malware payload (Mirai)", "value": "6dc12cc2bfe65ef1b2f1edb6fd281ea6f4d26cfe", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353392, "uuid": "ba3e67ff-bfb0-4f59-afc5-d710f38a4dab", "comment": "Malware payload (Mirai)", "value": "097ca4de2b8ba7710a6b7281637361a8162d30585f7ce6c41c4e2d967517f4144996b6725049c50241559081b27d6d49", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353392, "uuid": "cb811646-9144-4a42-92c7-ba9a73689a4c", "value": "T1EE930946F9819F02D4D220BAFBAF41493313AFB8E3FA7111D924AF6123869D70F76615", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353392, "uuid": "6c25376e-f550-4fc8-8b60-f7195f52ec1d", "value": "1536:C9nORzmu/psBUtnIY/2PuT8J+N+UsaF5PKHpXwmClMiPQpgLscDFtY7/FpFX:X5HjTY8+UsaF5PKHpqQpgLRZtMFXX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353392, "uuid": "07713eaa-fcdf-496d-9a4c-3b7c84d556aa", "value": 90576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775353392, "uuid": "97d8f64f-ed87-47d2-ae10-5e78e004ef79", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353392, "uuid": "ead2cdf3-575e-4ae8-a35e-b9ea935753d8", "value": "mirai.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66c45ae8-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354506, "uuid": "2ede7539-3d25-475c-a55a-e9dd700c9faf", "comment": "Malware payload", "value": "a6617ee7655c82ca9872280b51dc899c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354506, "uuid": "f55c237a-54eb-4afc-b15e-229e1da23337", "comment": "Malware payload", "value": "913ff105a6c8e55b950e7a45215cae93a1e1fbe2c44e2e6077836c7000a3d056", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354506, "uuid": "bcb5b432-a850-4b39-8624-1ee5da0c99c8", "comment": "Malware payload", "value": "19124d83d95c9b9f1d591bea731df5cd4ef44f88", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354506, "uuid": "cc671356-eadc-4758-b3a8-75b689ff518f", "comment": "Malware payload", "value": "f685240f4d81be0b430e98b0f0c8ff38decb239b1df005f3930a922f49f3e5d033c24c202be35c0e19ef09f7f4de5475", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354506, "uuid": "af43f982-0853-4e82-a1e9-8128af746d2e", "value": "T112F45C99EBC2D4F1F65300F10A8FD7E20964921A5013F6F6EB8D2A977472B522F17368", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354506, "uuid": "dfdca745-559d-4d84-b968-7cfb7cbfd2ff", "value": "12288:M6P2f0MshmThG2/UsYKajijprHi2/Sk6ZEs7pEXfBmO+66PyEjeBp8HaLu:bP2cMshmThF/UsYKajijxKk6E+pifBme", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354506, "uuid": "4df69df0-1e52-4292-af67-5053593c2ae2", "value": 779328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354506, "uuid": "98b6b756-249a-418f-a21a-3701f8ee6b94", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354506, "uuid": "458dd5e2-a334-4bba-a3f1-b1b398501279", "value": "shandx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d4ea863-30f4-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775396178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396178, "uuid": "78cff2c6-aeab-436d-baf9-898426267892", "comment": "Malware payload", "value": "575aeaceb0f06375f5d92e0a710aded5", "object_relation": "md5", "Tag": [ { "name": "dllHijack", "colour": "#DE3475", "exportable": true, "hide_tag": false }, { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ShellCodeRunner", "colour": "#88D464", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396178, "uuid": "74c1a94c-1aa9-4388-bc31-40abb347dee4", "comment": "Malware payload", "value": "92e7da21289783aec26f58c4a7342bbd5f0be3c00aa4b9c530604871c49c85ee", "object_relation": "sha256", "Tag": [ { "name": "dllHijack", "colour": "#DE3475", "exportable": true, "hide_tag": false }, { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ShellCodeRunner", "colour": "#88D464", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396178, "uuid": "b46dedf6-f86f-4d19-9804-d820b9bad043", "comment": "Malware payload", "value": "4257dfbc8a18b36b9553706233800150192f1890", "object_relation": "sha1", "Tag": [ { "name": "dllHijack", "colour": "#DE3475", "exportable": true, "hide_tag": false }, { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ShellCodeRunner", "colour": "#88D464", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396178, "uuid": "e2b616fe-066d-4837-aeda-a678356c342c", "comment": "Malware payload", "value": "ae028765a6e1334edbaf006be7035c9a66aadeb8ca1db0444d5fdf542b560eac0203a50d05f45c7f3c9a3d4f41e50272", "object_relation": "sha3-384", "Tag": [ { "name": "dllHijack", "colour": "#DE3475", "exportable": true, "hide_tag": false }, { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ShellCodeRunner", "colour": "#88D464", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396178, "uuid": "4e2d7c9d-06c8-44f6-b0dc-cf1b02dae3ff", "value": "T14CF4125B6FA4007BE1B3463688534A15FB72BC050721AAEF46A403795F1B7E18D39BE3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396178, "uuid": "ea230aab-6f48-4b3d-8b5b-6360184c6bd9", "value": "1bfde71595bcef7100f0693da8f9049a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396178, "uuid": "c0aa39eb-22ac-486a-acb8-d328c5fe67c9", "value": "12288:INFthhOTrsgeRRHNcDqbTU+Qqbpo0TBpnYqhiNPGrAdsUm0GB/EC:EOTURRNccU+Qh0pnYqhiNP3ddoE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775396178, "uuid": "8483c1cc-8f54-4bc2-aedd-bccc7d23835c", "value": 723456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775396178, "uuid": "19bed632-9542-4b2c-9341-dacb1dbfc9df", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396178, "uuid": "f36e230a-1266-4956-8a9f-b99a938d1f0e", "value": "MpClient.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1641375e-30fc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775399468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399468, "uuid": "f98eee6c-2c88-4cb3-b29e-f1b1fe593130", "comment": "Malware payload (Mirai)", "value": "5273b68437468b6313f87854fe7192f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399468, "uuid": "5d9627f9-a79b-4c1a-820d-43ff4e583937", "comment": "Malware payload (Mirai)", "value": "937bb6c0b76f5fd43f66bc03ccb67962003e16b74a39f65f4bff29f88017c3b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399468, "uuid": "87b01dfa-189d-4fcb-a8f8-560b0eb7192f", "comment": "Malware payload (Mirai)", "value": "a16ee0cb098923ea25a4bcb315ada35cb7b2bf79", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399468, "uuid": "967e1788-f31b-44a9-bfeb-74da159d4227", "comment": "Malware payload (Mirai)", "value": "6e803812936610481cdd99f4b8989ff4c4f0086ba0cc9cc3d74af9b162237f63b9661f11271b12089341433a6dd50259", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399468, "uuid": "bc28e9ee-be88-413c-9e69-c3478b6e399c", "value": "T14B537DB2D46D6FD8C0541CB479748EB81B63B40880276EB36A4B87A558C7EBDF408BB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399468, "uuid": "d39332ac-b24f-488d-adf2-73cce8d8459f", "value": "1536:jSY+mE6SBWZ1hB3nBT3cHLcjF9ReFd42+:jSY+ESBWZ15sb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775399468, "uuid": "fc3b3dc8-bfd5-4fa5-a2fe-3b5198437ac6", "value": 63956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775399468, "uuid": "b7df5af9-21a7-49de-9923-89a87a44194b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399468, "uuid": "600d2242-28cc-49c2-99de-8acecad09d07", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae7adfb0-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354627, "uuid": "372a4e15-0660-4084-967e-b8156b437d3a", "comment": "Malware payload", "value": "03a729f80ee5df4ac41578fb81084639", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354627, "uuid": "d903bc6c-d5bc-4a49-8431-7bfa05698ddd", "comment": "Malware payload", "value": "94a13d945dececb30eef824daf2db5eb8784dbffe6301bdbf9b7983baada9a43", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354627, "uuid": "6b72f93c-c7e9-414b-b9d6-dd091f529429", "comment": "Malware payload", "value": "7b6b5e907fdd3ed55296277e2338e0e72ca05797", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354627, "uuid": "755bc0d2-2c0e-4bbf-8c25-08bce914da1b", "comment": "Malware payload", "value": "70222ca2f197522dcc3f2d04c412ff42fc34f81de700099cd6677e64d7a41f4f7c932c94b65ddd066b0aa5f7a16b62ea", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354627, "uuid": "9c1612a8-7318-40ea-b87f-0c386a0cf276", "value": "T13BF45C223B11DFA5D355C67005F3C6905AF621A20EE25489B26CC3287E11B6E6E5FFF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354627, "uuid": "33bb2b00-0762-453e-b055-495c90338210", "value": "12288:P/xMjZYfN3at08D3O4NvGuChKS+WBhsd40gpkgp2Oqp7U5bjoOV9VnjkD:PJMjgNr4NvGPhK4Bui/20wG9Vnji", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354627, "uuid": "fc0d770b-8b60-4a51-bbea-cb851046f999", "value": 762504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354627, "uuid": "3a2f7969-ce16-4701-8c8e-db43e9029bd6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354627, "uuid": "82b02a93-f7c7-48f3-ae1a-897ad2d71bcd", "value": "simips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07853ff3-30bd-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775372385, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372385, "uuid": "df6d601b-af3c-4e3c-80f8-6d7fd793fc1b", "comment": "Malware payload (Mirai)", "value": "eb38bfde9b432e855cfd97ead98db70d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372385, "uuid": "5d462b9e-c877-4f57-9659-453906858be9", "comment": "Malware payload (Mirai)", "value": "94b5dd8587c09831c3424c797b35244ffe92818a9dc6ebd757999b5d73b9b16a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372385, "uuid": "ece0bcb1-2dce-4a41-89af-586a7f3bf430", "comment": "Malware payload (Mirai)", "value": "414b6f18bbfffe5bf0ce522232f53476d232a07d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372385, "uuid": "659de916-958a-4efa-ba5b-9563bf84b80e", "comment": "Malware payload (Mirai)", "value": "19ee1e680f8694cf3ed80d7704234bbd58454b2fef2331b61d2fe06e540c6518a6bdb1fa7ef4198d11a169ab9332eee2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372385, "uuid": "6323453c-43c5-4775-a308-0f1c31377840", "value": "T147E32CC1BA47C6F7D4471AB502A3673A8632EC190A2B8699F72DFDF4DB176C4B109318", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372385, "uuid": "3f647a45-498c-46d1-b5dd-9b542e235942", "value": "3072:LRAKHSATxRj9wUsSvt56wuMW5+7+/3M9fUgv:Wki2ffuN5+7+/3M9fUgv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372385, "uuid": "f0cbf6d5-1abf-44d1-9811-4fb28b75d676", "value": 155552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372385, "uuid": "4ff271f7-3cf4-41ae-8451-a8e20bbfc531", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372385, "uuid": "80d38b1d-498a-4d63-9a25-5eb3727c7ef5", "value": "x86_32", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc7e395a-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354677, "uuid": "5b6df885-fcf2-49a1-b86e-0f52a3fa7102", "comment": "Malware payload", "value": "a7154548bb52629df7ffd41becd8264a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354677, "uuid": "cf53b1db-a26c-4502-bc9d-efced4ac0ce8", "comment": "Malware payload", "value": "95181ba37073c75b49e9e0b9e8e3fbf570bdf88ea2d1f79f8eaf51aecee362ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354677, "uuid": "f7f6e594-70c4-425e-9f62-844e1a5dc449", "comment": "Malware payload", "value": "d8f788d9d4e0d44216e449b112a448c48f6d0217", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354677, "uuid": "da6a8369-acea-4e2c-adb8-638ae47be5db", "comment": "Malware payload", "value": "71da0842492f774a7aa288c65c187489b5bf2ed38606b8ca9b2eb6392012c22508dce3f7fadea42b6826f796efd61a58", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354677, "uuid": "dce8e7ad-74f5-46e7-bf8a-3d63ed0329e2", "value": "T1BFD5F804ADC52FE7C81D5F3854EA8A9613B08D144AF2976725A4FAAD7C7B2347F4388C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354677, "uuid": "4fdb4338-f4d6-48fd-a1cf-2dac300c509d", "value": "24576:Y+gZboAJ2m3XCjvE6RTEYzaWA/N6Bd/m0KyTzVQ0UGZ:Y+MOuyj74+Ny9g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354677, "uuid": "19c69c70-0f7f-4d7b-8196-16b5c0329b28", "value": 2949313, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354677, "uuid": "90e2e766-dd1d-4dcb-9cba-0263592d5042", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354677, "uuid": "8e44743e-46df-4b28-99cc-8cdb9b76da66", "value": "mclibs2mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6b179ac-30c6-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775376652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376652, "uuid": "4e4b5474-50a9-44cf-84f1-991384c868dc", "comment": "Malware payload (Mirai)", "value": "d7668a5629192c25d5757717481794c0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376652, "uuid": "24e94455-3110-4ced-ad88-2c7f49287baf", "comment": "Malware payload (Mirai)", "value": "9740bdbd19b284078e285ffbce8112ab6b5b9142ad9e59f761cc47a43070b34d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376652, "uuid": "43c5131c-aca6-49f8-be19-89a6c154d06d", "comment": "Malware payload (Mirai)", "value": "7f0c014e7c72fe7a6aea16ae12fc7cc68e4d3a48", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376652, "uuid": "f1c72409-c9c6-4355-9151-d386829113a1", "comment": "Malware payload (Mirai)", "value": "6d1701112e508dd2f815988d37e4871dd3929d22d2292b3f7ec111e94c126df4b03b1eb7588e2c28a8cf6ae6e4290765", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376652, "uuid": "1eeda044-acea-49ef-a8e4-efe519022f55", "value": "T1FDA349D7B402CDBDF84ADBBB44530906B130E3A20A831F36625BB957F8761985937F82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376652, "uuid": "7f1252cd-dee8-4829-adb7-ce9c42ce9d1e", "value": "1536:/dLg4OknwuynMJZTcafeG9MQ/4uOoWoL88U3qHDwSnJ35dNi6KjTrB9vidkK6Vqk:S4OMDTc87HOoWoLzL35HiZvidkLEk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775376652, "uuid": "7cba4303-2a97-42be-9461-5071ce747082", "value": 99592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775376652, "uuid": "c4f0da2b-651d-4980-9b9d-6d9450b35a95", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376652, "uuid": "7d1f3a81-4094-4959-b196-eed49dace001", "value": "titanjr.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1353d15-3082-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775347410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347410, "uuid": "d02563dc-bf72-4b99-866d-7edbff12f82a", "comment": "Malware payload (Mirai)", "value": "fa6cf862981f122b6e8a89fc62df8636", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347410, "uuid": "3c12b36b-de5f-4c2c-8262-85ce032a6cea", "comment": "Malware payload (Mirai)", "value": "985a10e895c71465387e6b59a6c6dc3e1650e124408b83640cabddf287f75939", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347410, "uuid": "b31ce50e-3763-46a9-9122-6302e9c41f46", "comment": "Malware payload (Mirai)", "value": "00d840c870ecf341cac0b940afa50d5f307195c7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347410, "uuid": "1626adbe-05c5-4cf8-ae4c-8826225b4b10", "comment": "Malware payload (Mirai)", "value": "ab4765a32c6f051cb778912377872f416ae703c48865bda260d57ecdd302b32cb09796f804ca9fe7d699704cf5b6c6d5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347410, "uuid": "44c92550-3f35-4543-b95e-861eb8a3d9b3", "value": "T10ED26409EB614EBBEC6FDD3345AC0B4531CC904721A82B7A3638D928B65F54B49F3C69", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347410, "uuid": "0eac8184-979d-405b-be56-4d4877a347a4", "value": "768:jvuhMpj0E4/kO92eZrMa1XZg92XiJHe3litJ1Q:7u6O92srMaNZg9Jd/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775347410, "uuid": "d0a73f9f-57da-42b0-be3a-c0ea8ec9a92a", "value": 30568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775347410, "uuid": "c51e2e7f-b115-4a0d-91b6-5b7811da4b38", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347410, "uuid": "74682857-fd9b-4dcb-b634-a408cd338a62", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "506f3b24-30f4-11f1-a769-42010a9c0008", "comment": "Malware payload (SantaStealer)", "timestamp": 1775396130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396130, "uuid": "2d57cf71-21dc-4a41-96e7-d838505ce86a", "comment": "Malware payload (SantaStealer)", "value": "9b425cade63eb7f2486c33e350e21d07", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396130, "uuid": "a0334328-16c1-44d3-8be1-b588cdf57239", "comment": "Malware payload (SantaStealer)", "value": "98cc35b3d14aeb126f4628c234c8b5500d889b296a5fa5466722feda4328ec04", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396130, "uuid": "d54ee3de-0dbe-419d-a9dc-0bf43dd8fda3", "comment": "Malware payload (SantaStealer)", "value": "f8c835b8810cc0b5ba9245dac51b0452e13510fe", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775396130, "uuid": "7b25b1e7-9aea-450a-8003-3cab71f11c1f", "comment": "Malware payload (SantaStealer)", "value": "1b0721f0c49646ad32a483e719b45f682384a8052749b8b061bc3617ae4289a822ce65fb93f5a6ce5888ff5460fb044e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396130, "uuid": "1ae32140-5a35-4915-aca5-69f2500b990e", "value": "T16A16F103E2A320ECC56BC274476B66B3B931B85511346EBFD594DB312E21F606B2EB35", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396130, "uuid": "2262aea5-1149-4b9c-8087-b945e64c9314", "value": "86decc6ebb11144606632964f65c138b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396130, "uuid": "d6a6b411-0cab-41fa-83ca-18e98155334e", "value": "98304:SEPRNN6VCx89Qc8xwTjQq8W+ALCOvHZmFqhsSnWU1:S8N61Qc5TGWdLCOvHUFmsSnWU1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775396130, "uuid": "40d5adc3-b604-4bf7-83ca-24ea2d2625db", "value": 4217000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775396130, "uuid": "92eed619-cd5a-4ab5-9d4b-ba92f527c898", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775396130, "uuid": "48ca1c92-3cfa-4f9b-9d90-d71b0e354533", "value": "Crystal.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19e5b19a-30fc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775399474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399474, "uuid": "5bf0affb-44d8-4275-8c43-fcc885032f4c", "comment": "Malware payload (Mirai)", "value": "0b05544e2ea0fc56dec551f58e5d2505", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399474, "uuid": "5661e52c-021b-4154-9f32-fcbedbba3b35", "comment": "Malware payload (Mirai)", "value": "98dd0c0f2e530c80ce3fe40fe1ec16097be258882b0f74e181d7e664776048c1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399474, "uuid": "62ef241d-d5b6-4bc0-a150-1a372a5330e8", "comment": "Malware payload (Mirai)", "value": "3a57678c2712cb3cfe49e6396cc81919288aeb2a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399474, "uuid": "ee20896d-7fbd-47b4-bec7-fc2b5635b16e", "comment": "Malware payload (Mirai)", "value": "dcf871c07470430a7e354a7180d0086c3808b88d57024260600b4dd7a5da33f9f133b9db96a2754779489c6ecdbb211a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399474, "uuid": "662b31a7-31cd-4794-b005-62b39b255a1b", "value": "T155C36C73C8296F98D655D1B4B071CF781B63961181871FBE5AA7C2B58083D8CFA0A7F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399474, "uuid": "a492872a-aa9e-4304-beeb-b4592558a6aa", "value": "1536:ybX/MtH3tyYWyBjTy4yC74KaTRLIWwswIRaqyW4HqAvhgiLSG5AF6:yLktH3Bq4y+/alwswiyWMq8ro6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775399474, "uuid": "10a088c8-c2f2-4777-90f9-3b6abc0f5663", "value": 125760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775399474, "uuid": "926a4ed9-32dc-4313-a3bf-af802e7500bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399474, "uuid": "64083f60-4ca4-4d43-b5e1-805070b30371", "value": "main_sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb136aa9-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354675, "uuid": "1fe71eb6-d6c1-441b-8643-2f42bad796ad", "comment": "Malware payload", "value": "f009230ed0e5729839e28b3a9d17ed69", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354675, "uuid": "bf69a73a-ad03-4c71-8f8c-c6a5a8ebbd35", "comment": "Malware payload", "value": "98e4eae73d888e76df022a93a5f35caefcbfd63739bc846c9f71ab25c2e94916", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354675, "uuid": "f9b7da58-3647-4a62-a0e9-643e5996cf72", "comment": "Malware payload", "value": "aa7a68384d203e11bead746dfcd36ede6e534cba", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354675, "uuid": "69bcb7a3-f3e9-4a24-a7cf-12325bd7652f", "comment": "Malware payload", "value": "9aaba6a2fccb1265b42ea46e9d8647b9459a458c0191e54a17579431b78d60169fc402e4e37c77442bca485ad37bbd73", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354675, "uuid": "80aa6227-225e-4260-9c05-6f7522afcb9e", "value": "T189F46C227721DFA1E355DA7009F3C6514AF521620BE2409672ACC7287E21B2E6D5FFF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354675, "uuid": "ed284f3b-0c54-43a1-a84e-d65c897ea5b6", "value": "12288:twHeidt/X5ewZMOZxP44hGnIRzrx06S0Ma/gpgVH69KMt02PhVxj8j:twHZe67P44hGIRU0MaR69yGhVxjU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354675, "uuid": "d8949907-abc4-4739-a840-43b63874aa7a", "value": 761876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354675, "uuid": "fb62f01a-9b30-432c-9604-f1d0cbdec4f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354675, "uuid": "8a783e69-2392-47c3-a163-9880b7bc39e8", "value": "sockmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc0dd5f9-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354703, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354703, "uuid": "0796a76c-d503-4e72-87ea-e0dcaad6c991", "comment": "Malware payload", "value": "4ee072f13b11333331dd16eb3a66ee13", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354703, "uuid": "99d0f2fc-f5b0-4853-ae5c-8fda3da5d0c0", "comment": "Malware payload", "value": "99ac3b7c81ae90fd87a0c6fd7bf0aaf3d77f72cd736cf077912c744d0dcc2ff8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354703, "uuid": "a7c4bf3b-bd6c-4fb0-bbe9-ecd0cedb5103", "comment": "Malware payload", "value": "f6b678e84e5b67181dace8acee8292fa9b228f97", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354703, "uuid": "f6367e8c-39cb-45bc-84fb-35f09a5b5e22", "comment": "Malware payload", "value": "c5618251079c77132174254803b7c24a1d77f4f4c080ddef5a55ab977ea9e8acbedad3254e7cfbe2cbe28797c7d1f38d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354703, "uuid": "93ee9d7a-5f5e-403c-b8ec-c0a56fbe0a90", "value": "T1FDF46C223711DFA5D355D67004F3C7905AF625A20EE2548AB26CC3287E21A2D6E5FFF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354703, "uuid": "1d6e74e3-b335-4b2b-bdde-5b1e157cbf30", "value": "12288:NuiObb5EBcw04rQR4KZGytPXkxzed0C5D5Kgpygm58D/3ASHWVKj+z:YiOeBBg4KZG0Px5D5o5DGWVKja", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354703, "uuid": "3b9397a5-0918-44e3-9d83-807044166033", "value": 763036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354703, "uuid": "8eb99f19-f220-49d6-9375-38278d4ba40a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354703, "uuid": "46691339-c813-4c18-8de9-64d68222d540", "value": "ovhmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d643860-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354517, "uuid": "060e679e-f35b-46cb-bd82-773d2f0aa0f6", "comment": "Malware payload", "value": "9b56ea449389e7cf39de5aa1e6e21caf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354517, "uuid": "e6518473-ed7a-418f-b3c8-02ff65f458a5", "comment": "Malware payload", "value": "9a01e5d08aa005af35245f7915c75068d96b46c8f116a31fd3e669d202251dff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354517, "uuid": "eb5a6b0f-a8a1-4605-ab93-1a04910e5321", "comment": "Malware payload", "value": "995998ef5247427bb01e8bb19899a6db41f072f9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354517, "uuid": "7f8aa55f-e452-4566-aa49-57f4ed861272", "comment": "Malware payload", "value": "a4eb1b233017e7446006a66fd217125de7cf5aa148d51a168b84ed742adfaed697f77235fc07b8a3f24629fff58d8543", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354517, "uuid": "390f2b0b-165c-4094-8ffd-27dd4b4b4e84", "value": "T1F2058D2AB2B3F17CD11BC03407DBCAA14535F47526222E7B27C4DA353E66CE22369B65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354517, "uuid": "51402dfa-751c-47a2-af7e-b3b14af4987b", "value": "12288:2hGfFoyPPBRdVHxsAFeNNgSP7RK3JTRHRV61+ooc6NayV19qHX:2cfFLPPfeNNgqdUJfVwzw9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354517, "uuid": "4c6e909c-2169-4550-8711-6ca4581c9c75", "value": 834320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354517, "uuid": "afaaff72-a20c-4565-9e64-4f9d511b433a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354517, "uuid": "7997d31a-0a52-4f1d-8a72-2fe305142a55", "value": "tci", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92890f00-310f-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775407837, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407837, "uuid": "2a7e9491-cf4b-467a-b8e1-928e7e66edf7", "comment": "Malware payload", "value": "9aa707c45a5bb059c23d74cf759a1e29", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "flystudio", "colour": "#D3D460", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#059CDA", "exportable": true, "hide_tag": false }, { "name": "HackTool:Win32/Malgent!MSR", "colour": "#D6E849", "exportable": true, "hide_tag": false }, { "name": "XPACK", "colour": "#EE962D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407837, "uuid": "d24cd9f6-5218-4f26-b9ec-e619789eca0f", "comment": "Malware payload", "value": "9a22cd8476fafe30840f285f37c9ef0dc2f42336b644e8bd607020dbe93d1bf6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "flystudio", "colour": "#D3D460", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#059CDA", "exportable": true, "hide_tag": false }, { "name": "HackTool:Win32/Malgent!MSR", "colour": "#D6E849", "exportable": true, "hide_tag": false }, { "name": "XPACK", "colour": "#EE962D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407837, "uuid": "718bab6e-2330-4ed6-846f-7500bfcc4f14", "comment": "Malware payload", "value": "04d4a437d560d64913f2203dbd785902d2472103", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "flystudio", "colour": "#D3D460", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#059CDA", "exportable": true, "hide_tag": false }, { "name": "HackTool:Win32/Malgent!MSR", "colour": "#D6E849", "exportable": true, "hide_tag": false }, { "name": "XPACK", "colour": "#EE962D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407837, "uuid": "d12d2569-700e-4f41-8e8a-157b00221371", "comment": "Malware payload", "value": "05a78ca1bf2f1c9d5571e33a47bbb6aff96196ea49e4cca149d0a407f60e09e3a704611da08579444ae5a8fc1054920e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "flystudio", "colour": "#D3D460", "exportable": true, "hide_tag": false }, { "name": "hacktool", "colour": "#059CDA", "exportable": true, "hide_tag": false }, { "name": "HackTool:Win32/Malgent!MSR", "colour": "#D6E849", "exportable": true, "hide_tag": false }, { "name": "XPACK", "colour": "#EE962D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775407837, "uuid": "066ffa77-ce08-442f-9632-b16f29a0accc", "value": "T11F86DF12E68180B2D538057021B347397B75AF9A2A25C783F3ECFD786F32751AA6714E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775407837, "uuid": "ca5c76d3-0adc-4d9f-b0bf-248bb5b51278", "value": "daf226b4e4e1659cd274626592d4f51e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775407837, "uuid": "718e1767-6963-4e6b-9761-189c22aa2e84", "value": "98304:yM/vhz+EuZWe0ppRZXw4TtINWlNDEHT+gwiOWfVzArOSqeDalc6d:yM/vyWNtZXoTzWWdc9BDal", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775407837, "uuid": "1689a3ff-8ad2-45b0-96fe-be25b99b15c3", "value": 8364032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775407837, "uuid": "f201c382-93a8-4de3-82e2-8588dc6983fa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775407837, "uuid": "338ef8d0-74b3-476b-a575-b28a26307411", "value": "VSMan6.0S.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6ee57bd-309c-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775358533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775358533, "uuid": "31459656-72f9-4dee-8261-a4f6f960ce44", "comment": "Malware payload", "value": "10a784a9ba035195e4c9c0ba082925cd", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775358533, "uuid": "d66a6b59-8bac-4123-b478-0c5267a17d71", "comment": "Malware payload", "value": "9a778fbb730ee653f45b36700a369c81792509f855c2529aca73de1443c62de8", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775358533, "uuid": "0cadf421-d474-4209-93a6-7815f94bd146", "comment": "Malware payload", "value": "2c6531baaa80770d6c13a9a685054754454a77ff", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775358533, "uuid": "c1f980c7-35a6-4626-9bcf-c208bdd5bf92", "comment": "Malware payload", "value": "11870b3e5a846451be52819dfd69db2085d8dac6d4a3bd578815b57c7eb0149e54cb87a737379c196ed969a84824bde4", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775358533, "uuid": "e97d1e13-edfc-472e-8fe8-db74d32411ca", "value": "T1C3653347C3A8695EE23715BEE1E118A41FEE68B1F3D2E732044BA210FA3C4F495AD354", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775358533, "uuid": "7fa13397-db9c-434c-958a-567c16f56df5", "value": "24576:7Yn3pknlT2o/e1Gw0vfiIw+ltzXknGUjSTOwnA6OGK0Z2nj9Whiz:0n3pkn12o/M0SI9nUVmTJZOb0MxWQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775358533, "uuid": "d6641602-7ba3-4cd5-9827-08997814d5f7", "value": 1438556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775358533, "uuid": "984c04fd-6164-43f8-9de1-bad4226b86c3", "value": "application/java-archive", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775358533, "uuid": "e8989e31-95b8-4a9b-be7f-63d481ec8b82", "value": "ST (1).apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87175dfd-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354131, "uuid": "2daf5e28-0a4e-4b6b-8a2a-6f8007e8189b", "comment": "Malware payload", "value": "efeb7c731fd74aec2d6b463ce856fd91", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354131, "uuid": "64eecd89-0eaa-4cfa-9dfa-b0ba729b1192", "comment": "Malware payload", "value": "9a952339a4a10ebc8b873ef7b75ed2e8cd03383978f54076919fcc48930f4414", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354131, "uuid": "c362b271-be8e-441b-a879-630a09ef671a", "comment": "Malware payload", "value": "662cd5d5f71bf3b11ace5336ba8bd70ffd98452f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354131, "uuid": "750da76a-fea6-4c7f-8388-24114e23561a", "comment": "Malware payload", "value": "d5250934f1981ba3e255ce07ea89216c9705f54a5c3e3342317ec4b58fd2f86866257b4ae625d89d36b4f597c7fb3fc2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354131, "uuid": "fe06b781-0d09-4ef7-89bc-686a875d6bc5", "value": "T1BC464B45FC1D6862C6C975742FB202D87339BC898F81D7276618BB3DAAF63588F13261", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354131, "uuid": "709ce80b-d40e-4e09-ab68-f93a864a1825", "value": "49152:ygLx1dl1YqpUMCJ4T4XepdDesNRRyiFVgVy95Eo:ygLvdl1Yq6O7pdD7EVcEo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354131, "uuid": "1c5e5b68-b3f7-4493-ae71-353348c1e9a0", "value": 5505186, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354131, "uuid": "ccf05905-cbae-4bc2-a983-c4bc851a466b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354131, "uuid": "4a8ab150-d1d7-4c48-bd3d-be8640179b22", "value": "li7proxarm64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "976436fe-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354588, "uuid": "eda3b1cc-a5bc-4159-a11f-7636752a79af", "comment": "Malware payload", "value": "4d8aa1f6da2511a0b6c90448809d039c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354588, "uuid": "1f605396-d9fd-40c0-92e1-0ecdf67cbcb5", "comment": "Malware payload", "value": "9b729113f84240c10988f9f79debb3812de090a8b617f65e41c6a53b54df9ca1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354588, "uuid": "abbd8081-5e9c-4fa2-ae7a-5209c15bce4e", "comment": "Malware payload", "value": "7bac116b5184a89a203ef92d77280936fb0fc7d7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354588, "uuid": "bd56f4b9-ee67-4ef8-ae29-47101c193d21", "comment": "Malware payload", "value": "43161c54eba37f9472f61d89b2953a33051930f2dcd36249d2aa412b9a474d1fc3fa0db9c6ac8ea9309f9bdb3e6c081c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354588, "uuid": "8166104c-c2de-4ac8-a0e8-6c614a840320", "value": "T15EF46C237711DF65D355D67009F3C6904AF624A20EE2508AB26CC3287E60B6D6E5FEF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354588, "uuid": "18816a89-e1a3-4b2b-88b0-c9b74b7203a6", "value": "12288:DxyIAKcLdxKIE3pS42bGWkTEMIviwJlgpygy+639StdVljli:DxyI+LJ42bGxEpiwJP+4IdVljA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354588, "uuid": "83f144f0-3279-4074-b372-119e745b5f67", "value": 763276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354588, "uuid": "8115288d-ec82-430a-9bb8-c79aa0ea8f6e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354588, "uuid": "b4a14eca-e8dc-4ba0-b8ee-2f3b39867322", "value": "siackmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c01afb7c-3098-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775356804, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356804, "uuid": "fb46bced-11a0-4a66-ad23-3f9a0eead8d9", "comment": "Malware payload", "value": "e3648bfcfa9a0293569edb1fe3a2e892", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356804, "uuid": "c873b397-f28a-4a02-8cbb-3ec9967ae6ca", "comment": "Malware payload", "value": "9c07e5dd9a07a5d8c6b3029adebac8e9d7a7a66dd2ab2d50ce35767ad4277e74", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356804, "uuid": "1c4ae9fa-b239-4660-9a81-8ca343c51f99", "comment": "Malware payload", "value": "30f3b88dfb2ce96d68cb4271e50abbe4aa3d427b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356804, "uuid": "8d9e45d7-2eb4-40c3-b736-6d19ac5d708e", "comment": "Malware payload", "value": "e7e0c1c1282efb1156887dbbc326d1a86d7c88af1aeeb8dadb819801adcc020c2f8826dffc296d1c084167591fd43d01", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356804, "uuid": "8c08ebc1-1ecd-4905-8924-ccf2a5a57f9d", "value": "T1C4E2E782B882562BC2E4537AFA6F418E3365B3E8D2CF761BD8115F107B8952F4D63B41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356804, "uuid": "b609fae2-b7fe-4e7c-8e47-2993437771ab", "value": "384:Fwo8cvLs8xAtZ2jhzqARE7/rEbdxN52OzqtyIWs58u5cYzGmnPdFZLwpiC5xvXzE:ecI8xwchzqAE7/yHNLKt5cYTPupTvF7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775356804, "uuid": "3c76961e-28d8-47d0-8296-86f869a68544", "value": 32120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775356804, "uuid": "607a48b9-5ca5-4bce-9644-c53fd033da39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356804, "uuid": "769d2198-a22e-4040-b8b5-14efefbb0457", "value": "parm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ea58924-3094-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354788, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354788, "uuid": "9082394f-5967-4fa9-b6ba-21a938e9dac0", "comment": "Malware payload", "value": "c0ae3a539b96caa5f96fc94203e2e133", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354788, "uuid": "9f5dcde3-7879-45a6-a1e5-12134cfef33c", "comment": "Malware payload", "value": "9c4133df17f65e4414a68fb94861cff9ee31ec2316312467f1359a315877cd67", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354788, "uuid": "57419c53-0f9e-4755-9865-518cccbc788f", "comment": "Malware payload", "value": "6daa1028acaa476ced04e3fd34994e41cd9aecd4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354788, "uuid": "f3a5734e-7a1a-422c-9398-e65761d67560", "comment": "Malware payload", "value": "3347600c2c09ea30a59e5420bc8c5b8b86f958bf67ee54b9f714033e13a22c9b210b3305cc957c2673e415712f96d099", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354788, "uuid": "ca4a52ed-1ecd-486c-b99a-effea7ab9e02", "value": "T147055B42FB1C4563C9470EF1293F43D5F7257A4341F9922A370E9B672622E3ADA83789", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354788, "uuid": "2406b832-b32c-44a8-9f90-c9c4ed7b1fdd", "value": "12288:jnmCgqvxo/g+4DEIgBPt4TFBJzmgyo1zhipbj2KrkFKJedg/3zwLoNlxx:jmCgXgnDEjJtumgyo1z3KrkFKAsEL+lb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354788, "uuid": "6cf2da1e-3e52-4307-b066-084d9c02ce55", "value": 857344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354788, "uuid": "d611996e-ef57-46df-b01d-1d06591936ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354788, "uuid": "4d5c6895-4133-4b70-9523-c55c572d57bc", "value": "libraryppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9ac5f31-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354645, "uuid": "fc55b50e-b49d-4ce8-91e0-84a039996bde", "comment": "Malware payload", "value": "259ace1799078dc5430207017a3b449e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354645, "uuid": "5cbab7aa-8b2a-429f-8a3a-b21d6a1022e9", "comment": "Malware payload", "value": "9c781b983aed5d4db5f5bee06c6da731236bbc781caf552508092d4c01fd60d8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354645, "uuid": "aaa7d76e-f5d1-4850-9710-e41002647dd0", "comment": "Malware payload", "value": "82b460c8f32701a043503a2b2dc4ba58b116c6ea", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354645, "uuid": "70f54427-1bc7-4b01-8d45-be054cec9bf5", "comment": "Malware payload", "value": "f829191c201bb3f4b5bcdd1119d7b3527c82fe9e25f54c9b075c92219f365c70cf2d64e4045003e16cafb8ece532a0dd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354645, "uuid": "bce796e1-11f1-4a3c-a7e3-58fcbc4e9d84", "value": "T120F46C88EBC2D4F1F65300F10A8FD7E21A64921A5053F7F2E78D2A9774727626E1636C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354645, "uuid": "ce8cbdf5-77ea-4ec5-bcc9-35747af3ef87", "value": "12288:hgrJePghtQhL5W7bGzOOK/gC0qc+CKa/SXXuHy+mfFkNPyKSjUVZVHaLu:hgFeohtQhFW7bsOdlcVKa/SX+Hy+mfFC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354645, "uuid": "5b7bf650-7333-43b2-9f2b-d40721f98126", "value": 779328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354645, "uuid": "d14a50a8-6b92-4b40-ab25-116e64e46816", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354645, "uuid": "3bc19877-3a30-41ce-8173-32752830711a", "value": "siack32", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b761783d-308e-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775352494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352494, "uuid": "a1768771-fa1d-4a4f-af36-0db53e4cf758", "comment": "Malware payload", "value": "18868a5cacac86c4962722557f454043", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352494, "uuid": "183f1ba9-a206-49f8-9f2d-2947e98a8749", "comment": "Malware payload", "value": "9cb6a97152451e277f7138b0b3b4d3a9fdd9f409578b309e1f3222cc81f312e8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352494, "uuid": "568cc7ff-63f9-486b-b506-3fdd70c94464", "comment": "Malware payload", "value": "b395c39b0175dfd0d2173629f4257e441f52be60", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352494, "uuid": "f4f9dec8-de2c-42d8-a06e-25a065404c79", "comment": "Malware payload", "value": "a5e35485b3476be48111e864d5e9d2f0a9aa229a2d4efde08dafc9146655e03acd34978d5ef617f6d6d93f694b118afa", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352494, "uuid": "ba9c0adf-e96b-40a2-b991-c35b93ba56bc", "value": "T18ED65D11FACB54F6F9036831416BB27F23315D048B28DB9BEB583B2AF877691187A705", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352494, "uuid": "111eb71d-f41f-4ede-a946-a4ca2063ef25", "value": "49152:HpXZKft05HtyvruRo9JBDRHCTdU391KX1NbNV4L6d+NTPeGFPbQuhHEPAw8sWexI:FZ0tkRorxxCO3ukFJFzAo1f47XE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775352494, "uuid": "0b21c8d4-b751-447b-84c5-ddd704320751", "value": 12926976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775352494, "uuid": "d009ace6-a8ff-42ef-8e43-152a061c587f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352494, "uuid": "7ab37e78-89dd-405d-b67e-70bdc14a599f", "value": "SalatStealer.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91a9b40e-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354149, "uuid": "da710a7a-7364-4193-a10b-abb4a7c7f813", "comment": "Malware payload", "value": "4aec06206344af30957541e27a1b9ece", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354149, "uuid": "e37ef733-90eb-44cd-9aa4-e2b2b383ebfd", "comment": "Malware payload", "value": "9d0ebe20868510fa59be2c822b70b8ce16e2ab872417c34b03af41eddbbd370e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354149, "uuid": "9c1dde10-7afb-4c9a-9b13-d1326f6dad20", "comment": "Malware payload", "value": "96163e41221796b49ed96946b0e2885c4a503cc4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354149, "uuid": "cf8cc613-3e58-4c9b-a359-a5683404c2ec", "comment": "Malware payload", "value": "c36ce53f59ff264d022ef6920bc0347ffadf9937ca1ae8a2e00b6e97d6147938adebb3e74cbaa5cd793ebba596e6148c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354149, "uuid": "d5c74d9a-44f1-4a5a-a61f-45812aa1b5a2", "value": "T195463911FECB14F6E5031D3144BBA26F23315D068B24EBC7EB547E29F97B6A61932209", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354149, "uuid": "7a555b65-0f9e-4709-9a53-3dd48f45cad1", "value": "49152:wdgLQ3fLC+623hpMLt/JejxN9Adlyavd7EybeiTieahhDqA5EJ:weLSLzpP4JeVN+dly8d7K3ayEJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354149, "uuid": "f7d0ee20-1f6e-4365-9096-52de9d298310", "value": 5742754, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354149, "uuid": "a38130f5-5192-46cd-ad5f-0c865c66992a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354149, "uuid": "4191f0bd-e0b9-4710-bc99-67cf7d91fe9c", "value": "li7proxi386n", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0505048e-30bd-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775372381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372381, "uuid": "a8b885a6-f523-43c2-a494-e82fddae288c", "comment": "Malware payload (Mirai)", "value": "1da67222e206ad8d7f3b9cf0076685bf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372381, "uuid": "f312386f-5471-45a6-b343-bd883c3f1b3b", "comment": "Malware payload (Mirai)", "value": "9d2c534156b9960cf377e4186f21f42cde1398a49c20a91d11d30027826c6880", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372381, "uuid": "c76d804c-7d13-43dd-83df-a2967b2dbdb7", "comment": "Malware payload (Mirai)", "value": "067ba890ef99e0f06f10f5d2f8bfd348416a9b95", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372381, "uuid": "af053521-a1ee-43e9-94e4-3718f0e2973a", "comment": "Malware payload (Mirai)", "value": "4f3db1895d87e0d04f99fd8f0517f4b1a412569c6e0ed56b61a547168d5642c80b0b5c850e6ddab13b8a7d38b19686a5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372381, "uuid": "49a636d0-1244-40dd-bf3a-de45ef59d573", "value": "T1D6044953A8A55F9BC196ABF662B39A740753E8150F430F7BB52AE9F40603DCCB808774", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372381, "uuid": "0a5c0e57-0d6a-40d4-ad81-c295f18400c0", "value": "3072:2hKs39/HSH5uVvLEI2wubCdWgJDVXTF8gjJWcfaRq6i44drhhR61AMLON2lN:Fy/HSH5uVvLhXoklTWgjz6i44drhhR6f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372381, "uuid": "cd6a8424-835c-4c1c-96be-c8c3f47def14", "value": 187626, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372381, "uuid": "5bd55a43-4983-4824-909c-ca06328b1d0a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372381, "uuid": "e970bc11-9a2c-410c-8ac9-9e9bd275000d", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b463c5c-30a7-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775362943, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362943, "uuid": "e6ecd33d-380a-4724-965d-fade24758ed1", "comment": "Malware payload (Mirai)", "value": "b3438ee96763a4b3233b7feb02cd9c87", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362943, "uuid": "72ea3bfb-cd5f-4b2c-ae80-6feb23308be6", "comment": "Malware payload (Mirai)", "value": "9e1265682d8a9166b319f1884aa591ac2f3cab345f5a608dfea5cb9543f9ad33", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362943, "uuid": "adbd18be-72fd-47b1-99ca-23d41f0a09bc", "comment": "Malware payload (Mirai)", "value": "e1e655f284650b04755f4b3fc981be820b13f58f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775362943, "uuid": "2dc85801-63b4-45cb-98b7-d766bb146ae4", "comment": "Malware payload (Mirai)", "value": "c59a04146a0b9fc577c060ea4d79f85fc4d13abe500bc20868915ad3338408cd0504bc98bc478dc8969fcc4582523e33", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362943, "uuid": "2f5d259c-1944-4a0f-88d9-35467c1174de", "value": "T13AC2D1E07726F931C420AC3DE52B4C893A51167C91FF393764169D359EC269A23F48AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362943, "uuid": "c8bfa6f9-1aa0-41db-8aa4-8afe214311bf", "value": "768:4MKyhegCCMqfizjoNpd2vJdX6vwrfGp9q3UELuw:PKy4qfqoeJdXWgffL1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775362943, "uuid": "3da255f1-c822-4a36-a335-a2d3d9b97a29", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775362943, "uuid": "37c22dda-3ca4-4ec7-9bbe-d83036c96774", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775362943, "uuid": "9937b63c-2bfb-4b65-b569-dac42ff45b39", "value": "boatnet.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07401d48-30fc-11f1-a769-42010a9c0008", "comment": "Malware payload (LummaStealer)", "timestamp": 1775399443, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399443, "uuid": "58cea39c-d438-4a85-9de7-0dafba8c6679", "comment": "Malware payload (LummaStealer)", "value": "f13615449e6e64a63781b289c369dc9f", "object_relation": "md5", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399443, "uuid": "61580b6b-e704-4205-95fb-a50c0f3216c4", "comment": "Malware payload (LummaStealer)", "value": "9f5657512cf8ab272c6a2bdc4b8e119830c0e4c8d5bb7399fcd04ef2cc3bfeac", "object_relation": "sha256", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399443, "uuid": "ec758317-56e7-4474-ae75-bd800d382258", "comment": "Malware payload (LummaStealer)", "value": "76e79fc4ea109aa5a94d42bd296fec0da3020bfb", "object_relation": "sha1", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399443, "uuid": "260026a7-a545-45bb-9208-c5b874413bc8", "comment": "Malware payload (LummaStealer)", "value": "fcec5dc31cef8ab36373987de92dcad5874cfe6ae2427089492220af3bc3601538c84d2f4ac1469cfd7cae1f12a7316a", "object_relation": "sha3-384", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399443, "uuid": "9d92d77d-f74d-4558-a33a-dc33c195bea7", "value": "T126655B41FDC354B6E41217325AFB62EF27359D090F329A87EA407A39FA776D11832326", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399443, "uuid": "77f4f9d3-282a-4343-bad2-c0d3e2de107b", "value": "1aae8bf580c846f39c71c05898e57e88", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399443, "uuid": "307a4075-6596-45f9-a2c5-0707caf9e15a", "value": "24576:DAkmxYBJqyQvLIId0T7krjKCID+5HpoLvaN3M+fJo03D7x621dpB3vBGbAuoH0tT:DGYiuXkVAUDR7VfEkslt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775399443, "uuid": "399ffced-519b-46d6-b2d9-51a0090c0b13", "value": 1494016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775399443, "uuid": "8828fffe-8d1a-4902-92f0-8a27bff409c1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399443, "uuid": "a0f111ca-044f-4ced-81cc-5fa5017295c9", "value": "recuva_professional__technician_(2024)_full_espa\u00f1ol_[mega].exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78ddf6a9-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354107, "uuid": "cb0bbd0c-5989-4aac-85fe-7b1436831873", "comment": "Malware payload", "value": "70caee9e1353f4175ce5e4fe94f2573d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354107, "uuid": "71f8bbf2-fb07-4f8a-8731-81393f692fed", "comment": "Malware payload", "value": "a029877100e49b9be309a8b2a1bc774593d1cccaf6dcf1a95827836f575337d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354107, "uuid": "9fe2c0e2-ecf7-41e9-870b-e276854f0284", "comment": "Malware payload", "value": "a371c84dca063e28c1e438ec9f96ce00cc26df41", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354107, "uuid": "58aaabb8-a547-4358-9d3c-b9bd4c54479d", "comment": "Malware payload", "value": "62b0c0a555219e733344aed89ad61030fdb6c6cd7318d97aa224dcdd11170ca2273de1de8811e34af44b574c7df0747e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354107, "uuid": "7b54b09a-7413-4808-9e06-bf388280af8b", "value": "T12D058D2AB2B3F17CD11BC03407DBCAA24635F47526212D7B26C4DA353D66CE22369B66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354107, "uuid": "5a9e18fc-3267-4274-8b65-efb7b61b2f54", "value": "12288:/gEAN5RtwYP3GdOHj5fNOEZQNggW9GeYe5TQaWK2oo8pAYay10qHX:YEArRtvAfNglMeYYQDKb4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354107, "uuid": "69053d4f-801a-43f3-af88-8098fd603af5", "value": 834320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354107, "uuid": "0e2ca94e-43a2-4706-859f-f4f8f22f274b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354107, "uuid": "cd6fa471-7feb-48bc-b676-7c6cee30592b", "value": "ackx86-64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe4888c8-30a0-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775360344, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360344, "uuid": "06d0e3bd-bcb9-4d64-9c1a-467f4613c9ce", "comment": "Malware payload (Mirai)", "value": "78774672884f8cd7593fced3c7d1faa4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360344, "uuid": "788ed53e-87cf-4386-ac6c-76fd9e3cf9f0", "comment": "Malware payload (Mirai)", "value": "a03705fc225dbcec7e3c2f06a258afe81b5d88aaff1368d10dd6ba4f0932be7c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360344, "uuid": "eceb15e5-513c-4470-9617-99a5094b8aca", "comment": "Malware payload (Mirai)", "value": "dbcf1c93634010c7e6131bcdfffa72e30da2376a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360344, "uuid": "99e617c7-b35c-4292-b3bb-2fdfe062ef55", "comment": "Malware payload (Mirai)", "value": "b47009ce29f93c0c00d403f7b8fb4088f6bcc87a066a925b49bdede9839800132c6bc28362505c65b820fad8ccb103fa", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360344, "uuid": "88cd6698-6f2c-45aa-857d-ca0d1b598200", "value": "T12E6302881121B1E4C3E58AB6FBF6D2D36E0A32BC9561E033B50B6661D4758B333F51D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360344, "uuid": "653c558d-070a-4106-a28b-1710b09cbf4b", "value": "1536:1s2BH1aqzhASgdmckDZrMoq/CatIGptr7vNvVcxUqwVy:PBV1zOBkckVMNaSdr7dS9V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775360344, "uuid": "96588f81-122e-49a8-8bde-22b6d3126489", "value": 68276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775360344, "uuid": "342ee5c1-d42f-45b6-b740-b6095635e447", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360344, "uuid": "b3e82c94-1ea8-4122-83a5-03b2c3b85945", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cda5719d-3090-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775353390, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353390, "uuid": "deeaefc3-ddd4-4109-afd0-4510dea457b3", "comment": "Malware payload (Mirai)", "value": "2506c106b5207c882de9f127e1175d52", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353390, "uuid": "4acd4c1b-2acf-4d32-867b-c6062f16d404", "comment": "Malware payload (Mirai)", "value": "a037866f92e33a4f8bf7083f211636ff053be45ff7d45fdca24388400323a486", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353390, "uuid": "9446823c-ac9e-4daa-8401-e5120c611e4d", "comment": "Malware payload (Mirai)", "value": "8b8a06e0b595c25a93a90bb21a4cc99cb53b6bf2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353390, "uuid": "d2ee49fc-9b03-4ce5-8b3e-14dca632cc81", "comment": "Malware payload (Mirai)", "value": "846056681dc8563f7288e6cf87d00abda947ee35a3669e567cbd4cdfaeb51d471a835c115f0bb1b7ad39047f09519b8c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353390, "uuid": "eefbefe6-a603-4094-9144-732e9f6de452", "value": "T120732B46B9418B12C4C311BAFBAF454D37036FB9D3EF72129924AFA023865E70E7A615", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353390, "uuid": "ad1a3cbd-b560-44f5-9f29-7afc1713a399", "value": "1536:7ABnVH5+KloMpwWZh0pK2VuT32NZkazLg0NMfi/xvsLVHO7UKb+5Kdx6DYahX:7YrKMTmNaaPvsJHO7tqeYBhX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353390, "uuid": "9c80e805-a43b-4ab4-8f97-5a11dc931416", "value": 78164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775353390, "uuid": "ce8fab46-fa5d-43ee-b744-9a43e2b9f9cd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353390, "uuid": "c3ad7c2b-ac8b-48b6-86fc-b1162deee288", "value": "mirai.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da299eca-30e6-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775390348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775390348, "uuid": "5a795758-28f4-4907-a60b-c0817f14632f", "comment": "Malware payload", "value": "083c72846ce696098e10ceccb1d268b0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilentStealer", "colour": "#123ACB", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775390348, "uuid": "c3c56d10-d913-478c-b445-11c6dcc5e515", "comment": "Malware payload", "value": "a06e55a35e81e1f42ad14bd372554f97a06d89efa4bbba31388b44be33008d66", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilentStealer", "colour": "#123ACB", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775390348, "uuid": "305fd36d-66b9-414a-86c6-5aad837b3f4f", "comment": "Malware payload", "value": "d5b096b0226f6df720e5d183cb8b4ca9c73f56ab", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilentStealer", "colour": "#123ACB", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775390348, "uuid": "e6870723-f168-4bdc-8713-3656a32017f4", "comment": "Malware payload", "value": "bd1c6d42dfd3bbe535a98a10e8c4876068749cc110e316584acac1a94e52d44791be46087aeea99a3b55791bfc31e235", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilentStealer", "colour": "#123ACB", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775390348, "uuid": "36f5d94d-1ab1-4a9c-a766-a813d355159f", "value": "T1F1D733667E7C85BDE60661BD2ED9804350D69A033FE46F4F9A1F812A5742D078B022FF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775390348, "uuid": "4e1d1fec-cce4-4a58-8160-c9674af3aa55", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775390348, "uuid": "cae66397-2676-478a-beb6-944186057d13", "value": "1572864:RrR+qvDulPXy6TaaCLahodoFCzT+jVzERKgTP:RrHDulPXyoaahoZzeQzT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775390348, "uuid": "c62ede02-2b25-43dc-82d8-c0dd9840dce4", "value": 62644993, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775390348, "uuid": "aad5a332-bf2f-4736-98d9-bd2b712eda38", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775390348, "uuid": "6c541658-e5dc-493f-bfc2-1b6581382e11", "value": "JrXdependence.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21b8d8ee-30a3-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775361262, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361262, "uuid": "13d9920a-0731-45d3-b74a-b6fc9d988859", "comment": "Malware payload (Mirai)", "value": "34a8e2209e4a468f1e3ae79d47d7abae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361262, "uuid": "f8ec9f2c-ecf5-4482-972c-5d36fd78a6a9", "comment": "Malware payload (Mirai)", "value": "a1390964c26ac99dd99796b07064db70382ef3434a38af653c5e833c97ed5efd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361262, "uuid": "e3d29e1f-4172-4b42-8d29-d48c5770d752", "comment": "Malware payload (Mirai)", "value": "3eddb98f2bd696938c8a4542554446e9b266a64d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361262, "uuid": "f4a55bdb-b63b-417c-89a9-0830caa381b7", "comment": "Malware payload (Mirai)", "value": "5492b33a5b5dc8d7b0ee03a49a87399fac8eb584b30227b340efea25e4c07fa61b76a78765851bc2cc13dd06d9743302", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361262, "uuid": "0d01c000-e760-4bbe-9a82-d3baeec0a314", "value": "T1E8E2E746FA819F01D5D41279FE0E124E7313176CE3EE7316AE246F24A78797B0E3A816", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361262, "uuid": "08fb4cfd-9d3d-4116-a2c0-a94d96623170", "value": "768:kAynEEC1oZxa7yeeWxrgfVmoyY/MlE4ixVy8nhKagrVY:kxn99YK8gQIMFixV7nhKr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775361262, "uuid": "c573ad3b-0ab1-4cc3-b38f-4b6a365b4285", "value": 34092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775361262, "uuid": "491341a0-d58e-4204-b8f9-5d480764c043", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361262, "uuid": "e220ae1c-9f88-4a56-980c-17afacbceeb4", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0cd9bef-30e8-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775391218, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775391218, "uuid": "48f4f631-2ab3-4b01-a056-9d6ed9b6011b", "comment": "Malware payload", "value": "ebdef75730b7426f6e2c229eb8649a95", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775391218, "uuid": "e99c5844-70e0-4a2b-b5b9-ef5475ccb7ba", "comment": "Malware payload", "value": "a31431504419920f386144b3a537c3f76dbf004e2623e11ae862cab65bdbf5b9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775391218, "uuid": "0e9f17c3-4730-4026-8f0d-1bb8281aafc4", "comment": "Malware payload", "value": "1a66a8221fe43925045632cf3ecfbcffe67633d8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775391218, "uuid": "ffb3eb52-7dd1-4eac-8aa0-c13065fdec3f", "comment": "Malware payload", "value": "f14c55a676e3084e13525ba9b28825edeba33378604875b5b8a989ce2509fe9a6bb53da1c9a959d53f23d47a9c0500df", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775391218, "uuid": "4bbb7db4-9a1a-46fc-81f1-62d75f403c4d", "value": "T1304733C617D60566F8DFA23978E846A7C2F1B5505A30C99F0BE04A593C7B0E6DD3BB80", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775391218, "uuid": "a5f924c3-16b8-45fc-b92c-8e555af59b8b", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775391218, "uuid": "b73c100e-3a19-496b-a3c5-db51a2ae6dc6", "value": "393216:HqO2znAP/iXgAt2Jy6HFJcu10Udq1B7GRheXpInVOHsn4qSWc0piakw4:Hqbznxv2JLHR10Ug1wHa6VEgzSL0py", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775391218, "uuid": "59a1102f-2e53-4fd2-a141-9b0d96a260be", "value": 25013208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775391218, "uuid": "6945ac73-71af-4f68-a3c4-79399e11d0c8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775391218, "uuid": "ce48143b-aaf5-4738-8b62-4ddd7c36f6ef", "value": "Loder.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b79c5f78-3102-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775402316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402316, "uuid": "aa6c2adb-448e-492a-9155-2e3b6d58e4c1", "comment": "Malware payload (SalatStealer)", "value": "ae4c5c0faaadaa743c61d03dd1dd97e4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402316, "uuid": "cec042f1-2be6-4b6c-aa6e-9e55ad1d9bd2", "comment": "Malware payload (SalatStealer)", "value": "a3b4d9c816e1d68b3656faf871c0d6e21bd99ebcf92b6964cb05dbe1d5517b41", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402316, "uuid": "6131cece-2b43-4754-95f3-05aa54ecfa97", "comment": "Malware payload (SalatStealer)", "value": "471f448e8e1d983287dbce7137afdcc76c1074a7", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402316, "uuid": "66e66b34-96ae-4be5-8eb3-8fa2fc35b154", "comment": "Malware payload (SalatStealer)", "value": "94be8a73c007aae83ac41957fdb19801f45638e8df053e13826cf79806c7a2c67000fef8cdd2d7333841c0e9e45bbb99", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402316, "uuid": "34fb6abc-d9fe-4c43-88bf-1f5d292a4e54", "value": "T1AAC66C11FACB54F5E903583140ABB27F23315D048B28CBDBEB187B6AF87B6A11976705", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402316, "uuid": "4ab02d97-5c77-4822-a879-0fb9e138542a", "value": "1aae8bf580c846f39c71c05898e57e88", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402316, "uuid": "35502d61-7e3b-4d92-9aaa-21191acc64c6", "value": "98304:kxmJfkO6cLL1irnl+o0fG/J04d3HVdBE9O/:WOF4nQxI0Wg9O/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775402316, "uuid": "e7aa34a6-f157-4b33-b8ad-c2514ba63bab", "value": 12571648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775402316, "uuid": "0e64392e-03f7-4a1d-a592-1734251b7146", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402316, "uuid": "4470c767-58c1-4458-a818-387685c06b81", "value": "bzp82dj.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50248987-3095-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775355327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355327, "uuid": "8ff7600d-580a-4d3c-93c8-e9e5598d13e3", "comment": "Malware payload", "value": "ac79fe7e0e058e2c942e608283499502", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355327, "uuid": "62cfe8fb-3753-45ae-b336-fa766e393b3c", "comment": "Malware payload", "value": "a430d48580b1ffe87ce004b120eba19647c3bccf41a737a63dbfd13225bfc40d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355327, "uuid": "598b5cbf-00ac-4ba9-89ea-748cec378458", "comment": "Malware payload", "value": "835079848183e4701157bc9397e3f1e673d0ac27", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355327, "uuid": "a4f83877-0157-4ef0-8438-62bc619d49d0", "comment": "Malware payload", "value": "59c356d36d8649c5f7b6ccb030572b333bddc131e3518a9a66ee63fec184f332c506090bb9d44029a671f7d2653348de", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355327, "uuid": "c8bce7af-3aaf-4479-ae5b-61995d6f552b", "value": "T177D49D29F9447B07C89B9274848FE424732BB284175237063846E67D7D83ABDAF2D3D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355327, "uuid": "ddd6b089-40c8-4ec2-8645-f9ed65a79545", "value": "12288:twG+a9VeP8+yx1uq7U4mADorOxz9jw5spxtvB/q8Wl0:twG+QVt+yx1uEUn4orAz9nr/RWl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775355327, "uuid": "9e37f283-fbdd-4aa6-a407-4d68611546dd", "value": 654008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775355327, "uuid": "afc88344-15d6-4ca8-930a-0618441ab8f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355327, "uuid": "94d38a83-0a36-4214-8917-a26e508c6d37", "value": "ovhriscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3a5ce04-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354179, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354179, "uuid": "c21d5bca-282a-46fd-9f3f-84c8aae41520", "comment": "Malware payload", "value": "89ed8f6c928c085c5fb91a2a17ea5cda", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354179, "uuid": "48e1ca81-9b4a-4a27-9873-715dcc59f2b5", "comment": "Malware payload", "value": "a4768df61d31d51eba5c1693edd29ee0f687f34a856a6bae580ca745f06dc2f7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354179, "uuid": "af7d52a9-79dd-4584-9163-ff755ca5315a", "comment": "Malware payload", "value": "ef840f10e515e7defdc1ba1bbaf783cdf6e6621c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354179, "uuid": "7ac93947-2193-48e3-b431-05ba4e39e2aa", "comment": "Malware payload", "value": "92dc95241856447209f27850fcd9746710eaedd0ea04bef4c0960f2af6739cfad9baf8f2374f2cef53237914c7a2c22d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354179, "uuid": "59b7d69e-45e1-4901-9f7d-a9373c89993c", "value": "T17ED49D29F4047B17C8979275848FE028736BB2440762770A3846E6797E83BBDAF1D3D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354179, "uuid": "50725a12-0755-4326-83db-b0f637fc34ce", "value": "12288:Wpb+ivGQUT0eEApt4MAJv9fGD353Hw5spDP+JgjtHZls:Wpb++GL0eEApPAtVGD53tUgjxZl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354179, "uuid": "ce779f75-ce59-43a5-ac5e-ff241ef6752b", "value": 654136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354179, "uuid": "4e6f52e8-4310-4da0-b64a-eb093cb2493e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354179, "uuid": "b5cbc515-6c60-4152-ad79-7efeae18a977", "value": "ackriscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11588374-30fc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775399460, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399460, "uuid": "b92acb6f-279f-4796-8c88-896fcf147f05", "comment": "Malware payload (Mirai)", "value": "9a658587014c9bca908d82b287eed21e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399460, "uuid": "3dbb0c7d-5196-48ce-98ff-8fc3a843c038", "comment": "Malware payload (Mirai)", "value": "a495bdb91e35a962d835297afb3104691621b782b49b3fda3646c4b49b3d40f7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399460, "uuid": "58927789-b406-415f-9b0c-bfc72cc0f450", "comment": "Malware payload (Mirai)", "value": "e80581719fa694210ffa695ae500303eab9f14d1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399460, "uuid": "ea15814f-e07d-4697-b7de-39637e706fac", "comment": "Malware payload (Mirai)", "value": "8ff11248152a726162b881b89be2f15d11ef97c163f90d8ff952a2cf60a07e2d9d0f9a0a666dd83969c21c1e4f0d0374", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399460, "uuid": "a7f74dcd-d4c3-4551-a3b9-7ddac3489454", "value": "T131936BC5A743D4F5E84701B55137E332A733E03A602DEA57C3699E26ECA1950DB0B3AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399460, "uuid": "b02a3bc3-d4b6-4b36-995e-503b2a7151a7", "value": "1536:7apQddvjjh+C3blBFRC0omLldtPzU/8fnqmy5r40YINSN1FN4iGne:2pQjvjt+C3blTRhomLlvPASngr3VkNce", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775399460, "uuid": "75c2c968-2001-427a-9fee-d30bfd8b48df", "value": 97548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775399460, "uuid": "f1f9a5cd-4ed0-4848-9dd0-551fde2fb55a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399460, "uuid": "65474a90-1fd9-4741-a30f-bbef3f4fe416", "value": "main_x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ac8d51d-3138-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775425434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425434, "uuid": "2dcc9963-c594-44a4-ba5f-3fae072bd69b", "comment": "Malware payload (SalatStealer)", "value": "787ccef295467585e1dcdb7d50cbcf7f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "P", "colour": "#A08B48", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UNIQPREM.file", "colour": "#C4EDC4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425434, "uuid": "c2ad9329-0f50-47b1-a014-c2625e673803", "comment": "Malware payload (SalatStealer)", "value": "a496cd7500b15e6807df035ef8aae617d9cbc5bd3cb385ff9741e6cf50d5be6d", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "P", "colour": "#A08B48", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UNIQPREM.file", "colour": "#C4EDC4", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425434, "uuid": "6249486e-e27c-4f38-8a72-253b27ba542f", "comment": "Malware payload (SalatStealer)", "value": "c39534376d0bfc8502c1cee484330b78f0223820", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "P", "colour": "#A08B48", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UNIQPREM.file", "colour": "#C4EDC4", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425434, "uuid": "d31d833e-f6a3-449d-9679-240f147c387b", "comment": "Malware payload (SalatStealer)", "value": "49762d4119cd7a51d656fb0138308b5c6d9396992961bebff3fe0c0ea0b4b5188d4cb2862d27908ff612f4a8313a77c9", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "P", "colour": "#A08B48", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UNIQPREM.file", "colour": "#C4EDC4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425434, "uuid": "f94940ef-1948-4a48-be09-9b4b02a5bf2c", "value": "T1A226331BB56A1DF8F5035331E877208A53B4B0366A25DFAB03C582391F336662E276D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425434, "uuid": "5026e9cf-5c32-4a1f-810c-f2cd223c9d86", "value": "bfee7c7e234d73184f6b414fec537224", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425434, "uuid": "bbb72f75-b214-4452-8fd4-8fd835c529fe", "value": "98304:bdb1Pr7+F4klHY4wLc+7aTGVd82k6rQAK9WiA5VlU+I8HQ0oR5W:bdb1T7+NHvwPaTGVq2+AKQ5XIk7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775425434, "uuid": "d5dd874f-3304-4567-a58e-00d2bc9c4de7", "value": 4786176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775425434, "uuid": "da577006-f734-4ce2-a88f-4b54d8936f73", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425434, "uuid": "9a0077b3-f829-4eff-af25-8e96ccce8c40", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d79dfdc2-30a8-11f1-a769-42010a9c0008", "comment": "Malware payload (Amadey)", "timestamp": 1775363715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363715, "uuid": "c64b62a9-1585-41c3-bb15-85c8167994d2", "comment": "Malware payload (Amadey)", "value": "68602c6e88fb1cc63e8c9597694cb557", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363715, "uuid": "0e86f1c4-1223-4f58-8cea-38054f94af03", "comment": "Malware payload (Amadey)", "value": "a4f3bed939becb91cb104dc61bcf9e58314de9858b9d07125a3d3312ee40f0cb", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363715, "uuid": "21c25719-eb56-4b7e-b0df-bae0e142b63e", "comment": "Malware payload (Amadey)", "value": "8af765888325a0edc39efd57408ae67e815a8778", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363715, "uuid": "e0b82605-2ef7-4b69-8752-f1393449847d", "comment": "Malware payload (Amadey)", "value": "b6662ed98d470c8adae5fe91dcdf7660b5fffcc498a621024d2d13ae8784bf196b8fffbd26a79ee59a160494e256519b", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363715, "uuid": "84e90375-b61c-4d0c-be57-6193962c60cf", "value": "T10C872336AE5351B8D36BC13584728B11DEF2FC122B218A8B33D4055A5F36A9B5E39F13", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363715, "uuid": "4d095043-b09b-4d8e-ae10-1342b1e7d57a", "value": "4029dc5ee830151a426fff64189bae0e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363715, "uuid": "19985b72-d098-424d-995b-e88fd15452dd", "value": "786432:7ba1Fg1JnlbpfccLBSFopYy0sj8Ew2Ovkmdx7JFO:i1SJlbp0kcoyFs5qhx7JF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775363715, "uuid": "2e1f58cc-4120-462a-9886-d978f4f5260a", "value": 39068160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775363715, "uuid": "97019e50-bc78-44f9-8c81-b4c188a8c622", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363715, "uuid": "1181c658-0aec-49f1-b7b8-7518debe690a", "value": "xa4f3bed939becb91cb104dc61bcf9e58314de9858b9d.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c77908d-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354596, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354596, "uuid": "272f6190-366a-4945-ac67-3920ab6e4d0d", "comment": "Malware payload", "value": "abf6e2082cf2583c6e3d68cdcc380ccd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354596, "uuid": "9e006403-692e-4524-ad07-5768751af359", "comment": "Malware payload", "value": "a5043f7569c57fbd1c4ac1dc95e5e0de0f800499358d81e396cf68326759a9ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354596, "uuid": "086f054b-5f7c-431c-afb4-c6856a00d740", "comment": "Malware payload", "value": "029db48532ee48830b879d4f01aa0758be424093", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354596, "uuid": "4a687427-e18c-4765-a1f7-8c7053e3888a", "comment": "Malware payload", "value": "5137a1e11c97fa59b25f39c0db491d2bb63077be1b8a0341430082218c3be2b9f4f3d89cdf8fea41e55ea4d0618f5a06", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354596, "uuid": "402e771c-2dce-4c90-8276-c7d8f7544bbd", "value": "T1C6D43956F8809F62C5D0297AF65F86A8731347B8C3DB720689189B343BD786F4F3A641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354596, "uuid": "c5e1fa6b-a1a7-4db6-bcca-c00b7573ad50", "value": "12288:LiQBmttCdQqLaRrHIKGTi4dpXgpNxDetRJmQTuWkF:7mttCSqYLGThdQ4vmCuWk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354596, "uuid": "639dae14-4971-402e-8254-dcc97d4028a7", "value": 645128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354596, "uuid": "9c08b6ce-82fe-4e0f-94bf-8522ad0fa826", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354596, "uuid": "cdeae746-b00b-4f83-b62f-41213f01cf4e", "value": "sudparmv4l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd5adcae-30c6-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775376663, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376663, "uuid": "520c06a7-9250-4a57-95ed-2800e59fc2b6", "comment": "Malware payload (Mirai)", "value": "656015a9cf53a9fc43e3c78a00aa8cfb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376663, "uuid": "dde08472-c59a-4f04-8d0d-e84b58adf180", "comment": "Malware payload (Mirai)", "value": "a5d69d5e5a85a7248ff3556b01cf53034f21fbe53efb8188481e27eb6982c9fb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376663, "uuid": "1c49d17c-234c-4028-aa41-51d33a2db876", "comment": "Malware payload (Mirai)", "value": "76446fcd94a3365a88d52120ea52c4d86952285e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376663, "uuid": "b6ec26ee-8736-4d5c-b490-d6dd5a813e23", "comment": "Malware payload (Mirai)", "value": "b493ff498365edae157505a8c17aa8efc9d9268f7b9720ea05817f327c01e9b78f3aae88176d6deead0a109512408e9a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376663, "uuid": "acc43728-9b8a-453e-8f37-73eba7164eae", "value": "T152333902A9BC1A2BC4E0A77711A74372F1EA1B954194E64FBD320C4FEF593501ABB6E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376663, "uuid": "42dcc3ca-e935-42c9-afe4-0fe43adeed09", "value": "768:mxPjOo6L9W6Wn78hhOtCuJb17IaPXGaSxBNOAcz8FZzVFGMIZQTPuU:wjOPLRW76h+CuJb17B/GaSnYFz8bbUU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775376663, "uuid": "150546fb-0a96-4360-9c37-c923976cc851", "value": 53556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775376663, "uuid": "1e58fd5e-d0f8-4375-8c13-89f38ff9f73c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376663, "uuid": "9b1e49cc-988e-4aa2-802a-2984b7ecc2cc", "value": "titanjr.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6a5a2f4-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354184, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354184, "uuid": "88a2c47f-372d-4bed-ba31-641fa8bcbbf2", "comment": "Malware payload", "value": "4794a65a31c374fe96c428de70ec94fd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354184, "uuid": "c9502b58-d30e-4874-8ecc-739230acc72a", "comment": "Malware payload", "value": "a648d3198df74d259e9b44449ffebabd1a1a2d8c00fe30aebcc691d5352bf3f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354184, "uuid": "247a4b38-d4b5-4521-b928-3c2d3eccfc3c", "comment": "Malware payload", "value": "e585f5ae1ff76524e8842e5d7e42b73e0d1d92b0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354184, "uuid": "23bfea7f-091f-4767-87f4-b6d1ba5498e9", "comment": "Malware payload", "value": "f2d33eb8e98d720724d727c89e77b9a672c9fff898e91323344a1ed1cd84b50c16fec90f95e62c6f64d7a7da065e01d4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354184, "uuid": "02bb4643-c929-4206-9f72-5177dc88f36a", "value": "T1E0466C81FB48A125D95A0E7288730F70B3512D46D2E5EA5F0309F36F15B26F7AA4FE90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354184, "uuid": "f45a2c84-143c-42f7-a85e-78e30abc7b38", "value": "49152:+izmPrxsdguczNAGQ0Ji9x/uKbMnTubOssdek1slHH4t5Eh:Mqdg7zCGt3TT51sln4jEh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354184, "uuid": "45925b60-180a-43ed-96c1-31f82878bf6d", "value": 5767330, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354184, "uuid": "7571f2fe-021b-4492-8c7b-2f4d4761b71e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354184, "uuid": "44f33393-a439-45c3-b7a9-8441b157adb9", "value": "li7proxppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a79cb48-30c3-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775375021, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375021, "uuid": "87336ffc-0f74-4b39-9a45-6b005b33662b", "comment": "Malware payload", "value": "31f3e13b56dc4d61d0a80c285e8f756c", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375021, "uuid": "26c6ebd9-04c9-4e7d-bb34-13961ac746ac", "comment": "Malware payload", "value": "a73c2ff5ddc8c54bb373bf329832e8eb0afba537b21515b8a1047ec2633860a1", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375021, "uuid": "40af4f34-74b6-465f-bbab-830b16e628b8", "comment": "Malware payload", "value": "2ddfe8bd3a39b1a0889e6d81ef166998032b2406", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775375021, "uuid": "58c3542a-1325-4af2-977e-11d8a07ff964", "comment": "Malware payload", "value": "d83d931da9eed99ae63ae64b5beabd7bbf647518116b06ed11dc3c413f3c15829d8176545f655c8d24efbfcc9417aa56", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375021, "uuid": "5a599333-a8ba-4115-8f79-9c9040da9041", "value": "T11635121B76A44236C6AE9635C5234B45E3B1BC015B75AFAF4320726E2F337C06D39AB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375021, "uuid": "cad0a60a-5f20-4871-aaec-0846cba6835d", "value": "24576:o+CFqTTfQqJudGSs+qTXPU2+w6DNHDDSakoStNnT8TUTmY/c:aBUSs+V2+wGNH2oSnQYTm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775375021, "uuid": "f035cc1f-a879-48a9-9d26-bcdf40024254", "value": 1134592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775375021, "uuid": "fca7182e-a832-4fcc-8a96-3e49694ce612", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775375021, "uuid": "5295407b-de33-4f8b-8e53-316f966c2731", "value": "Remote Connection.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c605d4e0-3126-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775417802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775417802, "uuid": "26a4456f-4101-4947-97d7-f3c3c6b46fcb", "comment": "Malware payload", "value": "562f170b25b3a113d20be2c05f729448", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775417802, "uuid": "d5125846-e7bb-4b3c-94a9-2813707e3a03", "comment": "Malware payload", "value": "a776e32fd7650f1f94a1d9971f7af56eed33ca63b6accaea4eeda7e2c0cf17cb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775417802, "uuid": "2b23fa99-bf6e-45f3-b7f5-4ee4238d524f", "comment": "Malware payload", "value": "a281b36dc30f44ef3190573016272d4500fe717c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775417802, "uuid": "1299429d-d417-443f-ad6d-84de48e9e27c", "comment": "Malware payload", "value": "661a43f15955b66c28795c85c19622927c6331a2e418084345fdbeae274b5314ddb7af43f25cd75cf01db46acb502f5a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775417802, "uuid": "832bb995-fa13-4197-8ea4-9a740f515fe4", "value": "T17784180BFAA511F1D1BAD038C952651AFDB138AA837067CBA7944A571F23BF4AD3D700", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775417802, "uuid": "445fee1e-38c5-4963-b226-656245997d57", "value": "1de72f0a1f8069911acd21d91edc46b6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775417802, "uuid": "cd551b00-f0d5-44b4-b86d-94ff5eee4b9a", "value": "6144:fKU4q27Cdce8C1rAlWRioSoinkbyQhSrxJh1E:iUzqa8C1rlTZ2Ph", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775417802, "uuid": "2803b271-9970-4939-8719-6e93bd79b963", "value": 378368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775417802, "uuid": "90b4c8d4-2f9e-4c22-86ec-8247e17dd318", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775417802, "uuid": "62a733cd-f98d-4ab3-bd8e-804c4d8fe609", "value": "1.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7659537-3102-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775402396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402396, "uuid": "e5d182a3-2318-42d9-9c5a-3944c75cc92b", "comment": "Malware payload (SalatStealer)", "value": "033a8363a8fbf165f4c7f70a50d717c2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402396, "uuid": "56d4e3ae-0dce-4811-ad0e-da138ad7ca0c", "comment": "Malware payload (SalatStealer)", "value": "a81ee0c35239ec8cde59dcacab2d8fdae4b5301301b4351ce8ae63669086f0ae", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402396, "uuid": "1dbfef14-9c9c-4fb9-b103-a8c96aa8f6ba", "comment": "Malware payload (SalatStealer)", "value": "24acc98b58b1a40e010cd28e487299398f7b6b75", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402396, "uuid": "4f0284cc-9a87-48a2-9785-10e2fc172a3e", "comment": "Malware payload (SalatStealer)", "value": "dc2c276031c72c0d7fdf1c5c450d350cb857d1b69f0687bb1df65fb3113ddaa0e71d5b031e28490bd3601284e09e2f67", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402396, "uuid": "45f61588-8000-4fc0-8919-bf0fa52de0f0", "value": "T127063365A186C3F0F68187F88BD62C5D6F974E7F24EDC81710B03A01E4B21B96FC69A5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402396, "uuid": "00abb7d2-f773-4672-bed0-70264f5f4b60", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402396, "uuid": "4105b9c4-7bb2-49b5-b18f-7d9f9d63ca60", "value": "98304:PQz4ARASkgX6kE9Guy9EQNe1yV06GoixOkfC:4z4ACSkgqF9GuyF+yVhGooOkK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775402396, "uuid": "b1d374bf-f141-4148-80db-747fbe253e4f", "value": 3697664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775402396, "uuid": "5477b3e9-bfe6-4f9d-9e91-3b54f7c7b8ef", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402396, "uuid": "a2bbb214-f21e-4898-bf16-b15f19826fa7", "value": "nursultan.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06b1ac9d-30e4-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775389134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775389134, "uuid": "063b2915-9c05-4d32-b059-c9018735fc3d", "comment": "Malware payload", "value": "e1c86353aa283b69b12879e9e568f6f1", "object_relation": "md5", "Tag": [ { "name": "adamrat", "colour": "#B066C1", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775389134, "uuid": "84a59d1a-90ca-4ef7-882b-fc05e3cb91b7", "comment": "Malware payload", "value": "a84a3b209750f92141d9e9b6d472b654e20b80501251e1a4434d1b992d5ad1ed", "object_relation": "sha256", "Tag": [ { "name": "adamrat", "colour": "#B066C1", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775389134, "uuid": "29e11549-04c4-45a2-b46e-728018716a23", "comment": "Malware payload", "value": "be9d4e313e6945e96c1fec24452de76e0141025e", "object_relation": "sha1", "Tag": [ { "name": "adamrat", "colour": "#B066C1", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775389134, "uuid": "c94ebee7-693a-4649-bcca-f351564ec047", "comment": "Malware payload", "value": "1cf82e2dfbda4a35e3364a4621a9ff964619cc2402178d0968a8aa9bd00b27ba392b523c331b35cac3de2a5fcc73ffc9", "object_relation": "sha3-384", "Tag": [ { "name": "adamrat", "colour": "#B066C1", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775389134, "uuid": "50d5a3be-4fab-480b-b897-5cbd53320023", "value": "T1B775332910BC0650EDB7DAF3791436A2E82B19A3B67D67905C12E8D2EC375CF301F94A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775389134, "uuid": "9213ab5f-9be0-41a7-8ddb-50a1c64c5bfe", "value": "49152:pXxTIyeewyPpLbRtEEmKnfG+HhAJ0O5dcTZy:HTIfeRpXI3KfG+Bg0OIdy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775389134, "uuid": "069a7377-fa33-41af-a972-40b0eb7077ce", "value": 1589421, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775389134, "uuid": "c48ee9cb-f2fa-46e4-bce9-e69b88b5afe6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775389134, "uuid": "8f954784-92ff-44d2-9df5-d3ce0d3a1731", "value": "7f201bfb1_DonutMoneyDisplay-100.jar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85998204-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354128, "uuid": "1d609704-7794-4bb3-8cf2-6158c5811981", "comment": "Malware payload", "value": "94f04f61c39207fda3fdca81a6fad9c5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354128, "uuid": "6dbc2abb-8237-4bce-b002-bf07f4ff4d0c", "comment": "Malware payload", "value": "a887e7188d347573cfe7891c46bfa9b5791d50923e9565a9bdd022510d7902cb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354128, "uuid": "d4e1b212-28dd-43c8-a05f-33f80a02550e", "comment": "Malware payload", "value": "74e392904b1b255daf4b1332bddfaa631f66d50b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354128, "uuid": "81390b2f-b6f2-4752-857b-22ef3923bebc", "comment": "Malware payload", "value": "1f44f95483336ee6b362edf14dbd911e111793678b94c7a908de4e58ab721335a3479d53294a2f7b7d4350ac73844b10", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354128, "uuid": "fcc24494-37fe-4b49-be1d-218904f3ebb6", "value": "T143058D2EB2F2F17CD01BC03447DBCAA24635F47526212D7B26C4DA353E66CE12369B66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354128, "uuid": "e617035a-9444-4259-86ed-8993e45695f3", "value": "12288:EOiC8zQyod3HJ0xNg51NQPDJ/69aKkOlfBYxay2je/HXDv+:ICiQYNgfOLc9axEZe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354128, "uuid": "9fdd3ede-c3a1-4e53-997a-f68fb5537600", "value": 830304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354128, "uuid": "26c6be9e-8229-46bd-9cb4-7af8a6d42707", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354128, "uuid": "01bfca3b-8a4d-4796-aaf9-428dc2b9d47b", "value": "library", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e88ba2e-3092-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775353929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353929, "uuid": "a80f3450-a2ac-493c-9bd1-ac1d7311dbe1", "comment": "Malware payload (Mirai)", "value": "b3617e92e452639af4a8d1108618f2ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353929, "uuid": "c8cfb78e-1249-4835-a217-87d8d07841cb", "comment": "Malware payload (Mirai)", "value": "a8fba0d6211e9897ef7dcce3728199aa8fb1f1442586865e74ba9b8dfa55a9cc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353929, "uuid": "4082c0d9-4a2b-43d7-8b6a-2dba13b82cc3", "comment": "Malware payload (Mirai)", "value": "818490389206d1a15b1ed873c83aef7ab27599b9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353929, "uuid": "e690f62e-2cd6-42e6-92ed-c59620cfbcd5", "comment": "Malware payload (Mirai)", "value": "c44cb2c2930a5718ba131dc83d8eb1853de4ae61c21ba30c665cd903b557c8bec5f3ac77ae8b0efefb6bf1f5327486ef", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353929, "uuid": "38adb693-aeb9-421f-90af-6a1d28ea62ec", "value": "T16B533C13BE82CABEC447C1F447F766359D32BC7E0932B1D9A7D4FDA12A49ED02919610", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353929, "uuid": "540c0818-e6fd-43bb-a031-f596af0c5f85", "value": "1536:mJZNPtKn/DBXFXvtjCsCV5zJi6FsT5RPG3ooK:wZNlKn/DBXFXp2V5zJXsT5RPKo3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353929, "uuid": "0cf5d2f6-e926-4dd3-84b0-aa5df618196c", "value": 62008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775353929, "uuid": "657a6834-8b0e-4bd9-a532-18dd1fd2b1ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353929, "uuid": "d6b2be62-7400-4775-af5d-1924ffd90fc3", "value": "mirai.x64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9033cf9c-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354146, "uuid": "f970b9a0-65f0-4c3f-9540-c7fdb93e9bf7", "comment": "Malware payload", "value": "f825c68df2cb908bbe6e31a21b8f4bcd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354146, "uuid": "3ed59cc3-4040-4117-b3f6-fbcc96bc7490", "comment": "Malware payload", "value": "a925f807aa56a7bebe2ae1e0f52f6b37b86d2fd27493e43c1019265467e7e305", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354146, "uuid": "2569b8cd-8703-4519-84bf-de56e3604579", "comment": "Malware payload", "value": "02ca006f4c4dd8362765fc36bff8f07045d2c770", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354146, "uuid": "25a9d0d8-cb68-4598-bf6d-094fa436f1c7", "comment": "Malware payload", "value": "080db733fd69feb13caf4cd328a87c9b62abb84658bc0e1a7927e9896d58c460ef814a4c8a62f7ab40e965e422ae2a16", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354146, "uuid": "00371d56-50f1-4e3e-8a86-938033d535f4", "value": "T11DF43A56F8809F62C5D12576FA5F82B8331347B4C3EB720689199B383BD786F4B3A641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354146, "uuid": "7d494199-d29c-4e32-811b-0541cfb1641b", "value": "12288:kdsIGAxshFpYiioS5vyHF+hqLhDVFzhBVBPgpfWt52wR7tZcPwopK7d5Y:3IGSs7RSidLJVF9XxTztZcPwQK7d5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354146, "uuid": "b4ffefdb-98aa-485d-ae6f-a1748dcd525b", "value": 734640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354146, "uuid": "6f7b901f-8174-4491-aad6-9e83103727ef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354146, "uuid": "694dd028-30a5-4f51-aa88-11f553a6c723", "value": "dropperarm4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfd5e687-3090-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775353394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353394, "uuid": "673bf70a-214d-45a4-8ca2-87bf8bf5d0d3", "comment": "Malware payload (Mirai)", "value": "456e5270b6f144350d2a0c3b3a29c7a9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353394, "uuid": "16999206-f487-48f0-9801-e7481f1a867e", "comment": "Malware payload (Mirai)", "value": "a9549846f4fed8c2067218770280c61a3457d4b2341047ef0682b9b6f158c115", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353394, "uuid": "bbf3ce41-da11-4c28-83e1-fc22199b754a", "comment": "Malware payload (Mirai)", "value": "e610c47a786bdfd82097f977fbba3c0cabdc0eb2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353394, "uuid": "eec3f1c0-af5e-4aef-afff-6ebf2e563850", "comment": "Malware payload (Mirai)", "value": "39a55b970c2a2524eb47db886615064f0e8e88c756236518a421cc3d9b38c5283c1ab571dbd6dd8c882aa1feb4534860", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353394, "uuid": "2c445311-be5e-410b-bf4b-3d19d2d57169", "value": "T1EE33F745FE43CEF7D40754F101E77A3A8D30EC2A0835D6A5EF51AEA2DA276D06217368", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353394, "uuid": "de386892-972d-4fb6-bad5-d527b3d33b4f", "value": "1536:SF4lmweqSqZWWewfFUrQHRo1fN/KqyOlQ2a:plmPkVTfFUrQHO1fN/KxOlQ3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353394, "uuid": "f11bc0a0-9c32-412a-b10f-7387be78d680", "value": 54892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775353394, "uuid": "a71f1b88-3b3b-4835-a678-461a75130494", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353394, "uuid": "d379484a-6b7d-423f-9adc-d8d9b8678e8c", "value": "mirai.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f994e7c-3092-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775353931, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353931, "uuid": "821d73b7-1ebc-449a-8eff-4b349dbbd1a0", "comment": "Malware payload (Mirai)", "value": "04c77a9139ed875efbd20946669f3cf8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353931, "uuid": "284d908a-4c35-4db4-9f38-679ba45109ed", "comment": "Malware payload (Mirai)", "value": "a95e4e2c9aeb0410f8ea3e48888eb2e386056336625dea408dd568f5d4c7d58e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353931, "uuid": "f24f71fb-67ca-4978-a5f2-9ccab7fcae6b", "comment": "Malware payload (Mirai)", "value": "21a42254300177b77f4b20652a75a77c048fe3a4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353931, "uuid": "70a03f28-276b-416b-9273-f5391e35c6a4", "comment": "Malware payload (Mirai)", "value": "2b8d1ffca0aef143a5a2c74b6dc63e55a4a9165a5755827c361d1e491ba2e9330cf882edec2407ad2d6d82ee7ce3887a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353931, "uuid": "9d5633ff-ac4d-45a0-8dec-f15dd603f14c", "value": "T157F36C17AF418A6BC59D82B51FD793208733F03A17177747A778A9B52E0E7E82E4A40C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353931, "uuid": "c2aa40d3-a11d-4704-b97b-819eb39fa18e", "value": "3072:gZNlKn/DBXFXp2V5zJXsT5RPKo3Xpx79ErrjQoc7S64F2wnNpv/uij0lqZG6:gZNlK/DBXNgnzJ8bx3XpxyPjQMbpv/uw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353931, "uuid": "e0f0bae8-076e-4f9f-9c41-895310f56159", "value": 165960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775353931, "uuid": "f34e6754-7c81-4705-bd86-04c3490c37b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353931, "uuid": "f4fd82cb-2063-4346-bbef-f7cb4f506383", "value": "mirai.dbg", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3131c3dd-3136-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775424424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424424, "uuid": "d2a7efb2-a3a0-4e4f-94f2-22c00349bd4e", "comment": "Malware payload", "value": "0c0371b931f9c83b6c4c27def566f765", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ext_sideloader", "colour": "#5765BD", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false }, { "name": "w_node", "colour": "#C4D305", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424424, "uuid": "34b7f660-7623-4a80-9c49-b61eec60bb9b", "comment": "Malware payload", "value": "a9c9af685d1144dbc81bebf40dbb0e5bf66688bf034ac8b0f9d2094b9afee41a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ext_sideloader", "colour": "#5765BD", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false }, { "name": "w_node", "colour": "#C4D305", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424424, "uuid": "e3ca9cf3-949e-495e-b655-ab8c36dbd301", "comment": "Malware payload", "value": "c4b735a2401106d992fb40b3df330baa17ef7c66", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ext_sideloader", "colour": "#5765BD", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false }, { "name": "w_node", "colour": "#C4D305", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424424, "uuid": "c24d168c-2598-4851-89ae-e86080570bb1", "comment": "Malware payload", "value": "f01545063aa16e77418ded0a8458f265de35fb31eda7ed62ab2e1de54a5ddf0b76d2301d0c77712768c8883bc1c03196", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ext_sideloader", "colour": "#5765BD", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false }, { "name": "w_node", "colour": "#C4D305", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424424, "uuid": "4e4ac251-05e3-4bf9-b615-d0d3b9dbf06a", "value": "T19825BF83D292915CF41AC171972EA273F537BC458B29AFE76390DA361633BD02B7A710", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424424, "uuid": "0f6e32fb-e897-4dee-a2aa-28045c0ac722", "value": "5119aa243ba31aa561ba123ac413a1c5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424424, "uuid": "660f2f0d-5a32-4528-8584-8ab43de43c49", "value": "24576:4+pqt2ToOEe0JRh+w+pY5bsY5b5Y5bGk:4UTjEeiRhAYqY7Ysk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775424424, "uuid": "bc74cd3b-0bd6-4f0c-889a-a3865fa452e5", "value": 1018368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775424424, "uuid": "5b34576a-2bb4-4361-a943-2c32c5a3b56a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424424, "uuid": "8dd4381d-0d9c-49e5-9f56-a56ff52290b7", "value": "w.node", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93ce24c5-3138-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775425449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425449, "uuid": "15bb2271-b733-49a6-a243-1ba28aedaef9", "comment": "Malware payload (Mirai)", "value": "3d76d96b4cf8492ce2dbccdf4c9ed5bb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425449, "uuid": "973b7b92-7b4d-4535-9957-39679d63f2cc", "comment": "Malware payload (Mirai)", "value": "aa2f6b54aa1f2d1f179924b1e5cd00167d9c1842fef9e756b285494ebd4af3ba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425449, "uuid": "5696f8f2-eba2-4a9f-a5fa-544823f5dab3", "comment": "Malware payload (Mirai)", "value": "d7c52275193eb552a35cf738ea8c530fb61cefd0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425449, "uuid": "9761e04a-70bf-4794-8300-58421312826c", "comment": "Malware payload (Mirai)", "value": "00d201848dd3b5571829f2138e9dea219c237877de038d8a628587b743be757696b5097893360a94ebde12a81d7b1aba", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425449, "uuid": "da779687-d3d7-47bb-a0a2-4ff67a0869c0", "value": "T1156329129743D5B1E84303B052A7FB7D6930ED3206309A5FDBA0BFE29937A92741771A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425449, "uuid": "7c293f2a-4e24-43c5-b2b0-ea8d6a0988a6", "value": "1536:Kl/NNwWwrhanR/ADDVaeVjb02C2jb9Gfo8pPqOUW318B6FZr:yVWt7VP5Y2jBFO+o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775425449, "uuid": "0f41ffa5-c8cc-452b-ac03-7002a83bfcb5", "value": 72872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775425449, "uuid": "eee9fad9-5107-4aa9-9630-49f1ec49d1b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425449, "uuid": "b8cbe4fa-c54e-4425-967b-d1eb256fe1cf", "value": "mirai.i486", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1303ebeb-30fc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775399463, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399463, "uuid": "abde9825-a8f8-4052-980b-f43b7eb1f0bc", "comment": "Malware payload (Mirai)", "value": "22a16d33f17e023780ffea4bddab3ab0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399463, "uuid": "45c02ef5-ca83-4491-b38e-07c099043c03", "comment": "Malware payload (Mirai)", "value": "aa6128e39265eba5c759443cfaa56e9a96b02c9967e4996e362bc1600568363c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399463, "uuid": "8ef519a0-c7bd-4262-bcdb-be8641c20471", "comment": "Malware payload (Mirai)", "value": "a72801bb624de971e4815240908d3dcf0a0713ad", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399463, "uuid": "902a15e9-e5d2-4b33-a23c-ae51b70ac3bd", "comment": "Malware payload (Mirai)", "value": "aee5a0b2fc468854ef278fd490361681c23665e6d1af5170e1d545d5749802f7fd5883eb0a8c0416a807fe7a4089b196", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399463, "uuid": "fed2ba62-82af-4213-8d53-6ad7ff09f39d", "value": "T16EA3E626AF201FFBDC5BCC3765A4170534CCA91A31A67B767534D828F68B24B86D38E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399463, "uuid": "97bf8ba3-c00f-4017-ae1e-737d5251d238", "value": "1536:KKCAbhno4peAlp+sPcicNLrNwg+p6QDbZ63il688geWKEro399wghgmCvd42+bt:pCWhno4peIp+sPcicNLrNepkh9wh2t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775399463, "uuid": "3c115dcc-47c4-4b0a-b916-fe04390e0c47", "value": 100680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775399463, "uuid": "ad7d6d4e-35f9-425a-8b3e-9e7650eecb3d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399463, "uuid": "e5910d04-eb67-40e7-91e4-5d8027e83709", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bf600d3-30be-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775372903, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372903, "uuid": "5a494b71-fbdb-4cef-a7c0-d0319555a45d", "comment": "Malware payload", "value": "80cfa9367886ec668a75247e800e4ca5", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372903, "uuid": "67529431-3b24-4f10-9e3d-51b65eaadf29", "comment": "Malware payload", "value": "ab698b304b010b6996f56197d08a254558b6bcc0694249c5495b2d624e55a827", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372903, "uuid": "c2882bcf-fba0-4bdf-81a2-a9c50ebc5b60", "comment": "Malware payload", "value": "7aebe75a0f7a941934ab1b9698a2e17d1b6849e6", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372903, "uuid": "7d5f5cc2-d02e-4e25-9035-2a4299a3a2af", "comment": "Malware payload", "value": "cd75e141fb56231b818c8f95c62411215a5ed1c388f4f2c8727d34578366f674acf5a53049da99b8013ef76efc9967c2", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372903, "uuid": "5cc10cbc-9b14-4f86-8886-c585131ae714", "value": "T11C916285174346E53F3D9A22ABDEC72C73448DD998806FC5F5EEF5A04E88CC62CA4192", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372903, "uuid": "fe7cb77a-4aea-4e15-8bc6-e4621a858e4e", "value": "48:v4UlUR4lUQUkEUSUhUFUgUZUyU6UvUbUBn:v4UlUAUQUkEUSUhUFUgUZUyU6UvUbUBn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372903, "uuid": "a4f10fdf-0289-41ad-b99a-201587bf9fff", "value": 4230, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372903, "uuid": "c0828d70-8a0e-4e1e-9d0b-ec0488404992", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372903, "uuid": "e7868e2e-4d80-4136-8afb-15ac6d2ec1c9", "value": "cache", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0f8e49b-30bc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775372348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372348, "uuid": "fc0ba487-77e2-49aa-88f6-4c58ed0f9e3d", "comment": "Malware payload (Mirai)", "value": "4b243058f29140c39f8463f8082df0d1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372348, "uuid": "cd85e955-e8b8-4b23-bcfa-f02448988caf", "comment": "Malware payload (Mirai)", "value": "ac6e1a950f2dd10cfa23400baf947e566963e7ec5cebd79d89920a2a414f8598", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372348, "uuid": "1403e54f-d0aa-4355-8fee-8c0307184fe5", "comment": "Malware payload (Mirai)", "value": "eaf5c3a0ba90eade0f2ee124af9e919e78e52597", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372348, "uuid": "d67ae55c-a802-4625-8700-881d2c1b12c8", "comment": "Malware payload (Mirai)", "value": "c045e408ff9e372110678527b3d52407bf576653117073fb6b173e867ad81a21ab5bf079cf7a939854aecfb3a445cd00", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372348, "uuid": "d8e86cfa-eefc-4158-90a4-ecac0b8f0522", "value": "T11D144C02731C0A43C15B6EF02AFB17F183ABED5019A2A544F62EFE846372FB15549F99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372348, "uuid": "45c25351-f150-4e88-96cb-70c10a850102", "value": "6144:K1ecpy3K9YxUhV3Z11PlHmiK4dEhjiz1A2LNNRt1:qoaPZrlHmiK4dEhjiz1A2LNNRt1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372348, "uuid": "b59d3a9a-834f-4c05-95d4-941c5a649926", "value": 208083, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372348, "uuid": "c2871888-6ac3-44ea-ab4c-92a7d8afb3ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372348, "uuid": "acb36da3-bcca-4986-badd-14219743483d", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb75b10b-30bc-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775372365, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372365, "uuid": "e206bf84-d1a2-4cdc-b612-f3b2ae4683c7", "comment": "Malware payload", "value": "8294d02fa6761178b8429c2adef73dc6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372365, "uuid": "0e2a0db6-1041-478e-92f5-3fdc2385b8a4", "comment": "Malware payload", "value": "adfbc4fa75f3428a8b1da925666a3c0af0453617dbbaf7ef9d9ba51ef646e9de", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372365, "uuid": "85b09bef-0d05-45c6-a512-233829025a6a", "comment": "Malware payload", "value": "04615a837f81628f79f366d43f397d0b55309c6f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372365, "uuid": "76d69712-b76e-4eb3-aa1b-f60fad23b770", "comment": "Malware payload", "value": "cd21b1337f85c4b1c359b4978319d2ec147df7c0a92458fbc0e67a65c865d3237f5d37e7402a6fd285bd85a69726d745", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372365, "uuid": "b90fcaec-db4a-4ee2-a827-c05ea4678e2a", "value": "T1B7F45BC5EAD2C0F1E55701F00CDFABEA0A34A3224057DAF7E6CC1A627861B525E5B36D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372365, "uuid": "032cb3d3-8ed3-4b82-9d98-6ba6e8f64e18", "value": "12288:ZfBAUQPxh3bhcILtHjzssvXOc86pcA0mqkh21xRyT5Rby:ZfGUsh3bh/RHjgMY6pc4we", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372365, "uuid": "f58dc4da-245e-4c76-893b-244379087259", "value": 733960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372365, "uuid": "c455337f-a44d-4ef6-9ebc-a4abab9b9b75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372365, "uuid": "a02dc53b-a53b-4784-900e-64ad1b644aec", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f93a8fd6-3102-11f1-a769-42010a9c0008", "comment": "Malware payload (QuasarRAT)", "timestamp": 1775402426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402426, "uuid": "0e9a6738-086a-4a9f-b28f-77f88ce2821c", "comment": "Malware payload (QuasarRAT)", "value": "0a94a76d6000269f4db3b6bcd06d4def", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402426, "uuid": "6931c420-f14e-4f8b-aca3-65dc55fc234f", "comment": "Malware payload (QuasarRAT)", "value": "aeaea1fb6584e08b536a83866f2dfbf28b343098bf9c186c9b75642a60867ed8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402426, "uuid": "9e5f3462-5c31-4f1f-88d0-3295b8896f6c", "comment": "Malware payload (QuasarRAT)", "value": "d94ecd90996bd27ea95a81c56ec1074933551b7c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402426, "uuid": "e79cf3b5-88be-40fe-b035-1a6517b4f1d1", "comment": "Malware payload (QuasarRAT)", "value": "9a1b99dde363fc973cc737f11d4271c5953aed44b04fdb8870c0c6c84413b1a8bb4400d49559971fb63a737c4e638845", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402426, "uuid": "e0d4a9f2-3ad1-4a22-a4d8-1936ba340262", "value": "T1F815D090B7F8860BE1FF5BB8E47608444B73B6569976C74F098864AD0FA3790CE513A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402426, "uuid": "2faedbee-de07-4206-b6ab-a672cd2c3a68", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402426, "uuid": "28245759-9232-41f3-be40-36da66c06c47", "value": "12288:HqL2Swb6Cm5GZ6OIJzckfGGv5KTpEyxW/yFot2wkda7EGgkNG3M2UHrnH4wlH:H62SwbIxJzck+uGW/yFoBkkA2Ln1H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775402426, "uuid": "4779f95b-2cdb-4aab-8772-4a707775100b", "value": 911872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775402426, "uuid": "bfbb14b1-33d2-4624-9df9-be0adf3b9045", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402426, "uuid": "39ae10c8-387a-4b02-9619-e4f9fecf78c7", "value": "Pulsar-Client.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa65615e-30bc-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775372363, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372363, "uuid": "37f30916-f5a3-4133-8d2a-b039e49f5974", "comment": "Malware payload", "value": "52acbfacbdf145b4385dcae6c5d7024e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372363, "uuid": "1e1c3273-3ecf-40a8-809c-444609d5bc04", "comment": "Malware payload", "value": "aeec4ed67f924179461e095e01b7dcd9639cb6186b06c9e65f1333f3721512a6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372363, "uuid": "0499d3b9-8512-4700-8474-9375dbf2e67e", "comment": "Malware payload", "value": "c9f243ff207461669a1af23581e89bc6c29f61b5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372363, "uuid": "ecc4a33d-8477-41c8-988c-8e9921660e23", "comment": "Malware payload", "value": "2c56c8e2633aef0eff5cf8f3536d4c5bc2f3d2162e2843a07af48e36572d0b0275e41e906672e5ce5e5c234201d8dafa", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372363, "uuid": "903e1ef5-9ade-4685-b2ff-3a78207ae228", "value": "T1EDB44B55F8809FA1C6D1297AF64D42AC331747B9C2E7B20689254B343BEB86B0F3B745", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372363, "uuid": "e249a9af-7bab-46ba-b5fa-e0721f4b0f8f", "value": "12288:C3spjUy7S0XcvSCdbXSnPXii72BENRS2sDb428SC6pt2oQ:T6qumt2eS2sHeW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372363, "uuid": "5c0dfc8d-7fc9-44c9-af63-74bbf61ae750", "value": 529596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372363, "uuid": "0d18ffd0-bf67-4580-86ab-9fa35d416d55", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372363, "uuid": "1c4227f9-2915-499a-aeaa-b754aa36450c", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ef8b4ca-3119-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775411965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411965, "uuid": "e7ec98eb-1c0c-4950-8f71-d69e3123a882", "comment": "Malware payload (Mirai)", "value": "c93c8abd2f1d56d2d9212d5b105b3e7a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411965, "uuid": "6bb181d4-87cb-492e-816f-44459a653ed5", "comment": "Malware payload (Mirai)", "value": "afa0d17c2b7ee1002960f3fff41483c9cf445f9fb38e564727de9d2396f7b22f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411965, "uuid": "ad21574e-6d31-49dd-8700-f06356bd83ab", "comment": "Malware payload (Mirai)", "value": "64bb11f5beb6169e66405bd88b69833535a62041", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411965, "uuid": "c846a4f1-407a-4741-8eb9-45698bdd51a3", "comment": "Malware payload (Mirai)", "value": "4d3dd3b4b16abe7f6b06cc254050a570a6a2568baef35ff427359e5a0e1d873ef977cc21a635955b1cacd2bf162ebb45", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411965, "uuid": "3905d6cc-ffc2-4b20-8e9f-ade0dd62d697", "value": "T1E044E91A3E228F7FF26D877007F38A319769769617E2D644E26CD6101F2438D641FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411965, "uuid": "2d61e438-05bf-470b-826f-7e78290e2c52", "value": "6144:eqhNTGGEcmRHaxx7eFkhG678U1hWF5NqohWUkzn7MwA0:ewNT9Nmoxd78U1hWF5NqohWUkzn7MwA0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775411965, "uuid": "d6ea1813-36bc-429b-847e-bb22bef9ebb9", "value": 257319, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775411965, "uuid": "2e0f45b5-65b0-4471-a537-0b948a2936f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411965, "uuid": "0e422426-b050-4323-907d-76471d9caf68", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c8a699e-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354140, "uuid": "277a4845-28cf-4148-8dc6-41b51a134880", "comment": "Malware payload", "value": "1e10bb271c300ae58ae76010fba47845", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354140, "uuid": "9544a15a-9864-42a5-a845-0c5cdc638d42", "comment": "Malware payload", "value": "b0026a72a4e34f6ff5a2b0ac1e5f202b39412dbe9ef629119e4ea659e5323abc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354140, "uuid": "7d884788-4835-4590-88b7-663274c3ebfa", "comment": "Malware payload", "value": "5f9dc66130d2679e6f4325480ccb2c597805e7bd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354140, "uuid": "d6258c72-326d-4aba-855b-ea87f561356a", "comment": "Malware payload", "value": "64631b53573cc22e0bf92b2ce7be16f69332ef1a5eb9138c5ddaaa8012b4ba7feb2ddc490daf4afbbe6be6ad6a68f483", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354140, "uuid": "eff6e7df-6891-4d3c-97d8-1c14266b6103", "value": "T1E6157D2EB2B3B5BCD007C03447DBCAA29535B47522322DBB27C4DA353D66DE51369B22", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354140, "uuid": "3b2d2591-53f2-45f7-946d-881d3619d75e", "value": "12288:sRstFBnNgAJJ2ro319IndWHI2XPpDTSaavC5RRd+FcVglW21FqYEayd+SMgI0zHX:sROrnNgxMF9lUaYYglWmqYIMg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354140, "uuid": "844e7b0e-ad31-433d-a4c6-6509cbcaa516", "value": 961136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354140, "uuid": "f4c1080b-daef-447e-88cf-83bbb4c03de5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354140, "uuid": "ceae0e5c-bc7b-4f69-9b9d-a7004824756a", "value": "clientamd64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a06789a1-3122-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775416021, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775416021, "uuid": "c6d4c15d-bea4-4706-b920-15939089882b", "comment": "Malware payload", "value": "805b23030a823d3caaf1ca1870ccb085", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775416021, "uuid": "880df0bc-eff8-4c6d-8ecf-a0309db430b4", "comment": "Malware payload", "value": "b0c8d70fc88e5061eef792ff11c6d4f04b0f53884d799c317ff12da7e389af07", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775416021, "uuid": "c92817d1-c9a8-4235-a89a-3a6ac69e7ace", "comment": "Malware payload", "value": "15662c88b0e4571796933936f2dd6e3d5999c3a2", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775416021, "uuid": "a4a99b52-fa97-4d69-9b43-75be17306227", "comment": "Malware payload", "value": "0386fca31ca8d77fc431ea816b3d04445abb885c51348c470d48c82c8a357a54a1440b521b51870081fdd84f162c9250", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775416021, "uuid": "8486d162-b7c9-4b89-88cd-c724b6ee0e88", "value": "T1D7957C5B7CD048BAD06A53328CB2A291BB72F8190B3263D32F50AA7C3F76BD05975754", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775416021, "uuid": "6cdd9793-f3f1-4a6e-bda2-767adb6feec4", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775416021, "uuid": "91545b28-ab7a-44fc-b564-534e634f824b", "value": "24576:rBgndUIheQ60ncgR+Y7QIS3AMr3GRWdtNbXwVI:rBgdUI0XwaH3wq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775416021, "uuid": "1bdcff3e-89bd-4a70-937b-7db72c05dffe", "value": 1920640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775416021, "uuid": "c82d39ae-d303-4deb-bf00-5b4ee327e395", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775416021, "uuid": "b4e06cd9-9230-451f-b053-102ab93b3ed1", "value": "modest-menu.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ec4efe6-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354520, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354520, "uuid": "27d4cf89-c916-4e69-8323-81bbc2fefca2", "comment": "Malware payload", "value": "0db9d88d86cf0e8512643172711dc2d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354520, "uuid": "cbd4041e-7d44-4f1b-a7ac-4fbb53dcbdfe", "comment": "Malware payload", "value": "b169beb7a39d13a62193abef5aabf17c0573e01d5bb2bd9ed8a7e451eff07eae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354520, "uuid": "08a97d7d-fa87-4ae2-b106-6f3ba2d8c366", "comment": "Malware payload", "value": "bc6496167cd8a0833db6dd68616adac2b4963553", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354520, "uuid": "c101a67a-bdca-463b-a330-80af6373e16a", "comment": "Malware payload", "value": "c8f6cc3ebf5b9f0ec70ec9f9e243e6fbbd825f417e28ac55b25da5096d314aa5cf520049be4f0d01a63db562b580265d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354520, "uuid": "8c994125-4eb0-42cd-a26a-5e8e3bfee691", "value": "T1D9F46C5BFD6E3C43E2D7D37E9B4A83B0622BB190D32350937581432CA4C6AADCF61695", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354520, "uuid": "a6136635-6e46-4923-9d52-a59db481000c", "value": "12288:CBavSavk0Kav702WINIWTxeAcojA2fw5l9kJiPjaNn9L:mx4v7vNZ9eDqUjen9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354520, "uuid": "e11eb03a-0ab5-4240-82d8-5d9f00d1e243", "value": 788216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354520, "uuid": "a6d08f57-3d40-4c97-8013-35ba679394ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354520, "uuid": "30cd5355-7086-4923-9f79-62cf0586af83", "value": "rstaarch64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2f3d511-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354715, "uuid": "b196b866-83b3-4849-940c-2c3c0eaaab6a", "comment": "Malware payload", "value": "83d96846e9d6da727c8ad48cfc14a6f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354715, "uuid": "a0a62332-6311-424f-ae2e-0fee2ca7f3a0", "comment": "Malware payload", "value": "b1787d7caea546bfc263afcef9479169052dd2c87cbb6b5d9f788f795fec8cd9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354715, "uuid": "815a74b1-b6c5-4fdb-8095-d2b2f5d2a82d", "comment": "Malware payload", "value": "54aa09fe1151b5f7cc5297438388ea685e5f4116", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354715, "uuid": "27843ca3-2ffd-41bf-88ad-f343ff16ef32", "comment": "Malware payload", "value": "39806800609f545d8910fb962112dee3de146bdffb0fc91e2474955c3ce7136d3a386873d0840f82b50b96cfe6ec2cb1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354715, "uuid": "9a22158e-c4fc-4e53-a2ae-15de9a8a180f", "value": "T1C5F46C5BFD6E3C43D2D7D33E9B4A83B1A22BB190C22350937581432CD4C6AADCB71695", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354715, "uuid": "979147df-4186-40df-bb84-af4a93dd9e62", "value": "12288:soZv1RivW83Y2ZP8EdawR0ckXMOPcsw5+9VedWj9zn9FQ:JqZYr8aunk8uWWjhn9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354715, "uuid": "86e1bdb7-e0c8-46df-845c-7fd5b77189ca", "value": 788944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354715, "uuid": "c817405e-3e4a-4ee5-8ef1-7a38140ff818", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354715, "uuid": "2b5ea36f-cced-4f33-b0db-92027e982545", "value": "siackarm64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff780867-30c6-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775376667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376667, "uuid": "bc7437b2-a13d-4a0d-9386-26f25b8d3b0a", "comment": "Malware payload (Mirai)", "value": "70b1b5f58034db11e0fa513af68f7062", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376667, "uuid": "dfffa09c-1536-4037-ae07-3ac4e48795e9", "comment": "Malware payload (Mirai)", "value": "b1bdfaf754e013b6dfbc4b16b667ebd6b22ee07d4b3aa530d9bf4ae7859bcc3d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376667, "uuid": "ffa45aa1-74dc-4146-94a0-7e46e51b7fb4", "comment": "Malware payload (Mirai)", "value": "b1019d4cf409cecb071b2e9bb1984277a659e564", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376667, "uuid": "f795b307-db48-4f2f-ba3f-cbe2adc927c5", "comment": "Malware payload (Mirai)", "value": "afdda00d9d5ac19db364844c15c4b5ad03342df21051ad262c995363e94c623282165cbe864d36a4341147243a1f6ca5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376667, "uuid": "c175c6c5-9ddf-4d60-bed8-0379356db58e", "value": "T10C8337C2BA4BC4F5D90748308067F33FDB32E6394061D65EEF5ADE69DE736025626288", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376667, "uuid": "40532ac7-9057-4adc-bb8c-46483ed64790", "value": "1536:AsUqLC093vmVkYBbLi8HmWAcDMWiAcHDGLgoha9hn+:dUqLB93v7YhHHmWtfuDGLdhR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775376667, "uuid": "5433fed7-1092-4bd5-abd1-a579def34347", "value": 87696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775376667, "uuid": "30cac60b-3712-4f56-9237-775b47a63526", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376667, "uuid": "85dd2ece-83d1-4650-b830-78039ab0e45d", "value": "titanjr.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2f37000-3104-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775403140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775403140, "uuid": "7703dc4e-9104-478d-92e4-0e883debda18", "comment": "Malware payload", "value": "760604e4078a3b9d31e9006d19ae72a6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775403140, "uuid": "223af3d9-480f-4773-b4cc-eace79976f8a", "comment": "Malware payload", "value": "b24994f3fc5e7fc858bb6acd2f1e5f1bbbf0dffe05282403bc63efce1756581c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775403140, "uuid": "1d35af9c-efc0-4f38-8f7c-d697d921165a", "comment": "Malware payload", "value": "63f98507d5ee171337298d7d645954a12a6f3325", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775403140, "uuid": "b6d5996a-d396-45b6-a230-1e3d012f873b", "comment": "Malware payload", "value": "9960533ecc8191f85b65d0cb689e5189ef9264b3a3989578d63144079c889688b0d6cca1c28af88811b1d49a644d8c25", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775403140, "uuid": "352f8bfe-ea16-4755-9717-199fcce27a1c", "value": "T16B18330F2EBFFC95F2544F3943A83762075B6EF129614B2A002974B4A7BE55C1D3A1E2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775403140, "uuid": "eddd459b-ac95-448c-bb9d-fa051a956d48", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775403140, "uuid": "2a82958b-cefc-49f8-8d3a-0b8d7b1b3850", "value": "1572864:33EF+BWMFDe45kmy05vr96hDRVO34XuIjt54CwPGBYOoJPzRPHF2tlFQKAiQ+7Sx:33EMBFle45605v8hDRVI4++34CwPGBYP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775403140, "uuid": "12cb696e-2889-4358-b490-fdf31aaa9fc2", "value": 89891914, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775403140, "uuid": "ce7f388f-536f-494c-a7e6-9912aec921e9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775403140, "uuid": "4d609be2-40de-4ab9-bc62-68c50d252a52", "value": "Testeee Setup 2.4.5.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8dc8d91e-30bf-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775373470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373470, "uuid": "5e166efa-6806-455b-85be-2e46dd7d14c8", "comment": "Malware payload", "value": "ee3e8852082f82526175e3e3b5eced2f", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373470, "uuid": "e6b8572d-d7e5-4683-9780-e7e05a918630", "comment": "Malware payload", "value": "b501d1f5c5cbe7405d93686eeef38095bf303b1c86b842653f030d9ddf83a077", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373470, "uuid": "3ee9807e-3577-42eb-89c8-e844b24459bb", "comment": "Malware payload", "value": "6f6acf21cb8a54c43a5bd71057f933bc18e754e3", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373470, "uuid": "806d9f5c-1a1b-4e73-944f-718fecd2d0c2", "comment": "Malware payload", "value": "ff39fd917314f82fa353acedcad77e0af946aacb1c8b80b6b842c316ec2d2ea25453b050b2a3cc937d00e60fb1a372ea", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373470, "uuid": "5eb20826-e5d1-4fd4-ba50-2b2aec6f865f", "value": "T153D012C405602DF525AF896123E542CAF6099190E3D54FCAD3C469613228DA0BDE4A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373470, "uuid": "3821572a-df8d-4652-b123-53af007445db", "value": "6:cwKj969jX+QjlrFH7jXX7U9jX+QbrZ3djX1WNFIQyxn:5K09jXRFH7jXrU9jXHZ3djXENy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775373470, "uuid": "d5fcee3e-5322-4afb-a920-e82df1060af9", "value": 258, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775373470, "uuid": "3232bcd6-5caa-4b40-a94b-9a7415f5a341", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373470, "uuid": "bd1c32e7-78b7-4222-9c01-bfe57e02aaaf", "value": "mips.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a00c1fd2-313d-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775427617, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427617, "uuid": "3fb7e824-1da3-45e2-b622-f855c6b745d9", "comment": "Malware payload (Mirai)", "value": "a574bf5236786a147de793161c72e9a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427617, "uuid": "ee4232df-8cfa-458e-9111-5767ae0faf70", "comment": "Malware payload (Mirai)", "value": "b505b3e61184d7406491ff14a04d79092dc5a5ee9efb24173ee3b86c1d00994a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427617, "uuid": "256cb6b9-78a9-406b-a58f-0464aee487aa", "comment": "Malware payload (Mirai)", "value": "1a470aba327fd755596ebc89ad9201577f49a42a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427617, "uuid": "14b0f4c5-568e-4e44-89ca-1b8522ec3aeb", "comment": "Malware payload (Mirai)", "value": "4d2eaefce3aaf58cfc96c72478cfbab7b0cdea5c4266b56a4f8e3df799c91ea989b3784c77ef354db52cd9637545f729", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427617, "uuid": "86749834-f859-4acd-88f3-8664c795ccd7", "value": "T160830602EF614FABD82FDDB306BA0A05348CAC5B26B523767970EC6CB6561C705E3D64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427617, "uuid": "3764fb90-a7e1-418a-9743-732b9833b356", "value": "1536:VdpY963jCBNeiyiTUmqFFPzpuc+LbYZYNF3zGqgoMZ/c1EcrGHJY:7pvi+Pu9YDhBfH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775427617, "uuid": "f7c7d144-76e4-4b48-9e0b-a8fff72b2fb1", "value": 87316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775427617, "uuid": "2d935dea-666e-4abd-b772-bd4ef6d67f81", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427617, "uuid": "b252bb42-8316-4996-a5a6-c76ce033ecf7", "value": "mirai.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6b2125b-308e-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775352466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352466, "uuid": "9c63e652-30d8-4d42-8559-ca51f4946e3d", "comment": "Malware payload (SalatStealer)", "value": "f64b267bc63f29f835d42592587a3745", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352466, "uuid": "e31daf23-0d77-49be-810a-86d26097d505", "comment": "Malware payload (SalatStealer)", "value": "b59029e4dcaa55ad70f02915def6e72b42c84d26f398a8695c347a5155fe7107", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352466, "uuid": "fd9ed35f-728c-4332-b908-8b998d6aa195", "comment": "Malware payload (SalatStealer)", "value": "503230b370f285bf837ec26b3b4b8b56081860ce", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352466, "uuid": "046a28b6-39fb-4b12-9cb0-1e8372be6504", "comment": "Malware payload (SalatStealer)", "value": "230fc27128c123063db40e9073e2243cdc766b76f0d360a22b5f716838a12e73968f99881e2e8dc39e92f037118bbce5", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352466, "uuid": "32c097d3-c078-4a08-ae56-6386cca21f95", "value": "T126C65C11FACB54F6F9036831416BB27F23315D048B28DB9BEB583B6AF877691187A305", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352466, "uuid": "93bbce02-027e-41e2-ae99-98f4d38c5516", "value": "1aae8bf580c846f39c71c05898e57e88", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352466, "uuid": "f5a1c662-94d4-47b2-9b74-2dd5e950fed1", "value": "49152:lRpK6fWxZHGQAulw19JRgfFC3b7HJFlwNwrH6PfLsdRyzVeAXH1SX8wRanDyBZOH:1KkWvw1rGtCfHur4EbRyp34pDEpO/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775352466, "uuid": "2dfb67f5-8c5a-4cec-b1db-76ea2becc4e9", "value": 12570112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775352466, "uuid": "15b14c5e-410b-49b5-ad45-1f425f51db1a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352466, "uuid": "575bba80-28b5-4a91-bc9f-954d0fff1bab", "value": "lj6gr.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aef8358a-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354198, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354198, "uuid": "f37322f9-af33-4b42-a538-8048a00b843b", "comment": "Malware payload", "value": "c25a09e5e2b2258107187c651178f4b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354198, "uuid": "ef79fca6-fef5-4398-ba59-fb6faf65aa9d", "comment": "Malware payload", "value": "b5c514f90d3cc7b3d6e32b0f6e83852b86a5d5ef81d7388f39ba0fc5e1f6d8a2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354198, "uuid": "9eb887aa-ffca-41eb-be2a-09f9df993d9c", "comment": "Malware payload", "value": "79a97d8de6d87a874700d3f7caa74aea0746b8a7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354198, "uuid": "ed36ab66-58ec-41cd-a2b7-bf6e4f033ab3", "comment": "Malware payload", "value": "cca9478b12b8b6bbe1d272515214608fe670e05099dfea4a9472d62aa777f6a3d0f52f155b349b78c634e25bc1acb311", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354198, "uuid": "97ae0f74-a373-4878-a576-c18e6c4184c5", "value": "T14466F815ADC53BE6C81D4B3445EACA9612B45D104EF2463A26A4FBADBC772287F07CCC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354198, "uuid": "9e2b6962-7045-435b-b210-3ef9a053faf2", "value": "49152:Nz4KDlkJ3FJ9YUZ4eDXTZ8J/zSZWhQ3XwJhlpjWr3L5EH:injhWh8r3dEH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354198, "uuid": "168f88d4-d89e-45ef-87ad-97442746a5bb", "value": 6553793, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354198, "uuid": "288fae58-b555-4eb3-9f6a-d0d724d35447", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354198, "uuid": "257925fe-fe9d-4a2a-9266-84f8b54f1599", "value": "li7proxmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09810656-3094-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354779, "uuid": "025ace27-0f95-4873-901a-336770525945", "comment": "Malware payload", "value": "0e4d0d557c0fa195071e7afc3b6a593f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354779, "uuid": "a4da41a0-6945-4f64-8940-51dd5abb7a0f", "comment": "Malware payload", "value": "b653d9f5e5a8225c10a0c54cb86c8d52125ec9efda16c87178dcc8d72fa400d8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354779, "uuid": "7bb5b499-f899-49c9-a383-387b967e2c0a", "comment": "Malware payload", "value": "9076d2180e4e06080b6ee063b90327ff66703e4f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354779, "uuid": "6421129d-2bba-4b84-b29d-4d08a609027c", "comment": "Malware payload", "value": "0b4333b9e498cf1c943357c51d3fea8c5034eada7461d14ace3ac8da0dadb268b134878cb6649cee1ef481f76afdcb0c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354779, "uuid": "26b68d5d-9de3-42ff-904c-dc300427a572", "value": "T105F45B227711DFA5D355D67009F3C6904AF625A20EE2508AB26CC3287E2172D6E5FFF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354779, "uuid": "fdce03db-3bee-4516-9057-611fb3e960fd", "value": "12288:1BpnoZkM3bUNgil7eThb4M7GevGdEyXSO5dgphga+nhypiJ/FSv2V0j27:1Bpnc3L4M7GaGdLSO5u+nhycFM2V0jI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354779, "uuid": "2da2b98e-a9ab-4434-9515-9428122791cd", "value": 762904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354779, "uuid": "e65bc12b-566c-49e8-8167-260b3bc1feb8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354779, "uuid": "2fa320e6-24e5-4596-b577-b22f664ae3fc", "value": "tcimips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7080ff39-308e-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775352375, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352375, "uuid": "135cdde2-bc06-4151-a3be-111a646b39e3", "comment": "Malware payload (SalatStealer)", "value": "ac6ee3c49e101ac4bfe358d2dcec27ae", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352375, "uuid": "147baaa5-b9d3-4cf6-98f0-c9537defd233", "comment": "Malware payload (SalatStealer)", "value": "b67662d315e91da9652971dec6b778a94149cffb0145323b51fbcb496aa4126e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352375, "uuid": "07b601bb-6345-4db9-b029-60f6a5a437ac", "comment": "Malware payload (SalatStealer)", "value": "54e742cb0f36221427f1f3193613fe48794085f2", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352375, "uuid": "892fe656-2188-4eb8-8d7f-b05a0d2eee0d", "comment": "Malware payload (SalatStealer)", "value": "b290c0d4e542cb44c0f6de88130ffa00be18ffb08ff04c0df829c8b0146026eb6d9263988010509a3f890bda4ab605ea", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352375, "uuid": "3a4ab8f2-35a7-48d0-98cb-8e15057cb867", "value": "T1E2763302FD82E2B2C3760174583947BD867F4D184B588EDF4FA26E724AE13F1A63651E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352375, "uuid": "de6ba7ef-27f3-4bac-934a-2695a21e082a", "value": "36f2db5b82b6c50a98306849357f8891", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352375, "uuid": "2efa6727-5efa-4b9d-866c-2f69e70e82be", "value": "98304:oyAvczbN2oMejlLX+IQ4rsrFQePBQrwLoPkx+8G6Rs2ZzhLGqNg+NaXew1wRJ0:ZZtfTlXsRQe5swY8+QDZLLsX1oJ0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775352375, "uuid": "05f6cda7-89a0-4a8b-9c60-1cc8e636697e", "value": 7157824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775352375, "uuid": "116c1537-f171-4e29-af97-dfdccf1c2ede", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352375, "uuid": "1c97632a-9f48-432d-a377-7d6df61b1f7f", "value": "Docker Desktop.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1d2f931-3107-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775404481, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775404481, "uuid": "d4938a66-3296-4dab-b824-da5e8fd8fdc2", "comment": "Malware payload", "value": "7abff55bf8ff0075afb3a3ff2ad9d7f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775404481, "uuid": "d2c76daf-36fd-42e6-a074-8261c1aed9c6", "comment": "Malware payload", "value": "b67cd5f540094b7a2dea1ba92f3ac7a3c0ecfe67975ed947a1203cefe41f3a42", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775404481, "uuid": "cd214d24-7daf-46a1-b73f-9d45ef1b09cf", "comment": "Malware payload", "value": "283a962497d5fa5b214c79b853ea56ef361c06c8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775404481, "uuid": "447faec8-5023-4611-924e-01090cf5746f", "comment": "Malware payload", "value": "6b5c46eb2096ab6b53752796ffaa919efeec60e9155374937a5ce401dc222d772b3e9c25ecefcbeda38c7b33338f331a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775404481, "uuid": "0a5468ec-7469-45bc-a2a7-ec5437506658", "value": "T17006338D0C1D9FE2D2888BDD3B6E33E25AD039B15DE4102C2E8D99D745B9CE78796321", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775404481, "uuid": "ad5c0722-d6e6-45a1-aa01-ffec6c4bc384", "value": "98304:z7oBJ0g8+4sObL8hr+gH2plIeaSv0ou8XRct8ipc:3o70g8vPE2Gp8K6l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775404481, "uuid": "356fc035-2035-4692-acd5-61aae1bd7cb2", "value": 3722808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775404481, "uuid": "b5c72d08-6abf-4777-89c9-4e33eea1af23", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775404481, "uuid": "04e6f1e0-f142-4b44-8737-99305807b35e", "value": "linux", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be560bbf-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354653, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354653, "uuid": "a5aed670-55ae-4a87-affa-01c49d4404e2", "comment": "Malware payload", "value": "96449395d7a7931b0d15d1f8ce762025", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354653, "uuid": "f658fdad-763b-49b0-9ac3-631165e0f2a8", "comment": "Malware payload", "value": "b7611403807e4f87691fee4a1938e001537d46dd69cd1d1028ed591a131a4a44", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354653, "uuid": "06aed896-1180-49c8-be67-ecde9c680b61", "comment": "Malware payload", "value": "95172fad35130de64bec5a45e6a031c4ccc5fcdd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354653, "uuid": "bc94e9b2-b02f-4211-bf4e-86ea4087b7be", "comment": "Malware payload", "value": "75eacb187a721a84295a0d494fc789808332c729e7a0cf70f6f803ded1ab5538d8dc275caa390dfb96306e256e263192", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354653, "uuid": "c1e5e5a4-977a-46eb-bad0-93102a4dd2b6", "value": "T1E5055B42BB1C4523C9470EF1293F5395F7257A4341F9922A371E9B673621E3ADAC338A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354653, "uuid": "2b1af5ff-a5ee-4040-b54c-d79887e21323", "value": "24576:H5AmRPzX2RkeHTFMaNzg6EIhtGvvhup6K25K:H5Am9iRkcFHNzwI6vvq6U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354653, "uuid": "441e37aa-ff14-44fa-b48f-a280df00c994", "value": 857808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354653, "uuid": "759d338e-0141-4a59-bba4-9563aad77f25", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354653, "uuid": "9465fed1-d8aa-44b2-96fb-02381eea2df4", "value": "siackppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad6dc0cd-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354195, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354195, "uuid": "37f8b115-ad00-4e57-bb7d-2d6688af6004", "comment": "Malware payload", "value": "39b3cbd727f439ff93d6374c3f25f58c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354195, "uuid": "ee4dd9e5-53ee-4942-8862-a046af442df3", "comment": "Malware payload", "value": "b778e9f52319e6450702ed882e72c54803af7cb6289b6ee8ef8d74e1a63c9edf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354195, "uuid": "1ec87bae-6c9a-4683-bb55-dc0213a79e3d", "comment": "Malware payload", "value": "9abe15ac37c90df7a181a9a5c009b73ace54c454", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354195, "uuid": "8f183885-2294-49ba-b1e4-a97ac1fe66cc", "comment": "Malware payload", "value": "94c7a515c3882c63f8859d662cfe2d4734200c088e533a2c581b77698e61fd6f5511bf7712dc70c388e95b040b7d96e8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354195, "uuid": "9250213c-2dc1-4ade-88c1-b9b226e88585", "value": "T11B058D9EFA5E3C47E2DBE33D9F4E83B1A22BB150C21351533581432CA4C69DD8BB1699", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354195, "uuid": "daa6f4d8-0c03-41df-abfe-044140a1779f", "value": "12288:Je2flvB7/D2VNnwmNTyECCrLxKwjzvXVNEuXw5lltxOWXGI2FG9+26H:JDfj2VNnwoXCCVKqXwLpGI2c9+26", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354195, "uuid": "529de987-04e2-4f8b-a72c-e9fbc431b16c", "value": 865960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354195, "uuid": "65128608-dadf-4e33-a653-0a9c3355e5bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354195, "uuid": "919296c6-1063-4826-89f2-5f2cbdfbe056", "value": "dropperarm64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1584e15e-3094-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354799, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354799, "uuid": "9d108325-652d-47ba-8c87-13c5f19fd711", "comment": "Malware payload", "value": "0508dfa4f5c1ffe3a54ee7dad895b102", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354799, "uuid": "82e80864-ee63-41ec-a790-f133b2a7cfb4", "comment": "Malware payload", "value": "b7b2dfd315cf2576fe7fa8199b944e035e3eaefb6d948dbb09cef1bc41232370", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354799, "uuid": "beef9499-e358-477c-9e34-7018dc54ec77", "comment": "Malware payload", "value": "784de6cb018bb62e33f54a8e8bdee6a80d7809b1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354799, "uuid": "6b81772b-4fd1-454a-a25f-e9daee6928e1", "comment": "Malware payload", "value": "bdd54b6419be7cb8e624155fa5e82261aab659f0768ea835c7968a2aabe52da5446aae0400ed45b2aa6cf5485b740f0c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354799, "uuid": "c0a38f6a-c634-491d-916f-f812fd0e4c8a", "value": "T19DF46C07FF805FEBC49FCD31492EC30600EDD4878AD1662A71FC4B8CBA9965A4AD7598", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354799, "uuid": "7506fa0c-3601-4a90-b992-cdd5474eda91", "value": "12288:+I9oGZppUwVZoVBlB6Yg7jsSwfrDN1ka8ecVJw8C6vxiu6pI2j1oo5KrYx6vFiWe:Y6VZS/frA4MbLe/EcxjrVyuvVwj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354799, "uuid": "f4777ed8-df48-49c1-bf31-201033a28e91", "value": 763300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354799, "uuid": "917402c3-3335-4019-a418-de554bc272dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354799, "uuid": "35f66d4c-5bcc-4baa-8fd1-7ff9dd1d8fe9", "value": "shandmpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "777167e2-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354105, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354105, "uuid": "1a8dd08d-82ef-46d5-8e83-9843dd51fd0a", "comment": "Malware payload", "value": "3550c0589a66e9daa05af97bac18ef42", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354105, "uuid": "934ad2ba-601e-42f4-ad72-b1d4b6946511", "comment": "Malware payload", "value": "b7d972d2c2de28fbf27e07e24d161b87a7ffbea1d907329cad1d41c8a757d2eb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354105, "uuid": "f2cf7594-3d91-4f89-a198-9feb3b683322", "comment": "Malware payload", "value": "b419d82b85afd37c9bf255894778ecc5cdccff61", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354105, "uuid": "86ae75d4-c0aa-4f5d-b1d1-29412e08804c", "comment": "Malware payload", "value": "ab891b021219b51ed48df4e206b0d9bed004ff8f348b6a285fd77aaf888e043eb7c93303d50d147f51a6c60f7c458a28", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354105, "uuid": "15ce876c-9b78-4c3d-80a8-47a2d54ddb7c", "value": "T1B2D43956F8808F62C5D0257AF65F82A8731747B8C3DB720699189B383BD786F4F3A641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354105, "uuid": "e3137e21-4ec5-45f7-87e8-4ae8a797b88b", "value": "12288:TVC/6P+lB5mvlCrNixchrLdEk3yZhgpo+KS5vInA7VdVOK:BC/6P+r5huchrLr3yFIvInA7bVO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354105, "uuid": "686e2535-5a44-4420-9e53-6330ab037232", "value": 640284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354105, "uuid": "03f5d63f-8e0d-40cc-b28e-e93d6bb1fc46", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354105, "uuid": "0b6fe8b7-ddbe-48b1-a5f4-1c6edabc324d", "value": "library2armv4l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc959e2c-313e-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775428148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428148, "uuid": "4faf4d17-9775-4d85-bdd7-4bbd546e7e4f", "comment": "Malware payload (Mirai)", "value": "e76f1e01eade3911f5685e60fddb053c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428148, "uuid": "5e6491c7-b053-43ba-8357-b80942d80863", "comment": "Malware payload (Mirai)", "value": "b81062b3d00b297bfed142f5c79435678528dfb19d32adc576dcd94e21f41ded", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428148, "uuid": "acf19c35-bf64-4302-8f61-589c6f8f7735", "comment": "Malware payload (Mirai)", "value": "a3df350166b27b0e3171603024f5bbf93a733be4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428148, "uuid": "892f8a5f-5850-4f7e-bad6-cc9f2b8ccc04", "comment": "Malware payload (Mirai)", "value": "069b53260a2c9a267f672e1c6c651aa399d50f45afdb24904e4c67ad4bbe22e541a769efcaeacaa6f9b8047a615ccfca", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428148, "uuid": "7d2e6d76-d64f-4fc4-8350-55a806c2c1b9", "value": "T177145C03AF858A6EC1DEC3B51F9B5334C723F4390727B747ABAC68651E056D93E4A608", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428148, "uuid": "97df8b54-2584-40a4-af39-bae43e316e8c", "value": "3072:DvfLzC53S/OnqVtzUcPs+JDhY3VJP9vnwVRfyapvsuidGlqZG6:DHLzC53S/cQzUA9h4VJ5nupvsuidGlqd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775428148, "uuid": "56ef1171-6cfa-43bb-b6bf-f63379fb1f59", "value": 195401, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775428148, "uuid": "489fcb84-8980-405c-b989-da718ce7cc4e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428148, "uuid": "8c31de2c-f79d-47c7-8385-d93598018e62", "value": "mirai.dbg", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "275d9ab6-30fc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775399497, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399497, "uuid": "06aa2d45-30fd-446f-bcb2-1a84e76ebfbf", "comment": "Malware payload (Mirai)", "value": "6e7b2f79a05aba0f9e1743ba04d96e5f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399497, "uuid": "f257649a-48ae-4e5d-983c-9aaa88b9126d", "comment": "Malware payload (Mirai)", "value": "b97c9a8b902f66f90b7bacd7cef330e6e9df35316704d6ecdd8eb0738be6ea6b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399497, "uuid": "193eb242-63e7-4eaf-8df2-cafd6689f0b3", "comment": "Malware payload (Mirai)", "value": "086fcf3601c0e548ac9bc04d8590744ca184d92f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399497, "uuid": "556565ad-d04c-4f62-9ca7-2a5c77adf13b", "comment": "Malware payload (Mirai)", "value": "6b92974418c60ab5456c2f10b6238979b56a481cccf47e31c9c0da014927f320b806d62f6605d6817f3a69dc298afa0d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399497, "uuid": "939c94c4-ac2f-4fbe-a835-378b5ad66cb5", "value": "T1EF142A46AA404B13C0D627B9F6DF424533339B6497EB73069924AFB43F86B9E4F23605", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399497, "uuid": "116bded5-6f01-486c-981f-4df6416204d9", "value": "3072:IZos005NNHJBbWICaqUW0hFOei5vFN2q33LbnoN/M/Rru/ESm:zsTHJVFCaqUW0hFOX52q33notM/RhSm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775399497, "uuid": "069ede44-6a68-4e0d-80b0-e22ab3fe79e8", "value": 190667, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775399497, "uuid": "f157c496-9ad4-4406-b546-21778f28edcc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399497, "uuid": "319b9360-8a1b-4e4e-95a0-d184491254be", "value": "main_arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3fffcca7-313a-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775426167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426167, "uuid": "0bd6ee73-0079-44e7-8d62-0857a420329a", "comment": "Malware payload", "value": "22664a271835f403a3f62e6c2422e1bc", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426167, "uuid": "57a4ae7e-2674-44af-8aec-3a83a9eadd0f", "comment": "Malware payload", "value": "b9b218f2b10597c80d6888f3af904694d58c030b193d5a8feee077438811508d", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426167, "uuid": "73c87476-0f25-47b8-aae8-a09ccac0ed6b", "comment": "Malware payload", "value": "95060d44cfc6629837a9e5f5c572ec9b37854dfe", "object_relation": "sha1", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426167, "uuid": "913c2134-6354-425a-814d-53912a2091b5", "comment": "Malware payload", "value": "8c0007111b245d63c5e2c7237582ca130ebe6a178634d100735047fd8b4526048e54a849cae66487ed756098d64c3299", "object_relation": "sha3-384", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775426167, "uuid": "e289ed42-a84c-4253-91ef-ea7259e23d29", "value": "T1C2D3E0C88ACE85B54B1F643C991F6E038AADD223161DC9907ADF9F443F05AB035FA9D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775426167, "uuid": "bc2b2b1d-48b8-4f97-80ba-02d7c1bc9611", "value": "1536:sfWF6cmemqITZ9HUme0zvqXfw5whwKwcw8uZz4jVUroe:pJmemqITZsCSXfw5whwKwcw85VUroe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775426167, "uuid": "922d86fd-ca19-4502-9c59-69be5461c48b", "value": 139372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775426167, "uuid": "5c997d5d-77d3-4c76-b785-dbf06a55e795", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775426167, "uuid": "2331bc9d-aa7d-4247-9293-06b9a1b2d0bd", "value": "Report_Raw_v5.6.hta", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "800f2643-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354119, "uuid": "2839db42-d003-4c46-a5ec-f4684ce697cc", "comment": "Malware payload", "value": "ffaab78c5b61d07b29817258404b8e78", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354119, "uuid": "78d98153-f952-4b25-a829-b1d9ed422c45", "comment": "Malware payload", "value": "bb37cbc15950a349be7439401ca54f011dfe702752d2adcdc46fa9b309c62709", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354119, "uuid": "6248ab8a-ad36-4927-8f44-4049a78285be", "comment": "Malware payload", "value": "f61aa23e82b181f876b4ef8fd9002f190c5e0bbd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354119, "uuid": "9e56774c-e9c3-4c2b-8211-122813895370", "comment": "Malware payload", "value": "fd0a9aeef5a6ed7612251797c2ff360dfcd8d00e6c8fb7b527615393c1142838cb44064641cb2830aaa0cd1fdf318311", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354119, "uuid": "05316b54-c9d6-4031-822d-481c74fefe71", "value": "T101461897B9D25983C8E43677A9BE80D433630EB99B8753565D05FE383ABE1D90E38304", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354119, "uuid": "b7ebb23e-7b6a-46d1-aa5a-08c303608176", "value": "49152:SGfaKpOFM460MX4utrq50Hmg5bKiBtU9pnJuRA5EIz:LpOy46lJ250Hmg5VapnJEIz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354119, "uuid": "5098794d-180a-4d47-b9c7-7c162211003c", "value": 5832866, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354119, "uuid": "7175f80b-eeba-4cb1-80cc-20104606a8a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354119, "uuid": "b4ef1adf-c026-4ea5-8f83-a51bb08198f4", "value": "li7proxarm7n", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d2e04e2-30a7-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775363000, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363000, "uuid": "d138a6be-125f-4223-b8b8-f5b2e2b83a40", "comment": "Malware payload (Mirai)", "value": "24636254cd0d529d07d8b56dfc516836", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363000, "uuid": "f5f9b542-2708-40d5-a583-9bbec575e892", "comment": "Malware payload (Mirai)", "value": "bda956f65de2ba699590821677ab0af57919ce3806a098b1d7856a504697ad3d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363000, "uuid": "fdf98880-aaf2-4d11-ab28-58840ce7da68", "comment": "Malware payload (Mirai)", "value": "179414dc293fe0f2ad0fcba07cd659c8470a3f11", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775363000, "uuid": "7fa444a5-8a1d-4d9b-939b-28acbd3b744a", "comment": "Malware payload (Mirai)", "value": "49f0f7c9c163b42c10d3a9d63f10696644d7e553052b5a481b513522f6ea4debeb886cfa89b1272fcdcd857dc232f9c7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363000, "uuid": "a81a43c4-bb01-42f8-a71f-ec9621a95a28", "value": "T178630A96B8818F25C5D5037EF92D118E372227E9E2DFB2229E205F203BC652B0D7BD55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363000, "uuid": "838422ae-2554-486c-b028-4040193d00d2", "value": "1536:itnPsVkFxV8xk6b5VKLNXduAlCjFlIr57uscvIGiojd70k7h:VqVMkWV8PPX9Cjd70k7h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775363000, "uuid": "ccf31a7d-3d7c-4f12-bc48-e0ce05a4c2bd", "value": 66864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775363000, "uuid": "2709fe11-e905-4265-a9d6-6212338bdc38", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775363000, "uuid": "f67c4174-c210-43bf-aac7-c81d838e5f3b", "value": "boatnet.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aff912f6-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354629, "uuid": "4f006ad8-d52c-4d50-ba9f-1a7b1b6fd3a7", "comment": "Malware payload", "value": "f362e7b2762617390c9e564f0db83ae3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354629, "uuid": "bef0d153-e01c-47bb-93d6-5b47c58ffebd", "comment": "Malware payload", "value": "bec10d4b4f8f8e83349e025b2844f3abb36a42d8f80fc1c268b4d2b155d9991d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354629, "uuid": "44a1f355-50d0-4f2f-bfa5-2ff531e8a3cf", "comment": "Malware payload", "value": "a6b652c4999610af478781ad6110af403cdf6863", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354629, "uuid": "014a74e8-5670-41ed-9146-2345a3518f2b", "comment": "Malware payload", "value": "4feae64cf4c2a7b71900f9d3425a489b851695f7f97531d0cb90cf3a535d4099d10f6185c816984efe15acc3a8ab9aa2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354629, "uuid": "4958bfac-5c1a-4f90-9893-61e498aa749e", "value": "T1B7057C2AB3B3F17CD01BC03047DBCAA24535F47526212E7B26C4DA353D66DE22369B66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354629, "uuid": "dc7b1108-4a8a-4dcc-90fc-650975fb0c0b", "value": "12288:J1/bmtljO6dWHAANXNgk6xjszAi+oZW0iiSQiayVz02HX:J1TmXjwXNglJszDnZZvb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354629, "uuid": "75e34364-3596-4ecb-b7ee-20e92d35db09", "value": 830224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354629, "uuid": "09101970-2a07-476e-9bac-d6242eb603fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354629, "uuid": "edce8fe8-ec01-4b9f-acce-b953462a6497", "value": "ssynx64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e184ccda-3123-11f1-a769-42010a9c0008", "comment": "Malware payload (BlankGrabber)", "timestamp": 1775416560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775416560, "uuid": "cf41b9f4-08a1-4ea2-a5f0-c32bd911a84c", "comment": "Malware payload (BlankGrabber)", "value": "89dc71934b3584b273a1dfe75e4abdd6", "object_relation": "md5", "Tag": [ { "name": "BlankGrabber", "colour": "#21B759", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775416560, "uuid": "f59e2f97-6bb8-4475-a461-634fe4a61562", "comment": "Malware payload (BlankGrabber)", "value": "bf005f326baa7f98e367058f8834613a9bb5def9484b8a5fe27172d70a81ab7c", "object_relation": "sha256", "Tag": [ { "name": "BlankGrabber", "colour": "#21B759", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775416560, "uuid": "e2c37eff-aacc-4371-a208-5ce43ebddd4b", "comment": "Malware payload (BlankGrabber)", "value": "b059e225abd3c19d337ed6ef5fb43d44d7748ee6", "object_relation": "sha1", "Tag": [ { "name": "BlankGrabber", "colour": "#21B759", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775416560, "uuid": "976071ad-733f-41d7-b27a-88799b28b3f2", "comment": "Malware payload (BlankGrabber)", "value": "1deb2f58360c8db83f9968ea70e9c319c8407909fc2e076b1681a4023c99d409d6679435a5716abb7413dd47aaa2ae2c", "object_relation": "sha3-384", "Tag": [ { "name": "BlankGrabber", "colour": "#21B759", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775416560, "uuid": "c94f4c99-6f6a-4727-8fab-99fc76b3bd1b", "value": "T12BB633A5679500F2FC9381BECAA7D82AE777B9151B91C6CF073416242E179D20E3E732", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775416560, "uuid": "c0ee6463-0a80-4cd6-97ff-b0b490175d5d", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775416560, "uuid": "363e7952-48a7-4095-a85b-be9209cc5620", "value": "196608:YqubqpeZwmW165S/e5cAyPEI5xFoXYS06pyp4ZAM9qx1/gcrbMyDn5boB:YqubSqJ5cnPELY/6pyp4Z/wwcrbBboB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775416560, "uuid": "64cdbe74-4a97-4cd0-84e7-0e99c41b904d", "value": 10644482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775416560, "uuid": "5e356a8c-c433-48ee-8fb4-999af9df9a6c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775416560, "uuid": "3fa10e58-38a3-4a20-b55d-96894e33b1ca", "value": "dz72gn.bat", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2702f12-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354687, "uuid": "237503f9-bba1-443e-924c-87a69fcb0f1d", "comment": "Malware payload", "value": "0c2b465a001c940e9c9f993e403d8745", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354687, "uuid": "6e7f95bd-26d0-4a7c-8297-f840a0dfd827", "comment": "Malware payload", "value": "bf6e079a9fbf1316a2091126ac310900fcaca4c6f0ff3f67d4827a9eb601c8f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354687, "uuid": "84620a10-cf17-4fae-8e7e-6579a62ffd21", "comment": "Malware payload", "value": "5d42f7932c1d8ac55e2b4c042ef1d066305db486", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354687, "uuid": "3841af65-4554-448f-8a33-df59492bc779", "comment": "Malware payload", "value": "299711ad16fab682c367d7520f8e0053f16e4dcb6777f0d402eb832f58f65b2c09501c525e12b137547fa685848af9e3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354687, "uuid": "1b8c0cc7-d842-4de6-a572-03d210382cb2", "value": "T14C058D2AB2B3F17CD01BC03407DBCAA24535F47926212E7B26C4DA353D66CE62369F65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354687, "uuid": "f259f0b0-a2ac-4d50-8000-efe8783106f0", "value": "12288:Xk1UUYh6ddHx6KWNgph+ugAUy/kItQiK64qYay47MHX:01NYWWNgvRgAXkq04", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354687, "uuid": "24deeb1b-3871-4817-b08b-8d7c29f43184", "value": 834320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354687, "uuid": "e7d40b86-a953-4655-96e8-20da721e1838", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354687, "uuid": "55af2f02-a361-41e0-a7b6-a8a5484bc1c8", "value": "shand", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e7d6ec1-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354546, "uuid": "25bc94b8-5625-4788-b610-d6fc43c39b9a", "comment": "Malware payload", "value": "53d2e93e8d8578992a5395a4cfeb5593", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354546, "uuid": "1f8546e4-6167-442b-b170-7e72229c4350", "comment": "Malware payload", "value": "bfe2fc6fe55aa759d259f33c28c5649b6b2df05346d8c5d5aaa846d6be34e472", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354546, "uuid": "1b0b11d7-045f-4a5a-b65a-1104f072787c", "comment": "Malware payload", "value": "859040db945eafeece199c7dfa90df70f35ef876", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354546, "uuid": "bd5cd5e6-b084-48ba-849c-e0bda55a6bfc", "comment": "Malware payload", "value": "d58d81a0ee45fadc737aa26e8f1988f3b7f33d600b46331b6fc4a19cad7791132f010b3a8a061cf14fea2d4784076f71", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354546, "uuid": "c40b8173-3308-4c49-a2ef-28af90423ff7", "value": "T19ED4AD19F8447B47C89B9274808FE428732BB28907523706384AE6793D8277DEF5D7D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354546, "uuid": "b71a0ae6-21ab-4622-858b-ed772b18be34", "value": "12288:t+zOHwfvWbmaIBrc6ansQYCVOGggcFBw5Wod8oq86t7ln:t+Ow2bmaIBrcnHVVOGgBFMpq3t7l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354546, "uuid": "f178638c-e12a-4e63-b408-26406cd059d5", "value": 649304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354546, "uuid": "7fa60671-b0ab-4cde-b9fb-c7e107b9c331", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354546, "uuid": "415c9c3f-b106-4068-b88a-a655417ac500", "value": "siiriscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72f031a9-3139-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775425823, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425823, "uuid": "73d689ed-20fb-40e8-ad64-6bc4635c2d25", "comment": "Malware payload (Mirai)", "value": "0a71593e598b8a3c6cc45d8f23b8f3c3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425823, "uuid": "769d355d-e3db-41e2-815f-82a790da794e", "comment": "Malware payload (Mirai)", "value": "c02ae9d038a511028b7c58c9aea89f42b0dda0f1f3898fa1b87260355b14e8b3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425823, "uuid": "d06ac5fd-deee-45da-9378-e2c9bc8ba7ba", "comment": "Malware payload (Mirai)", "value": "f5ac9c7864522ba3006675ab503f42ac5c8e564c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425823, "uuid": "85b472ee-b589-4297-8c74-40027e04d167", "comment": "Malware payload (Mirai)", "value": "2e4245f26eb5c3e00332fc7d257c64f6e407098dc3fd428b7a58dabb3ed9fc56e503cb04330403b1f975e897b409d256", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425823, "uuid": "71de5af8-2a9c-4a72-b6d3-dfb318d6ac43", "value": "T17183C8466E228F9EF25982704BF34E31A75877D727E285C5E26CE9801F202CD585FBB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425823, "uuid": "f37b5386-8465-45e5-bf37-194d0e6b0c91", "value": "768:3HFBOElxyG1exOxvf331NxCezrHwziSz44+IJA9e5feYRfK8Y9Qks3yysUxeTtFn:1dlD/UeXtW++DfxEZQe02RVXwo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775425823, "uuid": "d2c94c0c-3313-431f-9980-a7b98c9921ad", "value": 83220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775425823, "uuid": "b301cc0b-91ad-4726-a64c-799a292e279e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425823, "uuid": "bf0cabfc-4ab9-413a-9bcb-b9b0086c01d6", "value": "mirai.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1b9aff9-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354605, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354605, "uuid": "b8ef52b0-c6b9-4ce9-82c6-4ccc8b4cddb3", "comment": "Malware payload", "value": "f64a78c04dbaddea18dc34361504a031", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354605, "uuid": "42280e65-2612-472a-b833-d8747dfaedad", "comment": "Malware payload", "value": "c04425c7881b473df7c8d0fe1edd2ba8fa043fc27ac1b635a340ddfde6feafb1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354605, "uuid": "147cfd91-3d5b-4b5a-b6b2-d13748155341", "comment": "Malware payload", "value": "b9375c2c66f6990e6f7eca7e3fbbab6dcec1a2b4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354605, "uuid": "c0ac5176-260b-476b-a838-a8c13686907f", "comment": "Malware payload", "value": "3c9036e6f9a15ca3534bf7248008098dce5fc02ea1eb0ab841509bf4ee12fb6477705efaa01cb87343265d2dc57df6a0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354605, "uuid": "ac2b3013-d67e-4894-8d94-8751f0e8a423", "value": "T173F45C07AF546FEBC49FCD31492EC30601EDD4C38AD1662A71FC4B8CBA9925A4BD3598", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354605, "uuid": "83df9e65-fd80-4332-9044-682c8d6ab338", "value": "12288:y5P3ej71njtDyUh7jjbrCfQZxJWrFJaWwGFXPw0ZEyjkaxExyi1pPEE3ZSR/8Q7a:G3S19ufQ9PPe5mg1eqLW7M2V0j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354605, "uuid": "ea825642-4f98-446e-91e8-98321fd4293c", "value": 762904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354605, "uuid": "b3e2b96b-c3b4-4190-9698-879ad641801f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354605, "uuid": "d10ec97d-9d9f-4733-bc91-277f343e0c69", "value": "tcimipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7fc0cb9-30bc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775372359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372359, "uuid": "fde91edf-2714-4cf7-90e0-69022a0532ff", "comment": "Malware payload (Mirai)", "value": "96034c058cef2a22bba054c6e922344f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372359, "uuid": "f8736cb4-4574-41b7-9066-b4f57ef9a9d9", "comment": "Malware payload (Mirai)", "value": "c04b716fee11613f030d117a7738b747b2d77faf16d86147a60b2ec099662553", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372359, "uuid": "0ddea5ef-404e-482b-823e-0f6f84ef5f1f", "comment": "Malware payload (Mirai)", "value": "27f593703f98fd13e78bc30be40e285c65c4525b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372359, "uuid": "5d0ff8be-f56b-4ba1-bd3e-e5120b9a7505", "comment": "Malware payload (Mirai)", "value": "eb141b9169340eaff77469e2230db5f3ff9f97e055a37a213c3545319a83417f31b8f7802cb1f17199bdf3b683b03125", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372359, "uuid": "fdfaaacc-17d9-4ca2-a571-ceea657c9412", "value": "T1EFC43A59A8419791D1D02BBBFF1D934873131B38E2EFB1069D196B246BEBC1B0F7A502", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372359, "uuid": "05caa860-219a-42d3-b630-4e2c223bae41", "value": "12288:f/teOjRhLdTaJsBBHC/j97EhKbRpuUNlhKdPCCmtL4oarREFQOG+GIeRWd:fpdTaMBHCi0uUgCFGQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372359, "uuid": "4114c98c-f5f4-4f5c-a0c6-3f9520385a1f", "value": 585124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372359, "uuid": "8d435751-ad9f-4862-9fd6-c5046ccc3be2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372359, "uuid": "4aff8318-4ce0-4782-b331-7b217c447a39", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a00d169-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354136, "uuid": "4d90c37b-08df-478e-b0af-15f17bfb7eec", "comment": "Malware payload", "value": "21f70bc5a29e9065ba13ed5edcfe7f80", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354136, "uuid": "7cee07ec-7af5-4713-8880-f6f3389b0236", "comment": "Malware payload", "value": "c0dd6461a178d7160831dbc928544b30f37cbaffbf7e19af61f175a8cceaa6d5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354136, "uuid": "f9de70a6-391c-417f-af23-15acf3083e07", "comment": "Malware payload", "value": "b60cf00889942f4842736e56c08524556b170eb1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354136, "uuid": "b85bf42d-bbea-4bd8-80d1-8965ca889edd", "comment": "Malware payload", "value": "ab53b2d2fe9d8df0dc93628b9875e09289c747104f0bd9221c59c50e5fa1a6f8e0a8c231c775b9f1575bf11c218d48c0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354136, "uuid": "3a6359e0-f585-4847-b2c0-423e8b7d87ea", "value": "T12C055C03BF805FABC49FCD31496EC30601DDE5839AD1662E71FC4B8CBA9D65A4AD3588", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354136, "uuid": "9d092183-5fb0-4e39-938b-85cb2795380c", "value": "24576:iAG3rDLz0fAW8sAJaCvTgTAZCULm2mO38Owy7:rS0FA8gpmO38O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354136, "uuid": "6f34d1f3-74aa-4e19-a4b9-ee2d4ada1f5e", "value": 837216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354136, "uuid": "75054272-5b18-41aa-a2ca-232ea1f0f80d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354136, "uuid": "9f7edab1-83d6-42c7-b825-eda1631d0142", "value": "droppermipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51ea69d2-3095-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775355330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355330, "uuid": "5ac7957e-90d0-4822-901b-a8439e8f83a1", "comment": "Malware payload", "value": "61950bc688702686cd996ef3bd98477d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355330, "uuid": "a06b4d6f-a51e-4fdb-a7ac-405bba1e1f21", "comment": "Malware payload", "value": "c1875fa06a243de2dbf95597d1898b57ba4b6810d1bab4b9e30913e2db95a0f7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355330, "uuid": "f006299f-5acf-45f1-9876-00b2ff2ee0dd", "comment": "Malware payload", "value": "1e394b90995bac3a5e4657573f6920d5507b0801", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775355330, "uuid": "c1354292-715b-4c2c-8f83-f19adae8141b", "comment": "Malware payload", "value": "9dcd47a7948e459894abc867ec76639cdae4af95eaf90cce80a5b67f3934b1444ef71049204436f5525b17939862f5ed", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355330, "uuid": "e45d633f-b0d4-4310-9d10-ee0672a6dcbc", "value": "T116055B42BB1C4523C9470EF1693F5395F7257A4341F8922A371E9B273661E3ADAC338A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355330, "uuid": "7d5473eb-26a6-40ea-a62b-ee2e22cf5c0a", "value": "12288:FBCjmvs0iFmD/HMhgkJFGDKevQMi9woyXip7MHQgKlbAuL8H1aI0NlZz:FUjmUoPMhgu0D/a9woylQgKlbA50IClB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775355330, "uuid": "d56a329d-302a-47fc-a6c6-bcdb31c7d5f2", "value": 857408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775355330, "uuid": "e3788a0c-7286-49e0-8369-2b8b16ed4cc4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775355330, "uuid": "dc80d949-956e-4657-9e8f-10486347202f", "value": "sippc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05c874b9-30c7-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775376677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376677, "uuid": "2b554030-4594-467a-a2f1-245218d3af99", "comment": "Malware payload (Mirai)", "value": "d72a639ac7e19ddfe8e7376b9f79ef10", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376677, "uuid": "9abd78d3-8f19-41df-96b1-8c3919b1b486", "comment": "Malware payload (Mirai)", "value": "c2148b6cd0ad6dc701bd4c7787e4c5771061a7006b4a38e0c3e7486f8360face", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376677, "uuid": "0530eea8-52c8-40f0-b8d8-488210e0fd1d", "comment": "Malware payload (Mirai)", "value": "23c72d91a2e8fccdb9a61ab968e4f28fcd9efccb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376677, "uuid": "9dcfb8a4-2b5c-4f63-b18b-b60bae7ee97a", "comment": "Malware payload (Mirai)", "value": "cbfb7762d7f6b499007f1a316a25374575b8fca6a8b5ec119195cfaf1732d3e1281fbd12218293d9202c2a49c51eed8d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376677, "uuid": "a99c5f86-5930-4487-a24a-5f9bd7adf528", "value": "T1DA839C23C93A1E68D84844B0B0A08FB557A3E215C5572EF7595ACA3E9083EDCF6863F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376677, "uuid": "c22940fb-df07-4ec5-b7ed-d4cd331e2a11", "value": "1536:onxqxK8a8bNOdCmkkC1CK9dz0LU8U9CGVdwmHyzoF:oxqx5EdbZCHfd8U9v6toF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775376677, "uuid": "9640eca9-ee7d-4f69-b423-5771c8b561ef", "value": 83812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775376677, "uuid": "82bd103e-765c-4327-996a-855a2a58cd9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376677, "uuid": "63258435-a377-41f5-a58e-fe66f732eefd", "value": "titanjr.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac50de58-311c-11f1-a769-42010a9c0008", "comment": "Malware payload (CoinMiner)", "timestamp": 1775413464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775413464, "uuid": "4c79736c-2914-4bd3-bde6-3bec388c67e8", "comment": "Malware payload (CoinMiner)", "value": "f075a0d2f437a4d0aa609adc2d3ba239", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "dropped-by-phorpiex", "colour": "#6B8B5F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775413464, "uuid": "87668055-cc3c-4a25-8f91-3c74349fbc7e", "comment": "Malware payload (CoinMiner)", "value": "c26af9d1c5e023ded48bc29ef612f58fb21f7a709ca4a6a03fb38b3c7c67691f", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "dropped-by-phorpiex", "colour": "#6B8B5F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775413464, "uuid": "4ed57401-c6b6-4ee1-aab2-cf4a2c0d9dce", "comment": "Malware payload (CoinMiner)", "value": "4abe048a06d6f7bb774a25e8d703c8a715f9dfec", "object_relation": "sha1", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "dropped-by-phorpiex", "colour": "#6B8B5F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775413464, "uuid": "8ba72727-963d-4f8e-8e80-ce07725af2b4", "comment": "Malware payload (CoinMiner)", "value": "21b67b96fa8c8d09d532e5924d2d022b86d2634f49abe56c6ae90370094a2cfb613dbf60866ce55c19ab617ccfa83300", "object_relation": "sha3-384", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "dropped-by-phorpiex", "colour": "#6B8B5F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775413464, "uuid": "b26b48c6-762b-426f-a6a9-b8827de9d34c", "value": "T1E6221A2E3E450131EBA089F546B6990A95BD56732B86B3DBF333D1880EA52458041FEE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775413464, "uuid": "d3002d34-c2ce-431e-b046-6889d2515c3d", "value": "42cf01d41ef6dc0627982490afc9cddd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775413464, "uuid": "b0b9782d-418d-4d9d-9523-22b3527f40ce", "value": "192:3BoN2wcNeyBzwjVxAhRYuaExfPFJxTEZmFhrmcBs:RoRCJGV2hTPFwZ2s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775413464, "uuid": "96fccfe6-580e-475e-a17d-e73d2020b604", "value": 10240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775413464, "uuid": "2f3fa8d1-bbef-4610-b8d3-49f6c4e965b2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775413464, "uuid": "ca9dd10b-edbb-46fc-a3a6-636428453a89", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7e8a4fe-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354616, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354616, "uuid": "4dc2ea28-4787-4bd6-8d0c-01bfc05a2dbe", "comment": "Malware payload", "value": "0d1f220b81100cc86a65b129b9bdd543", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354616, "uuid": "b29d8d44-a999-452b-bbbf-868f8072b41f", "comment": "Malware payload", "value": "c332a1bd19c0fc80ff7e9a03314f2ab0ebb0663695c4f52dfc9c27a04a2cc996", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354616, "uuid": "e04beeb4-6c8c-44df-82cb-f380a292f214", "comment": "Malware payload", "value": "395cc6f5392d2cdd5d2684aef297b8f8de822230", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354616, "uuid": "c3440bf7-7e03-45b9-b027-1e06f1423948", "comment": "Malware payload", "value": "2fcdc25c083910ea0aa16dd9519c7a982cfc2a9a430e36767065669ecaf817af91f1b178a9ffb37442bfbc7c824b4436", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354616, "uuid": "4d9eb04b-38d6-43de-8ee2-40af15c7b5eb", "value": "T1E9B55B27FC9114E9C0AEA23289665693BBB1BC480F2123D72F50BA782F72FD05D79754", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354616, "uuid": "02a69ed7-7297-4131-84aa-eff54778ea33", "value": "24576:9UiYzzQhsp3gZKpH/0HACcd0UWLGVhdXdMNfX6J9sAotZMn/XR520VeWF5X:9UiWzQhspQZ+0acchdtM1wZod0YY5X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354616, "uuid": "0b6cc28d-303c-4faa-a0fb-9da83129b4a5", "value": 2384137, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354616, "uuid": "46e4a422-5f75-4c73-ac84-ac0d565b2cc2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354616, "uuid": "9818891d-8ad1-48f2-b9d7-316c1a30e523", "value": "mtdamd64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90954863-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354576, "uuid": "ca9da43a-4958-4015-a1b7-7987e0c0b245", "comment": "Malware payload", "value": "a537161ef364c9cd4f88f57ddc2ff557", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354576, "uuid": "8ff0996a-25a8-4cd3-a1f3-26b59bcd4771", "comment": "Malware payload", "value": "c3482ed3326165ccfc786e34e6fdfe46b695ed63ec779d0fdd4f407c6e45b0b7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354576, "uuid": "34e626f4-5bf0-4bd6-b377-12a0684900b3", "comment": "Malware payload", "value": "79afb5e10876bf9806dd074a0fa601384d60dce4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354576, "uuid": "172e1d90-6ea4-4030-9dbd-27223a487677", "comment": "Malware payload", "value": "83b97536c8568811e177aa1228615e65c8b54a912fdbe85d949384d502d8aac7bfe86fe8d612f0720f54c5dfaba16e02", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354576, "uuid": "2f4993d1-dd75-4309-aa39-ca202c2a2c87", "value": "T1E2F45C227711DFA5D355C67004F3C6915AF621A20FE25086B26CC3287E21A6E6E5FFF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354576, "uuid": "9d769401-5b09-4682-ad85-5da3ba494a7d", "value": "12288:L6VUyd1cueqrG3VpL4SfG0VtkluTgW1UygpygsXy/dGkh6wNvVwjwL:4Uybeh4SfGmt4W1U+XPxuvVwj4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354576, "uuid": "7b56203c-c26c-446a-bda7-89f4115935c4", "value": 763300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354576, "uuid": "f2523ab6-9b77-47b3-a1af-8549b29bef32", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354576, "uuid": "8b893d3b-7d48-41ee-970c-6b33fb15e3de", "value": "shandmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e662fa87-30bc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775372330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372330, "uuid": "f2a76cef-7f35-42cf-81c9-e664ab72f22c", "comment": "Malware payload (Mirai)", "value": "04349d25135b9c855194de808afaa739", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372330, "uuid": "02fda954-58f0-4b4f-9347-d68c06bc0ac0", "comment": "Malware payload (Mirai)", "value": "c34ceab04830dd58b4f4185c3d0f26f9e39203b65fb8b32ea57617c7c79076bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372330, "uuid": "a1d33d60-0cd5-4764-a5af-a54ea26e03c4", "comment": "Malware payload (Mirai)", "value": "8836422ab8d85ddc4d2b117364767cfc0c739988", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372330, "uuid": "ffe32653-1d09-4256-a6a3-022b0b1c9548", "comment": "Malware payload (Mirai)", "value": "39d756379079037ecaae15c3405bbcd3a40eebe96137a1cce28d965f8639ba55826f551af83c8a075a42325ca4ad086d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372330, "uuid": "a389239f-70cc-4276-80ce-3a6a34ac21f1", "value": "T1A444E806BF910FF7D8AFDF3702EB0A11248DE81727662B367638D974B60A54E19D3864", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372330, "uuid": "6eae20f5-1acf-4b28-a7a5-c573aea2651c", "value": "6144:Eb2snELwogykYwVYURVaf1wWp5GqohWPkzv7MlA0:ysLwoPkCqVE1wWp5GqohWPkzv7MlA0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372330, "uuid": "90893695-9785-45f5-a1e7-ec8995a7eb0c", "value": 257039, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372330, "uuid": "adc577f1-738d-4fa9-b52b-f4fa78579cea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372330, "uuid": "af2b48de-507e-4fc5-933e-0647190558bc", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "737addbf-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354098, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354098, "uuid": "df9bb8e3-5ec7-4209-9348-494ef51e1335", "comment": "Malware payload", "value": "52ba81dc6673289d5fd2a7bd19f03b2c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354098, "uuid": "23eb1975-29ac-44e3-8395-44a3175d2d33", "comment": "Malware payload", "value": "c39748874e353c14900a1e1d10bd3b998f477030c3eb735fd6414fc84ba9563b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354098, "uuid": "829cf587-99cc-4192-867a-fcb41f52db67", "comment": "Malware payload", "value": "dd9f792cd1d89e9e82531b803d40080f4ad3da98", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354098, "uuid": "4569f650-e6fd-456e-a056-4833faef0901", "comment": "Malware payload", "value": "5d2f104676417e9565448cbc543e14bd9c40bb6fea3a3b9fabce44bca27f1a75082f03b95f886ccd1d65b935f871421b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354098, "uuid": "a7b83ff7-3339-4616-9f0e-af124c4b53b7", "value": "T1F7F47D89E7C2D4F1F66305F10A8FD7F60964A2165053F6F2EB8C26A77432B522E1636C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354098, "uuid": "b072df99-f15c-4e59-acdc-83654f94d8a5", "value": "12288:U2UwPUhPxhb5IofnxSGzlbCZTzkl4Tox6o2AKymdhxwPyUrwQIYLu:U2UwPUhPxhlIofnxfzl2+40x6onKymdn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354098, "uuid": "6f5452b8-d06d-422b-9765-a5c0c8871504", "value": 775072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354098, "uuid": "aa03a0dc-e22a-47f2-80ce-214a42cdaa3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354098, "uuid": "6cafcc3b-0429-4d99-b9ee-f58f64e3ca29", "value": "library2i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e89a38e8-3082-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775347423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347423, "uuid": "41d8b0a3-bb1e-4013-a9b6-2da368394519", "comment": "Malware payload", "value": "8cced41cfd11ba4b36ed22cafe5b2f89", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347423, "uuid": "9ae0a8db-7247-4bf2-b188-9c3720667ef2", "comment": "Malware payload", "value": "c39765d13efeb00bcc3a2127fba194f7febc06517c57e061397bbfb7da7697d1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347423, "uuid": "a42b3a8e-6657-4c94-b05d-61a2b41d5bad", "comment": "Malware payload", "value": "69475dca79a7d724cf19830774b4c906a46847f5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347423, "uuid": "14c78d80-9952-4e21-a69e-a724b10403c0", "comment": "Malware payload", "value": "7ea8a227b09e9218c43f5aee83084b0c20c7468fa277a74ce6f702c1b53a445805fbc335ef25fb16d5045c049e671f99", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347423, "uuid": "3b1ff0e4-d0c5-43a8-9f94-83add2ccbfaa", "value": "T1C6C2F735FA621C2BC4D4A675A1E74738F6F5821F54F98F2A3D620E9CBF6498462032F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347423, "uuid": "1e5a05db-14e7-4f6d-b7a6-ffbf4af8ffbc", "value": "192:KfeYxqr3hjGxPBxrLskNSUWrGLSVVVhFExl8I+aIuZVUCyu4P0eB6kd+D2rrPllH:U1qljCNcjVtI8JadFU+pBLlKFcw3Dx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775347423, "uuid": "38c7388f-fc9f-408d-9f22-a95a6c6c2624", "value": 26488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775347423, "uuid": "4fdafefc-465e-4560-98a2-5b0acd151503", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347423, "uuid": "e9da1e05-f7bb-4980-a615-0197a78404f0", "value": "spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e231ed93-3102-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775402387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402387, "uuid": "143ca27f-b0ae-4236-b22a-8c87a4efc437", "comment": "Malware payload (SalatStealer)", "value": "ac61fbdaa4a18b9b5cae177c9529013e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402387, "uuid": "50267b2d-6a23-41b6-95ee-600c73b0dc1b", "comment": "Malware payload (SalatStealer)", "value": "c3a35e9a0679a853b8e2d7aa2c96a08d42d5ac182007c8ccb41b7c70b418a489", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402387, "uuid": "4c49dd51-0686-4ca0-840c-c4d88e0d1feb", "comment": "Malware payload (SalatStealer)", "value": "aa74395704f990d975801dd4779418948e63e1ba", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402387, "uuid": "060af56e-3060-4f04-894f-942634ace178", "comment": "Malware payload (SalatStealer)", "value": "27b010e5381dd475175ab58dc99a2b448f1a484f2616b8f77d1b7d2433cde485b72995e9d53e0b0592f0b175f861f894", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402387, "uuid": "17a0998c-5cf3-4c54-9e21-e9e57a3b476c", "value": "T132763350B5807AF9E0FE19FCA95DA7A9147F090C1F00CCFF5744AE98CE64AD232946B9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402387, "uuid": "70d317fd-8d28-45f1-b26e-fd6983ca8288", "value": "1acd5252f25e4628bab4ebd2f77f949c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402387, "uuid": "1d6a4363-d770-495a-9cb4-561a52bb1944", "value": "196608:TU242R5UQyto6fV9aK5krsl9SvmPn+tocydDthumwu:9R5Ux9pwySOPxQdu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775402387, "uuid": "1fe38e29-08a8-4c99-8f99-919c0f26f0d3", "value": 7360920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775402387, "uuid": "e0a5d0c8-6dcf-486a-93db-32b03df09d64", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402387, "uuid": "9fa1f428-810b-4a43-8a1c-c8bd98e0e33a", "value": "Lunacy.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96b03c56-30a2-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775361029, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361029, "uuid": "7a65e6cd-4316-4eca-a016-bf4556f033c4", "comment": "Malware payload (Mirai)", "value": "d3da77d796bd7b6a6f68cadcb114b06a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361029, "uuid": "db35d1e6-4f3d-4c83-a196-ceb7a60c5611", "comment": "Malware payload (Mirai)", "value": "c4efe60ab986e286106dda221e61968b35710f64de6f42c792c21009168ef474", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361029, "uuid": "8c60c88d-3cb7-4643-a81e-5b5d9a3d444a", "comment": "Malware payload (Mirai)", "value": "4f4c46065d500981d7e4866e429bd08b4916ed42", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361029, "uuid": "2f439a0b-39bc-4b37-bd88-fcfebfbd2c49", "comment": "Malware payload (Mirai)", "value": "d57a8475f5f75a6c361af95658c1b729ae7dfc0f28287f9f8ffcea8b190c37203e0fd8947c7fc3878fda9137fb94b8fb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361029, "uuid": "53b9efe1-d3e1-425b-8478-60f7e8e16b97", "value": "T16C82CF2061AB74E5CBE14431FAAECEC6A7160BF8D1FC36A326586B78894150251F92CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361029, "uuid": "a564407e-581e-4657-85f0-a7fd2965d54a", "value": "384:MjWzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMaayNhymdGUop5h5lx:6GV0P6+kom0tVAoNvm+to1ayNs3Uozn/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775361029, "uuid": "380e5f88-fce1-4085-ae47-edef0cca01a2", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775361029, "uuid": "8149dab3-604a-4529-9c50-4eaf0636a785", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361029, "uuid": "bcb3caa2-9122-44fd-835c-0822d0234787", "value": "boatnet.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e4469dd-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354599, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354599, "uuid": "6a6b4232-0c70-4068-9c4c-eb37a1ea6806", "comment": "Malware payload", "value": "d7c5f809d93f3550bd7486f2b0135d6d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354599, "uuid": "6879a3f0-fa80-456f-ab85-b4bc3ec1fdf9", "comment": "Malware payload", "value": "c5725a84e816291819ec9fb6dab2b4bde77e0434742480b888b9898e0a2f5fda", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354599, "uuid": "bdea40c7-6b18-46c9-939b-6cf64b43cd13", "comment": "Malware payload", "value": "7943994e6c9a7f9199579fd3d27cc7f61256722c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354599, "uuid": "44f0ef7f-5843-419d-8c5d-0afaf19c6047", "comment": "Malware payload", "value": "3cc610a6a2362d83a95d53c90cedd8668f19a690520573cac1d697f12f5c4ff8112150a0a646806fb0b999a503798778", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354599, "uuid": "61f606e8-f67d-4a4c-b4b0-e6e3cec9400a", "value": "T175D43956F8808F62C5D1257AFA5F82A8731347B8C3DB720689189B343BD786F4F3A645", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354599, "uuid": "6b99d18f-0c66-42bd-a513-8991056e4d1d", "value": "12288:Y/qvfRgAXIp3WRPT7n8F0LEkgpNxDzWaCAZ/RWKk:SqvfRn/NT7nJQWAtRWK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354599, "uuid": "2de00689-82bf-417a-a3ce-12ec94d1c47f", "value": 640464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354599, "uuid": "1f2f32dc-4a58-4963-8e41-73ca79cc4219", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354599, "uuid": "0dc5ad88-33dd-4d31-9b1d-5ece33bca9e5", "value": "sockarmv6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3402e91-3091-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775353802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353802, "uuid": "061ab52f-9a43-4712-9899-66f7d5f91599", "comment": "Malware payload", "value": "f5e0082e7c969b1034cc15a8bba33dbd", "object_relation": "md5", "Tag": [ { "name": "Android.Locker.83.origin", "colour": "#8F7123", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353802, "uuid": "987236a1-11e2-4ede-90c2-ad6557ba6b9b", "comment": "Malware payload", "value": "c59271342ba9c0d6eae9d46ae14d91d62e5eb31c102440249f44f10b32e0e82c", "object_relation": "sha256", "Tag": [ { "name": "Android.Locker.83.origin", "colour": "#8F7123", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353802, "uuid": "1185428d-81ab-47fc-bd05-df089daf78e7", "comment": "Malware payload", "value": "6d65a5db63a215b9c749fd01a580d83d3a63038d", "object_relation": "sha1", "Tag": [ { "name": "Android.Locker.83.origin", "colour": "#8F7123", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353802, "uuid": "4d407cfb-03c3-4912-9e11-8b6a3dee1c82", "comment": "Malware payload", "value": "927fb5da0d6a70e440c79633c175e07bb3e45f02a8949405c6da93ba155aa694aeb3c9074f1441117c7187445b526885", "object_relation": "sha3-384", "Tag": [ { "name": "Android.Locker.83.origin", "colour": "#8F7123", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353802, "uuid": "e93c8a54-97d8-4faa-b93b-cafb57fea558", "value": "T1F52523E8A7CDC0C3F4720F7F461093256F5AEE64B521EA8F624D794E58309910E4AEDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353802, "uuid": "577b4dd7-95ce-4aee-bd12-28a4da38682a", "value": "24576:fn4vpFHq97WJVjS6dFjsyYQdFjsyYOVSLJ3u:PMpFHWWJVi1nhu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353802, "uuid": "dbee3a70-d2d3-40fb-bd83-979cb70fa448", "value": 1009555, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775353802, "uuid": "7db97aed-7d20-4938-a12e-d51baa4835cf", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353802, "uuid": "c3aa1315-5a58-44bf-8ac2-a4104b7e9a3c", "value": "373ed7aa5c726d29483a9d4aee692dbb_sign_sign.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99204719-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354591, "uuid": "1590f956-552c-4f1a-8a05-ee3a49dfd834", "comment": "Malware payload", "value": "04869baf086752d986de0588fefd9177", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354591, "uuid": "264ca57a-2461-4439-aa8a-47b3bf934b0d", "comment": "Malware payload", "value": "c62c432e91cf4ab6f07c058c5dd6762224a6834ddf69e65618d7d50e1c06f57e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354591, "uuid": "93880b15-99e1-4422-ad70-ea0391f80243", "comment": "Malware payload", "value": "aa8dac52c9890eb1e5ef9195d488f6161e4c6647", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354591, "uuid": "85a1bf58-5506-49e6-b4d5-10132007be4e", "comment": "Malware payload", "value": "66b18dbf4ecce85b5314419d4753a351563381a9366745d200d1a7514423181a755f8d152f3bf0ca5be6dd60c7665260", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354591, "uuid": "f98b68fb-1cd6-4b26-874e-89b4f13d9261", "value": "T135F44C07FF506FABC45FCD31892EC31601EDD88396D2662A71BC8B8CBA593560AD3598", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354591, "uuid": "099fea42-ee2f-44f8-ae85-d03c6e269865", "value": "12288:d69q34/Ki30KwrIRwnwJyjpHKfpfKVnVbcuZQKYvSkZxRz3fupamfreIkS+6FtVV:M/X0KcwJFf4NVrDKzyPR46tVxb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354591, "uuid": "059020fe-9e48-4be8-bfce-e06983b053f7", "value": 762432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354591, "uuid": "6e8c23bf-50ca-4539-aeee-052a3d4af758", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354591, "uuid": "eacb57e1-3540-43e5-89ed-9329058ce1b8", "value": "librarymipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "029dcfaf-30c7-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775376672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376672, "uuid": "7f36165c-ebec-4a6b-93ac-77f8c38e332c", "comment": "Malware payload (Mirai)", "value": "9ccdd6054877c59a55301924adf918e3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376672, "uuid": "3a622b8e-b952-4cb0-b5b9-0aa6fe31c67e", "comment": "Malware payload (Mirai)", "value": "c65b5482651c79b1a4b6d0e965042f59c59d3948cbca62a5fd7506b77ae98440", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376672, "uuid": "757dce61-0a3c-440f-bdb7-9e2be3ac9728", "comment": "Malware payload (Mirai)", "value": "affb6ce758347cbb67bca173c7fbf49848fa5a9d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376672, "uuid": "a3f2d301-9e37-458e-8621-918da1fd2ed0", "comment": "Malware payload (Mirai)", "value": "1e79c28b2bc9a9ed71787eeb6242b3910d9d7aca86ab5d0028828f6f4bbe63728c134a54a659ba6b2a5ef607ce926a7b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376672, "uuid": "c0c67db7-ab6c-41be-be48-c7805a9acd1a", "value": "T1EA935D52B70C0A43E1571DF02A3F17D1C3AA66E120E8FA897A0EDE4996B2D325547ECD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376672, "uuid": "562afdcb-fea1-4efb-b149-ec3a3388ccda", "value": "1536:p47fmF4w9uitC22zR9UHrhFr0R3GBtCTG6vC7fJH/wGSMe0l1WrqV4COFkJF:ouhCTGmCuGSMnWryHF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775376672, "uuid": "8a174563-e66c-479d-ab06-086c1e8b892b", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775376672, "uuid": "9c225115-f88f-407f-bc9c-8fe5cdaeebc5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376672, "uuid": "26b3060c-1c0b-4435-b556-30b017ed9fee", "value": "titanjr.ppc440", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98925aa2-30a2-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775361032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361032, "uuid": "f86b509a-a977-478a-a78e-dc5feb250f28", "comment": "Malware payload (Mirai)", "value": "ead946b8d243de7296c3214db29ce689", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361032, "uuid": "2e2f52fb-abec-4075-afa5-d34ba0ffe2a2", "comment": "Malware payload (Mirai)", "value": "c6f3572fb3b09ac52f2412b661cce6e0b3be48ff3831eb9ffac788ea8a149129", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361032, "uuid": "bcac6363-9643-42ba-83ad-b7a0ed33f0e0", "comment": "Malware payload (Mirai)", "value": "35c6a6a0f32404b3c59e875c93757b1ff5a8b0da", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361032, "uuid": "cf68bb5b-86a6-47ee-a3dd-a0605d48c127", "comment": "Malware payload (Mirai)", "value": "db2e1856afee7328ce2117fecf5cd1503abd77e6c4db1d4163b692f1b42b66c8e18dfe3cc321f081d516aa03b0849729", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361032, "uuid": "4a320278-9f8b-434d-856d-5a99921b857e", "value": "T136230271890E9EB124303C32DBD9A393B6E129B1C6673013D6180B386FB57231E57E4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361032, "uuid": "af501e06-ec6f-4be4-ac03-70473822940d", "value": "768:D/TYCoIxdEk+AxoTZAZHFeq8b3y9q3UELbUXfi6nVMQHI4vcGpvS:DECFd+A6YHAxnLRQZS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775361032, "uuid": "34d37d6d-0ea1-4bd6-a6a5-02c740bfc947", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775361032, "uuid": "d31eff55-57e5-43eb-9b9f-69f5335caff2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361032, "uuid": "8b9745b2-b330-4e52-a78b-bbcd2b0d555c", "value": "boatnet.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ba3bbdb-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354541, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354541, "uuid": "af2659fb-9832-492d-b811-cd557bc73810", "comment": "Malware payload", "value": "abe9bcc47d3645f1d7e3d8e7d8ebae19", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354541, "uuid": "04b4aab7-7cd2-44fd-a645-cd3933bbd039", "comment": "Malware payload", "value": "c84ce7e7c8c4de561ae99a875c42d81674532ed34dde6078e0c599fdda5cf5ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354541, "uuid": "f6c08071-4cc6-44ed-a0a2-2d0c345f889a", "comment": "Malware payload", "value": "6e7fb3d9cda39b22440aff241de0e3592fbc83ec", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354541, "uuid": "f3bd23f7-2442-4c7c-a42d-f39ec22aee3c", "comment": "Malware payload", "value": "8fdab3ef773763d258cdfb16a5709071835c837646026cf8d9529f7d2e43f0e1cf96408b70954ebdf55ebcac585fad71", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354541, "uuid": "0d8c3a13-4461-4eb7-9398-46ca79cb8da5", "value": "T1A8D4AD29F9047B07C89B8274848FE024736BB2845752330A3846E6797E83B7DAF5D7D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354541, "uuid": "ee468eda-180b-4bea-8720-3754b7dd75da", "value": "12288:WW6M+ANTFg8OqwCbgmGJdvcxLdmrSkGDw5np43NmejMJZlS:B6M+A9Fg8wCbgZd09deSkGv5j4Zl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354541, "uuid": "13864b9f-dadf-4e58-b4a4-4f33d465fe25", "value": 654048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354541, "uuid": "cb9a1bd5-ed44-4bdf-939b-68cf31428d34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354541, "uuid": "971750e9-b16a-45ad-8a48-9e6d97b57f07", "value": "tciriscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7b9988e-30f2-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775395552, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395552, "uuid": "64e7742b-5bb2-43c1-b231-b8000e6dcb53", "comment": "Malware payload", "value": "28bf4de29e81826906b0e595aa1d925f", "object_relation": "md5", "Tag": [ { "name": "Aotera", "colour": "#499F8C", "exportable": true, "hide_tag": false }, { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "injector", "colour": "#F39A69", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395552, "uuid": "838dcd72-16f8-4e9b-869c-986119a53d9c", "comment": "Malware payload", "value": "c87ac49c9420b170a3998c39cffb00b63bff666b97fabd0807ee031c52165a96", "object_relation": "sha256", "Tag": [ { "name": "Aotera", "colour": "#499F8C", "exportable": true, "hide_tag": false }, { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "injector", "colour": "#F39A69", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395552, "uuid": "da64a0b5-f21d-46af-9d2a-870d03effe6e", "comment": "Malware payload", "value": "99eff19cb463e2e226a012640020e530e35d5bbe", "object_relation": "sha1", "Tag": [ { "name": "Aotera", "colour": "#499F8C", "exportable": true, "hide_tag": false }, { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "injector", "colour": "#F39A69", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395552, "uuid": "a5b5879f-2129-40f2-ac5c-26f6e36658de", "comment": "Malware payload", "value": "85dce63900aaf52bfd328db0e1bbf0de1e43b371fd0110df700e1ddb794e934338fdc6bc962b149a42658714a7884cd3", "object_relation": "sha3-384", "Tag": [ { "name": "Aotera", "colour": "#499F8C", "exportable": true, "hide_tag": false }, { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "injector", "colour": "#F39A69", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395552, "uuid": "72d6ebeb-f998-47c6-9350-b03effccd718", "value": "T1D3D5BF45B3C86AE9D416D9388714E232D1BEB8624B62D0CF1A96D7CA1FB7D514F3EB00", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395552, "uuid": "5cd2a3e6-9493-45fb-9cec-25d2325e18bc", "value": "6b3910de721671fc5e15083dce74da88", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395552, "uuid": "b885e6d5-5612-4161-a160-0e3d5de65f33", "value": "49152:/0MmXRdU5iquGvMf7N/62S1olbPQTUdg92qj9bSuRV7TrIpx7AMPq/GKynIL+iID:uDM2xPQTUU2qj9bSuRV7TrIpx7AMPq/+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775395552, "uuid": "48920e22-5ea6-4999-a217-6ac7e4b0ecfe", "value": 3009024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775395552, "uuid": "5983abf6-c66e-4165-ae61-5adf52387ca6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395552, "uuid": "4c93d1fc-49b0-4b67-a1de-36deb05ae392", "value": "libwinpthread-1.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e72415f5-3082-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775347420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347420, "uuid": "cbd6c91f-6b68-4000-bd24-268500f00695", "comment": "Malware payload (Mirai)", "value": "3ff168ce53cdf05f716bc6b0f003086a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347420, "uuid": "db92946e-e74b-4432-ad5c-c6de48a31367", "comment": "Malware payload (Mirai)", "value": "c8afd5582198ec3fb6d718310e52b08e2b8d3b0a5d8b76995d691928fcd9dc88", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347420, "uuid": "2dd54cc9-5563-481b-a5a4-f9a415c4a870", "comment": "Malware payload (Mirai)", "value": "6d81889b70da5b7b22c1df74b724cfcb5ce27729", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347420, "uuid": "6fd6f921-6dfb-4d83-92f1-782bfd860be9", "comment": "Malware payload (Mirai)", "value": "cc89588934a234f187070569b61e5cb809e43822283af53e884284e8f78f0b6c882b76d00a91f1461421155b83b38a58", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347420, "uuid": "85231ab1-ca5b-4b0b-adf0-dbc8e10ae16a", "value": "T1F6A2D885FA959A03C5C56337FA0E47DE3B29174CF2FE77039E1A2F65234B92A0E25052", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347420, "uuid": "fc41671d-6f9c-4835-bb45-d36e1a753d0c", "value": "384:BkA98WNGhnM2bouBKezSIHkobhVHFWBaa8s4lFxIt7nDAYFx4ex:BJKTBKezSIEwzih8sz/u4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775347420, "uuid": "b36c4181-95a1-4b72-88de-b279b3428526", "value": 22032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775347420, "uuid": "7648c2ca-54ba-4709-8586-8ad83c9845b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347420, "uuid": "852f107c-c943-4cff-8db2-5dd9389689f6", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e038b5fd-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354710, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354710, "uuid": "9d23e390-dcc5-4838-8be8-67bf87af6350", "comment": "Malware payload", "value": "813797cb98a40e92b4e977e3c5dbac79", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354710, "uuid": "72c67a81-d70b-4740-a148-da4f8f46a86c", "comment": "Malware payload", "value": "c9672964fb58f8cfecc2114490af228fbadf2e90dfcf0ff60d92847901679305", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354710, "uuid": "f70f04b7-20a4-4099-b465-46c88e77d4e9", "comment": "Malware payload", "value": "336ab5dcd3f83ed8e843ff09817875237bbfba0a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354710, "uuid": "80758508-297a-4c11-ba75-9428cf93a1dd", "comment": "Malware payload", "value": "cb977be8dcbfab2d6729539fe682267ca037b8c1c06f6fb599e7397290799bb00e281357865eae1f5d98786886ee092c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354710, "uuid": "a1303b28-e6b5-49fa-80a0-20ddab4fd849", "value": "T1E8F46C5BFD6E3C43E2D6D37E9B4A83B1622BB190C32350937581432C94C6AADCFB1695", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354710, "uuid": "ae47a07f-bb8a-4398-b1b7-ecda9f10f0d8", "value": "12288:dqqvNgOdTQtpcdw5vIby6BDjYSMtcYWw5l9om9jiNn9E:UkQpvvJwDMS5mjGn9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354710, "uuid": "c2703af3-b606-49b2-b8e0-2043188004f9", "value": 788416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354710, "uuid": "c7d3dd84-d04f-4d4d-8a6a-55b20f495996", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354710, "uuid": "fd7ff6f3-a24c-45c6-b9a6-3769930c1edc", "value": "tciaarch64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0cf64ef9-3094-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354785, "uuid": "445935bf-bb6e-4089-9110-6af3049c288c", "comment": "Malware payload", "value": "64d59b167a82617232327b660592f432", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354785, "uuid": "10aa06d9-69c3-4a19-87a3-483be5862753", "comment": "Malware payload", "value": "cb4a85b8268ad8980f419b8804abcacce635f2c81abee0a8991b658bd04b6856", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354785, "uuid": "470a8e4e-388f-4914-b5f6-bf0171c07dd9", "comment": "Malware payload", "value": "c9ca8e5b927f66d099d3494bc603037e3684181a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354785, "uuid": "23556aa1-aeca-46f7-b2fa-546be1f4654c", "comment": "Malware payload", "value": "0174901a1e4ce394a5cf5a1815419f262edbbc0676eb41290ee152ff24a95cff4f63e72e24f0b8e1a9fcf9c38dfbae15", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354785, "uuid": "6bc1cd6f-95a0-4560-9f59-7cae2ab7ce81", "value": "T1D4F46C227711DFA1E355D63008F3C6905AF621A206E2548A72BDC7287E11A2D6D6FFFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354785, "uuid": "55b0758c-9dfd-407d-a822-abbdd721a58d", "value": "12288:QW0IPvfiquLeBJ4O0GL2g6jH1Yj89+gpgVyb+SRblc2ThV+jve:b0Ifiw4O0GLh6RYjiH+GiYhV+jm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354785, "uuid": "3a23db33-d2bd-4808-8669-51828d0902dc", "value": 762496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354785, "uuid": "b0a3c73f-fbf2-4d6a-bebd-114fe302df34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354785, "uuid": "6f26599e-47c1-4b3c-ab42-ca7220260aa4", "value": "siimips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c19a5894-309c-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775358524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775358524, "uuid": "41470fbb-752d-4200-b118-f175a6900d94", "comment": "Malware payload", "value": "c00e97019aab4cf08cbeade523600da7", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775358524, "uuid": "7dd0c238-b5cd-456d-b211-a5e5d993347c", "comment": "Malware payload", "value": "cb93d5c96ae3e0b358ac2a0c57008a5655a049ac3bc5543f814af5157e2f27de", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775358524, "uuid": "8922ab7e-86dd-4cf7-96f2-2e2d43fcb7b3", "comment": "Malware payload", "value": "c090125fa8b3189ed4f42a00c29a4b4e1d04eddc", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775358524, "uuid": "a98891fb-b87d-4fd4-9af7-0e94527f15f6", "comment": "Malware payload", "value": "cb6fb0d98cbe8e156c84ab8b5060dbbdceb0ef88841671bf5058a62392830da76451b2918838467d5ca5f537687277e2", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775358524, "uuid": "3fee41f7-44ca-4aee-8929-b59afbdef885", "value": "T10AB3028B9E08E836C86E4C3DD4B8E13AFFB7571298F1974B0F11A2516DA18724EE141E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775358524, "uuid": "77cb3924-4dc8-41c6-8f93-e41b9c8481cc", "value": "1536:7y2UhawK1UwBx84E4uAXQlcWrZvS00eV688DANSct9eIdmeEGMGSwwsiaR:ZUhaQwBMAghNZV68C69/ge1+sis", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775358524, "uuid": "3bb8aba5-0d79-47e4-bc99-de4d55db3aef", "value": 111285, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775358524, "uuid": "d5023025-7ebc-4c77-a9a2-586561a7befc", "value": "application/java-archive", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775358524, "uuid": "8c58fb6b-11af-4d2c-a8ac-296bd7a3c33b", "value": "hack Block Blast.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2049c3f2-3119-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775411941, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411941, "uuid": "8ba194ba-b8b9-4ec4-9bc8-566940f93273", "comment": "Malware payload (Mirai)", "value": "431b64ab4bc92a0e8c87af29692b8d3b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411941, "uuid": "3ed83782-cd3e-48cd-8ee6-6efe5e42a1f7", "comment": "Malware payload (Mirai)", "value": "cbe459c2ab4f1b72f6764689103495cfd7ba7cbd8eb403e50e22b0e965e3cc20", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411941, "uuid": "aecf88c6-c20f-4068-86f3-5f821ef88843", "comment": "Malware payload (Mirai)", "value": "5948cf916fbe2193080fe82a44327ae4f7cbe0c1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411941, "uuid": "b16c9c56-f3a3-458c-b051-0214f6934964", "comment": "Malware payload (Mirai)", "value": "5832f3640d4c6b9dfff9bf4e4671c6f20b7da131cf11d139e55f2bbbd47794cce496a2b5f80f43e544112ef8b8c56d22", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411941, "uuid": "d7605850-11d8-4919-835d-0e54563077d6", "value": "T14A44F8066F910FF7C8AFDF3702EB0A11248DE41727A62B367638E978B60A54E55D3C64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411941, "uuid": "fbd95b68-8173-40e4-a75f-933c494ca7a6", "value": "6144:i2RkzMY51LV9kpBw3AOA2sK6yB1hWF5NqohWUkzn7MwA0:im6MYvVipAgyB1hWF5NqohWUkzn7MwA0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775411941, "uuid": "34a190f3-0a84-4636-be5f-15e6a9fdb8e6", "value": 261444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775411941, "uuid": "c05b1767-435c-4984-beda-ee3bc15282e0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411941, "uuid": "757211bc-f21b-4e76-946e-ac6d4265169d", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "869269b5-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354560, "uuid": "615bdd41-9276-40d3-b99f-a64c1a9d6c60", "comment": "Malware payload", "value": "ac58b4d9aa26b023447bc1f7ebadbf17", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354560, "uuid": "bec74978-0357-43ba-a305-5b98633de063", "comment": "Malware payload", "value": "cbf434c6d76326d1c6adf9b6042f2fbb55b19de1913034d7ff63cb36bed00b8f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354560, "uuid": "04a61e55-91e3-45b0-87bc-41db9d3b5fc3", "comment": "Malware payload", "value": "08de7be51fdf326a5194876961cbeb33edd0aa81", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354560, "uuid": "7be2e791-d85f-4c8f-bf5d-72701c326c77", "comment": "Malware payload", "value": "f6b1f06aa24c3edb8ab40d11938af08174574f1471fcdcd623037b1fa470fa43aad911ed31917e6f98cbc6a4eea63942", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354560, "uuid": "d2c4045d-e8e3-4e55-af60-f06bc72749ea", "value": "T1C3B50957BCD10946C4E93677ACBE81C833664EB99B86631B5D09FE3C3ABE1D90A34305", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354560, "uuid": "51591fcb-bdca-4c27-afd3-859ec6470525", "value": "24576:5XC32LyNV132EisUKemV04mdRut7gmjDoCsW3xyZHzQCQyPCwgsv02dW5jX3OE83:5Hqt5yZU+tG3RdzQ7x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354560, "uuid": "d99550e9-98e9-4aea-9d75-9c26500d1955", "value": 2293922, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354560, "uuid": "19a1f953-4610-4de8-b8f8-3db5a6dd531a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354560, "uuid": "6a6add6a-90e6-4163-bd42-23ce4d1d614d", "value": "mtdarmv7l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c26e127a-3098-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775356808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356808, "uuid": "f002e596-0d13-4908-b917-8ac76e11e689", "comment": "Malware payload (Mirai)", "value": "a39fadd87e9382199e7b7b663d52ab06", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356808, "uuid": "cb621bde-52d3-4ba3-b6e4-4dd128877391", "comment": "Malware payload (Mirai)", "value": "cd1d12ec166c3f072cf53ac19acf355086a17d78bb03021aaf480ca4d9a2e035", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356808, "uuid": "fd45f4e0-3bc2-4b39-b8a9-2ab702837367", "comment": "Malware payload (Mirai)", "value": "cbb213259ba214651c39cf7e26bd0649e5bb826f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356808, "uuid": "757e155b-560b-4db7-8afa-4209047d4043", "comment": "Malware payload (Mirai)", "value": "3430e992241a0c5fa6067e61167868879dd99187de8b5c7195f38c8b393c72a802b45546a5c88e846872e521478fd811", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356808, "uuid": "19ce39b4-0c0f-4682-a7e1-81a589748df6", "value": "T19FF22C52321C0A5BC46766742A3F16E093BFBD9130E8F688654F9B9A8535E3711C2FCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356808, "uuid": "386fff03-6c07-4762-9b50-8e8e0c1fa510", "value": "768:YfWE1T/fnRRS1RD3IUQ8holfrjzhtNDmkN:9EZ/Pg9Iv8yzhtNhN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775356808, "uuid": "afa070b0-691b-4fd0-8bcf-52af141a286a", "value": 36916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775356808, "uuid": "3a7f773d-2d74-49fc-891b-21fe54b3e223", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356808, "uuid": "227daa95-eb1d-49c4-ae00-034d017e2ff8", "value": "pppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "946fcb44-30fd-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775400110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775400110, "uuid": "77151e24-2719-490b-9b58-25a5d58e1a40", "comment": "Malware payload (Mirai)", "value": "b98d8f38613aff801fc5fa48e287227a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775400110, "uuid": "45a56484-fd11-4e9c-8bfb-9f802aa08eaa", "comment": "Malware payload (Mirai)", "value": "cd343b330f376d79123903ecba44dee3dfdc10fff743a5ce5fc34e72b2bfc7e6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775400110, "uuid": "0297e53f-a64e-4fd5-89fc-ee31599f69e8", "comment": "Malware payload (Mirai)", "value": "c1f73f7dfb2d5e383ff70051f70b4edbd218c5ea", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775400110, "uuid": "89e5d5ab-0a0d-4215-9b66-ee5b887bf512", "comment": "Malware payload (Mirai)", "value": "9dec8f68364b524489ec191e35d96763104f27d963a9b060855b217587a360eab523d492c797e6d780dc6669c9203f1a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775400110, "uuid": "c601f4d9-5c95-42f6-a197-5c1c192052a7", "value": "T10804C616AF650EFBDCABDD3706E9070539CC941B22A43B353674D528F54B90B4AE3CA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775400110, "uuid": "ee0f02d2-094d-4db5-b74a-1590674b107c", "value": "1536:j7gUtnKni/FWwJNOw2++BN4WuFw7g06j+jG6dFg9ExIZ7dWylon5/TSn2D/5RLSQ:vgUtB/MvLyWu7WFtI1e5/w2H4OC2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775400110, "uuid": "09396751-b5a5-454c-baec-2424ecb48b12", "value": 186028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775400110, "uuid": "78cfcff5-3a33-4f67-b21e-b33a2255ec28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775400110, "uuid": "efef5d79-3bd6-45fd-ad8d-cdbffcda98e8", "value": "main_mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76d3ee8e-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354533, "uuid": "38e2cc74-6e92-4e8c-96f3-cb67003c48ad", "comment": "Malware payload", "value": "48ace58e5992e0cda4df94aae3003f49", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354533, "uuid": "b40ba4b7-7284-4376-9d1f-184b78b54cdc", "comment": "Malware payload", "value": "ce43747daeb30596a6be213f61e1b4e1a4641ac2f7a42074591f661114b8dfa1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354533, "uuid": "e5f30a6d-f8ef-41b4-a446-ae8ea397332d", "comment": "Malware payload", "value": "18061f8e212c2f4ba6d312af0974ccf66dcb3697", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354533, "uuid": "599403a0-3cb3-4c3c-abd1-46a37c2d1a9d", "comment": "Malware payload", "value": "07739eaa76208b3a7bc5a8de232a8ef3517a0b5777ccad959680dc96e842b31869103f07a3432e990e4a3fa16166477c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354533, "uuid": "58a41306-26ba-49b3-aa5f-c84dc15832fe", "value": "T18DD43916F8809F62C5D1257AF65F82A8331747B8C3DB72068A199B343BD786F4F3A641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354533, "uuid": "dc4e4aaf-ec69-4707-ad03-ffa19117134e", "value": "12288:dVfCgex65bOynTBmDxBRYSOgpg+hIuleDHcKs:ffCgeoIyBIxByEJle7cK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354533, "uuid": "e1f8ba8c-5104-4c66-86f4-a3ccb5760ee9", "value": 640464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354533, "uuid": "f44cf2b9-b8c5-460e-a491-b215fbffed8b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354533, "uuid": "6f2ad8af-540b-434e-a6f9-e8a6adddb9d4", "value": "ssynarmv6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c49f49a-3137-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775424953, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424953, "uuid": "953f6e32-0e2e-467e-a22a-8e712a337692", "comment": "Malware payload (SalatStealer)", "value": "29ca45c74d72143fbe3a6b7e39b4cdc6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424953, "uuid": "46b4cdf1-e88c-4009-b7f4-518a4121f5e0", "comment": "Malware payload (SalatStealer)", "value": "ce4d18bb220153cde658a1e0926fd24bc8c2428003d27d1c27c031639ced6661", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424953, "uuid": "fda35b39-5947-4974-92a9-110943761b88", "comment": "Malware payload (SalatStealer)", "value": "83a30085ee718d0fade9dd231fffc3fa0443bc34", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424953, "uuid": "8adf3133-9f0e-4b97-b851-c19e39b46c1c", "comment": "Malware payload (SalatStealer)", "value": "c492087a29e54134dc7fd1ea356b1dad27731accb752e44c6ed19c5566a930055be77faf9b7be7146cffa405e62abc3c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424953, "uuid": "c63470cc-9a1b-42e6-ab99-d30dcc17803d", "value": "T1B0C65B51FA8B59F6E9035831419BB23F63305D048B28DBD7FB187A2EFC77691187A608", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424953, "uuid": "d5528aab-bd4b-4fe1-b5bd-a2fb6fc6f192", "value": "49152:oOkD10SWqIcpq8bYsWQ5Wc7NuUNzDAe4V7xaNgk2vToShjWN1I5AL97loCY0Lnid:XI10S1qnwhmK4EYki4Fhk/fl4L3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775424953, "uuid": "267db6ff-289e-4d35-afbd-e1a6aebed327", "value": 12046336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775424953, "uuid": "09dd534d-0fbc-4787-b227-73cf829fd190", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424953, "uuid": "37531d13-899a-4c40-8659-4da77c261544", "value": "ce4d18bb220153cde658a1e0926fd24bc8c2428003d27d1c27c031639ced6661.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78d396bf-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354537, "uuid": "7f618965-a49c-4909-84d3-5809a2db1894", "comment": "Malware payload", "value": "716a0ec0cc0353610c5344ad34788e8a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354537, "uuid": "b7d414f8-c7bb-4196-a2ad-9a7e50cb23d8", "comment": "Malware payload", "value": "cfdc40f3c1206a846eae6e48f49df6e56392c552a59cc6095fc6e5166fb594bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354537, "uuid": "c4ca56bc-a474-47aa-b53e-c0d2cf0cf1dc", "comment": "Malware payload", "value": "965fbca1afdd519fda2282839d44a92dfa12b0d1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354537, "uuid": "2adea5ba-d714-4753-8543-9d480043b85b", "comment": "Malware payload", "value": "3df82f1264e6a4e1ef47b4471627db573243713bb253e2da31a784aecb0a2aaa7006334abf6d2920ccf4d0d685569e84", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354537, "uuid": "c7ef7aa2-583e-493e-979a-dfb5be3e0580", "value": "T126F46B5BFD6E3C43E2D6D37E9B4A83B0622BB190C32350937581432C95C6AADCFB1695", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354537, "uuid": "2d35c2a1-3af7-4cf6-a76d-7b5057e46539", "value": "12288:7LCvegV8B/XLP5lJv1XyxZc58gaKKFW5w50T5zzuDtGwx91:/TzPBlybcd+W3UYwx9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354537, "uuid": "3c32c2b4-37c0-470d-94c1-a4ed7fcc0531", "value": 787624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354537, "uuid": "5ddd33d4-ad54-4f35-9101-8255fac36adf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354537, "uuid": "01c40ada-6f3b-4cd3-8441-f1273094f87e", "value": "siiaarch64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a71d157d-3125-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775417321, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775417321, "uuid": "ccadb6d2-c795-4b68-82d5-329bbb8f7a93", "comment": "Malware payload (Mirai)", "value": "75a080186e950aa3a9a9bec234af61b4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775417321, "uuid": "3cfc68d4-76ff-4dac-a5e6-95b57459fd89", "comment": "Malware payload (Mirai)", "value": "d0128b85cfeddde1460870350f0ed3c820672177b890cf3fa21e6ee74e5727fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775417321, "uuid": "1958158f-515f-4a2d-b54b-e99f8c6523a1", "comment": "Malware payload (Mirai)", "value": "e98e0be6c1132167bcbff3be459490e3e46b82c9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775417321, "uuid": "1a77ca3c-8671-4985-a9fd-ae08f80fdb72", "comment": "Malware payload (Mirai)", "value": "302a4f5d61d19b633dc7b03cf77aae6ef7a464d274e3a5d5102188ce2b2a02c82b815f6e30fe88b3b0c66ec352d2504f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775417321, "uuid": "dd1b0e14-f9be-47c7-8526-59134f7da46b", "value": "T1DD43018140DE4A02CBBB2077A2CFDA078982868616C207DDBFE8791468CEB757757797", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775417321, "uuid": "fd3cd9a0-582c-4708-8dcf-3b974cedeae0", "value": "1536:L/2gJkgfeSjUUmZ9rqzG/u486qytSRO6/Kv+BUnouy8HyQ:CEJNs9+zCNjtiJM+BkoutP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775417321, "uuid": "5f253731-f3ca-4382-aa33-d5a9e846e719", "value": 60020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775417321, "uuid": "c5e934f4-7a5a-46c4-8fd1-5924681e2027", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775417321, "uuid": "e3f882c5-d9c9-473e-be13-6ce2db7bf76a", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86183a9c-30bf-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775373457, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373457, "uuid": "db826a2a-88e4-476f-9511-5e3241d57595", "comment": "Malware payload (Mirai)", "value": "e45c2962eef05016e18da7ab4a8d2e47", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373457, "uuid": "ba1c6b93-b426-467b-b845-e4b498e5fc57", "comment": "Malware payload (Mirai)", "value": "d05fce1f1f8766e748257480a472d1cdabc039b578e86d1a381b590b82c6c01b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373457, "uuid": "c1390900-5658-44cb-b3f8-5cb019784e48", "comment": "Malware payload (Mirai)", "value": "a0844ae2e41abd6d9ae73899ca41b2a0038ebf84", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373457, "uuid": "276a959d-205c-4f3f-a3ab-b0397bf0ff9c", "comment": "Malware payload (Mirai)", "value": "48dddcbfc54815679f0cfea5fe49e8c27b3ce79d6166dd99d22857bbbb9bbecadc1bee6cc2adbe6932d08f5a2262d4ac", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373457, "uuid": "3b02085b-8622-45e6-8073-7b499cbb5b3d", "value": "T191042B45EA404B13C0D627B9F6DF42453323EB9497EB73069528AFB43F8679E4F22A05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373457, "uuid": "dd666c67-c2d2-42fb-8e32-6cff8ad13865", "value": "3072:cYVektU8fiO/M03/UJxtzEN7zfadePwbTzDYywooZM/RzMH9W:cKektUvO/NPUJxtzEVfa5bTzDd9sM/Rt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775373457, "uuid": "6ac692d8-f30e-495d-8e9e-0b3ed1df51d9", "value": 175632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775373457, "uuid": "01d64368-d4f5-4a51-8071-fa5312071d96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373457, "uuid": "3d0b2e25-6f84-4ac0-bbcb-48cecae0cc9d", "value": "main_arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c668ee13-3098-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775356814, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356814, "uuid": "aa5290e4-c7e6-49d7-af8d-94fd2f259f62", "comment": "Malware payload (Mirai)", "value": "ee0161d1ac78da6d4cf0e0b67449fbeb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356814, "uuid": "cae9680b-a3b9-4106-97eb-bb68e1aefdb4", "comment": "Malware payload (Mirai)", "value": "d0671e1ab9270c34cefbf96a2d8a7b61e37db4e020d4643c375daef7a06eb07e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356814, "uuid": "a8bc419c-4659-45fd-a8c4-c4c1a2fb7d37", "comment": "Malware payload (Mirai)", "value": "fda843b4faa1bcb521580d1764ea6943f29d00e1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775356814, "uuid": "d981afe3-4fed-461f-a60f-18418f10d7a8", "comment": "Malware payload (Mirai)", "value": "a53a33915a8e97d582e5e1b5cc56806ded046d48e6591a8d772c93219e2b95471e528e6fc47a76e6aaf8d1a96d4c2ed1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356814, "uuid": "ed8b1244-d5f7-4919-9d5c-74cc82ff0009", "value": "T17433F886B8814A12C5D4137EFA2D118E3323276CE3DFB2129D116F64778A97F0D7BA16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356814, "uuid": "a627d97f-acad-4ead-b6e9-368bc71e50b1", "value": "768:dtnysh8O0eElyJ5a3DciMcF+FQ9S5FyQ8ZboxGqnTUyUBfimkZbBIIuAgqiUpvei:dtnys30w5a6Q3ZboxGqwyMzXI7iUp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775356814, "uuid": "14d7fb03-c542-4045-aaf1-b7f06741c42f", "value": 50480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775356814, "uuid": "17dfe4fa-4efe-4946-b7dc-a37091c28784", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775356814, "uuid": "c187ed8e-0327-4656-a6d6-b2460b9d3d74", "value": "parm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b64ed1a8-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354640, "uuid": "5cd85fac-321c-4147-800d-1a2aa612e95b", "comment": "Malware payload", "value": "00b37a4603a647b64932c7c089a13bcc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354640, "uuid": "8e9a884e-67bc-4847-8316-ad6803a3365d", "comment": "Malware payload", "value": "d15cec8fbc520f3c8782432daeca9377fc358eacd554fd17216097dcde1b5822", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354640, "uuid": "f146edce-c2f2-4006-9108-8e49610c3d22", "comment": "Malware payload", "value": "1400e464d7a68d73ac366b17f49b6a8d2f44e5cf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354640, "uuid": "6117cfd6-29e2-46ba-9ad1-083ac5a4d127", "comment": "Malware payload", "value": "c153dab86c726d28287f4f8fae5f1a27942bf234347c6d53cfd4d9b33070f4bf050cab1533e05bec0d6ded45a7985d14", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354640, "uuid": "5e635a7a-86a1-40b6-a256-88f1a05179b4", "value": "T1A3D49C29F8047B07C89B5274808FE428736BB285175337062846EA7D7D83ABDAF5D3D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354640, "uuid": "6e6698ed-dd25-4ee6-afe1-ef7188c776fb", "value": "12288:TxXX+qrUkSEEDebJU/6Xlinc+B3NpjyT3wrw5spcIm6jrHZlF:9XX+yUbfebJmGiZpN83w6SjDZl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354640, "uuid": "6f46f97e-2358-44a7-befb-2dc017bfafa1", "value": 654456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354640, "uuid": "3e28b2be-792d-41dd-901f-df8747c32391", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354640, "uuid": "ffdad43d-8417-41f0-867b-857d3dd5be7a", "value": "siackriscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af0a6717-3114-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775410033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775410033, "uuid": "ab9c507a-79af-406a-a7d7-5f5a7396da1b", "comment": "Malware payload", "value": "f6e1b56d2fe4c7b659a4f6cafd4b6743", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775410033, "uuid": "87b18cd8-3094-4f5b-aef6-93eef7600b8e", "comment": "Malware payload", "value": "d2af674ac46b114d146e838826322f6c7b301133327a8845722bbaea4de346cb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775410033, "uuid": "683f782e-d45f-4441-80e4-cd8c395c7c32", "comment": "Malware payload", "value": "c70478316e68292c02e2aecca028be69da21b6a4", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775410033, "uuid": "9f15707a-e053-49a2-9c3b-eb1c042f9e2d", "comment": "Malware payload", "value": "52d67bdd8640c1b7c8c4b7dbc63675fd0b4361f865071bbe8da8885be8b030a6123ea73ee1c46956a8c3eb53ab41789e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775410033, "uuid": "bf085d86-59da-4dd6-a440-679a32c5f931", "value": "T130B362439AEC3CCBC038A3B0777B93D4D72EED99A1A2C14E96D00295D8BD51779227D8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775410033, "uuid": "bd6e7aa7-5854-4b14-b7d5-b2fed7ea6342", "value": "557de0f553534ebd0287b4b9db77a76f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775410033, "uuid": "cbda0355-16f4-4cb8-a447-819d12f5a979", "value": "384:h56yeH2d8nNg3Y4IRBPJrarsfw2t4N99Sjvb99Sjvh:z3iRhJrM+wpv9Sbh9Sb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775410033, "uuid": "5104edf9-3e26-4795-a1be-8c24032da9ad", "value": 113152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775410033, "uuid": "3277d94b-c4de-44c4-8ba3-592995274499", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775410033, "uuid": "1db6802b-4903-4d2b-a8e8-fc171fbc8c05", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e33e550a-30fb-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775399383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399383, "uuid": "53ba186e-80ac-4b0b-838c-34a9c9721b98", "comment": "Malware payload", "value": "13adf43aa05381961caab5af69c3f262", "object_relation": "md5", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399383, "uuid": "1c2eba54-944e-49f5-9a6a-824ebac6a21f", "comment": "Malware payload", "value": "d3d00ec74e4d7bdffaf17b50c3593dfe711950b5904911b7cd60d100230e0331", "object_relation": "sha256", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399383, "uuid": "04fb2e7c-dc54-4be4-b360-8fc5b3521799", "comment": "Malware payload", "value": "0acd81176f50083447a052e83a9c4d9d6c756967", "object_relation": "sha1", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775399383, "uuid": "f9ec55ca-580e-4a0f-9fde-09b985e978bf", "comment": "Malware payload", "value": "c0336d63120dabcbfafffebe54f45188545d2163726189ed755915909500feac2305cbf287d2d211dcb677f73c8d5b44", "object_relation": "sha3-384", "Tag": [ { "name": "de-pumped", "colour": "#4EDBFA", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399383, "uuid": "1c3e85e3-5399-41c4-8a63-d0c3ac5cbc63", "value": "T126187D13B3A705D5E8FBDA7096E652236932BC066F3095DF324C07262F73AE05A76B11", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399383, "uuid": "008ed3be-a2ba-4fe4-a2e0-91557e10c185", "value": "359e649ab913e838011b9d61180c7f7f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399383, "uuid": "2cee519a-6eec-493d-8e37-c97775ab4d38", "value": "786432:U4WW714JtHT4bC6UvH2zMbUSpgPVlcmp:U4Wu4JtHT+nzmab", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775399383, "uuid": "59ca7212-e52a-4337-bae7-fb4db797f86a", "value": 89353728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775399383, "uuid": "dbacf4ba-45f1-412f-a1c8-7820e1bccb81", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775399383, "uuid": "319050ba-13a4-4b1b-9092-ae0780ffbbaf", "value": "yezura-beta.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a5196c7-30d4-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775382349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775382349, "uuid": "d8fa21b8-ede8-4f68-8055-505eda42e8a9", "comment": "Malware payload (Mirai)", "value": "3c1640eee79afdf0c5412127ca7490ee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775382349, "uuid": "04542e2a-9203-4256-afaf-227f3d1d9e5c", "comment": "Malware payload (Mirai)", "value": "d49d209b223b3daa2dbb022a21ac9209dae67372e9a4973f1a6954fdbbf59017", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775382349, "uuid": "7dd48a7e-dde8-4ad2-b29a-dcc859915b15", "comment": "Malware payload (Mirai)", "value": "cd8e12df12fcd2e9d9339544100ef49bcd496175", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775382349, "uuid": "6a5088ef-9938-4a15-959c-1d7278ca0e38", "comment": "Malware payload (Mirai)", "value": "abb35d1296e0bdfa173d998bbb1091f027ff94fabd2fe2b06a08b05533938859e8c5e9a236e4a674d49245863b9c3837", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775382349, "uuid": "f7704238-9862-4299-b277-85214d135afb", "value": "T1E5330A8EB8029D3CF91BE6BE54164E0DB93177C152830B2767BBFDA36C721945E02E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775382349, "uuid": "e6319d93-6e57-4969-9b98-688df0c6ec34", "value": "768:gduPBFnHooqR8qOCKq2cH4Kg9e+TK806MMUVjzkfQXObHud2oGP:r/hqaJMDg9eqK806MHdkfQX6HuCP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775382349, "uuid": "50bae54d-1a0e-4aaa-b1ef-fc8cbd00d5ac", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775382349, "uuid": "ae4711e9-50c2-47e8-9ca4-168ba1b75f39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775382349, "uuid": "45e275e6-31d3-471b-ba47-df7540a1adfa", "value": "boatnet.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2a74aee-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354204, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354204, "uuid": "fd1e6c05-ef3b-4752-98f8-b1167cdfb0b6", "comment": "Malware payload", "value": "0df53086593fce119a4c22cf39791476", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354204, "uuid": "21e8ce11-262f-416b-b293-0b8bf804baf2", "comment": "Malware payload", "value": "d4aaa85ae97ba1761358fabf4fd975ef748fe70d2ef392b6150e21ac770dd747", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354204, "uuid": "8d3b88c8-98c5-4969-bb71-3c0e164d3b03", "comment": "Malware payload", "value": "c02a4f8530fcb23832ed9d901de7402659e7efb3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354204, "uuid": "9b778ae7-fcb9-468b-95c5-024e410c7680", "comment": "Malware payload", "value": "f776f4d8899192864761f6a82e525519832b0a5de455f8b7ff1b1cda165582429f9d0aab08f1725f9ed4711a92479359", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354204, "uuid": "90c908f4-eafd-4f46-8138-dc7fc7e9f538", "value": "T155056B227721DF65D355D67009F3C7519AE621A31EE24086B26CC3287E2062D6E6FFF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354204, "uuid": "24026089-c181-464e-9f64-f4c175e6802d", "value": "12288:ydYzBLjIyIZrCHoKKp4c1GflUV+1zvy6gp9LMnfjmXsrZuRu0Y:yQBLIp4c1GdUqzvyhSfy+ZuRuf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354204, "uuid": "72c205f3-b856-42d7-a1d0-057948200539", "value": 836952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354204, "uuid": "b8cf7c50-15db-4601-a2f3-ba6a3ba5be5e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354204, "uuid": "e95c34f1-c241-49b0-8e51-0a909c61244d", "value": "clientmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cd67059-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354114, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354114, "uuid": "5b8bff83-7aba-494e-ae8e-8f7c2b32915c", "comment": "Malware payload", "value": "3adb8307fd9277196a87237ae1cc7991", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354114, "uuid": "269c9659-e4b4-440f-89d0-0f3309802d13", "comment": "Malware payload", "value": "d61a1ef6187aa4027990cde62997464f803fe3e65d773920d617b9e1e35c657d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354114, "uuid": "44500e45-1853-45a2-9c91-b3e08b120eab", "comment": "Malware payload", "value": "31b4b070e13fcc3d03016a7a41e7e12daa7572ca", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354114, "uuid": "02ee4ce9-bdec-4400-a4d3-386f9891f39a", "comment": "Malware payload", "value": "02aeb35e981e587ca9ea7abe7e1b98f8f87ef1d11b3b3b666fac727ba808b4031ad4bc646cb0fa9dbc43d0e072b797b5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354114, "uuid": "e59e7efe-cb97-4eb7-b1ae-4a3bfc0f555f", "value": "T11FC5F757B9910942C4E83677ACBE81C833664EBD9F8A631B5D05FA3C3ABF1D90A35344", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354114, "uuid": "41bf93f6-2b65-4dc5-a41e-28070ae43406", "value": "24576:hx69sA6sJeqeTfcU6o/r1uEcGAj5O0zKSPiLlvEjSL3EFbgkxItdHqcGpPn9Z2AF:hrvJy85Fe24HrO0VpCY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354114, "uuid": "58b3a95d-056b-4f95-a638-bd671b537917", "value": 2621602, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354114, "uuid": "8aedf4a2-dc96-4ae5-bbf4-c1abb37e351e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354114, "uuid": "2aeb220f-bb7e-423e-9c15-b3a741850917", "value": "gofuckerv2arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8929e49e-3146-11f1-a769-42010a9c0008", "comment": "Malware payload (RustyStealer)", "timestamp": 1775431444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775431444, "uuid": "7a34bea5-7cbc-4638-b889-2827cee55ff2", "comment": "Malware payload (RustyStealer)", "value": "82efe4d2026a1cc249dec11761bff52e", "object_relation": "md5", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX13.file", "colour": "#114079", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775431444, "uuid": "e99f1faf-a7ca-4ea7-9370-a8dbc9541f9f", "comment": "Malware payload (RustyStealer)", "value": "d631ed68bbae207791fc929b595e629365c3d0fb62919945bc7960f8dd5a4965", "object_relation": "sha256", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX13.file", "colour": "#114079", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775431444, "uuid": "51d50823-4050-4e41-a528-51d00e3156d6", "comment": "Malware payload (RustyStealer)", "value": "2eed33f3edbf709012db37b2b8fb8d379edddd3c", "object_relation": "sha1", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX13.file", "colour": "#114079", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775431444, "uuid": "3bf4df6a-d9ec-4775-8155-e287ad2a64da", "comment": "Malware payload (RustyStealer)", "value": "046d8a2ccdd29da141d3fa749612cd8661dedbbdae89b82685a6fad4a280613fa0d26bcdfcebdd43daed40224db7171a", "object_relation": "sha3-384", "Tag": [ { "name": "c", "colour": "#6BCAA6", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "MIX13.file", "colour": "#114079", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775431444, "uuid": "8e916cfd-1d9f-4cbe-9d0f-d9c566c94496", "value": "T1F466BFB831106CFBA65F42BBCA656CE91376376397DAACCD6070F2D10653671FE26808", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775431444, "uuid": "a3ca55a4-7ad2-4e86-a9eb-ced1db4f993a", "value": "ae3c2ea21d0a1fd83a33d73767c53bbb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775431444, "uuid": "69774e38-836c-43f8-8097-60972b2d3d8c", "value": "24576:WTTqwAg7obBbQkvkoyMwy6d4AfwQclWtMrwoFLWxTNuMqe0359iSI0HSbDw+T9kd:W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775431444, "uuid": "c72aaddb-5e92-4211-b281-b4b1fe8e4932", "value": 7093248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775431444, "uuid": "984b7b8d-faa7-47d0-b87d-08210052df26", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775431444, "uuid": "32868210-959a-41da-bf33-952a044e4d81", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2be3d33-312b-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775419971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775419971, "uuid": "70f187e7-4018-4504-ac45-b23ebdfffa73", "comment": "Malware payload", "value": "a8d5428d03e39462f075e4f5f700c181", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775419971, "uuid": "8bdf6013-c89f-4112-9849-2b3bbc08909d", "comment": "Malware payload", "value": "d6c8bdd4e8b6d64f619c0277b26fa68c6117dae36bb9a3707b4d89d4a88e343a", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775419971, "uuid": "bbdbaa8c-9d72-477e-8ff2-85671c11ebb9", "comment": "Malware payload", "value": "a40491889331ed807d97d2dd06a1b3fe09f972f3", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775419971, "uuid": "3a67b068-0798-41b4-839b-055eee284c82", "comment": "Malware payload", "value": "f47bc4b7830b5669a61ec015ffb82cdfd4889ea526ebd92b85747e7b8835759706b8926daa449486e9774c4c4f82f607", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775419971, "uuid": "e5483b97-5b7a-4cdd-9756-ac95ebedd4ea", "value": "T1528733A40DCFA73AD5CF1E7A4477DA895D531E08D60849B0B623BADBFF31F5A2264021", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775419971, "uuid": "551b75b2-5fd7-4bd5-ab69-f75db7501ffd", "value": "786432:WBtmSqti4+uAbLlL7j0XadN206SksTcYxFv6GplI/68a+bA:W7mSqF+uAvN7IXadB65NgvnmX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775419971, "uuid": "e0e924b3-b2bd-4df5-96f2-3797ad1c5d6d", "value": 37691392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775419971, "uuid": "6c16165e-d5f9-40c7-a037-400b390c4e25", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775419971, "uuid": "1964f53e-de49-4e2e-bd73-1f5bbfb86e42", "value": "SWlFT_Tr_ns_ct_on_Summ_r___1_.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0638957a-30bd-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775372383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372383, "uuid": "a6b5f1fd-4415-4ab5-b9b6-81c1973b4c44", "comment": "Malware payload (Mirai)", "value": "ccdcd305c6792f963137b912b70246d6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372383, "uuid": "3447e302-8612-437a-8106-7c9c1232d4c9", "comment": "Malware payload (Mirai)", "value": "d6f9738bf64b2b1610a09246088965c2f1549fecbb5fa3e59a810dd441455bfa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372383, "uuid": "87241011-643b-43ab-ae95-965e18237352", "comment": "Malware payload (Mirai)", "value": "7152317eb6dc116be89332d9e1f16e6d782a605e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372383, "uuid": "15e43f19-38b4-4e98-a28b-64fbf8c7ba6e", "comment": "Malware payload (Mirai)", "value": "a861f3a73ff84d31a3b4cb7667ccd07ad08513e894a4b2ab5e33f50674313e2c25987ed18ef40793440a5eb4aade783f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372383, "uuid": "d80fc4d2-2b60-4f64-8f16-350bb7645331", "value": "T1B0B35B85E753D4B2D8470BB002A7E7395A32FC62032ADE17D76CFFB15E226C2B156618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372383, "uuid": "5749cf9b-08ef-4342-822f-384cf94bf50f", "value": "1536:AY8CU4mAC6BRTejqkSTr9xXEKcHcTUA31QGtN+Hrn5rDqns0k/tlWYvaY2:AbCJZ6qf9GquAWdeDWWYvM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372383, "uuid": "e3b0f3a7-c1e1-45d2-9829-c3319a984e2a", "value": 117680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372383, "uuid": "cfd97a3c-5b7f-4b85-9458-6aa51be7f6fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372383, "uuid": "ea7b2f44-e3c7-4972-9c6c-175b94211fd8", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4dbf8b54-3129-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775418889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775418889, "uuid": "bcaec379-2735-473d-8e21-89f45ac8fe05", "comment": "Malware payload", "value": "d452baef1d3792590870e2f609ef1b8f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775418889, "uuid": "39740467-bf3c-4caa-b820-fa510f425f3e", "comment": "Malware payload", "value": "d7121915d643fb80745bbfa0ab9425edcc9bc451e7117ec9a7be3b101af50d0a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775418889, "uuid": "882f5c81-e444-4f9e-bc76-cb1433d7fec5", "comment": "Malware payload", "value": "8a457e5041dabf1ee1cac1e70e719538c57c9867", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775418889, "uuid": "22069c2d-48bf-4b6c-b91e-df39f6724a06", "comment": "Malware payload", "value": "339d0e0b15d4b85330c7861470cb1f8c536d88f6b5f702e9bed107f6f3caae9311b8a6285d92f90a97bb2e91586f40ae", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775418889, "uuid": "46edb4ea-b40a-4e10-bc38-2bcc73be39b1", "value": "T1E3E4E046F79557ECC5ABD239CA26132FFA7170928319470B13B58A133F27274AB2E316", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775418889, "uuid": "02273d71-56e9-4f89-993b-a415ae27d786", "value": "af18b23f8bd85b1fd557930d6522f233", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775418889, "uuid": "fb083338-434c-4cd4-8ef5-950c9b59f043", "value": "12288:0RMOCOL3ybfI6dEKhsi6Lbc/o5DNhQEzjDmpCAEWALV:UMJOL35KhlqQAf9zjDmpCAEXV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775418889, "uuid": "bb895bae-f102-4b6f-bf10-05665f96d805", "value": 688496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775418889, "uuid": "b03148a5-d03b-4635-bad0-5c0608421375", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775418889, "uuid": "c5f10a39-42f2-411b-86ac-64cb340fb566", "value": "image20260405689.com", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fc56fce-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354172, "uuid": "2749d5de-0193-46c4-b106-98bd6aeee3ba", "comment": "Malware payload", "value": "82f16005b7b0abc1e75cd7eff95e5863", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354172, "uuid": "351a9e00-0bce-4d26-a589-e0a18079498a", "comment": "Malware payload", "value": "d7c55d89527602ea43ce04e79c878674938aa8751ccf493a23866dac66d2e903", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354172, "uuid": "8fd5aeef-b83b-48fb-8bf6-b7594956dfca", "comment": "Malware payload", "value": "fcf8c351b65c2b2d3eaaa5b82bcc0ce1606ca57e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354172, "uuid": "4d02f0cc-1d96-4220-9b38-7a395626b20f", "comment": "Malware payload", "value": "ad77a96de1e7af8989bacf11eec1e5e99072d32a201808c7ab37173281a07bb7282133758f79588a279b4d68e5aa8181", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354172, "uuid": "a81f4c62-638b-48bd-949c-a41a60632516", "value": "T135262811FECB54F6E5031E3105BBA27F63315D0A4B24EB97EB407F69E93B6921836209", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354172, "uuid": "4a3f9f41-1f22-49ac-a95f-03ea883d0622", "value": "49152:u7x/sJO5QUaZlPMorL5CsYCHs5bzLdlygh7HjCjsp01DG25E8:uRsJO5QUav8sTs5b3dlyi7DTcGsE8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354172, "uuid": "1c688f2b-2dc2-4086-a4f7-8fef148a4da5", "value": 4575394, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354172, "uuid": "bddd27ff-552a-40a5-90a5-f8951ac7901f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354172, "uuid": "8987aead-a739-4510-a0ab-69fe62a9ad58", "value": "li7i686n", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c992af6b-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354672, "uuid": "fa288fb6-85d1-491a-9d16-934e5685e791", "comment": "Malware payload", "value": "930e452190474b6f98da0e28de820d64", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354672, "uuid": "6497f0e2-6c43-4f5b-a3df-f59b86b96ade", "comment": "Malware payload", "value": "d82ad1550e03c9bcd716ca61975e723b6cc92aef28d331ae0cc99e5d033d08c2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354672, "uuid": "059bc7a1-3521-4093-bb4c-7ee5d5a49e15", "comment": "Malware payload", "value": "e9377981a304fb354be681f03dedf4eb272d0ed4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354672, "uuid": "ca05ef4b-a931-4614-94ee-c8108465e2a7", "comment": "Malware payload", "value": "7ffb93d0149d43f16034d29e82bf0c936f05c7f6bc44265906ff6fcb29b50437f273d0f9747c0a235396e02603252d90", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354672, "uuid": "b2bfa4ce-897f-4e6d-b8cd-c564100cd0c2", "value": "T1F9055B46BB1C4523C9470EF15A3F4395F7257A4341F9A22A370E97673621E3ADAC338A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354672, "uuid": "09f78237-88a1-4f48-9286-12877b16e95d", "value": "12288:Naw46mKQ6FXAZUuR6HwpwM+mDoGPgeBKRkip0MKfvU2Eew6lbJNR6z15Me:Nt46PAuuR6Qj+JZeBKR6fvU2EePz6J5h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354672, "uuid": "943ef88b-ffda-42f4-a91d-ea136b0a5dd9", "value": 857868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354672, "uuid": "0d2664cf-29aa-43f1-a52c-4c15f64dafff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354672, "uuid": "ea2d3c85-0680-4634-b2f4-30470f681b8d", "value": "shandppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f6c86b4-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354494, "uuid": "38f8a457-3e7e-42ae-825c-53d542079d41", "comment": "Malware payload", "value": "e7a5a2202b34b354e4483295eb23fb28", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354494, "uuid": "f385c8ae-aaaf-4ee0-ae89-ef49502e35ec", "comment": "Malware payload", "value": "d8bd8a92a39cea235cd69fb6116fe52d831523f8b9dcaa3ee278b7f2cb254ef6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354494, "uuid": "47273e93-19d9-4203-96b9-3490b8e552fe", "comment": "Malware payload", "value": "c396e7120f66958969b90c3931802c9cf9bdd330", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354494, "uuid": "4d261310-13a8-44b2-bad7-a1f17df4ad0e", "comment": "Malware payload", "value": "434e6349019de9035ff5fad325335ef5428288b7b46df2fedd442f3e288137e88c8d05d99de9e36fec41f8d618899b6f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354494, "uuid": "fd0af992-e6d3-41e4-a696-4d8fa9e42224", "value": "T1CF3628137F58E71EE124213458B2CB9867291C9602D7AA17B386F319E9F30AD4D6EDF0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354494, "uuid": "568924c8-b32a-4615-aa76-21689c08583a", "value": "49152:wrc9V5qJs2Nyk5HAv234jw0tE1mawfupaYfMoysfnt5ET:NMVBvjET", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354494, "uuid": "e95eda0e-ab37-4e09-b939-7e33af2f9e68", "value": 5177537, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354494, "uuid": "a1c5c9e0-fb9f-419b-a5ae-bda8d5122d44", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354494, "uuid": "bda3e1c2-0417-42cb-b971-09f0c47238d1", "value": "li7mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f33afac-3119-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775411939, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411939, "uuid": "ec0e728e-19c7-455d-8c5a-de29f8b279f9", "comment": "Malware payload (Mirai)", "value": "58799512bb9018b47002f8068e09f18f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411939, "uuid": "d38617ab-f021-4de7-9d58-4d713b64af47", "comment": "Malware payload (Mirai)", "value": "d97ff3f5e36d85befa4a5598d3a69f7dc53c75c2c9b52e9e7cf7b883786888cc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411939, "uuid": "8614fe28-46c8-443d-8975-c9a323c9fa9b", "comment": "Malware payload (Mirai)", "value": "e40143023b8fe83bc10be2314a75d50948f0b5f1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411939, "uuid": "aaa99de4-e81d-41b8-bea9-ecdf1d752712", "comment": "Malware payload (Mirai)", "value": "7bc0f32dc43e3c55e058cde246829388d9a0ec8cd067464cf3547c8282f78ca7c54a615190f201745baf534b6c51693c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411939, "uuid": "09fc41fb-4d82-45f7-9e83-98529a8fdecd", "value": "T103142902631C0A43D14B5DF02AFB57F183ABAD1119E7A544F21EFE886772FB1950AF89", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411939, "uuid": "7ad929a0-af20-4a31-a8de-061d86f6d316", "value": "6144:HivpxoJKjh97HzkdVUnx7ZmTK4+Ehj681A2hNNmt1:HgRHzkrUnxtmTK4+Ehj681A2hNNmt1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775411939, "uuid": "aea5142a-97e4-4769-841e-3fb0121b413b", "value": 208360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775411939, "uuid": "4bb51c59-88e8-4d08-9c8e-8cf30f77e41a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411939, "uuid": "114bf301-0046-4b70-8d85-992647cb1e31", "value": "ppc440", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13cd0331-3094-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354797, "uuid": "d62d71dc-5671-4c84-89ac-5dfcaf170565", "comment": "Malware payload", "value": "03f1a5bad3c4fc2711bd0d8fbe8512b7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354797, "uuid": "95263aaa-d84e-4396-bc33-3130d73f1c14", "comment": "Malware payload", "value": "da05f7346be39d09b7e08c9cdcd072463cf551952796c82a7fb9a117567b11f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354797, "uuid": "f6c28740-c5b3-4ec4-ba08-084d8ce8bc39", "comment": "Malware payload", "value": "9ccc02f594a91365865e132dd75f37f9f24b177b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354797, "uuid": "858c7a0e-6a12-47ba-b645-ceaffbf42dd2", "comment": "Malware payload", "value": "20c51288fe0c5248aa8863fc4625c7e018b80fa9a68d01786261350686f6c63f56d7f57777ce284065188f4ef0de3cc9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354797, "uuid": "e665f293-1783-4b3d-b3e2-086d19f6559d", "value": "T15ED4AE29F9047B07C89B9274849FE018732BB28507523706394AE6793D83BBDAF1D7D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354797, "uuid": "d2e20a5d-3081-496c-8c96-849531fd4669", "value": "12288:Io7+N8An5tx/n884ecF7CUxzW3GLsTplYinw5WosacrnK/6zYx3:b7+mAPx/n884PF79w3GgTYifaVyzYx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354797, "uuid": "89102a71-d895-454d-aedc-db595a623dd4", "value": 649328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354797, "uuid": "79c6c324-490e-4e86-a493-8921ff3e503e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354797, "uuid": "956029e8-a419-4571-b223-464d165be81b", "value": "libraryriscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8197cfc0-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354122, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354122, "uuid": "0258847c-b79b-4eb3-be0e-d071a4fbd62a", "comment": "Malware payload", "value": "6d3d4c1dd9ae8c2b708d8e9b4b48beb3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354122, "uuid": "90e855eb-05cc-4337-8407-1405bcfa64af", "comment": "Malware payload", "value": "da45353abab27cd4ef3ae49d5d6a4735c6c7967879d6d98a0dd809dfd8c7ad76", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354122, "uuid": "e71a845f-af6a-4fbd-8e0b-d3ba2c294894", "comment": "Malware payload", "value": "c4b073683758e448452bcff4b3b2311ca67e6fd0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354122, "uuid": "92ebd9f0-fa10-4237-bf45-f7e9f9f79471", "comment": "Malware payload", "value": "6970931895d972232e9d05c7b0a413f69b077a1516b4d516b4679f4bb43342c84cf679c48d8b30f0f4bf187b05f6f3c1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354122, "uuid": "77522347-a4c9-4165-aa51-9d037fda76be", "value": "T11E261897B9D25982C4E43677A8BE81C433630EB98B8613575D09FE3C3ABE5D90E39314", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354122, "uuid": "2c4de03f-70b4-428a-9c98-8babb56e9664", "value": "24576:DQPwS2MBwGwZ+UfZQfyq3NaEYOrsvvqipGe+LwonnU7/EwaYUGsOgC1dyRdySlz+:DGe7yzWuA4ZFyQT99PQTzCgDzl5Ey", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354122, "uuid": "e0edf43c-323b-41c8-867f-76ec6052b30b", "value": 4587682, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354122, "uuid": "906556f5-5496-4729-a35b-5c29e051d701", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354122, "uuid": "6e98d2fa-d2a4-44c9-bca5-8d3e116fc675", "value": "li7armv5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4e9b7a3-30bc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775372354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372354, "uuid": "6ed2e96a-8d31-439f-a637-7b71ffc08799", "comment": "Malware payload (Mirai)", "value": "81c45aa64c8e22ce79333e4a61dd34b6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372354, "uuid": "477a7f15-0a0e-4176-8fca-a65462e5673f", "comment": "Malware payload (Mirai)", "value": "da99cf5da459c766afd8ebe9ba597ef2089d29ca275ae4f869a7859a1ce2ce2f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372354, "uuid": "8a4637f5-ed73-4c1a-9b2f-06e507786f9d", "comment": "Malware payload (Mirai)", "value": "5e5f258c4ee9b884d0a58e5aa1a2c34ee58b1e52", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372354, "uuid": "8fa8b841-d60c-482a-baed-504f1b4880a8", "comment": "Malware payload (Mirai)", "value": "2622e7a652974c1379212ca353a32bcc85a23b0c432c2e4a19a5abbd097cf622302c29dcde7cf1dd0548aa91d1080df2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372354, "uuid": "73c903c2-71ea-4955-8ca7-fd5017d9b8c4", "value": "T193242A46AA408B13C0D72BBAFBDF424533339B64D7E763059528AFB43F8679A4F62501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372354, "uuid": "5f35e434-6b96-482c-85b6-0ee630c4f8da", "value": "6144:qsUejCTINfsGald9t/Btc5Z/UhWIHpbbM/RCKsN:qsvjNfsGaz9t/BtcTsc6bQ/8KsN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372354, "uuid": "6601ba68-152b-420b-b4f8-b85fa46685b5", "value": 211348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372354, "uuid": "e54a9789-2f2c-48bc-b3dd-066000ecd349", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372354, "uuid": "d9621dab-1ac2-4358-94c1-7b0bcb567695", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3c3e16a-3131-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775422523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775422523, "uuid": "7aab17da-d0c8-46f5-902e-88e64c86905d", "comment": "Malware payload", "value": "1ba2661d7ac9249d3bde724084f413e2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ext_sideloader", "colour": "#5765BD", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false }, { "name": "w_node", "colour": "#C4D305", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775422523, "uuid": "d878d178-7409-481b-8f91-c6b381a3494b", "comment": "Malware payload", "value": "db88feb7d333429e19f482ab28d95a8bfcb2aa1d9949f549f6da58feb3d033e5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ext_sideloader", "colour": "#5765BD", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false }, { "name": "w_node", "colour": "#C4D305", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775422523, "uuid": "0cf3f580-972f-46ce-82df-cba22663c014", "comment": "Malware payload", "value": "691263035574fe88199ef4326d608e7bdffabc40", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ext_sideloader", "colour": "#5765BD", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false }, { "name": "w_node", "colour": "#C4D305", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775422523, "uuid": "5d2442a9-962b-429f-af71-1f395ce5274b", "comment": "Malware payload", "value": "0d9bfb5d38cfe3be005cdc95967e0f78fec040fd1c504363b96a56a364477c83ab1289730a9893cfa6ef7615c946c96a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ext_sideloader", "colour": "#5765BD", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false }, { "name": "w_node", "colour": "#C4D305", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775422523, "uuid": "d9295ffc-d955-46f2-ab21-ce528e958830", "value": "T10725BF83D292915CF41AC1715B2EA273F537BC458B29AFE76390DA361633BD02B7A710", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775422523, "uuid": "c89d7ca4-a784-49ab-b0ff-10f134cdfbcd", "value": "5119aa243ba31aa561ba123ac413a1c5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775422523, "uuid": "278fe76b-6b3f-4866-9413-bff5f5830779", "value": "24576:m+pqL2TNOEe0JRh+w+bY5bsY5b5Y5bmQ:mKT4EeiRhyYqY7Y0Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775422523, "uuid": "6b397b71-09c4-45df-8d80-32b26d450166", "value": 1018368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775422523, "uuid": "12139a89-a66a-47c0-b572-c34ad86c3802", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775422523, "uuid": "f614d36b-e40a-4164-b159-5bbdb6f2444f", "value": "w.node", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a5e0d6a-30ee-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775393623, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775393623, "uuid": "938461e0-12e1-4a28-8fc9-d77887679207", "comment": "Malware payload", "value": "9e189f4cc131035418b10ecc98b8db26", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775393623, "uuid": "fd6da534-a052-4e59-9edc-073b366d9ee0", "comment": "Malware payload", "value": "dc111dbe181ecf60242886d28c8360d630913919feee4d37d0bc7b675c2f6566", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775393623, "uuid": "3e1ee8fc-3274-42eb-970b-8bb1101d2515", "comment": "Malware payload", "value": "0c8d4f151fbbaaf5bbf52f5c308979e33d74f1ff", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775393623, "uuid": "9346f15e-6a5e-486f-a9f9-f90afe82325f", "comment": "Malware payload", "value": "0051b4e5c703930e287d4e8868e32e462a7c430940c8f9f4b97275d2a02361310a8a1152212a20fe3e884094b5ece9fc", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775393623, "uuid": "1ebd0911-10a3-4a0b-8dda-de2852fac3f1", "value": "T110F51252E7A8A45EECFF96354B770A6841038E6B8713D3838D75723C2D7B9C09A61EC4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775393623, "uuid": "f60cc408-9ba0-416d-a7a3-dbc6f82647b5", "value": "98304:A1aWlm1s4h7EJWs61Vida9ZQHWDhVRrmdBe:Yah1s8EJWs61Vi0w2dVpWU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775393623, "uuid": "fccd0c01-bf96-4ad7-9d96-44c955f98fe0", "value": 3326989, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775393623, "uuid": "8f727fc7-4baa-4208-811a-e49d9ab0ec0e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775393623, "uuid": "a297b489-e28e-455b-b32e-7ffe68d6b1c1", "value": "PlutoniumPREMIUM_0.37.1.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2de9752f-3119-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775411963, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411963, "uuid": "8d17ad45-1f5e-476c-ade2-e00532f84fa0", "comment": "Malware payload (Mirai)", "value": "45d651a70446e33c353fed40d5734277", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411963, "uuid": "eea15619-5266-448c-9f60-0810e18bde4e", "comment": "Malware payload (Mirai)", "value": "dc298821a425a5fdae10e228e429c1ee2347e54053817718df1c87648caa6ee7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411963, "uuid": "833650d7-3b54-408c-9990-d8f675aed7ee", "comment": "Malware payload (Mirai)", "value": "186c22795778a1be54caf710b1ac0c4f3f7d33aa", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411963, "uuid": "2961afb9-95a9-4b9e-93c7-453c213ffe71", "comment": "Malware payload (Mirai)", "value": "77309cb8cbbab0e51fa79c6ae0dd1bea60447f40ecb63c1fb60a1d5231a653bbba31f1b164680948b86cd68c2f7c8e2d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411963, "uuid": "015316dc-7ab6-4efd-842f-03a9d649254b", "value": "T101244C93B905DEBBF40EA77604D307217272FB6549431A32B317BDB5AA3A3C4242AF45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411963, "uuid": "abc4d1bc-5ead-4816-8e12-1904510a16d6", "value": "6144:aMJBw4WDKbyP9uIdBh9jgXELab5+rcfY4KH+Ehh6a1A2nONsl1:agBI9atCiY4KH+Ehh6a1A2nONsl1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775411963, "uuid": "5ceaca05-f8ce-4f94-a40f-af46017570d3", "value": 227712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775411963, "uuid": "a7983f81-f1e1-41ab-9bbc-fb6ad6df798a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411963, "uuid": "c5ef85d8-b889-45a5-9701-0c6668939646", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcb23daa-30bc-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775372367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372367, "uuid": "b37befba-c46c-431f-bf74-ac084d513599", "comment": "Malware payload", "value": "508f5244db59790852a31f95bd77b908", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372367, "uuid": "dd5bebe3-c211-4b9b-bb6d-f07ac98e2ed6", "comment": "Malware payload", "value": "dc4708f9fafafb4cf22e218702b2c7a6beca5af347b8cece7a5ebcb552b919fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372367, "uuid": "ee532fe8-f3b8-4ccc-9077-a2ca93bf7184", "comment": "Malware payload", "value": "5e601b4e21850a9e774ebff7d5cd5fba6733e0f7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372367, "uuid": "321b54e5-cd0e-4c1c-b934-772092ccb6d3", "comment": "Malware payload", "value": "43a30281bc8009e9dc2bafb18e0e98a1833213c520b6959094d125b8e72b8bdbf20854014d47333e465d741df3f0ee02", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372367, "uuid": "0a92715d-83c8-4657-a330-edd440082652", "value": "T190D45C63F721CF94E364D27045F38B555AA421A31EE394C2A3BCC6207B50A6E2D5FEE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372367, "uuid": "6412c7b3-ecf5-4a99-9259-68e83b2a0f81", "value": "12288:6p2cxZ7tSlVTU4CoBBmWKx8Eqo0Zi4ZgppnJMWbd:EnztcY4CsmWC3qo0Zi4kMWR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372367, "uuid": "578043cf-651a-4680-b7e9-b6ff74fa9a76", "value": 644456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372367, "uuid": "d949f794-2337-4ba0-9b4a-3cf716695836", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372367, "uuid": "eef8ddc0-74f6-4083-875a-401e5a4780a1", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b18d3694-30a2-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775361074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361074, "uuid": "0b5122b1-82d3-4d46-b057-901193ce3d22", "comment": "Malware payload (Mirai)", "value": "ae9194b93e8413cd21ab9913103b6527", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361074, "uuid": "58254cb6-1954-4721-acfd-0a8cf2744c47", "comment": "Malware payload (Mirai)", "value": "dc8a901aa5732ac1be9dc4b7d3475507e746aac2f01e47375f5e6e84f976beb7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361074, "uuid": "fa82ab08-7915-44f2-916f-f40261f95fa6", "comment": "Malware payload (Mirai)", "value": "8cd63c301f25f914eef9883e77f74b0b069f44b5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775361074, "uuid": "6f545a3b-cf37-4e92-9c88-51cd2e510b65", "comment": "Malware payload (Mirai)", "value": "223f90279d9f57dde576d151768d08c209d8c9d61879b6d58888b3ad0d02f36a8dfa722aeae2936cab7997c9e660ea31", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361074, "uuid": "63ae2a2a-38c9-4652-a497-21e957b355fe", "value": "T18CC35B42FA818F13C0D61779B6EF42493322A79593DB73069A249FB43F8675F0E63A05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361074, "uuid": "9f82d241-d092-4192-9960-c22b971379d5", "value": "3072:cowpuQyNSG2eRa1styK9flTQPHoVrScVM/9OAvjik:cowpuQyNSG24a1styKdlTuIVrSmM/9nd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775361074, "uuid": "dcda1790-b863-486b-b684-be082638b0c9", "value": 129940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775361074, "uuid": "00f8c3ba-d6fe-44c6-a336-054be0d6402d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775361074, "uuid": "3abd3672-d37f-498e-a0ae-6d94d7a48721", "value": "boatnet.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a942c644-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354188, "uuid": "9d529eba-0ae0-4c70-beaa-5024447dc351", "comment": "Malware payload", "value": "47f69ff791dcb5d5ac2b22a851e4e6c9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354188, "uuid": "beb3aa5d-35c7-497c-98ba-1062b3a7cca7", "comment": "Malware payload", "value": "dcad622636725b937ea3519db364766f3b18a544d08910525099914dc10381c9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354188, "uuid": "323c6898-b003-4d1a-8eb6-7b5b5b4694fa", "comment": "Malware payload", "value": "31f3b4cb76ff7fa1baf457e722b4cbaefdc30e18", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354188, "uuid": "58e263ee-234c-49b0-a6c0-8548a8644ccf", "comment": "Malware payload", "value": "ace647cd1787a9c929c0a023d3beb477ecef9519259eca2d307b36dbd8e89f58f28301d1b69e3d20df7c8b43d395f386", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354188, "uuid": "a685800c-08c2-483f-86af-b052828c9ace", "value": "T1B2056B223711CF6AD355D67005F3C7505AE520A31EE2548AB26CC3287E6162E6E6FFF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354188, "uuid": "d23450b5-65e1-4288-a3bf-f8a5234b1f10", "value": "12288:iUQMxs+pZB4MW9+iLV/tg4nAGrPsJAq/B/YgpqLMJjovPgcVg38Owy7cb:qn+poM0g4nAGDsr/B/S4jXcO38Owy7K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354188, "uuid": "21013218-9e47-4f8c-8a1c-b92519de20b7", "value": 837216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354188, "uuid": "d587ddff-42ca-44ec-9e03-7b78fd177f2a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354188, "uuid": "3ee0eabc-e352-4800-bd63-0d8fa87a9cca", "value": "droppermips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b343538e-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354635, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354635, "uuid": "29feaa3c-5ad9-41a3-8c73-74e8d1604b3f", "comment": "Malware payload", "value": "8d32584c4bd2c1bb78d3f7a9e0e1e4f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354635, "uuid": "1dc69a74-e82f-4aa7-92ae-ddff408d9031", "comment": "Malware payload", "value": "dcbcc3577e9021f91ade4efc6a83d5185b98de27d898e00405274875c59a29a1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354635, "uuid": "7f4c468f-3306-4842-8022-31ea0e6124fb", "comment": "Malware payload", "value": "d4cbab394e7c0a22c6c25dd5508c8193d44c1ccc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354635, "uuid": "6a101b95-d8ec-4368-aecf-2605f9d3f5b9", "comment": "Malware payload", "value": "0a24c9eefc50f850fa86a095ffb499378f5cdadebbbc71f9725f7940ee8670aa3643f84423528dabcaf14c3ad0ffe788", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354635, "uuid": "39a85a4c-ab8f-4300-9c34-e3623a8beb7f", "value": "T18D057D2EB2B3F17CD01BC03407DBCAA24536F47526212D7B26C4DA353E6ADE12369B65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354635, "uuid": "914521a4-8443-4e37-93d8-8bbd61d38e89", "value": "12288:1m7xfJEHdd2H6qNgPlr25PXVhS/KyNTlf2J9ay2P8pppppEppppppppptl0MHXsL:1OxREkNgty5PW/KgwYtl0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354635, "uuid": "199c1dd0-6a07-48c6-93e8-fb2d7ce7ced5", "value": 830304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354635, "uuid": "99891176-e4dd-4ff1-91b1-fc229fbc17ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354635, "uuid": "a91c4abb-014d-4ec0-b3c4-8a6b2e29ec3b", "value": "sudpx86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c1e5e70-30bf-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775373467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373467, "uuid": "e07051c1-8855-40aa-bf3b-d6f80563bf92", "comment": "Malware payload (Mirai)", "value": "e7b38464b92b38a39179df18891e5893", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373467, "uuid": "150d3d2c-8674-433b-898d-62a74c6b4b46", "comment": "Malware payload (Mirai)", "value": "dd3ba916987a14081e94e59979413bd749bbbf9abadd011dbed9935e1ad2c037", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373467, "uuid": "d50b93cb-5930-4e40-978d-ffd01ad084cb", "comment": "Malware payload (Mirai)", "value": "5c4e92274c4b6647429126fe2335046462de22f0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373467, "uuid": "df4a5f34-d13b-4c79-b93c-dddfe28fd26b", "comment": "Malware payload (Mirai)", "value": "aa72a4d9a3cd73adb87ea92453b484f54a4c989019b44c6b74b198592c757aa1a95b583b8423dc69ec8b2bb9479a72d6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373467, "uuid": "9a865f08-eccf-42cd-8ec6-d26cd868a7ec", "value": "T169141902631C0A43D14B5DF02AFB17F183ABED1119E6A544F61EFE886772FB1950AF89", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373467, "uuid": "9697bc47-1be3-4409-8744-a279969e1131", "value": "6144:IYa0xZnsxFFQdcxPEmiK4dEhjiz1A2LNNRt1:I7/QdGPEmiK4dEhjiz1A2LNNRt1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775373467, "uuid": "cbe6060c-fbe3-4770-a7c1-9eb90aac12b7", "value": 208083, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775373467, "uuid": "798ec7e0-dd21-4da3-9d82-f0108ddd1790", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373467, "uuid": "f9b1556d-25a8-474b-b122-db3db4d7180a", "value": "ppc440", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce097d7e-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354680, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354680, "uuid": "517987f3-2020-4eb1-9bd3-6d0db3cefc28", "comment": "Malware payload", "value": "6289a08e64ae2f4a6398344e4b88260b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354680, "uuid": "e9108c8b-acfa-4aef-888f-b39f25d3ebf8", "comment": "Malware payload", "value": "dd4542199889295b6f04e0942ec8832cb88d19cbedfc00ca8eb752265942788c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354680, "uuid": "044e5338-49d9-4390-a07d-2974c7a077cc", "comment": "Malware payload", "value": "bd10128b956d76d27c9323ca2dd0e23fef5d2261", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354680, "uuid": "cc3c4aef-8f40-4e7b-9de7-45c49a400669", "comment": "Malware payload", "value": "6944e286e9af562f1f24ed9a6ad95ea46410da8ea50f27d74c709c95e72a5d5484c1550c4cb217d8b64533440fefc6ab", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354680, "uuid": "faeddf2a-2c6a-4cd9-819e-19554eb08589", "value": "T1B5D54B80FB489226E90B0F338CA30BA8B3555D46C6E4856F8708F36F15B15EB598FF95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354680, "uuid": "263ef359-47a0-4324-849a-f14bd43b3992", "value": "24576:vImTx7mb2WX5Fi/LiYZTWU1i0+PnsxPxoOW9sOc1D5LUVVw+L:Xmb2WpFi/GYB13PxoOW9sOZL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354680, "uuid": "d64e83b3-8036-4ec9-8c2a-a9e61b73d0da", "value": 2818210, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354680, "uuid": "793c975c-1a4d-411b-810a-e1366d68d677", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354680, "uuid": "8bc90543-111a-4a5b-ab6c-9c82662d104d", "value": "mclibs2ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2304c78-30bc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775372350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372350, "uuid": "c8edcba7-a7aa-453b-bed3-e99205872136", "comment": "Malware payload (Mirai)", "value": "fb8be54981111af061ca505448addd83", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372350, "uuid": "fdaa923d-4400-4e5f-b1ed-f8fe996ed93a", "comment": "Malware payload (Mirai)", "value": "dd8af6e315aa69a6bc69be239bd0aafde8f806f71efa1d4219c97466327baf23", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372350, "uuid": "e77295bb-cef2-438d-bee2-96e02e68e069", "comment": "Malware payload (Mirai)", "value": "3040d8cca10a6500ac28950940656f93de9fce0e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372350, "uuid": "329cad6f-d8c2-4b85-a48a-a55925badff4", "comment": "Malware payload (Mirai)", "value": "111727f52259fb99afbcf6e3baa1ac3139d9625edd0b58d42e924a7cba7656cf1d462da4c776dc1fde7dcc06e822266c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372350, "uuid": "e50f5882-328e-4bc5-ac43-83dc2ca9050c", "value": "T12A241B01B9518F53C5C32BB7BB9F42993732676897DB3302EA24BE742F4668D1E39211", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372350, "uuid": "29c2fe6b-5942-48bf-9d54-07393b3d2ebd", "value": "6144:OTHffa/k3VAsomSiWOL8/2abmKHgvtZmHl1SMwV+UH1:Oj3VAk5BmbmKHgvtwHl1SMwV+UH1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372350, "uuid": "10852f6b-375a-4b99-ab8a-0dd72af4474d", "value": 222058, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372350, "uuid": "c4dc6ac7-ceca-486e-82c7-9db00b51320e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372350, "uuid": "4f92811b-14f8-43d2-85e7-814bbb794d59", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e582fc1f-3082-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775347417, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347417, "uuid": "765b2702-4052-4bc6-bc8c-48a7955fc8e2", "comment": "Malware payload (Mirai)", "value": "5a312fc72dbd3091e3125685e3b24a69", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347417, "uuid": "f2ad8645-f43b-4598-a179-1da992653da2", "comment": "Malware payload (Mirai)", "value": "ddf3dae37de2cd3094926863f8c5b762303ae08a23da20964f2f6b7f154008a2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347417, "uuid": "9974bc83-e472-4783-96f9-62afd270a6ce", "comment": "Malware payload (Mirai)", "value": "3291cebf563d6b96ef8ac01f33273df54c102250", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347417, "uuid": "c471dae6-777c-4c95-b6c1-c2b5466e698f", "comment": "Malware payload (Mirai)", "value": "f9d02834c5a1c6802bcaeabaf9d90f27bc2f4e0752f6ae428e0c3f77546e337dc30bf844459a5cf3e1aed5ab96f7db99", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347417, "uuid": "3a675e47-4730-4c87-9798-77a5914bbe5b", "value": "T140B2D5D6F505EDBEF80EE73B88074805B131B68A41831B332767796BEDB61980877E46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347417, "uuid": "3f43891d-cc4b-440e-9dc5-42924b314c32", "value": "384:DrCoMjtrINWeR76wxVs9ekwQ8HA1LZchuRf8rOGdsiheQNOOLWPp3vdQg:6HjtrI5g9ekx8KLZchuRfEUQ4qWPpfdB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775347417, "uuid": "b0413fd2-0fdc-427c-a0f2-7f333b15acd8", "value": 25508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775347417, "uuid": "847f5c36-892e-4c64-ac41-abc87293fcf6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347417, "uuid": "daaac3e9-c791-4a4e-ab13-ffec8beb8f75", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3880e3b-30bc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775372352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372352, "uuid": "53860a45-0a96-40a7-bc6c-b570020bc1f1", "comment": "Malware payload (Mirai)", "value": "37fa263686df763a9a9911b16c4ed1aa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372352, "uuid": "bc9bc4c4-e431-47e5-94bf-9ed5337c58b0", "comment": "Malware payload (Mirai)", "value": "de687bd41643ca6ace6c5719d3d4b74ed70827f514918d4aea0bfa166019377c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372352, "uuid": "52cd9f90-f57f-4b91-953c-b931e9733c09", "comment": "Malware payload (Mirai)", "value": "43f95088f579f9ee6b7c42153434fd82117470bd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372352, "uuid": "d8780a9c-de94-4846-b382-60d9839b3228", "comment": "Malware payload (Mirai)", "value": "df3a41316141d58a258f3901efdab5aec50a9c9e98d70a737fb916ac63e92ea3d212821b0646b1590c674281ed645ca2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372352, "uuid": "1f902b71-a46c-4030-bcef-a1303c8fe994", "value": "T1C934C81A3E228F6EF26D877047F34A31976977D617E2D644E26CE6101F2038D641FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372352, "uuid": "696503e4-a80d-4891-9885-a831503def27", "value": "6144:razJkSnx2vDxXo8yYp+TJJWo1wWp5GqohWPkzv7MlA0:r6JkM0tXo1n1wWp5GqohWPkzv7MlA0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372352, "uuid": "a935e0e0-9f1c-4b8a-9b87-591ca8cccef9", "value": 252946, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372352, "uuid": "25ed7ef6-aad8-4db2-9e01-31d44d93c19c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372352, "uuid": "3066902c-7b88-495b-81a8-7c5548e6e3a0", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c22c422d-30aa-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775364538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364538, "uuid": "710673b3-6fe4-4110-95dc-3a7c253022f4", "comment": "Malware payload (Mirai)", "value": "586113f3eecd449a4b8afa90f6bd85c1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364538, "uuid": "cb2b7889-9c09-432b-997c-c1fc2872472b", "comment": "Malware payload (Mirai)", "value": "e00c30b41dee8072a882975c6a2fc6055d11ca5b6208519d4aab470214967eef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364538, "uuid": "420af588-74e0-4050-8125-09e77ddd18a2", "comment": "Malware payload (Mirai)", "value": "a565cdc27e620881d20978b0c6dc8e79d89c9971", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364538, "uuid": "317376f8-4fff-45a6-a8ea-f39768484868", "comment": "Malware payload (Mirai)", "value": "f4044743de745f00731a5795eb596dcd8665cb8c6e54ccdaa4d8c7421eda7fcd75d820f6cd0a7266a53d9616ba5618ea", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364538, "uuid": "cf13cfb4-91b7-497a-b9a7-93f074035903", "value": "T123B2C0CD61943084C98D7C7D278D4A664F6CA190BAED9F26E350CDD8B3BAA8F3459078", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364538, "uuid": "cff7a9dd-928e-42d9-9b22-f2258cbae64b", "value": "768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBp+ZqEWvr:/QlS07FUXqIYSXQKquSq5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775364538, "uuid": "5a7f9dcd-9eaa-4143-a3be-8f6250e36886", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775364538, "uuid": "f78dca8c-8566-4bff-a2ea-dad20fb1e863", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364538, "uuid": "af16f717-cd2c-49dd-a1c2-93b12827e9ad", "value": "boatnet.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5953125-30e3-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775388971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388971, "uuid": "a8d42a87-e6f0-42be-9479-be86e0f3a49f", "comment": "Malware payload", "value": "00fd3a88e673afb024a06e13474d51a9", "object_relation": "md5", "Tag": [ { "name": "adamrat", "colour": "#B066C1", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388971, "uuid": "4cb33a04-c4b1-4fc7-a045-a8e2edd0aa56", "comment": "Malware payload", "value": "e04a9b7e6f5655da045d44c1898a701f60c574ff029caac0d81d9a0e18804c34", "object_relation": "sha256", "Tag": [ { "name": "adamrat", "colour": "#B066C1", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388971, "uuid": "f959c4b2-ee24-420c-8ce2-68c4625de3e3", "comment": "Malware payload", "value": "0f237a4beba4b6a20a3cf4758815257884e4e51d", "object_relation": "sha1", "Tag": [ { "name": "adamrat", "colour": "#B066C1", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388971, "uuid": "bdfc23ec-9c0a-40ab-86a2-321b22c43efc", "comment": "Malware payload", "value": "4b4b9e9c40854a5f3bf66afb8f0c68f9e39fb950ce905c09786576330fae9502dbcc4c4e93bd75f859886b21eb882bc4", "object_relation": "sha3-384", "Tag": [ { "name": "adamrat", "colour": "#B066C1", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775388971, "uuid": "2cee29d3-abf6-474c-9f72-44827e5e241b", "value": "T16CB5333CC4BA4FC8E4A3C9B25680BDDE753958D7F09962E97961EE86D17088FB071348", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775388971, "uuid": "aa658aeb-f15b-49a6-a760-4292d196bc72", "value": "49152:vEimfCGo4rqkzBKawVjFg8jShY+UAXcTIyeewyPAzCP2MXU:vEiACGo4ekYawVjFriYXTIfeR1XU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775388971, "uuid": "527293c0-1b41-4cae-843b-0d8b7e4c8dd5", "value": 2452869, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775388971, "uuid": "4a82351e-3ca6-4210-8946-2aa8af26180d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775388971, "uuid": "963a2ac7-84c5-4550-b02e-fc4c03173319", "value": "b595cccce_donutExtras-131219.jar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ca7d5bb-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354167, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354167, "uuid": "b0c223bb-5271-4e72-9720-a4ba0439cd18", "comment": "Malware payload", "value": "c39f0ad10063ef1cb4559645e9a6494a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354167, "uuid": "4d86ffb7-e0f8-41a1-8909-5744736a18e4", "comment": "Malware payload", "value": "e08a6f374ca7935800b77c2081a8f0d4f42254d1766b1f231a367b73cb0012fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354167, "uuid": "cf85713d-7f7d-4e55-963c-d3fa9c75d7ac", "comment": "Malware payload", "value": "f89ea941255a634c07f5c979ade4642a0773d715", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354167, "uuid": "35be207a-3299-41d1-92aa-f6f76af580cb", "comment": "Malware payload", "value": "d52b0327f498fa1dbfd616dc07dfa693630d3d52c26ee89271169ee52cf2cb1b5548446d42fb514421b5a026a8ab034c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354167, "uuid": "2dec86e1-9457-4aea-b028-86487a9d0302", "value": "T18E158D2EB2B2F5BCE017C03447DBCAA24535B47522312DBB26C4DA353E66DE51369B23", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354167, "uuid": "5509bc3a-b5ca-4992-9831-9ab52da28fbf", "value": "12288:pL7KD+NgA7rv6fcTgdAHGIXffp/bHJ6sg9nnHyxspFAYJ7Qaydi1ucmgRHcHX:97S+Ng8YczDSnHyuFAYJv1ucBRH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354167, "uuid": "00edecbb-c22b-41fa-a3b3-8ea948a27a5e", "value": 961232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354167, "uuid": "e5feb61c-35a6-4b2a-9ba1-eafe47b0a01b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354167, "uuid": "a7b3778c-5b26-4cd2-a2a8-e1aa342d9f5f", "value": "dropperx86-64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "971a46ef-308e-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775352440, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352440, "uuid": "cb6e2f40-2b2a-43e4-bdcb-d4b830296ec3", "comment": "Malware payload (SalatStealer)", "value": "9a31019841a975739abd1d5b763bea20", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352440, "uuid": "d091a954-c2d1-4694-ae36-0e936c88002a", "comment": "Malware payload (SalatStealer)", "value": "e1252c8b14da616a8767920201d9bb1beb2f7942b80cf666270e988352b2c6b7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352440, "uuid": "d8184b11-1f8a-4147-be54-2676f0f94235", "comment": "Malware payload (SalatStealer)", "value": "aafa44a379ccd13a75737ce57865186c3044f79c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352440, "uuid": "0d0819ef-ef07-4ef4-a684-2aadb55cacd6", "comment": "Malware payload (SalatStealer)", "value": "787db8aae64ae0697028b702520a890f1aae0843bf21296f481dc01de7527eca78edcab91c619da4d7dcf12df4170986", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352440, "uuid": "5e60cc25-73b4-4c5d-b163-e08c8fce67f9", "value": "T126C65C11FACB54F6F9036831416BB37F23315D048B28DB9BEB583B6AF877691186A305", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352440, "uuid": "131ccd53-5bea-4f0c-b4e7-80e346108a16", "value": "1aae8bf580c846f39c71c05898e57e88", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352440, "uuid": "3254857d-5447-4306-9b5a-135d89f858d0", "value": "49152:XpXZKft05HtyvruRo9JBDRHCTdU391KX1NbNV4L6d+NTPeGFPbQuhHEPAw8sWexp:1Z0tkRorxxCO3ukFJFzAo1f47eEl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775352440, "uuid": "b735aa50-8af9-44f8-ab8b-ef2c97bcb4ea", "value": 12570624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775352440, "uuid": "4f592514-4306-4966-967f-0bf841cf4ffa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352440, "uuid": "bfb847ea-82c5-437f-8d51-696c6106aa1f", "value": "final_payload.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b75a21a-3092-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775354111, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354111, "uuid": "e464516d-671b-42d0-b4bf-5251914caed5", "comment": "Malware payload (Mirai)", "value": "50f012330873ff099439ec552ebb157b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354111, "uuid": "e65a1880-0d91-4018-b886-b5ea1165b566", "comment": "Malware payload (Mirai)", "value": "e19125348d0cfca8315789710e0c9f2f7765ea2e067e39c6dd56d2148740d94b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354111, "uuid": "210c78ff-48ea-4da4-b48c-0df116220077", "comment": "Malware payload (Mirai)", "value": "3d2db53d7b9577793a1485058f6110fe076ff75d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354111, "uuid": "480c4472-d7c1-418c-9f1f-7f11def82d49", "comment": "Malware payload (Mirai)", "value": "a25f8071816078fd587fed4eb90045ccff9a95d5ea377aeca4a902cb61f280929fd5470a3d3761a0ae62124dade2d54f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354111, "uuid": "89a51e5c-108a-4863-a607-788c7b8ee0cc", "value": "T13C158E89E7C7D4F1F65300F1068FDBE31524A2265053F6F6EB8C2A977432B616E1622E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354111, "uuid": "f4567ab2-8e0e-4c6c-bf93-8afe8b1eb8e7", "value": "24576:5EdqshiJhprMPDYwt94dn1VwxNDbIwoP9n+1iWOm9Yqc8ab2l:mqshiJhOr4/wvA/Fnme", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354111, "uuid": "f8578851-f48a-4b79-822f-152e32e11a6a", "value": 918656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354111, "uuid": "805909ea-0efa-4dde-a0fa-c1b4df9d02f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354111, "uuid": "e3e041dd-bd47-4467-b527-045f51dfbacf", "value": "dropperx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4435a19f-3101-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775401693, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775401693, "uuid": "5a3ee4f3-7c1e-42c5-b51c-290a8ed31b95", "comment": "Malware payload", "value": "5cff69853d573462d0dd7d23c74cf9d4", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#649E47", "exportable": true, "hide_tag": false }, { "name": "iclickfix", "colour": "#F73422", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775401693, "uuid": "8e2e1beb-f14f-47cb-8197-c6f1b624000d", "comment": "Malware payload", "value": "e2118785e66446824bde810fa99af283e69d988cf69ec2ed7c241bba84b781e3", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#649E47", "exportable": true, "hide_tag": false }, { "name": "iclickfix", "colour": "#F73422", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775401693, "uuid": "b8e3236e-283f-4ef0-81ff-197e8134aba3", "comment": "Malware payload", "value": "b1b7e15e8f45860105ba771f06a40c1df97c519f", "object_relation": "sha1", "Tag": [ { "name": "ClickFix", "colour": "#649E47", "exportable": true, "hide_tag": false }, { "name": "iclickfix", "colour": "#F73422", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775401693, "uuid": "edd40afb-990c-4836-b6ad-5ddc12a0ae8f", "comment": "Malware payload", "value": "c63931218d918f41fea7c959e4c4151094d214d3375b644a60c6c0b391f528a030daf99383e9651d19a3494df025488a", "object_relation": "sha3-384", "Tag": [ { "name": "ClickFix", "colour": "#649E47", "exportable": true, "hide_tag": false }, { "name": "iclickfix", "colour": "#F73422", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775401693, "uuid": "b8f6dc9e-bfae-43d6-a335-10e5fc879a27", "value": "T1BE9133FB2DD12685175397BF362BA0C7D92889993CF54443C0228C487D7211DF2E6B36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775401693, "uuid": "24f32d2c-4351-4bda-82a2-0085323c3f79", "value": "96:3gAH6ij7N0LTtYzXChX32NaAiH67KtkK8qc0I2WLqWXgUUaBCZbKSWTSn39J:3gAaifeLTtYzXChn2NnicKtkKFIzLtgj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775401693, "uuid": "66bc04d2-db29-47ff-a69a-cd3c008cc17d", "value": 4440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775401693, "uuid": "709dec09-ed98-4cf4-91a2-ca4afeaff301", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775401693, "uuid": "9d4f7433-e7b3-42f4-82fa-6b4750cd494e", "value": "sdfggg.js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "629bebe5-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354499, "uuid": "1221ba8b-76fd-4fb0-a3e1-8f11fc1c2ffe", "comment": "Malware payload", "value": "93f8ea9e754d554c98e97959b7b77ffd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354499, "uuid": "1ce97c2e-9382-4455-8d58-f6ed0d91f2ed", "comment": "Malware payload", "value": "e2744e23005b0736a5b8a1941a8481fda59da99b110cd943abfcf9b46ff8f23d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354499, "uuid": "334c6224-b5b9-432c-97f2-2e8a6f4b9692", "comment": "Malware payload", "value": "e4710a22d4358e9a3d0f0377b6018a99d33d0827", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354499, "uuid": "e8d1a798-9a52-409e-99ea-a93cf76cd0f8", "comment": "Malware payload", "value": "06ec7ed0cd82debb4048582969cd5241356cf0c3a71c86904f833087ea7bcd3506201d6d14d5c2f7afb6385d56510b59", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354499, "uuid": "8b233eda-221b-4840-af71-fa0e7b2d355a", "value": "T1E1168C17FEA0AF56CA3D527688A106842738FC501F83AB474A14F33CACBFA955D913D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354499, "uuid": "258ee626-97a3-41cb-8745-0490072db61b", "value": "49152:+vx1cJbz7JjUCb4cAXhEihVMFZrn965E6:+vxQeCUhE44iE6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354499, "uuid": "849962fb-e4b1-42bf-b59e-b946d5977665", "value": 4128930, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354499, "uuid": "b49d2841-ab6f-46b7-82f8-e7a8df80279c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354499, "uuid": "2b74b207-d335-45b8-8c79-6301dd30d28a", "value": "li7riscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "efed97eb-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354736, "uuid": "43f32f0c-f9f3-496b-90f0-6abf93963c7b", "comment": "Malware payload", "value": "98594d2f7fc8270afa727ec47fec5eed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354736, "uuid": "26ad0b6e-b73c-4ef5-8af4-375ad4bb368c", "comment": "Malware payload", "value": "e281f6b0cb7ba8b2690dec66e7057d2c1b62760176b34abe0ea91c564bd1b545", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354736, "uuid": "00400709-d9ca-4db1-b3de-eca80dc1d879", "comment": "Malware payload", "value": "76f3f43bce50043a8d2376ce1db9b3481122b1ba", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354736, "uuid": "6b764100-7a95-4048-adde-88e599ef042d", "comment": "Malware payload", "value": "ba4fe7a28eb973da665a76108c06a2c848c0ba8c74eccc34ca1e537dce8e4dcd84f7b4e6e4a564a6453801dff42cfa0f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354736, "uuid": "d800e4dc-b9c4-4c96-9077-b091ba05e6cd", "value": "T15AD49D29F8447B17C89B9274808FE028737BB285575273063846E6793E82B7DAF1D3D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354736, "uuid": "ddbe1774-7025-46c7-aaad-3073bfed6bfa", "value": "12288:gn2z+g2TXVNirNMjP4bSsurjmjcEepqw5npr+FhejgJZld:S2z+7XVgNMjPXs8KgEen3j0Zl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354736, "uuid": "baf0407d-9b49-4660-8b3c-bb4f6de89b27", "value": 653848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354736, "uuid": "581c96e9-a10f-49e4-8b6b-eab174030b78", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354736, "uuid": "78c4790f-c7b9-480e-89d3-e937034c84d1", "value": "rstriscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb46e4d9-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354648, "uuid": "fc5cc303-98a4-498e-86c7-656897b4e429", "comment": "Malware payload", "value": "6b70500d0fc8c3c98300c8d74415602c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354648, "uuid": "9078559b-8842-454f-9602-cd82d8aeab6d", "comment": "Malware payload", "value": "e2cf061da82c4552499b1ba7a68d8bdb0f405b8c66e04ee1cd173e02c7e848fc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354648, "uuid": "5b49a83a-c4dc-491a-a507-5bd23073365c", "comment": "Malware payload", "value": "a88fbdeb0dfdd155e1b3dfa5629a6c0c5a5e2960", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354648, "uuid": "4cb5efaf-70d5-47c8-8de4-dcbd683c3e99", "comment": "Malware payload", "value": "1bde5bfd40ec12b16f1b9f95b240ca3db19c884d38dcce5317129e55a6c4825171b21d342cde832ebb74d7e3444d5ed5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354648, "uuid": "80b61557-88de-42be-8d53-ce6f036c8c1c", "value": "T13F055B42FB1C4563C9470EF1293F53D5F7257A4341F8922A270E9B672622E3ADAC3789", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354648, "uuid": "0b17bb4a-fb35-473b-a3cd-12315d6adcb0", "value": "24576:QprxdKak/foDQil7VJX3tZEnkKtdEe+lk:+rxd38o5lJ53tmkKtdE+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354648, "uuid": "b295d6be-299a-46a3-a1a3-d9388940eed9", "value": 857328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354648, "uuid": "9ce49075-bf81-469b-87c4-3f32c6b19f35", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354648, "uuid": "a4281a03-7c60-40bf-9bec-f13dfb1ca4a4", "value": "sudpppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc15423b-30e1-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775388258, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388258, "uuid": "2ef9da16-781e-45ec-9a7e-264a96e6857e", "comment": "Malware payload", "value": "aeac67756ae543f1e2c09cd4574efb29", "object_relation": "md5", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#3E0DF8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388258, "uuid": "20242ed6-162d-43af-816b-565c931d8414", "comment": "Malware payload", "value": "e36b980145e0fb1957150ff89c5b6d1aaedf4004f69e7132d88a1ef077150e90", "object_relation": "sha256", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#3E0DF8", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388258, "uuid": "2badb9e1-d6a3-47b5-94aa-33386ac45be3", "comment": "Malware payload", "value": "40ee4c09651bf8a5e43f52f94e1a7a3e368d248d", "object_relation": "sha1", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#3E0DF8", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388258, "uuid": "e0527083-2c99-47f6-9739-34da2defc07e", "comment": "Malware payload", "value": "cc3289763d53a4b3cdb4eebcd1042f701a3dc0cf3ccb5eb41c415dae7750354fe33019723dac9e4ce85558765cd2e1d3", "object_relation": "sha3-384", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#3E0DF8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775388258, "uuid": "097d8f65-76ff-4941-ae63-3a938449f8bb", "value": "T1F60523E245313A6FCA5BF6E3205935E9C86CC68E73593F83586D9743102ABED493A331", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775388258, "uuid": "3b583f51-5134-484a-984b-12aa7fbafbf0", "value": "24576:ZKItWQJovgKkbZ9E9rNNGBZcVZXE0jrVo/s51+kyXmXS:9o1kbzKNNGBiZU0jrVo/p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775388258, "uuid": "e09b59e1-f7c4-48ec-b95d-729d5a060340", "value": 834802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775388258, "uuid": "3892df44-1493-4d4b-951f-619a761404eb", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775388258, "uuid": "9de3d0a4-6917-4e7d-9357-e74aac2fc72f", "value": "Donut_Dupe.jar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ef270c1-3136-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775424421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424421, "uuid": "bf757dd0-f9a6-4cda-bec8-54b0c40e7ad4", "comment": "Malware payload", "value": "e3ea9bf09633e7212727fd05164b1fa9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f_ex86", "colour": "#9A8E4A", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424421, "uuid": "8b2e1f4e-f41e-43be-bb40-3cc15086a7ff", "comment": "Malware payload", "value": "e37357e575a8c416e3e7770f2eeece99254833144d3a4ca1cb135fe816da702a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f_ex86", "colour": "#9A8E4A", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424421, "uuid": "938d76e1-403d-4398-b49e-6b66001fa73c", "comment": "Malware payload", "value": "3855f5a2137bb3831dad587cfe36edbdc93814d8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f_ex86", "colour": "#9A8E4A", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775424421, "uuid": "60a6423a-8c7c-4bb5-99f2-66ebd050497b", "comment": "Malware payload", "value": "69f0042ed153571b3c91206315e72750b5214912692fbb3107966504f90b06fbc816dda22b87a4271904141191619a21", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f_ex86", "colour": "#9A8E4A", "exportable": true, "hide_tag": false }, { "name": "glassworm", "colour": "#688395", "exportable": true, "hide_tag": false }, { "name": "Wave3", "colour": "#CE1E4B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424421, "uuid": "2046a1a8-d655-46f6-9575-294f66475e8a", "value": "T1E8756D43E2A620ECC05FC170975B6722F93174055B38BDFB92D0D7352AA3E906B7AB25", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424421, "uuid": "5c5a3341-2b4b-491a-86e5-5d5e13f8c604", "value": "b712b3f1f6f5dde070c523d4407e5a3a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424421, "uuid": "52ca9bdc-181f-4c28-8191-2ed609c73ab9", "value": "24576:5ds9Esxlce6k91UOld2LMxmeDozCMZyFFGGEymOCUwPP0cP:5daEglcAHNaYczYMyL2PP0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775424421, "uuid": "5cf73967-2c78-4138-8a0d-01695629fa42", "value": 1566208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775424421, "uuid": "965d460a-24dd-4b65-8c72-08d280627f7a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775424421, "uuid": "d2fa3e9b-0b8d-41e2-af1e-78de71d0eb2f", "value": "f_ex86.node", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94e50d7b-3138-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775425451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425451, "uuid": "7bdefded-a623-4366-9888-4437d900e324", "comment": "Malware payload (Mirai)", "value": "c830bc94f9d58184fcc18c1f9e336c3e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425451, "uuid": "5fed4521-b1e5-4790-a547-bf19edf1fe8c", "comment": "Malware payload (Mirai)", "value": "e37daef1c9ee225871ec67e761085f1e86d6b82e53d5f8a0c8635d8997ee2eff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425451, "uuid": "51d2d54a-38a8-442e-a5a8-9ff4b5430a4f", "comment": "Malware payload (Mirai)", "value": "a635e018897e13037c58d0f9d07d459a8e0737c3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425451, "uuid": "224faeac-2f3a-4419-8d1c-909f328cb857", "comment": "Malware payload (Mirai)", "value": "24edd6142bedabbca495e9447fa571577d85a95accd6a3b3ffc8ea4dd57706b2c3b7f7fa9d6c93da97531859a03fd688", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425451, "uuid": "16f4135d-7faf-4705-869c-32ef697d7893", "value": "T10853F886FD87CAF7D40754F101E7BA3F8E21EC3A0436D6A6FB516EA5C6175C062123A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425451, "uuid": "efe844a7-d37f-4917-8122-8684fa92fe2f", "value": "1536:bm//k2Xo6yeSOVUfnsLWuAnod77bowtW8neyeL:6zX55SOMnbLnod/bDtW8F+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775425451, "uuid": "20679e00-eaba-44c4-a2a4-162bdb03a6f8", "value": 61356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775425451, "uuid": "0d4ce1f5-60c9-4506-ae5a-c53376029535", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425451, "uuid": "0ecbd97e-2c99-4332-8a02-0d12efdb5c49", "value": "mirai.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "465a751a-313b-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775426607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426607, "uuid": "cd870222-55f3-4a0b-a979-0be7f44247c0", "comment": "Malware payload (Mirai)", "value": "9815047dfc9b0b382bc73137a77ed584", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426607, "uuid": "b656ae77-c17e-43b4-8287-8fcbb0b90e92", "comment": "Malware payload (Mirai)", "value": "e37e149e08f5beae7d219bac7a070e72676251410c483b5f367c42e4ec752eca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426607, "uuid": "31155a2e-3e17-49d3-8a1d-48669eff8dcb", "comment": "Malware payload (Mirai)", "value": "45b9ec8978ed4781e28c384c2f0a421bfb40e316", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775426607, "uuid": "19ce3774-d59d-46bd-b1b2-62cff9f48c3f", "comment": "Malware payload (Mirai)", "value": "03fcc62df8cbd52faa86fc176f051d3b99a4bccb0737195e896737d9af87fbde396f690c84cecba150fe88431318115a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775426607, "uuid": "3321cb4a-1c02-4e9a-936c-964b0dc3f63a", "value": "T13C633D03FA82C9EEC587D2F40BF66635D532FD3E0572B6C967D8FDA22909DD02919610", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775426607, "uuid": "94141430-e45f-410f-88db-46abe7060637", "value": "1536:bHvfLI4C53S/OnqhLjtzUBibPs+53DVj:TvfLzC53S/OnqVtzUcPs+JDh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775426607, "uuid": "ee416f95-3abc-4d8e-b8f6-965d24bd945a", "value": 70200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775426607, "uuid": "f3ecee34-79d1-4100-b093-0b1cce017b53", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775426607, "uuid": "ba38ecea-944e-498d-b144-0f4ac07c397b", "value": "mirai.x64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f2d3163-310e-11f1-a769-42010a9c0008", "comment": "Malware payload (Chaos)", "timestamp": 1775407348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407348, "uuid": "875f66ff-a8f9-4ad4-af6d-effa84dc6803", "comment": "Malware payload (Chaos)", "value": "63851574da31ed78b8ac1fc6f92bced1", "object_relation": "md5", "Tag": [ { "name": "Chaos", "colour": "#0AB855", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407348, "uuid": "c2e5c30c-a418-4dec-98e5-322db9d6c61e", "comment": "Malware payload (Chaos)", "value": "e4b53b74c46c4399d6b1001d6c1aab2fac40cd89393c86cbe89fb57a7f71cddd", "object_relation": "sha256", "Tag": [ { "name": "Chaos", "colour": "#0AB855", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407348, "uuid": "1f545107-34cf-41fa-9810-27bef4606056", "comment": "Malware payload (Chaos)", "value": "f96c00463c067a728d3bd86cf04453b632f46e24", "object_relation": "sha1", "Tag": [ { "name": "Chaos", "colour": "#0AB855", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407348, "uuid": "4bfb0736-d85a-4be8-a9ba-c9c06b1388b0", "comment": "Malware payload (Chaos)", "value": "cb016f798acd2e45a2a41b548adf3b7d079737ccb3eea248f4197cbb98ba6950aac843284f0fbd7c32456a70bdadf829", "object_relation": "sha3-384", "Tag": [ { "name": "Chaos", "colour": "#0AB855", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775407348, "uuid": "4079e2d9-19a1-48f5-9ee1-eb6b10fdf387", "value": "T1E8A2E60867FA4A39F7FF2E786DB251505B71BD53ED3EDB4D188A404D0C22B8C8960B66", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775407348, "uuid": "28d4e3d8-6afa-433d-a556-4ae6694717e9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775407348, "uuid": "d59bad7a-1509-4b95-a262-260ef7806086", "value": "384:e3MLWHn3kI3fcSxlR2WpsVPCQoNbJ0r91Crxb5xe3:in3kIE69pfQi0r9Sxbze3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775407348, "uuid": "82fa48b8-c13d-43dd-b7b3-81d1d21e5665", "value": 23040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775407348, "uuid": "7bd68aff-9f95-48a2-b331-959a564ea750", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775407348, "uuid": "d7c867e0-2c97-45ae-bbb2-c13592848bf2", "value": "hazxx.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "181d67e4-30c7-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775376708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376708, "uuid": "270f4088-2ed2-497c-9031-d1be712d3dfe", "comment": "Malware payload (Mirai)", "value": "82755a82e88c2a95a770063d4f4c99f5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376708, "uuid": "690d46dd-68a3-4e55-b29a-5dfdfd136163", "comment": "Malware payload (Mirai)", "value": "e599ce2ef272b992a09f3dde023f40e3fc454eb24b225eb5786bf82ad97a6eee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376708, "uuid": "c54506c1-b1c7-46bd-abdc-20fb157efe9f", "comment": "Malware payload (Mirai)", "value": "1dc42259d0aef90d3c7e1a164709e0d557bb6dc5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376708, "uuid": "1f04b818-45cf-4ef9-ba31-01329fec95b7", "comment": "Malware payload (Mirai)", "value": "78e8b47175879fd56918dc8505bcd8edeabcb95ce0298d9820fcc160a1cc700894b50bec438bf65b02d370d122e15f59", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376708, "uuid": "387d7efe-c8f6-4e6f-ac9b-bc59452b1da6", "value": "T170933A52FD818622C6C116B6FB6E028D376753A8E2EE3203DD255F2137CB91B0E7B951", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376708, "uuid": "015fd755-ccc5-4d09-a22d-4874366d9740", "value": "1536:Vomg7Y5Ej9lt4Gjls0NgIy/xJzpn9awgJSSl9LKReJCQsxE0G9:Vor7Y5EjlSH/zl8jSSsCCQeY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775376708, "uuid": "bc23f91b-2e00-41f4-a588-4c6b0303c11b", "value": 89580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775376708, "uuid": "9413dab5-e157-49e8-9f2c-0dc3f4e9439d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376708, "uuid": "4e2dbdcd-504e-4f2f-acc6-3a1c32f05ead", "value": "titanjr.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "723dca36-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354526, "uuid": "95c3da81-62f2-4845-8716-48ed58803cb1", "comment": "Malware payload", "value": "5c51a7866b1cf3dec5eb360e7e6bd81d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354526, "uuid": "6ef089e2-ffeb-4c6b-ac03-97151a5932a4", "comment": "Malware payload", "value": "e62dd41d3c9083bf459ebb71cf332e011708ba14e76e9ea55ee1f13ece7a56d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354526, "uuid": "6ca8b2b7-1f3d-4e88-a7e9-c4b4eafa8f6b", "comment": "Malware payload", "value": "a01df609d22d59f058c515d5828c60a31d4b5fb4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354526, "uuid": "cfb13e3a-bc0f-48d1-9e8e-868908f00650", "comment": "Malware payload", "value": "6ce254059c3ebf43b0a9263454717090229ee09b4d552ba2ab955755606a5b3d00fe8143c5389a29880ce5ee49487338", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354526, "uuid": "d90dce14-2861-4305-a9fd-55b1d12a61f5", "value": "T1B2A52A11EDCB18F2E9032E3109ABA2AF27354D054F31EBD7D6447A7DFAB76950832219", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354526, "uuid": "df643146-f68a-4687-9174-a38839c1b6cc", "value": "24576:0/y4pRApt7NCP/oHop4eo861uwAjhA6/bqgFFLkNRs6hXZYNfapwxjsVAvbsh3eI:8gnCYIO2PjdoNRsF0VswYAF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354526, "uuid": "938f7e7f-5aae-421a-a5f1-56f2b849140e", "value": 2187426, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354526, "uuid": "a853085b-93dd-4cad-9bc0-4c68b816a604", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354526, "uuid": "42a6da73-49f0-49bc-ba25-d6caa9665ba4", "value": "mtdi686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a68d486-30be-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775372900, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372900, "uuid": "a7712f29-6a0c-4ba4-ae92-0b7edac4554b", "comment": "Malware payload", "value": "40fa80180bf8d8e3720af77548c3510f", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372900, "uuid": "934d94eb-1658-4b89-ad4e-d4f2bd570408", "comment": "Malware payload", "value": "e82002d54f1ab8c6c5b8b6adb81e41c666e7294073a4ad2fc7b9e5d1de5c6cd1", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372900, "uuid": "cc2d34bf-49c1-40dc-9d65-4ce7df56786d", "comment": "Malware payload", "value": "e63c25a58aeba8ca585a28cf738c2743eaa38a48", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372900, "uuid": "27edaf70-fed5-4f50-a73f-29edac54a37a", "comment": "Malware payload", "value": "83606d447e56038657aba26ee3e49cc1e70292f338762170ac8a66f61879781b0f7e22f593a68858dac739f9865823a2", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372900, "uuid": "122f3533-ce29-4ae6-9f0d-e2771de27237", "value": "T1D0E0C2651056369A7E531E50762BBBD135806C46AA10043EE3B9AE638CBCF017B0F971", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372900, "uuid": "f40bf269-43cd-4bf3-85e7-be62823ab1c6", "value": "6:hdKtsq0OXOZYzBqlQXZRlzTjafaqUZtL57bNwb:XKtskOZYzYlE/jaC3THGb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372900, "uuid": "3fdf86e6-ccf7-4886-be57-88a5e5377eea", "value": 331, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372900, "uuid": "c9b0b616-2e10-4475-96a3-e56c9feec8df", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372900, "uuid": "90ade436-981d-4b22-9d32-ad5764357c25", "value": "bins.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6f86d05-30ad-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775365835, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365835, "uuid": "27ea22d6-9e87-4376-a403-0d5135bdf3fb", "comment": "Malware payload (Mirai)", "value": "251113d2e2ef7976fb23447fcb6ad25b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365835, "uuid": "2b1009ef-8a30-414c-a8c3-71efa4f7ca36", "comment": "Malware payload (Mirai)", "value": "e95fd0b1db8c49d7dfada426b6cac012227f505a8c793cffe0d4173638bd4fe9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365835, "uuid": "27e39d65-0b82-44d5-8095-89d860b0e57b", "comment": "Malware payload (Mirai)", "value": "b76de11344c8f25f6128da42b181238051c69483", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775365835, "uuid": "1c39a4f4-e4bf-43fb-a7b6-2ec39cb142fe", "comment": "Malware payload (Mirai)", "value": "e32bc6ebd8f9b402b3470d530e447b932cd60312c09d1389b5edc6b5c78f93eec1382c3e81b0e07a6e17680c5bc76dcf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365835, "uuid": "7e65df12-4726-4597-b08c-effc629cf6e5", "value": "T11BB2E16C50940E05D85B40FF9AFE05E6E66184830AFFCBD99F270CC3E2B74A2791D615", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365835, "uuid": "a3475df1-a7af-48bb-86cf-1b8faf57fa68", "value": "384:MniiBi3f2PSrf64K5WFSlvNjJ6mAN8bhmglJbN2EIKHT0P6+PbhDYOK6sNrVeCVM:xiBiv2PSbePxNNw8dtlJwEIGT0P1PbhT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775365835, "uuid": "76a5443f-9ee9-407b-9125-13ae7f054a31", "value": 23440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775365835, "uuid": "35f70b02-5bfc-4b03-8dd6-a66767d0ec48", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775365835, "uuid": "d28318a1-7c3a-4d7a-a4e9-53ec700540ac", "value": "boatnet.i486", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9da5c9a-312d-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775420842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775420842, "uuid": "df6a2e8a-c592-469b-a5bb-73840426ce11", "comment": "Malware payload (Mirai)", "value": "f7d91ba153ec0a5e3ec81bc9cb133f14", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775420842, "uuid": "0d17012f-9883-4c3b-8136-124f87b92de8", "comment": "Malware payload (Mirai)", "value": "e980c3c6f0dffddc681b5fb6700d9a32c25ce79c791e27666ca80bb1d2a7c621", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775420842, "uuid": "18c16a8d-1370-4bbb-abb8-a3fbefb93d46", "comment": "Malware payload (Mirai)", "value": "44b3b9d4f14b169c87347e3b883eeafd97e6158c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775420842, "uuid": "16a65f90-bd07-4e28-90a1-11813d1a1b0b", "comment": "Malware payload (Mirai)", "value": "3762e68ed3a7262ff03506de2f5c25415585a41564394a462e7876384da13555965438f43392011cd35f78af1423f70c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775420842, "uuid": "66940512-c0a6-4d62-8485-af02d9390e5d", "value": "T16B635AC9F983D5F6F857093010BBFF679D72D6BE21A8DA03D3A85176AD12602E402E5C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775420842, "uuid": "2de89a8a-03f2-4bb2-8adb-08021df612d4", "value": "1536:cHylDp6MobFJT9jlFVwVvM0Vc8Hq5VlZSQ5:cHydp6MI19jTuVvFa8HqJ5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775420842, "uuid": "6c089ecf-20a4-474e-b842-72e57f4d4841", "value": 70740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775420842, "uuid": "8588e4dd-c8e1-4e2d-8566-d8f465ea620a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775420842, "uuid": "1ab600a9-a516-4f14-b740-db74ebd0fcfc", "value": "tony.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "119f04ac-30de-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775386576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775386576, "uuid": "8e1cd3c0-4580-4982-862a-060a2a7cac2a", "comment": "Malware payload (Mirai)", "value": "088603547452b64cb672f4fd123fa46e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775386576, "uuid": "4e16b733-f26b-42ca-8492-04395a9869b8", "comment": "Malware payload (Mirai)", "value": "ea169ef71eeca319ac22e1d7fb3dfa9caa01e7cb30ac6309bbbeb7b7458710b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775386576, "uuid": "9cd15d0d-edf8-4b23-b843-47c404660b89", "comment": "Malware payload (Mirai)", "value": "a8ce9a6e527e0b9f7b96c79ae041363f8f3af336", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775386576, "uuid": "94349fa6-738e-4a71-b08f-7ef1b620bf29", "comment": "Malware payload (Mirai)", "value": "1df34eeb60d82ecf5e3949abea34d9bda1c21fb06ea6280d3fcf54f453d8b21c63f7334a1f3a2aa65c193af33b9254fe", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775386576, "uuid": "07e59d1b-52f5-4d90-85ad-b0f6047fe0fa", "value": "T121431891BC819A23C5D4137AF56E56CD372023E8E2CF72179E214F613AC682F0C6AE95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775386576, "uuid": "21b30d5e-baaf-4afd-b0f3-84605b2ef1a4", "value": "768:raehM993TLSmRTIrL8Fvvhp9H0HrZQ8yoWXagcLVPWtuQ/C71mA2EDEy0eYjW9TF:/M99jmL8BZp9IFUoWKdYuvQ5KIqkypZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775386576, "uuid": "3e196ce9-6e82-4268-9212-df4bde1f7fd8", "value": 56160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775386576, "uuid": "9e66e9d8-451c-45fb-9984-b028ef8c407e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775386576, "uuid": "639020f7-abf6-4ef4-8e98-adf22a98259d", "value": "boatnet.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e79e3339-30bc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775372332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372332, "uuid": "2c4ba78c-3763-4fb0-8de3-870fdd0b47c5", "comment": "Malware payload (Mirai)", "value": "5d4cf4790fc43105a055b6ad807d1066", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372332, "uuid": "11e1777f-c503-4a58-b7f1-b1ebd380edc2", "comment": "Malware payload (Mirai)", "value": "ea8ad35d129cf1263bf38ea3c75c53f2a70b4d54a40f6234ac019de5330edcf2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372332, "uuid": "20952998-e3c7-48d8-822a-64e105e8661b", "comment": "Malware payload (Mirai)", "value": "98555e0b307abcff8bfe8a7ba4c1e7e58f1374fb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372332, "uuid": "5d3c3435-c882-42d6-ae89-179173acde84", "comment": "Malware payload (Mirai)", "value": "c2a764b78b20f868587dbe0aaecb97a5cb3c1f6862ee4034b652624e67add66d7fc72dac9f1b3f7f7a9010d9a53315da", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372332, "uuid": "883976e3-85db-49dc-b943-af788ee1f4f7", "value": "T119244B93B905CEBBF40EB77604D30721B272FB6649431632B317B9B5AA3A3D06426F45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372332, "uuid": "bd1c3f0c-f8b1-442e-81ff-bee67d10fa2b", "value": "6144:6kEaOzQ3c1yVLlITc9gsS70LM87k5N2fY3KHdEhhiZ1A2lON5l1:6p4Pgb8o5uY3KHdEhhiZ1A2lON5l1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372332, "uuid": "3b8bd32f-b21f-4e71-b9d6-3767fb2c3dfe", "value": 225732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372332, "uuid": "503081bf-3784-4315-9e16-304371eb00c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372332, "uuid": "88c94876-18c6-452b-ab8c-0afd8817dc2f", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95783f48-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354585, "uuid": "1ad0b98c-a820-4d0b-bf67-ccba44e7ac8b", "comment": "Malware payload", "value": "f461e57fc67401bb8d5107191d1a5f8b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354585, "uuid": "de238ba0-95bf-4e05-8aae-2754f2e180e7", "comment": "Malware payload", "value": "eb01b6a0b812abdd85b24574db761faefcf3fc137cfdb48a38c6ed05435ec05e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354585, "uuid": "927ffc34-3eb4-4c06-80fd-7cd1fc195725", "comment": "Malware payload", "value": "aacdeff38f9e6ab296e903251623a7d7cb0171a8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354585, "uuid": "f66bab1c-4d77-47c4-8a18-34acca85de2d", "comment": "Malware payload", "value": "cc107cf09a1a0c572050ffa92331c7c624a88e1458448e1e7373e1bdfa8493c491c62560b65c7b5dc97902f182a32e2e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354585, "uuid": "bb2af987-078e-4ce1-a2d6-49df56e1b7dc", "value": "T176055B46FB1C4563C9470EF1293F53D5F7257A4341F8922A370E97672622E3A9AC338A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354585, "uuid": "95c41143-b27b-458c-94a3-c175b5932cd7", "value": "24576:01L+aQ8x/sHhssK7WeKV4ugynqQas0+lK:01L+FesasY1KV48nqQasu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354585, "uuid": "e39dcef1-5e97-4779-a9a6-b9303176853a", "value": 857000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354585, "uuid": "0acadb72-caf5-430a-baed-94bfdfa00a89", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354585, "uuid": "afe38bd8-db83-4abb-ac56-77ef7e9f21ba", "value": "sockppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d007a95-30aa-11f1-a769-42010a9c0008", "comment": "Malware payload (Amadey)", "timestamp": 1775364315, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364315, "uuid": "5590f536-6d07-4f0c-991d-dde60f91313c", "comment": "Malware payload (Amadey)", "value": "6bb8d1aecc6662bb538a45986b9664c0", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364315, "uuid": "4cd7c3e2-a786-437b-860b-ea2c8ceb86ae", "comment": "Malware payload (Amadey)", "value": "eb5626fe387a20577c00ea5b80108337ca40dd4307b90146a116631c546a7668", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364315, "uuid": "20d6a38c-9990-4d53-a1a5-ced388ccf465", "comment": "Malware payload (Amadey)", "value": "7232f004e1463408ba87d31a3f5660e8465f1631", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364315, "uuid": "ad671ecc-a1c6-438f-b28e-890e66246beb", "comment": "Malware payload (Amadey)", "value": "39b3f2d5caea9bde7a71c30e1aba2378eedbe4117434280c221596e4c95f94cb726df1dade04e1307fe05be432f03ff7", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364315, "uuid": "86fe4cf7-0890-4a5f-a51c-90c2536ff6d5", "value": "T11046F137B69A633EE0AA563749F292325C3B7E21B50E5C4296E01C4CCF790603E7E657", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364315, "uuid": "b6941844-b0db-432e-8b1d-44281b24594e", "value": "ac4ded70f85ef621e5f8917b250855be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364315, "uuid": "e244ac02-d259-4b88-beea-dbec1471ec4e", "value": "49152:gN61T1mJQiSGI3rrheKbTxVH9swPxhJoVxVtOV6I/RwApNZSt:gN662DGI7rjbRPFsrkYS/f8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775364315, "uuid": "4d10c17e-3c01-40f3-a1a2-dbc1ef099bb3", "value": 5427676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775364315, "uuid": "72cb49e5-4e71-46fc-b473-5358974d59af", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364315, "uuid": "bf81518a-9b4f-4004-a254-10f34c01087d", "value": "eb5626fe387a20577c00ea5b80108337ca40dd4307b90.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2577d6e-313f-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775428614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428614, "uuid": "29fefeb2-8819-4c03-86f0-18c0fba42418", "comment": "Malware payload (Mirai)", "value": "b641be88e9a5c3a849a249b3209e6ad3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428614, "uuid": "215c4f57-b8ad-400a-b0ad-dba71e6566c1", "comment": "Malware payload (Mirai)", "value": "ebafbd6ee280560f989da3bdd3d07c74be298437470312b93b14aadd910dbd6b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428614, "uuid": "b8ab23e6-93f3-4d38-9c3c-b2a660d76523", "comment": "Malware payload (Mirai)", "value": "73d34608be084eee69dc840be076ad481e02e73e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775428614, "uuid": "f1a1caad-b3be-4401-aa22-e993586f00af", "comment": "Malware payload (Mirai)", "value": "1b94b431a0a49c240dac10bde81d9e2e7714db1f94174b24c191520cb05c26e5a37f431359bcf3b4091b4ee35562b7dc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428614, "uuid": "744e363c-bd8a-4484-b478-0b350bed27fb", "value": "T118D2D0AEE5B542C5FD8D5C3E80CC3FA10E19E581221BDB9167228C4D5B36C57F26A4F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428614, "uuid": "8c994930-1138-4b0b-be46-b96d1ad5ed9a", "value": "384:e8pVWtmRsLYEpB6V8S628FuRUuNJG9whQ3Cfbo6w+K95orjDT3Q9RWGVCz0NvD:jMYHb62x4ahQ3CfdwLj8T3qW2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775428614, "uuid": "ffa46319-d1fc-431f-a12e-f14271c5dbc6", "value": 29944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775428614, "uuid": "adae8097-c048-4086-9719-c81b42cd3a40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775428614, "uuid": "f2dfdddb-7fe5-49b0-a3ff-bf1a2c6b21b2", "value": "sora.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f6961dc-3092-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775354091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354091, "uuid": "83b4bdb8-2c4b-42a1-a636-f8718b904bb6", "comment": "Malware payload (Mirai)", "value": "f86dab9f11ba4aa886550c7a141f6f3a", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354091, "uuid": "d05680c9-fdfa-4f82-ac26-220558d45f97", "comment": "Malware payload (Mirai)", "value": "ec2913b36b2febcf01a9f097cf4bcb3a35553bdcf331c697f5acc54d59e0dc80", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354091, "uuid": "e13e75de-900e-448f-882f-09f26ede135f", "comment": "Malware payload (Mirai)", "value": "eff46afe789c44e50be84cf405ea88adf7c9128d", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354091, "uuid": "1b160ca7-4357-40f2-8a7d-3f59d3751f3e", "comment": "Malware payload (Mirai)", "value": "74acd77c3c11018746912b81fa77462c3c1d21bddf55f09adbec33a8257de4ce553d8a1827224c8e7c174a25e33c9d88", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354091, "uuid": "deaa8f17-15f6-4874-a242-0cfbb71fc7db", "value": "T12451D28E125240F9BC45EE17F4669F9078A09FDA4EE38F4EDEDD2B5251CCC146834672", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354091, "uuid": "8b7430c1-a6d7-4011-9ddf-a8d3fa0e4376", "value": "24:fiLElAgybCbrnRnEL+V6fT2IJCCCrlClrpsgx/C/V1Tb2TI:yJ+P2I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354091, "uuid": "492e0eb6-97a9-465a-b5ad-2ad6add4924f", "value": 3120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354091, "uuid": "3bb7763a-e9d8-42c3-9edb-50f3ddbd9fbb", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354091, "uuid": "30146b5e-a7c5-420e-9fc2-e155cddd7146", "value": "cat.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "392f9110-30d4-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775382347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775382347, "uuid": "9a858580-1b9b-4b54-89c9-1dd010b8337c", "comment": "Malware payload", "value": "2de3d68d10db7550732fca2f230775df", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775382347, "uuid": "c8af9851-9612-4878-b44c-6fc80efd0ad0", "comment": "Malware payload", "value": "ec2ef000838b418ea582fe8fd680010dfa828a3ef5f2c4666aac5c7468547697", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775382347, "uuid": "3ffe0a87-78b0-4dcb-b718-6e2d1c35013a", "comment": "Malware payload", "value": "7b2bca5ce088209469cb48be5b5a74362413ce5f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775382347, "uuid": "28b8834e-6fdf-40f7-ab35-d6e59726a3ae", "comment": "Malware payload", "value": "ddae7acb350675bf2067d4d35553a24a56b0531439af24586c737d1e6cc0f0eb3578be79a2d5fe9b84cd627d8c939014", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775382347, "uuid": "c4a49904-8aef-43af-b673-177d9113a293", "value": "T1620633BA08CD4FB6D20DBFA0722979F0FD019DF094EA585415EBD9E2C936DF0D48660A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775382347, "uuid": "2573179b-8b81-4109-babb-2adc46d59c7e", "value": "98304:eI/fgVeBUwh7YbobIxh3QnTTnSVTL7FqkyrXfAz/mIo:eI/YVe5hVbCh36Sp0kOIPo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775382347, "uuid": "7ab4f601-3c66-43e4-b356-c07938d6a2c2", "value": 3732024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775382347, "uuid": "c9e31691-ea99-40ab-9b64-d372cd36a9fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775382347, "uuid": "51948a6a-babd-4696-8250-f646a7a67870", "value": "linux", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4033140-30f3-11f1-a769-42010a9c0008", "comment": "Malware payload (SantaStealer)", "timestamp": 1775395975, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395975, "uuid": "9baf3f85-a4a0-4cd0-9ead-edc26cf484c1", "comment": "Malware payload (SantaStealer)", "value": "10e717cad25305585658740737c44d8b", "object_relation": "md5", "Tag": [ { "name": "DBadur", "colour": "#2F52A0", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false }, { "name": "phonzy", "colour": "#0F697A", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395975, "uuid": "8219871b-4d86-4e99-9380-04a187931c3d", "comment": "Malware payload (SantaStealer)", "value": "ecc6ee8e05d0a46215fe23f5ec115b5510e1034473637c58082ca8e81548fb75", "object_relation": "sha256", "Tag": [ { "name": "DBadur", "colour": "#2F52A0", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false }, { "name": "phonzy", "colour": "#0F697A", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395975, "uuid": "78741e4c-de06-42a6-82bd-f4824b649799", "comment": "Malware payload (SantaStealer)", "value": "ab2ea08a7df589ad21a47f75a856740e32ea87e1", "object_relation": "sha1", "Tag": [ { "name": "DBadur", "colour": "#2F52A0", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false }, { "name": "phonzy", "colour": "#0F697A", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395975, "uuid": "a73c8ae4-3db4-4ab9-b490-d9040ab12f65", "comment": "Malware payload (SantaStealer)", "value": "5bf55e72d6ad6f8728204986eacf8e78298eba02727d201fb4525e66d2a3cb5d09de4efa81fbb244ec14aec557ebcd62", "object_relation": "sha3-384", "Tag": [ { "name": "DBadur", "colour": "#2F52A0", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "kryptik", "colour": "#D028A8", "exportable": true, "hide_tag": false }, { "name": "phonzy", "colour": "#0F697A", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#3BCEDC", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395975, "uuid": "64a57c48-96ed-459b-afd6-59b626462136", "value": "T13216F143E2A330ECC567C27446676BB3B931B85941347EBF9590DB312E22F506B2AB35", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395975, "uuid": "23fdf3a1-2122-4a80-af87-43faff55b87c", "value": "86decc6ebb11144606632964f65c138b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395975, "uuid": "9f0686e7-87cb-430d-a1ff-c0cd80f0e9b7", "value": "98304:D9CJNk3izCwNH8xweXPDRW4Q4fhEmQhPtAayGk/uWI:kNkMH5ekyfhEmIVbyV/uWI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775395975, "uuid": "f2301839-a245-4ad7-bee6-7dd42258b211", "value": 4083752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775395975, "uuid": "355b2b89-a6d3-4755-894a-4209a2150db3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395975, "uuid": "84c25f3f-3bcc-49e0-afa6-199a09c0ba62", "value": "service.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f0f0198-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354144, "uuid": "e23d4738-6306-4edc-a3a6-7f877700163f", "comment": "Malware payload", "value": "0c609f5012227fd7056c7ce154be0145", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354144, "uuid": "4041e967-ab92-472c-a3bb-75adb3c01f2b", "comment": "Malware payload", "value": "edce9183c39eacf64493e3497998fa3fe4ba76c1d94bb0ec0ff8f1a3ea61190d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354144, "uuid": "4243a563-5344-47ce-81df-ff13aa7c47a1", "comment": "Malware payload", "value": "0add65b42beb8c58081d17c68d2f45d85f1e0722", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354144, "uuid": "8da879c9-d33f-4bf9-b35d-8fa6ae53247a", "comment": "Malware payload", "value": "e75ba6f85ae621144bf79841fceb4fb95dcfe68c7f345ad9799eea91265c7128439ab355fe0e729c57c119c647012ec4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354144, "uuid": "4197ca88-89c3-4191-83f8-89977f936fa0", "value": "T1BD055C03FF545FEBC49FCD31496EC30601EDE4838AD1662971FC4B8CBA9965A4AD3988", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354144, "uuid": "23fe981b-e7c1-47d4-a5c0-cc79ff2ed60b", "value": "12288:5g9x5pmxSmK+saqgeaKdobKXxC0jhmckV996tmVGXCD7tFKVrAlbe3egJtn9bbxG:iVNPIWn8xf9pOhIzo/DQBT+ZuRu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354144, "uuid": "5b34d5d7-15d9-427d-b392-99ffc0631c98", "value": 836952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354144, "uuid": "26d7b582-8b0e-404f-8af0-5b8ec447a52e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354144, "uuid": "9026c7b1-8af4-48a6-b34b-f44181d11f7a", "value": "clientmipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92d64d7c-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354151, "uuid": "fd0f3096-2c64-4952-b0b7-a51293d65d21", "comment": "Malware payload", "value": "6775ea5f37a75af9a87dd93670a807f5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354151, "uuid": "0fb6a19c-9820-4ec2-8b77-0a089b7523b5", "comment": "Malware payload", "value": "ee5c26e3c2ebb0dda8da555eb02e6eda7e9f3d8654e03b4da8e60d819bbc41c1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354151, "uuid": "7a39de77-e99e-4287-8274-7fe181b558ab", "comment": "Malware payload", "value": "cad9bad0dfd18d6d031a8ae092c6609eb5a44b29", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354151, "uuid": "24906071-5a7d-4aff-a86a-b2ddea1ac785", "comment": "Malware payload", "value": "d9084a953b8166eb8edf822803996e027048bc39010ea7ef610701e1ff02c0a773a868c574f7fcac1f88fd91907e5315", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354151, "uuid": "8a99ec30-c473-402a-947d-bc8c9ba80a62", "value": "T1C0D43916F8808F62C5D1257AF65F86A8731347B8C3EB720699189B343BD786F4F3A641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354151, "uuid": "f57a1f53-e3e0-4d81-b17f-aa84c5c10729", "value": "12288:CtdQu3sFZVnQAQy6MrOBSV2jgpNxDKRubQT/WkE:cQu3sRhzrOwLeubC/Wk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354151, "uuid": "f2adbc54-ab8f-4931-8b07-02671dfb00d0", "value": 645204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354151, "uuid": "f1254fa7-d1fb-42fd-baac-94ede812c280", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354151, "uuid": "536acf69-fc95-4a74-bf1f-17df2b754540", "value": "libraryarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3e4a371-3082-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775347415, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347415, "uuid": "90a94d37-3b5b-4509-b954-3acf017eb5ff", "comment": "Malware payload (Mirai)", "value": "94946eff166c6c795b8a0f71f58d39af", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347415, "uuid": "9fa46f77-e0bc-41a7-8e9d-73a683e6ca55", "comment": "Malware payload (Mirai)", "value": "f0b2f26bbf14fcd1db5358c87fcc01ad71b1b850a26c7cf402c03c93a7f8e036", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347415, "uuid": "cfbe48af-7db0-4ef3-832c-5d6feec29e11", "comment": "Malware payload (Mirai)", "value": "6d4f39ed765f560633dd944f33a77413f8c02435", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347415, "uuid": "738f1b46-e54a-40ed-910f-bc3e5349937b", "comment": "Malware payload (Mirai)", "value": "36a59ccd481ad36ec5bf47f8dd759babcbc78f00f3b634d108c7c844cb65762c71369a6c8c289d8f5475fbc74e43471e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347415, "uuid": "ec9e064e-67dc-45be-9b67-19c63cd1dec0", "value": "T1E0A2E886FA958A03C5C52337FB0E47DE3B29174CF2FE77079E1A2F65634792A0A25052", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347415, "uuid": "7fcac7f3-52f5-4b83-8151-ee7d45ffd0e7", "value": "384:X3A98+ONT7RFT7gTyfAfNcWrcobhVIvWBYrAS0b7QRIAiISBFx4eq:XwK+FTyfAfNZcw0gXS0izj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775347415, "uuid": "a0942a6f-d50a-4ea6-ae95-a63872b4d847", "value": 22032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775347415, "uuid": "603968f9-dca0-4fa6-9300-4ebaaf5c01e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347415, "uuid": "9850dc1d-5e15-4e47-9362-df4259c5ff8d", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "625305a2-3120-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775415058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775415058, "uuid": "d946e88c-128b-4346-bb50-9b6e80f2ac01", "comment": "Malware payload", "value": "41e3701ac713daeb6a5f8c714fefa545", "object_relation": "md5", "Tag": [ { "name": "agent", "colour": "#33525D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Kepavll", "colour": "#0EEA41", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Kepavll!rfn", "colour": "#301EB6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775415058, "uuid": "e312202f-7ceb-4508-9d32-1fb27095effa", "comment": "Malware payload", "value": "f175f872691e65df0e1bac09da2683817c9884cc568d69ae9b2ab1f5b9c24ead", "object_relation": "sha256", "Tag": [ { "name": "agent", "colour": "#33525D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Kepavll", "colour": "#0EEA41", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Kepavll!rfn", "colour": "#301EB6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775415058, "uuid": "a37a8857-8048-4f47-b137-85aa6489ea40", "comment": "Malware payload", "value": "0de21212b766677c574bc58a79ca3587fca354cf", "object_relation": "sha1", "Tag": [ { "name": "agent", "colour": "#33525D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Kepavll", "colour": "#0EEA41", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Kepavll!rfn", "colour": "#301EB6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775415058, "uuid": "90e94258-7aee-40b7-b5cf-55264fccfb32", "comment": "Malware payload", "value": "cc06532eae0142e9ad927a15d539e61b7ab54811c467dc356f0e97e3a51fae425078a492d0f076889aee74304d5126e7", "object_relation": "sha3-384", "Tag": [ { "name": "agent", "colour": "#33525D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Kepavll", "colour": "#0EEA41", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Kepavll!rfn", "colour": "#301EB6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775415058, "uuid": "c2bc6e92-dbfa-49b9-84e5-42206eb97a04", "value": "T1DA448D45FBE508F8E866E1B9C9610A11E6727C111F749AEB0361B6169F337D0AC3BB31", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775415058, "uuid": "9ce8d417-bfea-4fe5-b370-aebf74a1dc4e", "value": "145798d5cc540a22086f6b70ba35c056", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775415058, "uuid": "b0881abd-1379-44c2-a593-fa40ad5f2c89", "value": "3072:oCHd+kKChcSHOcHXIS4ZkovIGQ8Z7RcvXV5JNq468pey3rGN1++uk+OPS7prEF/l:vu7qXhJbGTzuk+OUdo57u3quY0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775415058, "uuid": "3b95ad02-348b-48d3-a550-8827d1514345", "value": 257024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775415058, "uuid": "90a7fae5-6d14-41da-b66d-83aa2107f85d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775415058, "uuid": "bf37ef57-d22e-4718-ab0e-318f07b88ddc", "value": "PDFConverter.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9ddaf48-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354753, "uuid": "f94f6c1d-04a5-4cb3-a50c-79d7cd4bf59c", "comment": "Malware payload", "value": "f38c0f6b9c58ba02ffa7e628ec912ecb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354753, "uuid": "269818cc-ca43-41ce-9a45-e12b84f4d055", "comment": "Malware payload", "value": "f20a4cb6ba4a79f2a73eb058518d4a6b4bcf2a99461af48d76fcdce45f372938", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354753, "uuid": "cb104a97-ff1b-4e00-92a5-4a0f7bc123b6", "comment": "Malware payload", "value": "a3bf2c3777f14d7f09838cc90eab9bc3722c25cc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354753, "uuid": "8a92ea2d-2515-4d98-8984-ba863f0b632a", "comment": "Malware payload", "value": "56e25578e70ea0a93e175497d7337774b0434483b3e8e897244364b3363e783475794137092777102344539a439197d0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354753, "uuid": "209a6c79-bbb5-46f1-8d2f-ecfb0f31a15b", "value": "T122D4AD29F8047B07C8979279808FE428736BB245075233163846EA797E83B7DAF5D3D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354753, "uuid": "5b9dfcd7-c333-4a5f-9423-3fa09b0a870c", "value": "12288:lS60+bihhf1JrGlyI+MigncsdBZzZcroMw5npRXyriwZkDWlY:s60+qhf/GlyI+zgnJjLcroVeZMWl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354753, "uuid": "17fa03a2-92db-4854-8dbc-c555a09664d5", "value": 648848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354753, "uuid": "d3a4d4d5-0635-45cd-8e10-f1ffb27096a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354753, "uuid": "4fae8d0b-8908-42d0-bbd4-98bea9443391", "value": "ssynriscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a7fd879-30bf-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775373437, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373437, "uuid": "c16d88b1-dd47-47e7-b498-88c350f38b76", "comment": "Malware payload (Mirai)", "value": "cab1af79e501983b896a51e6bf5e25e0", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373437, "uuid": "5042cb96-9c25-460c-8834-c89f7d05b484", "comment": "Malware payload (Mirai)", "value": "f256da4be409350fadc4620c8b977355181562fd787fd3652f47080a5af54725", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373437, "uuid": "6af58f31-7456-47f0-9801-7edd9d963e6d", "comment": "Malware payload (Mirai)", "value": "906f0776a913f7b52a2d8176b36e7bc6710371a8", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373437, "uuid": "64a54a04-2cae-433e-aa91-f2505e692459", "comment": "Malware payload (Mirai)", "value": "9459659a6c482282e65c43bb30722ede2f73f39e1536309d4b9898c2c31a85df583d92ac06e2d043f0b537f41ae16249", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373437, "uuid": "462ed22b-3443-45d6-87ad-7696756ebdcb", "value": "T1353190C651E2546A3DE8D94AB16FCC1E7446768E25CA5F49B8CC30F6A88CD40F0C1F57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373437, "uuid": "cdc2e36b-d0b8-4efe-a09c-37734f817884", "value": "24:sF+RxvFtP3kF8MgApn0ttRV/5BCBMNzFEXUd5AOq:eEDt3kKMnp0tVxBCSNFGE5rq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775373437, "uuid": "2bf83e82-d494-4a14-89db-5e8d2c471306", "value": 1560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775373437, "uuid": "d479c48c-3e10-4f52-8939-fe279edff178", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373437, "uuid": "5f5607b7-5ba4-4fba-aa88-085ead3d5e40", "value": "all.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bce797bc-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354651, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354651, "uuid": "94540dfd-02bf-4769-ac53-70b172f545f9", "comment": "Malware payload", "value": "2395a59701c8e04850d61871bfadf36b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354651, "uuid": "5597447d-834b-4f15-b7ae-06387ee0aa46", "comment": "Malware payload", "value": "f264905beec86346e939b49b1966c8857c023962643bc46508673b3e40990134", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354651, "uuid": "2c57c5df-907d-4bd4-aed8-44e1c147b0c7", "comment": "Malware payload", "value": "78bc2fc8df8b82523d6808487c866bace440bea9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354651, "uuid": "d84a3b81-0252-478c-9d95-385d598ce0a4", "comment": "Malware payload", "value": "dda3e74887e6b3c3a5eed5b93ee9d92273059a3cc6267fbb6ef23286111e986fde9e12afffbb807733fed596e8cd693a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354651, "uuid": "a904bb08-e75d-4fbc-917f-9e9a42d83c3a", "value": "T11FC54A19BC5C2852D5CE66726E7213C43339BC485F81D33BAA18B77C6AF27988F17261", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354651, "uuid": "56148cf1-34ee-43bd-b937-2e5056ae2816", "value": "24576:YnyvEemU/kb2Dky2nG1LEgzsplvHFXLgZ01vL+w9kWg6nc0xaqB9uFYpPtu0vU:qemU82DmOspJFAckOGY6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354651, "uuid": "7da6bad8-53fc-4a2c-aad6-30c98de6b36b", "value": 2687138, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354651, "uuid": "e16333ff-0225-4e09-8d84-bba63db6e6fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354651, "uuid": "4a247ffc-c5a3-4d44-8ff2-c4a0a6c8a134", "value": "mclibs2arm64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a463902f-313d-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775427624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427624, "uuid": "bb2578f1-ec2a-47e9-a64b-5c7ef6c27557", "comment": "Malware payload (Mirai)", "value": "fd61451552a18ead4e4c7a9c16d0d8e9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427624, "uuid": "56db90e3-ee53-4ef2-9223-1e38966ed36e", "comment": "Malware payload (Mirai)", "value": "f2c28ad893307e35401bff5c2abff5622188fd83da5133e8fc812d094be3240c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427624, "uuid": "c650d67e-76c4-4220-bbe0-4ebd947f243e", "comment": "Malware payload (Mirai)", "value": "b8a186a295a391ccd3f146c64551e98b89b2288c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427624, "uuid": "9e209b84-89f0-4044-abd5-2723abe07d5a", "comment": "Malware payload (Mirai)", "value": "508fbba9b82b3b07a840ad256d905488df3b71db55a75fad22ad5a62dfd0a1114a203edf34fc78921337b18bbc76e7a3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427624, "uuid": "5624d34b-f6cb-4f31-b1f2-cf6283ea7b76", "value": "T15F63511E2E618FADFB6D873447B75E21F24873D212E2C640E15CE9015EA034E785FBA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427624, "uuid": "dc1e3f5b-a356-4a37-bd2b-a121f85f2689", "value": "1536:qZSWtG1Oyu8jDZA+vDMNYdDiwZwnUwbZnL:+G1OMlAbNYdDiwZoUwbZnL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775427624, "uuid": "e29d0800-b01f-46d5-9aaf-6ae23afc6e07", "value": 68008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775427624, "uuid": "5c874010-c773-4ce7-8a96-e42e1f0976a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427624, "uuid": "94179587-12c5-4acc-b2c2-c7da3980edc3", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e7f2267-30e3-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775388879, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388879, "uuid": "e0d5d2e9-b1f2-42d2-bf04-9e1201dcc5ff", "comment": "Malware payload", "value": "f90eb431e9050b6455d36161fcc8fe96", "object_relation": "md5", "Tag": [ { "name": "adamrat", "colour": "#B066C1", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388879, "uuid": "1e211cb2-9297-41d3-80ed-b9a99f48ad27", "comment": "Malware payload", "value": "f2ddbcca6683eed8112b6213e330674f31d167794d627ff65fa144043ca645c8", "object_relation": "sha256", "Tag": [ { "name": "adamrat", "colour": "#B066C1", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388879, "uuid": "90420850-a60e-4e07-9e67-78f01746c9f6", "comment": "Malware payload", "value": "7beb13bb68ae4c6de8ecea5c20673a9b8dd46eac", "object_relation": "sha1", "Tag": [ { "name": "adamrat", "colour": "#B066C1", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775388879, "uuid": "9a4e575e-60ee-46cf-ab7c-21af418bc683", "comment": "Malware payload", "value": "e8d22fe49bc1e8c80b260f9515622fe029b18114b5d4902c2ba011f0e34f7b72363ce5281c735fa5d61091b183dee266", "object_relation": "sha3-384", "Tag": [ { "name": "adamrat", "colour": "#B066C1", "exportable": true, "hide_tag": false }, { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775388879, "uuid": "ee8ebc2e-9f46-492d-91b4-522f251b95db", "value": "T1A1B4335334B78E21F9F1E6F10BB7485B808F89E5E45A3C6A90134270FEA5B60DE55D8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775388879, "uuid": "2923db2f-c860-4b45-8862-637f83a24f1b", "value": "12288:DYEfvBGKEgKL+vxnxH5ZcXX1A2O39g0HZic6lfro/KZABK:0KvBGTgg+ZnxH5Zt2yFMcm4KqU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775388879, "uuid": "f311c3b3-6edc-47c3-9090-dfbe24ba6502", "value": 515861, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775388879, "uuid": "8f8a306a-b234-485c-9454-e527666777f3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775388879, "uuid": "10858d1b-460a-4977-a2e4-6272f5eb4e80", "value": "37360cb4e_Dupe.jar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "754c22df-308e-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775352383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352383, "uuid": "d11cdb55-4cde-4e90-891a-5a3294688d8e", "comment": "Malware payload (SalatStealer)", "value": "4076050714a4cccf43f3aa121d7ae99c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352383, "uuid": "4516152a-d54c-4af8-81fe-23c2d8e58b07", "comment": "Malware payload (SalatStealer)", "value": "f3144b674542f5bf6f44b97788be90793fea96b37865e0df8a1c2dbb4673c51e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352383, "uuid": "984c9d44-db81-4041-b187-9555c61a80ff", "comment": "Malware payload (SalatStealer)", "value": "564892b3c0fb457f5db61812ba3584610f993651", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352383, "uuid": "82be6683-2262-4fd6-9837-74e608d974b9", "comment": "Malware payload (SalatStealer)", "value": "46d9c7984a58d348149ee9f4ade42704dd38c11ef1ebbf9ac2204fc4ffb01c5049c2ea2090832862b2815286428a8b33", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352383, "uuid": "82e93887-3bca-400c-83e0-fba7d71570c7", "value": "T1EAF5335D2D7BB446E003FE7BBE6E4040A2F5B066DF9277A770ED666EE81105A34A3430", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352383, "uuid": "741bc618-4545-4de2-8c11-6e67ad8dcb08", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352383, "uuid": "043107b4-4cde-4353-bcd2-660305e17f28", "value": "98304:ciTrjTUdxC0mZzYG1wBquzj9cFl6YBW8lhSy:cms37IzYG1wAYj6FhZlhh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775352383, "uuid": "941121a6-796d-4f21-a95f-9f9007b5a4b4", "value": 3593216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775352383, "uuid": "a9dc51eb-c93e-4824-a652-e8272550f378", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352383, "uuid": "e15dda1b-5b8c-405d-9a3a-1aaf6085ca1e", "value": "final_payload.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c780782f-311d-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775413939, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775413939, "uuid": "96596ec0-3217-43e5-b0de-0e4454590038", "comment": "Malware payload", "value": "fb73111efb77afa41ec827a617fd2161", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775413939, "uuid": "c289e130-428d-4c21-9573-c3dd5bf61421", "comment": "Malware payload", "value": "f335107023250d4593fe3f0172f5812d46ec18a686d4194b2b238889e8a6c4a9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775413939, "uuid": "289038fa-5c58-4cc9-a17a-5d26adf6ea2d", "comment": "Malware payload", "value": "4a651e86377eea5e8823603a6f8f7e06a227a7a8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775413939, "uuid": "e38734d5-94d3-4045-93fd-793a959210b0", "comment": "Malware payload", "value": "2b8deb1bebb9d7f5494e195d6a3d7278558527d91cc3f0a35f6c820ff55634f6fbd32c1daa8fa45d60a3e5ced0edea7c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775413939, "uuid": "483df87f-af7b-44b6-8650-dc20d36fed44", "value": "T1A28733DA63809CA9E802513B90CBEDA9D953E95A9760C05B4EE450EF0F477E5783FF08", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775413939, "uuid": "b050f2f2-21da-4e35-9817-6f3da1d231a8", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775413939, "uuid": "792a4b9d-9a44-490f-bc87-05bafbeb1c67", "value": "786432:xS8LcqPIFlUR1OAaJwMgM+fsdQHOjTNGCgaBzRxpk3MGYaxgiKMBAYUT/geb:/L1wEWAaz+fsAK4QBzRvKMGYSKqAhzNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775413939, "uuid": "f4fc0e2d-7ac6-40b4-a358-40e45721a632", "value": 38419170, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775413939, "uuid": "17bff8dc-db87-48e4-a446-57c87157c7b3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775413939, "uuid": "136fa155-18f6-41b5-b711-357fea970d5f", "value": "xeno.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f560a19-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354574, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354574, "uuid": "08c4cab8-75dc-4a8e-950b-2330d7ccd3b3", "comment": "Malware payload", "value": "89274e34a8fe3c9cf3149f02455f1704", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354574, "uuid": "e47562ac-b8ad-4b95-ac33-45905000244f", "comment": "Malware payload", "value": "f36b190f329eb18fed51f0cd1af8a7ca545518e77db5b970c5f6db040554d9a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354574, "uuid": "9d199d3e-73a7-4e31-a510-a18bfc44d515", "comment": "Malware payload", "value": "e0107a30bd803d702210e4df3f1c6b50a1286ebf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354574, "uuid": "caa8b4b3-3180-4a08-8a23-dfad59b24ac5", "comment": "Malware payload", "value": "9352b5191f2d50b8dd3f8743bee85d8ab939d6488ff6220082592fc367b99a8e01d62d8378a18506e8dc75a3146de9e8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354574, "uuid": "05a2c544-3eec-4401-981b-5b610d2726d6", "value": "T104F45C89EBC294F1F65300F10A8FD7F20A64921A5053FBF2E74D2A6774727926E1636C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354574, "uuid": "65113a00-aad9-4c93-ac6f-66eeb981a100", "value": "12288:st6eVHphnRhPwnKuDuTo7gx6HIaJQKHcwWai5PxmMP5PyupnMTmmOLu:86QHphnRhonKuDywHlJ/HcwWaCPxmMPy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354574, "uuid": "4e0aa400-8fcf-46d5-9f07-cc6f35e06a28", "value": 775232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354574, "uuid": "ea4a20ef-9bb5-48e2-9861-15cc64308488", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354574, "uuid": "38e9cc1a-6b42-4320-b254-07fa8ca380c0", "value": "ssyni386", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "850f001a-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354557, "uuid": "bdddae84-273d-4124-adb4-a538009c919a", "comment": "Malware payload", "value": "80153202fa52f619936eeb13c22c5bb9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354557, "uuid": "1e765693-0b58-42f6-b3bc-5f191e58f5fe", "comment": "Malware payload", "value": "f39f51685ce78b30f4606fda44c325d164e980ffdbbb1f8995f3fbe9efb1050c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354557, "uuid": "4ebf9f02-1a60-44bc-a35b-5fc59e7ca4ae", "comment": "Malware payload", "value": "521456436d204ddc52fc0f6c7ec8fe45f55dad66", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354557, "uuid": "d1ae872a-2471-44ed-882e-d23bd9be2105", "comment": "Malware payload", "value": "8ba5423367fa2e749b95ed6aee203bb660ce22c335fc5c6ec529ba093bd42887cbf4c89756c1db78d938c19ad884a1f2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354557, "uuid": "c6608e63-6730-4412-8915-e0e98eb0b7b5", "value": "T102F45BC9EBC2D4F1F65300F10A8FD7F60964A21A5053F6F2E78C2A977472B522E17269", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354557, "uuid": "aa6553c6-bda3-45dc-a9a1-5987e13b7838", "value": "12288:O0h0CIIGh0Kh3C8avJWdqchgHyjlH7Vsc38dm4bVPyhdMjURjMLu:bhlIIGh0Khy8avJw2H0lbVB8dm4bbQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354557, "uuid": "6232b83e-7d45-4730-a3b5-dc3ad3ad60f9", "value": 775232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354557, "uuid": "6ba6c3ad-d61f-4b1e-9c3c-c907efecfb85", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354557, "uuid": "8a83d88b-8fe9-4501-8e7d-d41cc2801b95", "value": "socki486", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07e06421-3094-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354777, "uuid": "1f9ba6df-7fa9-422d-bd61-55e3debe74b7", "comment": "Malware payload", "value": "c44d24cef52e7a81c851fcdc78fb4097", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354777, "uuid": "e32bdefe-f7bd-49af-8f83-a5d040fc245d", "comment": "Malware payload", "value": "f40bd1f31128ff84c09081510ae7a168f8035a375029dca95495f2eab4a5b55d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354777, "uuid": "4c6f6f1c-7254-4e95-a268-9cbe41cbe1c3", "comment": "Malware payload", "value": "ac33da51a42c2c342cb330ad9a22174904cd91e4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354777, "uuid": "773a363e-c6a5-4e82-9758-25fa59875a23", "comment": "Malware payload", "value": "fc55731852b0de9ff9de1c79448563c05b68cf0d3221823ce7142ea54fce075421e146bba5b695a6100a5b159e810817", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354777, "uuid": "92121205-f732-49dc-8ffc-e54710e2acb7", "value": "T19ED4AD29F9447B07C89752B4808FE428732BB2841752370A2846E67D7D83B7DAF5E3D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354777, "uuid": "62589c5b-58fa-4dba-a49f-4bf20f93570d", "value": "12288:jK4+eERbwLjabhXF4fPlyXmAoaI2HOw5KpHZCNZZp4WlW:jK4+FRgabhXF6PlM1o52HKQHZCWl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354777, "uuid": "d20ab8f0-af20-4a12-9147-aaab4ff35507", "value": 653664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354777, "uuid": "8811451e-4298-4160-8227-749eef7731b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354777, "uuid": "b381b077-323d-4894-b613-3130043725ae", "value": "siriscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89a7909e-308e-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775352417, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352417, "uuid": "0dc21bf8-7a3a-4aa5-86ee-96b672dcc2eb", "comment": "Malware payload (SalatStealer)", "value": "b0384a7747e0a814b7aa1d55c90b7394", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352417, "uuid": "8fabfc6d-8f2c-4b9d-a6c6-b8bc6cbdacd3", "comment": "Malware payload (SalatStealer)", "value": "f4567d9db7c08827a8463e68812e3a6c5d5742d57ca97d78be02a796c0c42136", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352417, "uuid": "43c49d33-e182-468e-8818-1f87f84c60ea", "comment": "Malware payload (SalatStealer)", "value": "171e6b1a7be7fd52ac166831f78141cdd0291b5a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352417, "uuid": "86cbc96b-29e4-4562-ac96-9a0be03a7ea8", "comment": "Malware payload (SalatStealer)", "value": "a1b7327811ab4e99315da4dbeb0b506f36b97f23f09b1a1d5b3681ff291b50c5df4fa25890e45bbcf025d3c809479f46", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352417, "uuid": "9a3bc20b-4c12-4827-87a3-aa057da3e497", "value": "T19ED65B51FA8B55F6E9035832446BB23F27315C048B28DB9BEB487F2BF8776912876305", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352417, "uuid": "7fda5bd1-a025-4122-b458-8e4a14e9387a", "value": "98304:JHt+korx5YSaviJmIrUV+C3ou4+G2If9E:yk+0vMVUVtYueW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775352417, "uuid": "3cec1e6b-7e20-4a57-adb9-ca7f967af8f9", "value": 12923904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775352417, "uuid": "739d7a43-c86c-4a3a-be89-5eb1f02b1ebc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352417, "uuid": "0ec93bb7-cb1e-43d7-afac-49d2f113d230", "value": "jjdg8ny.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb61c524-3090-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775353387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353387, "uuid": "8b6c2d22-3922-4810-9262-ed6ae3432ac6", "comment": "Malware payload (Mirai)", "value": "1478b4d2cf979dda6b279ed83315c0ba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353387, "uuid": "065a8aff-99f8-49e1-a0d5-aff35adeb46a", "comment": "Malware payload (Mirai)", "value": "f4814c2f30e6131789c31ba5219252de9c6fe92c373a62bf878599e9044c2477", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353387, "uuid": "e19e5631-b10c-4e24-b179-765e636ffc4c", "comment": "Malware payload (Mirai)", "value": "33aa4742bd132b8c87beb74457a03e623eb658f8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353387, "uuid": "aff39c46-2d02-4b9a-8e8c-4e24daaf3588", "comment": "Malware payload (Mirai)", "value": "d6aec8b995013aa61c5111283394246f9a070a77406806af86b024ce56276089c0f07728b6a5b111f0336d65d8774880", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353387, "uuid": "7238ab6c-97bb-4047-bfd4-b5ef15c62802", "value": "T144634A27BE220E17C4C375F922F30B34E5B9AB9E2CB846167C612DCDAF645D031167A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353387, "uuid": "68636e16-81a6-439b-b608-ce99be639182", "value": "768:dESTo8tA1Z1iR06CppgDbO+s5VqH918PE91tNe1ttnpWQiIh:dESTo8tA1Z1iR06C3is5aztYttnAQiW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353387, "uuid": "d9e2ad5f-1ddf-42a5-a328-b5ca8143a5f6", "value": 69464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775353387, "uuid": "1d9ec88c-5d98-45bd-9c1e-9b67e20eafc1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353387, "uuid": "11223c0e-8120-4cc5-a8ed-d20e9583d4f2", "value": "mirai.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "740e4587-3139-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775425825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425825, "uuid": "629fccbd-9671-438b-a717-144df4af20fe", "comment": "Malware payload (Mirai)", "value": "a0c096a121a46f711f0800352fc5487c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425825, "uuid": "4dd91659-ffea-4e17-a0c3-c0674dcfa8d2", "comment": "Malware payload (Mirai)", "value": "f4b3f661c0002caeae308e75a5473b96c78c0513eed795121f10cfafaf6bdf77", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425825, "uuid": "d2de0442-f078-4e2d-bff9-4927c1e9db1b", "comment": "Malware payload (Mirai)", "value": "33ee0540881495e98d56383ec6cf4417ef1aba47", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775425825, "uuid": "2098e482-ccd2-47aa-b2e7-e554c7eff810", "comment": "Malware payload (Mirai)", "value": "eace29c68cde64a110caf4e0557699f3b4e97b90c8698923fa22c356519e6bac73d90d9e72e3c4b072d9cec323370029", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425825, "uuid": "da424c68-1466-47d6-8c1c-aca7c12af3fd", "value": "T110931986FD819F01C4D220BAFBAF41493313ABB8D3FA71129D249F65238A9D70E77615", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425825, "uuid": "d998438d-e5f4-4822-a550-6dca1d828d70", "value": "1536:eCnPVQdF66r2MdJ9gKFmlvOPGcUrUGjnbPD3LhS2A2hxE9VuTksquUZac2CdHZnc:NoQgAmvU4kTWuUZac2CdHZVgolTkZkRo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775425825, "uuid": "7035f16a-c512-4243-b154-816dc84e629e", "value": 96116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775425825, "uuid": "bdf88a6f-5c36-4c51-a855-4c2798405dd7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775425825, "uuid": "3135fe23-25eb-463c-b18d-27d7637c7ceb", "value": "mirai.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab4fa935-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354621, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354621, "uuid": "baffd21c-85e8-4513-9b6b-7575319ebf21", "comment": "Malware payload", "value": "ad8acfc47af3db978c50b440d191ad3e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354621, "uuid": "bb09bffa-6641-4e8d-aa6d-0dc8eec1e224", "comment": "Malware payload", "value": "f5ca8759fead0bf395a0925c30d9c79d71fdaedc9657acf799b1004a2ac64a95", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354621, "uuid": "6bcb658f-9fb8-4447-b476-f1ec22574420", "comment": "Malware payload", "value": "63c20b3eb73e7f06dc6d6c1edb9cce2579865b55", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354621, "uuid": "071b4206-c28a-4cf0-b663-ca70ce62a6e7", "comment": "Malware payload", "value": "4be5ec5677ba327484e786168c01894d67e5186025900316c21acd9363b5b3f87e62cf70cc39ebed92ed8a9c083e8dcf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354621, "uuid": "f9eb90a2-02a3-4264-9d03-8095ab279825", "value": "T180C527123B69EB0EE11862301DF1DBD86B291C8902D6A517F746F319B9F306C4A6EDF1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354621, "uuid": "040146b2-4257-46e8-9baf-a50f5fae8dc8", "value": "24576:eTfqnRvdnFE5eIW+oDAMSnFTsdsNWHBzlA0hgVrULXGFVp9OBQ53V5A98PhPms1:eTf0XC0hL+fPBPNmi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354621, "uuid": "4b39f0ed-bcd0-41f3-944a-6fefea9efd8e", "value": 2621633, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354621, "uuid": "3a90dd57-2772-486d-a2e2-341e2f1c8f25", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354621, "uuid": "0b1d20b0-62bf-4d13-a392-4ac99476babe", "value": "mtdmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce30cf31-30aa-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775364558, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364558, "uuid": "f7479783-dec5-4a18-a0ee-6f8096f30a33", "comment": "Malware payload (Mirai)", "value": "42a71bdf556cdd04fd9c83d4f8cf640d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364558, "uuid": "410fbf28-b503-4a7a-884b-b58a2060abd4", "comment": "Malware payload (Mirai)", "value": "f5f7aa25cc0002fbe612fbb03bc50d2b5d4f302d425e23639061f98c7941bce8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364558, "uuid": "6fc5b5e2-4d23-47ea-9166-6c68fe544d0b", "comment": "Malware payload (Mirai)", "value": "4d1df40d2e6dd43f3bea333e467e76ccbd8e270e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775364558, "uuid": "8e32d019-0d40-4163-9cd3-0dca13e23a5a", "comment": "Malware payload (Mirai)", "value": "7480bbfcb68a244e7e201fa62d3418e83fbeff3c65a8c58bb1e215543fd726efd885e56857dde9b4835c6f17b219acbe", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364558, "uuid": "c5e8283a-5696-4663-bbbe-59c9521f218d", "value": "T17673A409BB600FB3DCABCC3705AA2B0139DD665721B97B36B934D918B90B25F15D3CA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364558, "uuid": "613e18a4-cb2f-45f3-b556-b371ceebc5b5", "value": "1536:zJPEBmW5iNWqcGTkwnXHZ84OqdZerEStF:zJPEB8NWq9hqqd0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775364558, "uuid": "04a3b59e-3a22-4b1d-808e-150fbe93cdee", "value": 76120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775364558, "uuid": "df0fdf6b-8993-46a9-a36d-1b3bb29c4129", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775364558, "uuid": "c93ffd91-60aa-45cc-a082-d5a3b5628869", "value": "boatnet.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ae06d67-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354594, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354594, "uuid": "90a144d8-301b-4faa-a974-3a01714b0ec5", "comment": "Malware payload", "value": "6dc3b3cb05dba816a09a1325d2f02022", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354594, "uuid": "f0efdac2-4b17-480f-83d4-af29dbb39d67", "comment": "Malware payload", "value": "f65ee8c702e45de5d11c321fae5ec94106cd2957da705d55a192079aab21aaf3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354594, "uuid": "48e02f57-7667-443c-aa5b-e9813c311228", "comment": "Malware payload", "value": "f6c3382dc2d4b7986f3b231d2b2c80fbab40f5a8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354594, "uuid": "10005fad-ac2d-4ae6-8398-dad865ffbd61", "comment": "Malware payload", "value": "c8326b166c14ee0fc28b2319801035046cd56f92cb9b6beff9a97b6128c51cf16cbb082c0e60e649765b3b0679bdb5b3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354594, "uuid": "3a6f5394-97ab-4eb6-87fd-2f5f8cad5f6e", "value": "T12EC52810EDCB18F3E5032A3119ABA2AF27315D454F24EBD3D644BA79FE7B6D10836219", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354594, "uuid": "22f938fb-493a-4aa2-9dae-f5decc768c20", "value": "24576:PiwoCNb5WeZFF8qJrPkjllraeMkjVnaAWI/G+OCcMP2RrXbKiW2eZkSYqPlbox4J:PiwoCFZFe8sT+QvDlc/IQHTzgGG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354594, "uuid": "db96281e-30c7-49a4-81d7-2d1e843531ca", "value": 2523298, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354594, "uuid": "9d27d896-4f1e-4296-b451-926e1925c731", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354594, "uuid": "aa3e4792-90f8-4429-9bbf-9b8c8e81696c", "value": "mclibs2i386", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3c31b8c-3102-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775402283, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402283, "uuid": "1ee9aa23-e3ce-48b6-ab4e-6c6b96a1e4b4", "comment": "Malware payload (SalatStealer)", "value": "e31c2fadc88b7db0ca381342e9ded5e9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402283, "uuid": "55f6a503-f9da-42e0-9562-82f2747078be", "comment": "Malware payload (SalatStealer)", "value": "f67eb95ce64c072a33e24085bcd1bf1c98c8b4e07baff6be1327b446eaf073e4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402283, "uuid": "bcd80479-dacf-4b59-8df6-b3ecb1997f99", "comment": "Malware payload (SalatStealer)", "value": "0ffc77ff7a0b085032a0452e9fd02997a1f88118", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402283, "uuid": "6387cf3e-5b08-45c6-afb4-997c3fbe67bb", "comment": "Malware payload (SalatStealer)", "value": "f8eccda2d71725c92f6d6ecbc4abd6bdb1743d1319f3fe04059180c124aa17c960b3e0fc4ef8498c3d2e7b091be2edb7", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402283, "uuid": "054adf64-a614-4bdb-ac61-f574b5c40f05", "value": "T122D65B01FE8B55F6E903583141ABB23F23315D048B28DB9FEB587A6AFC77691187A704", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402283, "uuid": "b693cac5-fdbb-4f30-a8cc-6f2bb3a1b6d1", "value": "49152:6yZmJZtsWZQu0HKvY0SoLkNKsio/GCQsJHEi14StdGrhrXf3A39PGsL/aV6kVhtF:nmDtrvYPgeKW/taBz9VmK4d3HVdpE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775402283, "uuid": "e3290ab8-18d1-4994-855d-a6b2ba4920bf", "value": 12920320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775402283, "uuid": "d0d70016-e95e-4654-9376-eb6b08e86713", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402283, "uuid": "47c65851-b39c-4002-954c-08b69d2fe829", "value": "2jwdk77gt.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbb9986e-310f-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775407906, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407906, "uuid": "894c63d1-74f4-4e62-815f-52d6109983f3", "comment": "Malware payload (SalatStealer)", "value": "39523eb9e8c457bd7e203ee42f166a2f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407906, "uuid": "d14a885b-da97-4d26-9c56-7bbc0b98f4ab", "comment": "Malware payload (SalatStealer)", "value": "f7523a436e2345e64b24b32a2e2a3d8536eb7a9409e37968966edfe0ede6a003", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407906, "uuid": "b5c2962a-c3cb-4a30-b378-902e22c7048d", "comment": "Malware payload (SalatStealer)", "value": "1bb0276d4e42cb0ca736974dc771d8763e3d1faa", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775407906, "uuid": "c7e7fecf-ba30-4853-b70b-cabb1241880b", "comment": "Malware payload (SalatStealer)", "value": "8bb854be0fe1e770653abb046baa6303837c26efeea0ba2ef3a952444f17e3a1f56cc5012eed023a45b570c1b13a6049", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775407906, "uuid": "641bf3b4-97da-4f8a-870f-2b2b794259cd", "value": "T1FBC65B41FE8B59F9E9035831409BB23F63316D048B28DBDBEB547A2AFC77691187B604", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775407906, "uuid": "0697894f-5ca0-4a1a-ba28-328d21eabb0f", "value": "49152:/MI1eLUjv4XXqVw/Dn4ZhNEULHTp7Wji7XqPZ/5088WeBELr/Nh8O4J76WUReJuv:0CeLU4qSeH0HN80aJP0MPKPiRqRI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775407906, "uuid": "5e53670a-160e-4dee-8d54-0e37a28636e7", "value": 12054528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775407906, "uuid": "ec15d9b9-58f6-45ca-8950-f61358d208e8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775407906, "uuid": "0fc0a9fc-69a6-4534-9264-cf15cbe536de", "value": "salat.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81190dc2-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354550, "uuid": "3597574a-7a4f-4063-be97-d013c1dab32c", "comment": "Malware payload", "value": "fbb5450bdc8404ed0fee3154999addb2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354550, "uuid": "72757fd4-5aef-4389-8123-95d985f688e8", "comment": "Malware payload", "value": "f775c30777e86c7439051a18be32e12baecb01ad911559d5c8fb26dd130fe7a4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354550, "uuid": "2cb04c56-7665-46b6-a6bc-d5ed0cc41d03", "comment": "Malware payload", "value": "8a76e63154c6069e906ca1ff451f23238d6d0642", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354550, "uuid": "a16fe361-ce50-4c8b-8964-0f6f6567a87a", "comment": "Malware payload", "value": "8c88f97cf1a89e9d75a6f919c6990737a80ec9cd0ad114f1785d8f01ef175aa9cc2edbbdedd58af4625f56f585776b6d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354550, "uuid": "8d76ec2c-78c6-4539-8340-b5a65714ede3", "value": "T16DD43A16F8809F62C5D0297AF65F82A8731747B8C3DB720699189B343BD786F4F3A641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354550, "uuid": "f6571af1-1c66-42d7-bac8-0631a3dad263", "value": "12288:VppulDx+pQ3hC1ABt+9D1EQgpL+EF5FkE9fQcB:VvulDxIf8t+xCXFkEZQc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354550, "uuid": "91770290-362d-4498-a88a-0f1705d60dd5", "value": 646220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354550, "uuid": "3ecb11fe-2eea-45bf-b717-49525455606d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354550, "uuid": "88522f4f-000d-4a22-b6a5-d682ff290a3e", "value": "siackarm5n", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08613ac4-313d-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775427362, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427362, "uuid": "c05a173e-9c26-4e4f-9b54-da6a428111ae", "comment": "Malware payload", "value": "0a37e1e4994d6d24576d505efa15da1c", "object_relation": "md5", "Tag": [ { "name": "BB5.file", "colour": "#184530", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f", "colour": "#3E9B70", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427362, "uuid": "a4a5272f-5e92-4a33-a14f-765dcb11d63d", "comment": "Malware payload", "value": "f7e6b836a488e7e96ba82d4bc983bf05f9a96fc34a00bb194a522099b120abb5", "object_relation": "sha256", "Tag": [ { "name": "BB5.file", "colour": "#184530", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f", "colour": "#3E9B70", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427362, "uuid": "a87de76a-f0ad-4b82-bbf1-08a842cf8d4a", "comment": "Malware payload", "value": "2cc4c93b248278885ec7667fa607981b345860a6", "object_relation": "sha1", "Tag": [ { "name": "BB5.file", "colour": "#184530", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f", "colour": "#3E9B70", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775427362, "uuid": "dff0543e-175b-4c0e-8608-d4f7253098ce", "comment": "Malware payload", "value": "f0abae9b339609d19147fcc3fdc42e4689187734d1de7253633884a7e843e682df845b3cc4b73bf81dc360e5d3142819", "object_relation": "sha3-384", "Tag": [ { "name": "BB5.file", "colour": "#184530", "exportable": true, "hide_tag": false }, { "name": "dropped-by-gcleaner", "colour": "#0F0C07", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "f", "colour": "#3E9B70", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427362, "uuid": "2a22c259-025a-426d-8a10-6d817fabeea1", "value": "T1A585494BBC9409FAC4AA92318D7661927B71BC490F3123D73A90B37D2F726E06DB9354", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427362, "uuid": "73a08558-aabc-4046-9408-32609856f780", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427362, "uuid": "bb379fe0-5463-45b5-9a3c-952de7813cd1", "value": "24576:2iwCUJj4XX/cLfroZ4XCwiUGLRzlBeleX7KDg77VzSWjZun:2iwFl4XPGrRXCwyLXXWn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775427362, "uuid": "176caf59-4335-4ca0-8eea-f58ba94a7595", "value": 1819136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775427362, "uuid": "cb53436c-bddf-4e00-a423-b055796896d7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775427362, "uuid": "6733a16c-b1e7-4f3b-877d-77bb60512709", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea3ce6c1-3082-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775347425, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347425, "uuid": "ac30bde1-094d-4d50-bf56-e0016ea06ab7", "comment": "Malware payload (Mirai)", "value": "9ad73d06a8c95a603ed7a27a61b51cb4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347425, "uuid": "4d07f581-2608-41a5-b24e-ce3ff6c5b916", "comment": "Malware payload (Mirai)", "value": "f826ddb251e79bda62288913e9da072ed66742f43e367baf57ed0b6499eca626", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347425, "uuid": "f0aeb608-6f00-4b86-a32f-c8293d18bed7", "comment": "Malware payload (Mirai)", "value": "777215df3c1950656dafc3c6ccfc49ddd4f371c7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775347425, "uuid": "2b92b71b-6bca-401c-b77f-6fae4d3f3052", "comment": "Malware payload (Mirai)", "value": "4b1dc276131371a150566d4f2b1e59ab72121bda1e421de2e2dd6b3bf2877127fb0eb10bd2b14dfa48504e4569360ac4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347425, "uuid": "1678b959-2077-47b5-aa92-4c20f2af9295", "value": "T1A192E842731D0857C27B7EB0363A6AD0D3AFAEA422D8E285761F5E4AC176E320185DDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347425, "uuid": "70e32980-2863-417e-8927-d672b2aa2a31", "value": "384:SIKrIbxs6xROy9s2+Ftt+qMT3TtG4NSK5dDckdt6:ShrisQ9j744gydD7S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775347425, "uuid": "38ea8ae5-37d9-48b0-87c7-6fd7382ac15d", "value": 20800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775347425, "uuid": "fdd20e57-c01e-4b60-8732-23aabb783e6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775347425, "uuid": "93de13fa-adcb-41eb-a134-31d055caef3e", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2186781e-3119-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775411943, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411943, "uuid": "34970857-c600-40c7-b3e0-b7a5f75b6f4b", "comment": "Malware payload (Mirai)", "value": "234f09c0db9a09274fe953e5dd372aee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411943, "uuid": "ac2cf383-6a91-4e3e-8750-b42b6fb05046", "comment": "Malware payload (Mirai)", "value": "f8f401de5b4680239765fadba925da44013794a8504fb2560e60dd0ccd768bf6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411943, "uuid": "e95740b1-c17d-4ed7-8e59-cad77504a24c", "comment": "Malware payload (Mirai)", "value": "a89c94c0b7201493b38268d4ebfcd48ede9bd351", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775411943, "uuid": "2f4fc4f5-b61e-44d2-b5b2-5df8563e67b6", "comment": "Malware payload (Mirai)", "value": "bff1552197bc8869de251dc94686a8648e907563c30add44c6f93ad96a2f49c7d2bd22d3b958bfc1fab43dbc7b3a71c0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411943, "uuid": "06a73dd0-5917-48c8-b05d-5a8349dbe8b5", "value": "T1ED143A02731C0A83D15B6EF02AFB17F183ABED5119A6A544F62EFE845332FB15509F89", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411943, "uuid": "0bf75396-0858-4c22-9b0a-3cdadf00a83e", "value": "6144:P8f8ooqFmz/xKZN7gjl8ZV7FdZmTK4+Ehj681A2hNNmt1:UkooqAagp8ZRVmTK4+Ehj681A2hNNmt1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775411943, "uuid": "ce274d8e-fb92-4fb7-aa1b-9fb28e01086e", "value": 208360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775411943, "uuid": "48cd685b-f5ce-44ef-8fa4-3a828e772810", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775411943, "uuid": "47f3036a-d95e-4ee9-9066-a9045e3b440a", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08ebaeae-30c7-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775376683, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376683, "uuid": "5a04c669-69ab-44f3-bee2-6d8512938239", "comment": "Malware payload (Mirai)", "value": "af6e5d711a73f3fa08f8c3f62e0074b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376683, "uuid": "84c53929-c8df-4ddc-83a9-099ecf80c4d5", "comment": "Malware payload (Mirai)", "value": "f92effb9deef1186db7860270e6b5ad7caf147fa996ae1458584f6d0a5a49689", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376683, "uuid": "dbdb06b1-921a-4cc9-b96a-4ff0874a903c", "comment": "Malware payload (Mirai)", "value": "20a55c4a4d8fd858c670cf8f37df97c7d5f26b63", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775376683, "uuid": "d1b59c52-74dd-450e-8c99-ab4e260cb00b", "comment": "Malware payload (Mirai)", "value": "5e73aeddc5c9d6e2d238aab60f94f53299271093e45c510c151fb2e3c0054476ec406fe6f341a34a87d01985712f97bb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376683, "uuid": "8dacce1b-6eff-43cf-adab-c6d686d7ef0f", "value": "T1D1C3ADC7FA8714A1C86206F003C70BAD6F93A112CF5FE4E7AD1DA53B5A7A0DA19167C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376683, "uuid": "024c53ca-032c-466f-9bf4-0e4f3af8db2b", "value": "1536:/PcakPsaaavKaSMvcmqSmHzQQsWdoPzKAffllUjCcTxs5JtgFSmEv/LWE:XQsQvKqNqzQnA+WAff4jCc6g8q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775376683, "uuid": "40ca5153-9c16-4693-b5c0-7d14dc0d03b0", "value": 124676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775376683, "uuid": "0b16d107-ec07-4dae-a7b2-dca28d08629a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775376683, "uuid": "e610cba0-0868-4d9c-8d60-de59e55afc89", "value": "titanjr.arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0639b1ee-30a1-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775360357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360357, "uuid": "cfccd72c-8694-4b56-a3c2-e45baf679e30", "comment": "Malware payload (Mirai)", "value": "fac068afc5a0361f323f8b2fdbcbfd41", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360357, "uuid": "0c2a3a36-f790-4fdc-a87f-8afa65f82ff2", "comment": "Malware payload (Mirai)", "value": "f962cb443975065b91d4512a42a529a091726e1815be28ced0ebb9dff997931d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360357, "uuid": "913c15cf-ae28-40a8-bb4e-6a5020c1123c", "comment": "Malware payload (Mirai)", "value": "da365650e77eaf9d79801d475de7bf2b2a031251", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775360357, "uuid": "33e818df-fb94-460f-9f96-8ad241f30e3c", "comment": "Malware payload (Mirai)", "value": "0363b9e87aa7ec996fd6add28e29db9c658f4f0e027036cec53673b99939851c1608a0a0d2bc33f859f603128bfbe20a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360357, "uuid": "7ca80344-43ca-409a-ae84-ed0ed6d2a290", "value": "T129F3F745BC819B10D9D636BEFF4E428A33575BA8E3FE72029D205B2137CAA5B0F76501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360357, "uuid": "06f797ff-bdf7-4026-a3a2-637dff3e866d", "value": "3072:p7cPpTRWn6CZyN7c0/E/RISW06vNaIZMmn/FHU/p3qautQ:p6pMsN//EZfWRvNaIZMmn/FHc8aH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775360357, "uuid": "a5df85c5-74bf-444d-b8df-ecd0c3b62593", "value": 163060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775360357, "uuid": "69c25bdb-f875-40d5-bf84-23e788bd769d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775360357, "uuid": "83c42f45-1eb2-4002-a2fc-fb5e4bcc8f93", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c479a271-3090-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775353375, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353375, "uuid": "4a76ad7b-36ce-47dd-a0d8-deded814a888", "comment": "Malware payload (Mirai)", "value": "e6784d49b6a3b2c1e4897e0a9e2ebe90", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353375, "uuid": "e34cb434-94c4-4bac-adf2-8283cab8c87e", "comment": "Malware payload (Mirai)", "value": "f99a34410fc5e5de197a0f7927188a653744860a7339eb18993dbe6c5de97c26", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353375, "uuid": "9b74c192-7570-456a-b5a5-284a826d58a5", "comment": "Malware payload (Mirai)", "value": "32c8e3bec999bb446b0237804851addf3ad9b164", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775353375, "uuid": "e8c11b01-cd74-4959-b87d-d801ff27b668", "comment": "Malware payload (Mirai)", "value": "61f5b5a6f02042d867eb395f78ceadaf0ce29971b7ce0cedf474b0cb9d24aed65c312942d11745cf891834fec98e4196", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353375, "uuid": "c77fe28f-258d-4990-accf-fd42addb07ee", "value": "T15FD22BC6BC91CD1BC9F451B76F1F9288331293E1C28B3657C8594B68279B25B0E3BB42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353375, "uuid": "81d6fd8a-9a13-4d46-80d0-120330f92825", "value": "768:1RuzddaQ7DSUfiq+S+Y/O+saWC+7o++TW6VQSMU0+pB4O6+hX+L+c+Ib:U7NJ691Uel7CDB4shuqnIb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775353375, "uuid": "6100a490-1909-43ae-b6a7-88ee7f2c0dc6", "value": 29208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775353375, "uuid": "b2ee56c5-e85f-4992-a641-4b6a719f348a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775353375, "uuid": "b5c8513a-817e-4919-90fd-cb617551b74f", "value": "mirai.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1983927-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354632, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354632, "uuid": "6a149f5a-b33c-4580-a7b2-11e6995fba0d", "comment": "Malware payload", "value": "a83e4e9974a40a925bea2ebc045b8b37", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354632, "uuid": "f3be7a27-4673-4a22-b217-063c16d29661", "comment": "Malware payload", "value": "fa2a02753016466be42105840d72c9a007e74e1b987e376222888575ea9ec049", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354632, "uuid": "cad82e8c-e8d8-459d-8585-c16655a789ad", "comment": "Malware payload", "value": "65fcc4e49586fe04386fa0eaaae985ae0cd23331", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354632, "uuid": "f7f16fd0-90a7-4499-b71e-efe6a12311a1", "comment": "Malware payload", "value": "b194b395f1f3e26680580d43a1f0aa3cf8c2a1851f49a6b31cf8afcd050c828d85972f3b99d80b91a70e89109293226c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354632, "uuid": "f6801495-1331-4224-b61c-4e90bf8c59a0", "value": "T1FCD43916F8809F62C5C1257AF65F82A8731747B8C3DB72069A189B343BD786F4F3A641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354632, "uuid": "bebb89bc-3ef5-4bce-a416-c0b8d49cf490", "value": "12288:9w6OLaB0YBaTGQjdsKqk//gpL+EoiD36W1ncl:S6OLa2sSdsXk21D36Gnc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354632, "uuid": "b1720df5-dcaa-4335-8a23-2bec99973486", "value": 646072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354632, "uuid": "7f6673cc-e74a-4edf-b70e-787628f5838a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354632, "uuid": "f81560ec-6587-4784-a3fb-9b283422e78a", "value": "ovharmv4l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11f0ae8c-3094-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354793, "uuid": "564b9269-a291-4bc3-8599-f3fadd3f9ff7", "comment": "Malware payload", "value": "bbaec338c9c5411e28a1ad9cc0cb3f96", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354793, "uuid": "e978377d-7d86-4032-a4aa-960779b763fb", "comment": "Malware payload", "value": "fabb5d43cde4e55316f2df14822be9da943e99f21cffeb13a99f3db5e41e6748", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354793, "uuid": "0d87ccb5-eea6-4faf-9922-674aa96df8ff", "comment": "Malware payload", "value": "68e93c35a49ed81acf037f7e9d3fca6b5d051b65", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354793, "uuid": "c122e3e3-371b-420f-9280-35b5cbda1c2d", "comment": "Malware payload", "value": "6d1a22d938d5d08ac145d59298489bea95190befd34bffc3bcedb719f16c5ebdbcacd057beb701576a0f223556fb2c8b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354793, "uuid": "08102e02-c428-4f22-9aec-3eadfb930095", "value": "T18BF46C227711DFA1D395D67009F3C6905AF621A20EE25486B26CC3287E2076D6E5FFF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354793, "uuid": "1565868d-731a-4076-9093-036007c17d89", "value": "12288:bt4mLioLU+zcuvsIfu4FIGRwq8ccfXCnMnylgphga0Jj0naURSe4V0jvT:5jLG+W4FIGiq8ciCnML0CDRh4V0j7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354793, "uuid": "fb64ae80-049a-4d79-8dd5-b41072df8666", "value": 762792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354793, "uuid": "709c0508-268f-4b37-80d9-9c3699142c51", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354793, "uuid": "f1202e66-c40f-4d15-ba1e-737e878421f8", "value": "rstmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fd4ffc9-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354548, "uuid": "00f28d6b-f4c5-4092-888c-e3a8503a2232", "comment": "Malware payload", "value": "3078c42203ea36f31afb2c0d903617ad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354548, "uuid": "2a2252a8-10c5-4489-80cc-10c4c2490006", "comment": "Malware payload", "value": "fb182e60ea5ff474dd5b476d85c9c1d083f626f97f47e2fbdc49e7c4b3fff724", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354548, "uuid": "a5a2db16-f24e-4baf-9964-a0104bd0513a", "comment": "Malware payload", "value": "e663349aa8af5fe15838d015208afa1a650d1b78", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354548, "uuid": "80529147-61ff-4aa8-8a20-7ac3f388379a", "comment": "Malware payload", "value": "5e52756439c4ae80473757a1145ab48e5e9080ef50204cf144befd39089fb55a35e7d5d55aec552263251d1a73d7de4d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354548, "uuid": "9c9cd328-d585-468e-8c97-e6f03a62f28d", "value": "T193F44C07AF505FEBC49FCE31492EC30701EDD4C34AD2662A71FC4B8CBA9925A4AD7598", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354548, "uuid": "69cf34b6-a5b1-4ee6-87fb-2d6d7eeef73c", "value": "12288:AgGYpx/rYIg62X+kA2SaMEkjR+vfNbJ4lhASeGarSni8gH60wRLKESUnShLs4/yx:Vx7gq2SF4fNuLNlXInxyeQk6p5G9Vnj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354548, "uuid": "e7e38a8e-be81-4c24-87b0-7ec8eaa8aa0b", "value": 762504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354548, "uuid": "ed3c3e10-9557-4a16-84bd-7fed781d0abd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354548, "uuid": "1baf1119-6789-46e4-ba26-929168cd6633", "value": "simipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a9e56c4-30bf-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775373464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373464, "uuid": "3a4497da-e627-44cb-9a21-ce294f1d2cc0", "comment": "Malware payload (Mirai)", "value": "83c008f5dea11226c5d12b897891370e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373464, "uuid": "d48463fa-f7b8-49ef-ab90-79ccbb205d85", "comment": "Malware payload (Mirai)", "value": "fb9d7e25e0a20a3d6031f5574763b5998687797df354f79dbd1838a7e7057930", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373464, "uuid": "9127d7d9-d8d2-483f-bdde-6cf96ee5ccb3", "comment": "Malware payload (Mirai)", "value": "8d6369d95030d04613dea4dbbf5347b6ef550e91", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373464, "uuid": "89d164a5-7cf6-4185-9a7d-5ed0522c3513", "comment": "Malware payload (Mirai)", "value": "5fe1711426543072f10a7324436ec45b76948475403a56b5228986d25cf850eef58eaa4ec66bf0c37ccd06ad71b596bf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373464, "uuid": "c63ad502-9fee-4b83-ad68-9a7d192e5f9f", "value": "T1ADF3D916AF610FFBDCABCD3706E9070139CC654B22A53B763674D528F54A60B8AD3C68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373464, "uuid": "e92cac5b-32c4-4f2d-87d3-42196a40e5bd", "value": "1536:cYXaTo34/X/q0hcx9tyb2KHcllIzWZ9vq/GzJXyTfea6gO0x0Ie+RKFiN:c6aTmmXbWx2W5zgT2aZ/iIiFiN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775373464, "uuid": "fa1a2ce6-48c9-40f0-b772-d75257fc1b9f", "value": 169192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775373464, "uuid": "f1f8ccd0-37f8-45da-b7c3-49bb9d023afa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373464, "uuid": "d68838e2-fe93-4135-b4b5-79fb6ab10e8d", "value": "main_mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "777fc419-30bf-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775373432, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373432, "uuid": "d08a4f53-2075-47e2-8b27-dba5d7f5fcfb", "comment": "Malware payload (Mirai)", "value": "57c48a0d3c52ec8bf275eb7263408ebd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373432, "uuid": "0a4ccff0-e909-4620-a5ef-908cd4b7804c", "comment": "Malware payload (Mirai)", "value": "fbf6c5ee6886c58db833a2801eac9f6fe2ba8b299c3af140aa1026e8360cbc5c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373432, "uuid": "4fe5d424-048a-4719-92ce-152179aeea39", "comment": "Malware payload (Mirai)", "value": "e9601f676c3dcc45b28e82bb702b57259149a6bc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775373432, "uuid": "448a9edb-fc6d-42a3-8cb7-f5de0dd08845", "comment": "Malware payload (Mirai)", "value": "0f6c46da8dc2028b352e29f5f8f02e4c6c7e1cbe83b4b6e3c1a23ad597b0095aec613915bbf817d15d9a1c72fe272566", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373432, "uuid": "f4c00303-5e30-45bc-bd4b-b101a39e4c98", "value": "T171B35A73D82A6F58D559D070B0B5AF752B53A681824B1FBE16B6C3B04083D8DFA05BF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373432, "uuid": "82df92ff-5247-4fda-b573-6f9ad7a664a9", "value": "1536:rdM/icf1r5VXSAS8KC/8OYPLfjCaWFmeEK4shtEUs9QhW:rq6cftDS8KTOYP/CaWQer4zQhW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775373432, "uuid": "c25d3196-f64b-4a0e-a113-d4d3062ff5cf", "value": 113248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775373432, "uuid": "23a00749-36c8-472d-a64b-76dcf38e3a16", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775373432, "uuid": "4e34774e-3187-4ad6-9e38-29c3c5e321e1", "value": "main_sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "978fb63c-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354159, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354159, "uuid": "44d91200-cc8e-4e85-b4a4-9537534e210d", "comment": "Malware payload", "value": "baa80f1a938256e0d9d292b4aec9d2e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354159, "uuid": "debfb3a6-ee56-49d3-917c-c7324a7d5c2d", "comment": "Malware payload", "value": "fc15892d0607fc7b32d289baac147d4c0a4127b118a9e581f68297cbcd2746c0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354159, "uuid": "b67fc3ca-50fd-4a26-adbc-56e2b934a23b", "comment": "Malware payload", "value": "c7aae39415ddec256858b7a23c09f7545f637cce", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354159, "uuid": "5f2fc866-cc63-4b31-8904-3d36f5fff095", "comment": "Malware payload", "value": "900e3aba791d726cb9039491e1ff8ce83cb362864ba547aa48d4a20db291abb3e166083b2c135bbf5e9c6803be49c9e5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354159, "uuid": "bc49ca39-a10a-458a-bf37-938c039b7092", "value": "T1B0F46C223711DFA5D355C67009F3C7545AF621A20EE25486B2ACC3287E11B2E6E5FEF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354159, "uuid": "93a8c866-0182-43fc-96a4-e61f190732cc", "value": "12288:MHF9JXwR0fMgiDgI70v4HaGI+K8w2yMj+IbgpygoCAyQUQYSeOVljSr:MHFTg0x4HaGE8ec+IkAmfOVlje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354159, "uuid": "edd7ad1c-422d-424e-808c-92ce53553678", "value": 763052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354159, "uuid": "f56f5620-1031-49ea-ab16-adc2bc7c81ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354159, "uuid": "b533d41f-99e0-4824-8c00-7fb8781e1ac1", "value": "ackmips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f735911f-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354749, "uuid": "050cec16-ade3-45dd-8d20-c38f59f29c86", "comment": "Malware payload", "value": "137b6e726b03e9f94fb875c791a5bb23", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354749, "uuid": "c6e0fca0-5c1a-4b3b-801b-b80e20985b48", "comment": "Malware payload", "value": "fc2f530c9081d810494eaa527da94ca414f2c3b3da8e91d48b3c30b5f635245d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354749, "uuid": "239f69a5-d0eb-423d-850e-d9a103c2664f", "comment": "Malware payload", "value": "224eeac4cdc5d309803b89a533cf720b0709c970", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354749, "uuid": "483a85ad-44e0-4066-8006-0fadff641924", "comment": "Malware payload", "value": "37616726717707483826004c28acf1f2a948cbef7aea7217b3a3c968bc8b812368178a0584a4b1d55791d6d06e7c4536", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354749, "uuid": "24a5f795-f2ac-4c54-83de-7e0bd5cf7b56", "value": "T114054B42FB1C4523C9470EF1297F5395F725BA4341F9922A370E97672622E3ADAC3389", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354749, "uuid": "fd0e1c82-a69b-452d-8b00-93b872223b5f", "value": "24576:ZnBNHuABMvS2PBbnN5ywuu/pd3zsnU095D:ZnBNOVvtBbNswukd3zsnUs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354749, "uuid": "cce81c81-cde9-490e-b8b1-cfca53bec411", "value": 857300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354749, "uuid": "fe4e2749-69aa-4231-a613-babf63d49836", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354749, "uuid": "20259541-fa3f-404b-a5f3-a55e481e14d2", "value": "siippc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdd951dc-30bc-11f1-a769-42010a9c0008", "comment": "Malware payload (Mirai)", "timestamp": 1775372369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372369, "uuid": "733754fe-ef66-48e7-ba86-a91ba2b2d570", "comment": "Malware payload (Mirai)", "value": "23e175a4f71da9b278f6bfa6a96bc54d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372369, "uuid": "7253eb67-5ca4-4515-ab4c-beb2547fe2b7", "comment": "Malware payload (Mirai)", "value": "fc7722775bcd21ebb095c2c82412c749df5a71e414758d33d20ea28629419a19", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372369, "uuid": "93dc2c48-bdda-4a33-b99c-c6d75ede7445", "comment": "Malware payload (Mirai)", "value": "5fd53fce5644964afaa4ef7f3e5788d27b4f2ada", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775372369, "uuid": "5c01b67c-64c4-40b4-855a-b7aac7e450e3", "comment": "Malware payload (Mirai)", "value": "dab00745a891d2d0cbac12f70681b48eb1d06820a50184576acca656d3416677290572ea0363a10dbe7e8e05bbb067c7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372369, "uuid": "4b577768-36e0-4c66-80b0-8b32cbc20ea8", "value": "T16E241C01B9518F63C5C72BB7FB9F46993733672487EB3301E628AE742F4669D0E2A111", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372369, "uuid": "b9bff8df-f0ad-4a1b-8877-2af8cf35cc2c", "value": "6144:9jqSNPNA3Ms3l3GnKM/obVKHmEqZ0ik18Hbs1dS1:9+CPNAJ13QKtbVKHmEqCik18Hbs1dS1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775372369, "uuid": "b5aef79b-3692-4357-b5e6-eaf5c01bdb5b", "value": 214059, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775372369, "uuid": "2a9a37fc-6f40-4a13-a770-0808adcf122d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775372369, "uuid": "de10f5cf-6b45-45f3-9c95-ebc99c81cfe2", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8457ddca-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354126, "uuid": "4f24b89a-fa3e-4171-aafe-93aec764e834", "comment": "Malware payload", "value": "6cfdc43ade562df8f9a396914df492de", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354126, "uuid": "f3b7636e-4b64-4ba0-8376-6dca5c3ad803", "comment": "Malware payload", "value": "fc8ebf5cf4216b41daf55a16be30d281cde88fcaafe81e8e68fbc83a8019d690", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354126, "uuid": "6b04724d-bbf7-41bd-b536-d8653f9d963c", "comment": "Malware payload", "value": "a694cfc29e672fa442f92ea974cf67558def0c37", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354126, "uuid": "9de4486f-00ed-4537-8977-45d0568ded87", "comment": "Malware payload", "value": "b0c1e120e87e86a5456c0da810e43646e79bb7923bcd545b8e6ab255388d7d533495e18276d92b9912b5ea6f01caa193", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354126, "uuid": "04816ca7-be8e-40d6-912b-49593f13bf3a", "value": "T165058D5AFE5E3C47D2DAE33D9F4E83B1A22BB150C21351633581432CE4C6ADD8BB1699", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354126, "uuid": "97b3aa37-82af-4298-bbf1-3c16e750f4ac", "value": "12288:Rtuf0jvtj0RaRbblCG1AECHf6P9KvNq04Ucgk+0w5CltvwyYmP4O3Lmxz:Lq0CRaRbblbfCCP9Kr4UOh3P4mLmx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354126, "uuid": "9c0cae28-cb01-497a-b5f9-06657b3106f9", "value": 864872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354126, "uuid": "2720ef8a-7af6-4e2a-b5ce-7dba6687e935", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354126, "uuid": "7a447429-dddf-45e1-a86b-925b5594f452", "value": "clientarm64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91f078f7-3093-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354579, "uuid": "9e5b5d61-eef1-4a5b-9ef9-fe587fcca922", "comment": "Malware payload", "value": "5f76f5573110934b37dd84213586a448", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354579, "uuid": "aff67f27-a79f-4139-b74b-a0b09e5a9d7c", "comment": "Malware payload", "value": "fd127598a6f4a03869ae6a44d2d05c9576801090fe713b2ae292d728751db2c6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354579, "uuid": "74c65b53-9348-414c-b9e2-ba4764f50fcc", "comment": "Malware payload", "value": "cdd70bf19bac3a6920ba3eb936282fe86d1496d8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354579, "uuid": "34dfa3ca-ffee-4cb8-842b-9be9d720ad50", "comment": "Malware payload", "value": "3107f2edca6ed2c93349a5fd28380c35b603d3f771fdf928715b3615c3d860117cfe7ee5cfe1f158d84c02df135e3fc5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354579, "uuid": "dff29322-61ce-4690-95cb-9979ee212c2c", "value": "T12DF46CC9E7C2D4F1F65300F14A8FD7E20964921A5013FAF2EB4C2A5778767622F1A369", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354579, "uuid": "01194ee3-a70e-44ae-8f11-9dc309cfdcad", "value": "12288:LT32r/Zh+p4h8NKopzC2XqvqoETKcgTZtuVfts4VWfXmDcY3dFPyuctGE+eMLu:LT3a/Zh+p4hTopzC2Xq+pgTfuVfts4U9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354579, "uuid": "1fc54a44-d0a7-476c-9f60-4ecc587d0912", "value": 775232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354579, "uuid": "1b83a58b-5759-4a51-bb96-34b902994df1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354579, "uuid": "b7414b96-352e-4dd3-b3de-19ea342ba5ef", "value": "rsti586n", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b404f478-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354206, "uuid": "91b79e8e-47ca-44c3-b937-f71c40e03112", "comment": "Malware payload", "value": "45faaed5807dd26cde8da0ffdce325fa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354206, "uuid": "c0bfdd3e-be98-48b8-99c4-66bc001e98c6", "comment": "Malware payload", "value": "fd4571baee0a51c1916a0552fd3ae124ed3e0251abef9b1f33863a98a6213d4c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354206, "uuid": "cb4ecbdb-d866-4cb3-a1b3-d5da55a7c250", "comment": "Malware payload", "value": "b0e3bb5b3802d5953baaea009b5c286c5d324124", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354206, "uuid": "2d86e97a-600f-4e49-a4f9-bc9f504dee76", "comment": "Malware payload", "value": "2e2e3ed520c37fe390c1fa55d7df3ea1333ec04e4d7abfa2fbfe93cc7688afecd9a6f4567513dcf5559d04a746efe2e8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354206, "uuid": "e87a8d6a-8718-4caf-b7aa-f7bef45d2e7b", "value": "T135266C90FB48A166D94A0B364CB30B70B3911E45C6E4996F030AF72F56B26FB590FED4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354206, "uuid": "3ef45dba-b39f-4ad2-b1db-5ce54e66283d", "value": "49152:lezYo9vFbor0tvQ6cvgzO8tHK6ZCWGEGnTUFK1/wgOnt5EA:aNbptvQ6cIzO8tHHHGEGnT1dwgQjEA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354206, "uuid": "45e2b27c-0f8c-4434-a128-c565ca79de3d", "value": 4522146, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354206, "uuid": "398b98d4-83b3-49b0-845e-62bf8426be02", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354206, "uuid": "4218de88-647b-401c-9fe3-454be6dd1d77", "value": "li7ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1ff44b9-3102-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775402414, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402414, "uuid": "26003d28-b7b5-4967-b6f3-ea44f8a818a9", "comment": "Malware payload (SalatStealer)", "value": "bc81993ca62dba8ef0a9d07f4c937b3f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402414, "uuid": "325a14d6-cc8d-4a06-be96-b90a49458645", "comment": "Malware payload (SalatStealer)", "value": "fddb525194cb158514c128095e1566cead9e3f081a2ad0f7ac931d4d75d8cf2a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402414, "uuid": "acd7dc49-ce61-4bae-a13e-c8c48940e194", "comment": "Malware payload (SalatStealer)", "value": "7cb8be7a1f0a054846b547f10d483d369ece8538", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775402414, "uuid": "79951f34-bba8-40fd-b60d-95cdc8d43311", "comment": "Malware payload (SalatStealer)", "value": "5659bc8aa0765b6c5aea683ab7a901b1b4bb689bae59a1af894b68c7587c358f3baff0aa3d7688f7a8e99f9c0cac346e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402414, "uuid": "88b9930f-8b99-4193-afc5-a7e79ffe610b", "value": "T146D65C51F9DB56F5E9075831406BB23F23306E048B28DB97EB187E3AF877A91187A305", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402414, "uuid": "cacc2946-79ab-459a-95a8-0cb6a22c42f3", "value": "49152:AmyvptKWPivQf9Varqw4q0/mMy8YDJ8/XeB1lTxiRgiOOdAQA6VqDBjHE+BZI0Lb:+vvKieqwrApy3gGgL/VOy06dO4/zE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775402414, "uuid": "60685ea7-cb5f-4edf-b63a-908ae47f43c2", "value": 12925440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775402414, "uuid": "3f22a614-3767-4f2b-843f-fabb9b5ba384", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775402414, "uuid": "f382f0d3-7439-48d0-b9fb-08449712bff9", "value": "ondkwf.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca1128a3-30f3-11f1-a769-42010a9c0008", "comment": "Malware payload (Vidar)", "timestamp": 1775395905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395905, "uuid": "884a2ef7-61a1-49a6-962e-6b6cbb11b077", "comment": "Malware payload (Vidar)", "value": "085aed5a0b6f0e74a4829509876aba9f", "object_relation": "md5", "Tag": [ { "name": "Aotera", "colour": "#499F8C", "exportable": true, "hide_tag": false }, { "name": "Convagent", "colour": "#441F96", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "injector", "colour": "#F39A69", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "TrojanSpy", "colour": "#809E1E", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395905, "uuid": "fe86749f-8041-41e9-8401-c13021a392cc", "comment": "Malware payload (Vidar)", "value": "fe7a0c804c70b73de8788472dfb0abd313b6d12ca959d6ee2d1524b94a55ab6a", "object_relation": "sha256", "Tag": [ { "name": "Aotera", "colour": "#499F8C", "exportable": true, "hide_tag": false }, { "name": "Convagent", "colour": "#441F96", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "injector", "colour": "#F39A69", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "TrojanSpy", "colour": "#809E1E", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395905, "uuid": "3bc7af0f-436f-4f86-bc63-0c64690c1565", "comment": "Malware payload (Vidar)", "value": "993f806764b24c29efc339998fe58086264c68f6", "object_relation": "sha1", "Tag": [ { "name": "Aotera", "colour": "#499F8C", "exportable": true, "hide_tag": false }, { "name": "Convagent", "colour": "#441F96", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "injector", "colour": "#F39A69", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "TrojanSpy", "colour": "#809E1E", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395905, "uuid": "60644238-d467-4193-b400-deca44699fb9", "comment": "Malware payload (Vidar)", "value": "8d27d001f0d9c90eebb5fd4e8a5594bc99ca5cc33dbc0ec9dc4ae62f56a392099e855f71c00a393ea4c3f5860e23e577", "object_relation": "sha3-384", "Tag": [ { "name": "Aotera", "colour": "#499F8C", "exportable": true, "hide_tag": false }, { "name": "Convagent", "colour": "#441F96", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "injector", "colour": "#F39A69", "exportable": true, "hide_tag": false }, { "name": "Psw", "colour": "#7ADB48", "exportable": true, "hide_tag": false }, { "name": "TrojanSpy", "colour": "#809E1E", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395905, "uuid": "00deb4dc-ab45-4efe-b46f-c9d46331e099", "value": "T1A756556EE52677B19EB60248A57E47648C5E2714733AE31AC79AB1430CB7C1C3ECF948", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395905, "uuid": "41aca4e6-1dcb-4598-a1e2-c453279d4afd", "value": "76c28c00382a592ab488250546174426", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395905, "uuid": "d61dc443-5f76-4053-8772-de8f0d4704cf", "value": "49152:u+ZAjjU4652iROi4ZHBEbvcZzNPuVaeg2IbnjStu+EFnUuvnPZTu8W2xXJTi2zRX:s2S2I7PQTU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775395905, "uuid": "59d7d539-e30c-4199-b3f1-42c945311605", "value": 6169600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775395905, "uuid": "f368b883-f7cf-424e-8b8c-33a5849c8af7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395905, "uuid": "85c09e13-96c7-4b1c-9748-e209c6c3961a", "value": "libwinpthread-1.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6a87f86-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354211, "uuid": "0cd597c3-c86a-4027-9907-1e4543c60222", "comment": "Malware payload", "value": "181fe422fcdc46185697ab1cde5cbf97", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354211, "uuid": "dea9769d-88c2-4899-a0b7-c59572e329a8", "comment": "Malware payload", "value": "fea62aa379253fc60ad0a248c358d2569f56e5eec417102f41a45becd876c58d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354211, "uuid": "3329fa38-de28-4d1f-aa1f-9980aa26c672", "comment": "Malware payload", "value": "16339da67179ad682cb63d778a4030514dd2c66d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354211, "uuid": "365021b6-e8a0-4a33-9a3d-c4aa4eea84b6", "comment": "Malware payload", "value": "9e1fdde889c9383b57b36702bb64ac59ee380bf23d483986bacc8e2726be9c9b3c8a52c3a014d0fb4c87fa16ff4d3c21", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354211, "uuid": "becfae63-380d-4abc-9a48-703ab27280a1", "value": "T118F4AE29F8087B17C4D75274808FE018737AA244179637452846EABD7D82BBEAF1F3D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354211, "uuid": "c51e1166-4b1f-4ba3-8acb-12975d614a4c", "value": "12288:1SM2s+GFH0kJWwsl5QZvWVoEiGd013fx4tWBLDNhjw5DVV5ZrxaZWA1w+afh:1r2s+GhlJal5QZvW6EBd0JfxuQNh0jZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354211, "uuid": "33a24828-c105-49d1-9da0-ee4a66c714e7", "value": 745984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354211, "uuid": "6bd9d907-ef19-494e-844a-4d13c451945d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354211, "uuid": "1d41102a-b29a-4bdb-b4ed-d28e2a10b349", "value": "dropperriscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "490de00b-30f3-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775395688, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395688, "uuid": "6fcee5a6-dead-42e5-8670-39f4347c74bc", "comment": "Malware payload", "value": "5d574d049e63547fcab41dc238c2c413", "object_relation": "md5", "Tag": [ { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395688, "uuid": "c825b1ee-c050-418c-a96a-8b9d550c5cfd", "comment": "Malware payload", "value": "ff1ac70246985cd9c5f1a2c1a54cf97e9286aa51fda94e2c11c55934ae8171a6", "object_relation": "sha256", "Tag": [ { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395688, "uuid": "947fefa2-d92e-463c-b32e-6a5db7d7f630", "comment": "Malware payload", "value": "22b8bdb4c2c4b8d765fb4981f20ed5aabd41ca3c", "object_relation": "sha1", "Tag": [ { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775395688, "uuid": "c4691ed2-7ab9-4272-bc6c-4358f8dc355b", "comment": "Malware payload", "value": "2afb4c0e876efd11d5934e81294496fd0e6bb1f9919d184f78f07b6327abfb42977afdbd92d2b1fdce436ba64c511095", "object_relation": "sha3-384", "Tag": [ { "name": "Egairtigado", "colour": "#3EC4ED", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Generic", "colour": "#12E30B", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395688, "uuid": "8c6e52a7-6871-4471-b663-fe8a1deade70", "value": "T115152306B6E394BDD3BAC630E2521A71BE32B804213A5F7E709DDB7E1F715401D29AB1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395688, "uuid": "b5a1aa65-5e27-4bba-aced-a0bade5bfc69", "value": "402106bd33b178c6be6794bb52152534", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395688, "uuid": "97c39cd3-1c18-469b-86b6-c6dd0d8230fd", "value": "24576:5A5PPVCDr5VI3X/UygQc6SGi3t4To1n+7XaY:41C88y7c6SX3ukY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775395688, "uuid": "d75e1d75-98a6-4f7f-b90d-d576da39f9ab", "value": 900580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775395688, "uuid": "78891e22-75b7-46f7-b022-2ea546caa968", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775395688, "uuid": "d4b91324-9bda-47a1-ba76-b3c5e05feb95", "value": "chrome_elf.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad8794f7-308e-11f1-a769-42010a9c0008", "comment": "Malware payload (SalatStealer)", "timestamp": 1775352478, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352478, "uuid": "14913383-364f-4c59-8f27-43cfd0561350", "comment": "Malware payload (SalatStealer)", "value": "20f6c28a1169eb3d33064ae7bebd1cf2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352478, "uuid": "fde73a7b-bd9a-46e8-b42f-dcfb69f4ed91", "comment": "Malware payload (SalatStealer)", "value": "ff2e49a92eb6fd14e950387c40b093a7abaffec67e669745026e0f2d7226352d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352478, "uuid": "e353f556-60b2-44c7-900c-f05213ceb571", "comment": "Malware payload (SalatStealer)", "value": "028c8fdea28a97fa9d055d439a4bab808e585807", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775352478, "uuid": "f7328faf-0fc0-40a5-9ed3-80e35cec9a08", "comment": "Malware payload (SalatStealer)", "value": "674f637a4cf9bc9b20f8907b00d5050e481ab58d8ae6da0b377d7081fd12f2bf3e0d8d96a98566de16da09202c88ab6c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352478, "uuid": "555a2faa-9d9a-4d39-9f69-111da168d267", "value": "T18C1633F24B6ACC37FFD3467254F88C293B272DD22432D62B9C4127A34705A6057666FA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352478, "uuid": "3b18d039-07f2-434e-97c1-476b051850d9", "value": "9aebf3da4677af9275c461261e5abde3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352478, "uuid": "25e47268-b7e8-4ecc-a713-2b542bf4a494", "value": "98304:llBDpf4HEyAs5BspN819xinh0T6JrvEyz1T1gwiSSpAAd9o/D:llBDpEhAs5BsT8Zinh0TMAyzQNdC/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775352478, "uuid": "a4359db9-713c-4676-8f5d-ab4d229f69ad", "value": 4262912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775352478, "uuid": "0549b03a-391b-4b3d-be06-99ff740c62d3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775352478, "uuid": "79e41716-aef9-47b5-aec2-c28e8a78ef86", "value": "Load.scr.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75b1f000-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354102, "uuid": "5621feaf-8ace-434a-b648-c460f3bf2dc3", "comment": "Malware payload", "value": "bfc352ab4f42735581008142cb9c9e04", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354102, "uuid": "5b8510c2-4ebf-43a7-863c-1d7f28958090", "comment": "Malware payload", "value": "ff707e735648511007fe60b4ac3c579b5acd0d228de56ec9de1e81f55c08fce0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354102, "uuid": "5aee364d-53fb-4639-80a6-3830fb1cc6b4", "comment": "Malware payload", "value": "de6e2a3379b31f83ae616aee9ecee4e1cfc8975a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354102, "uuid": "b1787971-200a-4918-b868-a1a48cfc1b58", "comment": "Malware payload", "value": "20ce7cd4e57eabb5ecfc76e3677906caf32e518afc6d67fb450c55de1708b0086be674379a7c6f214f83d0159f284182", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354102, "uuid": "70f04e43-8a31-4bf9-9387-da4d142bbf4e", "value": "T11ED49D29F8447B47C89B9274808FE418737BB244075233162846EA797E83B7DAF1E7D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354102, "uuid": "094c135e-cc7e-412c-aa0a-ed1554a8e021", "value": "12288:l+M8+Np8faWHwuMYvmKhoC/0zJU9qC5Bw5ApOcrA2MDxe:0M8+X8faYdMYvZGC8zykC5qeA3Dx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354102, "uuid": "3cee99a7-4aa9-4d15-b57e-751dc75afc15", "value": 648496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354102, "uuid": "9a35213f-6afa-458c-982a-c963f219d27e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354102, "uuid": "a277ce06-cd7b-4dcd-a9bc-672b8e6a7992", "value": "library2riscv64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9676a02d-3092-11f1-a769-42010a9c0008", "comment": "Malware payload", "timestamp": 1775354157, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354157, "uuid": "db99abf6-f283-40a1-a597-7daaa3a0a163", "comment": "Malware payload", "value": "4d9513eb8082ad2e69083d1ed4e59d6b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354157, "uuid": "4c2e4a29-aa09-4899-bb24-3de9289d8c77", "comment": "Malware payload", "value": "fffddc43da73547f01603636d0fbabfd3691be159811c0758d433c338ed659c8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354157, "uuid": "6c9075b2-9d16-420c-b81b-034342738cf7", "comment": "Malware payload", "value": "a268e1fcd5604a1a1527418d98ecc0bd2f77fc02", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1775354157, "uuid": "98a9924e-da03-494f-9805-cbe239d20779", "comment": "Malware payload", "value": "18c885117ee1b7cb7f12d92f8e84066eed2cdc8e8b39c5fe811156561a3151d3f1779199994eaad20b77a6ecddbe79e1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354157, "uuid": "2d721156-b766-41ee-b641-923e136ea212", "value": "T1F6058C1AB2B3F17CD01BC03047DBCAA24535F47526212E7B26C4DA353D6ADE22369F66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354157, "uuid": "cf7d4a66-8e0a-497d-bb95-ebbec42ab445", "value": "12288:LqWlHK6VyUL/dbHR2Z7C7NgXianQeLVvJ5PrjlRSaayAhYtHX:LqwHNkU57NgSgQeLFJ5vWY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1775354157, "uuid": "cc5f950e-9f2c-4fa6-9f1f-6d26fcc8e31f", "value": 830032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1775354157, "uuid": "983a639c-1492-4230-b2c0-9da34101ade5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1775354157, "uuid": "673301d8-c45b-4d56-b1c7-6a32080692fb", "value": "library2x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ] } }