{ "Event": { "published": true, "date": "2025-11-09", "threat_level_id": 2, "info": "MalwareBazaar malware samples for 2025-11-09", "timestamp": 1762732982, "analysis": 1, "event_creator_email": "bazaar@abuse.ch", "distribution": 3, "uuid": "9819f77e-9e4b-46d4-aeaf-5deda7677246", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84d9f0c4-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677102, "uuid": "cbc15cb1-6778-4c46-a8d5-3f8334205d45", "comment": "Malware payload (Mirai)", "value": "9c7abfa5be4a89a2643a3f12a08a9060", "object_relation": "md5", "Tag": [ { "name": "arm5", "colour": "#C2EE0C", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677102, "uuid": "dac20247-e564-4878-92c3-30a2ef763664", "comment": "Malware payload (Mirai)", "value": "01bd3cdd7ff2ea45e2a639c8bb45e8021504b7e3cec44fd3e581eb762f1cdd26", "object_relation": "sha256", "Tag": [ { "name": "arm5", "colour": "#C2EE0C", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677102, "uuid": "116793bc-8075-4c83-a422-d90215de046e", "comment": "Malware payload (Mirai)", "value": "0ab865815596ab4e324e3a7a0730b484ebe49887", "object_relation": "sha1", "Tag": [ { "name": "arm5", "colour": "#C2EE0C", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677102, "uuid": "c5d02d3b-0b1d-40bc-8dbd-fb5f3ed98b55", "comment": "Malware payload (Mirai)", "value": "97864461a49227529f60ac1ce8cab3919d9eedd6e8a20ae230c86205a1ab0c7780d19ae9e7e8dc06e1cc2ac5ef10a3c5", "object_relation": "sha3-384", "Tag": [ { "name": "arm5", "colour": "#C2EE0C", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677102, "uuid": "40763b18-94ad-4dbb-91d6-47bdc1601df4", "value": "T1AC82CF2810EAAD60D6E0D83DEE64C397B28653F9F38B736B5D540630D68259E25F80CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677102, "uuid": "fc7aad0c-54bc-4eba-b13a-677945d288f1", "value": "384:d/e0M5iMdVQJYPgn5s9CJ1wq54O7opzgZQvjAvTdXhymdGUop5huOK:dq+c4sCJemRGEZFJXs3UozMOK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677102, "uuid": "ec94bf2a-ee4b-476d-8a12-04ccaccbd32e", "value": 18480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677102, "uuid": "de3a789e-0366-41fe-aa93-7f18a7084646", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677102, "uuid": "55cf4a89-7cdd-49cb-b6a5-d2052820d2e3", "value": "boatnet.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a24892d5-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677151, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677151, "uuid": "0eb89401-0466-4e35-91e1-4e08b32ebbb4", "comment": "Malware payload (Mirai)", "value": "1fd06eae5f7d7439944554d44a732571", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677151, "uuid": "bae24b71-3f14-4c57-94a1-4465d1f90abe", "comment": "Malware payload (Mirai)", "value": "01d296c59eec8b4e45f264ea59d64ee4292e871e54db1fade3ee33406f23c6ed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677151, "uuid": "2fcc22fe-1022-4244-9fc0-cb5aa1cfc0da", "comment": "Malware payload (Mirai)", "value": "2bf097aa3ea54f9d94c2c7d8ee55e170b7b9577d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677151, "uuid": "b863c3da-ddfc-4cc1-ba8c-174cb3ce0a0d", "comment": "Malware payload (Mirai)", "value": "4885a50390213b6b0794a9961d2a12a8153535f28c887d884f83375f294a80b8a8b0629ae458bae86fd652ac40f5c134", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677151, "uuid": "07017298-b005-4bcf-8bdc-94d2c817f04e", "value": "T14F432881BC819A23C5D4037AF6AE55CD3B2463E8E2CB7217DE224F5137C592B0CABE55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677151, "uuid": "8214d01c-e33b-48ac-b84e-1a5578b6cd28", "value": "1536:aFlGrH2uxMqVuDwu/x1d6gBvGz1nqXOh:aFlqdilDR/sgon6Oh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677151, "uuid": "f487c76f-d6e5-4751-b2d6-617ca93e3e8b", "value": 55792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677151, "uuid": "477496fc-9449-4bd9-a740-de9622eff2bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677151, "uuid": "2cea23df-3a54-42ff-8de9-261eca3ccb90", "value": "boatnet.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1492270-bda3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762717227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717227, "uuid": "d24c148b-0019-4a8b-a867-9d30cec57861", "comment": "Malware payload (Mirai)", "value": "1eb625650277c670dd50edaf9a1719ca", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717227, "uuid": "58b812f5-4f12-40ef-87e2-f0cd3a5475f5", "comment": "Malware payload (Mirai)", "value": "026ff096923b2100eb71148441197f6598ec5411d87776afcae5ed91089a176b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717227, "uuid": "4e1cb4e3-70d9-458c-b890-0fab2eb2dfa9", "comment": "Malware payload (Mirai)", "value": "b52ee8345d91e361b38c3d8eab950376f7811a44", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717227, "uuid": "072e9f50-fc58-460f-ae17-850a32d98720", "comment": "Malware payload (Mirai)", "value": "5d599c38c5bb4763e7465a4387762e5c210c06a9d7fee5e8d258a924741074a541ffcae6281ef13314b098d7b31083ff", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717227, "uuid": "e1cb9878-696d-493f-a852-0c340bfd294a", "value": "T1B2B3C51E6E158FADF7A8823047B79E22935C37C737E1C681E19CD6046E6028E145FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717227, "uuid": "da7e1c26-d335-49e7-9b07-0f7c1f0b1a35", "value": "1536:TG4D8cG6RSruAC/cf4/XKFMfKbTURyRDHLlKEkPzqZogVepOcDnLZDJGALTS:a4D8cG60qn/cwIMfKb9lbkPzao1LThS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762717227, "uuid": "b2d03142-1565-4c5c-b14c-5d47a96ef119", "value": 109232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762717227, "uuid": "9c2bd2f3-67a2-448e-afcf-f3e433427b84", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717227, "uuid": "aa10ee67-db84-440d-8366-20a3ce701d8a", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5bb315d2-bd3b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762672308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762672308, "uuid": "3640cd91-feda-4a1d-87a8-d39aa8fc0402", "comment": "Malware payload (Mirai)", "value": "d1a6d16d282cb11c3ca299f20f6ff202", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762672308, "uuid": "148f3c3b-f929-4611-b14b-85154677d158", "comment": "Malware payload (Mirai)", "value": "0359df51be8821b2fa226be5259f1e25bbcfad4f6af786f196f26b7c4155a46d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762672308, "uuid": "8decd586-3816-4020-95f9-bfc5f62fae80", "comment": "Malware payload (Mirai)", "value": "37b53fe95b665d98f996fc6b6f64ea8c470345e6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762672308, "uuid": "75ed2799-4562-4699-8cf2-81819d683992", "comment": "Malware payload (Mirai)", "value": "18045ca6bb3f93047ae864d5d749ab422c8efdf426c8454b18907f9f65a25ded8f27814394459e914b77ab9e914848d5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762672308, "uuid": "3916ab08-24e5-4b18-9716-07602c96fd9c", "value": "T181C3D85D2E328FBDF768863447B38F21975C239227E0D585E2ACD5055F7028D682FBA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762672308, "uuid": "4d2c9fb5-bb01-45d3-af53-450245e87055", "value": "3072:i+pzPnr8LWSoGHiXewtXap1hoOLW2iCXXO/:9nr8CSMXedj9i5/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762672308, "uuid": "aa8e9243-1422-4ef7-8ec8-b204ded21f8f", "value": 119684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762672308, "uuid": "4fe2b15a-7891-435a-a94a-d5206b5f0146", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762672308, "uuid": "e1893c28-2c6a-4360-8560-c4c5521a7697", "value": "mips.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "540e7da6-bd9a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762713098, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713098, "uuid": "9a9858bd-f4ae-4801-b10a-7d7023147a70", "comment": "Malware payload (Mirai)", "value": "9fe7cc09811520412ab7c1769f1c8ae5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713098, "uuid": "c32aa1e0-9273-4c5b-8dc2-6db90dda2d60", "comment": "Malware payload (Mirai)", "value": "037a2b033803e07ee642ef3f0b53dd7eea069e2ae03b3d03a9ace4506f43d672", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713098, "uuid": "d6e785af-4119-4e77-bd0b-b4f5f9017c59", "comment": "Malware payload (Mirai)", "value": "7beea9b62171d999ee8d76e304d07e54f90d655d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713098, "uuid": "57d9837e-0d7b-40ae-a962-97f4da2c1916", "comment": "Malware payload (Mirai)", "value": "f1867f0da8f9edc20939c51497bffb21989899c0f753a44a485f148eddc119490c04d4f4ab4094a8bd8d419b8d04888a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762713098, "uuid": "a95a9448-577f-48b9-94de-a539080a7ee7", "value": "T1D5A3E709EFA14FFBE86FCC3706A9074564CC661722B83B767574D82CF64A2470AE3964", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762713098, "uuid": "7701a45f-6f8b-4d08-b110-7c15ed83ba4d", "value": "1536:gRefFi/yOtHo9fi6/WUlbsgitvToDYpQEzqb3yOLDdZTDT6KW28WRoNMtde7qTeV:weI/ZtIBO+Il9j2+OLDd9GjWe7uo1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762713098, "uuid": "20614862-ce4b-427c-9149-d06f2ebd510a", "value": 106488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762713098, "uuid": "5e6cba67-7aa2-4cbb-9e3a-7dd3f00877db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762713098, "uuid": "b5a2f2d5-ea24-4c12-990f-8168745aa704", "value": "mipsel.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fd1e362-bd06-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762649659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649659, "uuid": "1ef0fd2f-8329-4cd3-860b-9173432fed6e", "comment": "Malware payload (Mirai)", "value": "3c72040ecf2d1d486058b7ae9e755faa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649659, "uuid": "a5e96fa8-abf7-4ef2-8c6a-093140b17f75", "comment": "Malware payload (Mirai)", "value": "0481a0eb5f41fc746e7f2d5f1d4e68ced4035771171e41b1223662c95da6ca00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649659, "uuid": "a6743313-854a-488d-8b3e-a779797bf983", "comment": "Malware payload (Mirai)", "value": "6810a484949062997e9909713ecd37e8c7088b6f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649659, "uuid": "bb88eed5-4319-4d48-866a-bf1b22338cbb", "comment": "Malware payload (Mirai)", "value": "4234088d90f01a9217a3006352c9235fd1778e9eb09619db995c0352e827e82394720fdf9c16b0672e6d5dc5f1c276d1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649659, "uuid": "b574cf4f-7afd-4472-9c33-12d3ac7ac77d", "value": "T1E1936C02B70C0D47D1A75DB42A3F27D593AFE59021F4FA88694FDB4A8175E73284AEC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649659, "uuid": "55f8f4b8-ba0f-4c62-b2bf-9dd405556319", "value": "1536:CXgKoOczasRo0hdQd1eI1th767lBi2rfC2oDi5:CXbfcmb0D83hu7Vii5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762649659, "uuid": "ee3758df-a5e9-4417-adba-34f004e7ea9c", "value": 96792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762649659, "uuid": "f5e16ab0-eb96-4f95-b7a0-d0ae18c11b56", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649659, "uuid": "07e325c2-4fe2-4222-987a-e6fa0a1bc80f", "value": "morte.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1ece764-bd90-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762709014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709014, "uuid": "3f689b2f-025d-43c7-b420-1b4adf54ae56", "comment": "Malware payload (Mirai)", "value": "2847ce843f2425decf9bbfe651b61cda", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709014, "uuid": "b235d3a7-49ae-4759-a4be-e2c90cb460c0", "comment": "Malware payload (Mirai)", "value": "0566467192043361fee134ac4adad1b6b9f11fa1a5d9a2d66fdcc0bf10d097ca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709014, "uuid": "22c032be-162f-48af-8c71-041eb03acede", "comment": "Malware payload (Mirai)", "value": "8e157da85719b3a2b73aa03233614f1ea791c6b2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709014, "uuid": "d2b686bb-efb4-4ac5-bfb5-151461e8981a", "comment": "Malware payload (Mirai)", "value": "32ae9c7be0cc79281c8ab7fce9f5e1420a5d4e53e2161eb36af03ef0d2661b23731a0a2d2b990bf1fbfaa9040ba4b320", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709014, "uuid": "901a8e88-8802-432c-82e6-14ce5572925c", "value": "T137733A0173080A43D0676EB13F3F33C6D7ADA9D021F4E685654FB68A91B6E325686ECD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709014, "uuid": "808315d2-ccbd-4c27-af1b-53001839bac7", "value": "1536:WEKwUihBV2fSvIQloQNBObIB8MfAlGeaLiGsem/u:WjwpJwSX7BObISMteFu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762709014, "uuid": "44232f9e-bf3e-4da9-be16-ad22f0bb83a1", "value": 80256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762709014, "uuid": "b20479d8-be90-4902-b044-454eeef5ccc7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709014, "uuid": "f90b47dd-e042-4518-807d-b5db51ff13af", "value": "powerpc.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa482d65-bd4d-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1762680305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762680305, "uuid": "b57faf23-ccd2-4152-8778-2ff1b0aa6ef4", "comment": "Malware payload (AsyncRAT)", "value": "8db4351e5f00d5c2d65e1994a9de8299", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762680305, "uuid": "f00c1b60-d833-4935-b6aa-24f12ac52db2", "comment": "Malware payload (AsyncRAT)", "value": "0582aa7fc639c84575d38a76c0caa951edfbcd03fc11b6b9a223ef70331a59fb", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762680305, "uuid": "c4d0f350-5fa8-47d0-9b0c-7415667dc28c", "comment": "Malware payload (AsyncRAT)", "value": "4ae0aff420e925fec5676ebe6de3ff658c43d571", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762680305, "uuid": "6b68267e-4e6b-4931-8120-b1b309ff30da", "comment": "Malware payload (AsyncRAT)", "value": "df162bcc8f9ab769086c45b853d5e4ad2934da13ff5a3686db6c8437944e5882310ca89692e951e8792f653396b9c57b", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762680305, "uuid": "fd5a2c21-16f6-4be3-9ca7-e181edf530a8", "value": "T1D1231A0037E8813BF2BE5F74A9F26245467AF2633603D65E1CC4519B1723BC69A426FE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762680305, "uuid": "82ec3ebf-8928-466c-bd12-672d0d8bc844", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762680305, "uuid": "67f18492-31c4-4a49-9ac6-3969a2a1cad4", "value": "768:zusm1TQEB5PWUDDStmo2qzXtqQWAb3NOPIfzjbpgXAi1NkvKqCUIBDZzx:zusm1TQqK24t5J3f3bmX91OvKDdzx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762680305, "uuid": "1832f5a6-8011-41e5-8a52-becf50103bf0", "value": 46080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762680305, "uuid": "9314cec9-2827-4235-894e-b16da1abd7f6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762680305, "uuid": "92deeaa4-94cf-4fd1-a469-5c8c86e409d9", "value": "rosecheatsetup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88c58c23-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677108, "uuid": "9d7f3c38-841f-4bae-ae79-7db9a307dae0", "comment": "Malware payload (Mirai)", "value": "9c8a44d134cf240ae89e1ecc11f80ec5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "i486", "colour": "#328A83", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677108, "uuid": "27467b6a-47b6-41db-8d9a-32f21955100b", "comment": "Malware payload (Mirai)", "value": "06026e341adc464836aa77d9c3e780d6389d3d8f5669e3d99dda64cd8921aeec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "i486", "colour": "#328A83", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677108, "uuid": "63c5d86a-f372-4e27-8e7b-17ad2652e866", "comment": "Malware payload (Mirai)", "value": "922ffd257ad8ca2fd700424b7966e2a174120307", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "i486", "colour": "#328A83", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677108, "uuid": "b51b661b-4607-451d-b8cf-7d94a71e084e", "comment": "Malware payload (Mirai)", "value": "2a9a74ea9db3f320f51126fa1020b121eba7aec674122ff0a0ee0e7c28de9bed847dff5f350d4d7ed1e8e7fa783dbf4a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "i486", "colour": "#328A83", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677108, "uuid": "45381540-ee20-4f55-a2f3-b23b753bae31", "value": "T1E2B2E16266B0D127C055EEBE79FE037ED9239C8B8F762305B26280DD3597120A76C07A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677108, "uuid": "ba0ac168-3c93-47a4-b5b5-60debbd6d2ae", "value": "384:M28ARStVv5W7S3UQdIDi0HJ+2+3FrQuTBbItTyMotPY2/foQ4+Tv1R9:/w5p3UCIDJp+p1r1TdWodrAA9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677108, "uuid": "235f247b-0d3f-4600-b762-23b2fbbdbc26", "value": 23660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677108, "uuid": "c883d299-b279-4028-b92c-c33c738d9932", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677108, "uuid": "c4d29eb2-fe25-4d80-9f03-5b25d132436b", "value": "boatnet.i486", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4cd26a2-bd07-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762650097, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650097, "uuid": "517b9680-94bf-4cd3-9030-1d679a1e1875", "comment": "Malware payload (Mirai)", "value": "e5b17eca43c961afd2ee08ac7d9c4115", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650097, "uuid": "7bee3b1d-11a0-41bc-88b6-ebe20c68b353", "comment": "Malware payload (Mirai)", "value": "0636bc024eb92c1b0d2837996cc384327470eb2a7cce573adac2fb03e9a8bc7b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650097, "uuid": "8465dd61-cf0c-43ce-b82a-9babce5dde85", "comment": "Malware payload (Mirai)", "value": "299cfee15e2ce45f9b753d5119d71f9e68f85780", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650097, "uuid": "e7d39d59-8a13-40ce-ad9f-0cd46521c6e4", "comment": "Malware payload (Mirai)", "value": "cea57e80fa7cf693ad5da53e3b9c3495a830dc59f074aa4abc9e0ed0493669908fef3808d99406e4e113adc7e435318a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762650097, "uuid": "647c5d41-ca11-4a07-ae87-c75c665d6e82", "value": "T144C36B42EAE2D0F0E28701B10547F3E68934E6309556DDD6EFA93D70EC716829DAB72C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762650097, "uuid": "ab303112-5d5c-452b-b375-a2f17fb1588d", "value": "3072:XxavLAoVWQTFzPhMG9KNU++beKrLy1KY/y9:ITAoVHTX8KruKY/A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762650097, "uuid": "184991fa-8da1-42a5-b6dc-336d0305f393", "value": 123516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762650097, "uuid": "c43c624c-b30c-4f1a-a5f0-e7c83d49bea0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762650097, "uuid": "05872774-2f1a-4088-8e2b-a05379840be5", "value": "xnxnxnxnxnxnxnxni386xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "345f2547-bd27-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762663652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762663652, "uuid": "cff4c0df-b3f7-4554-bd19-1efad28d48b3", "comment": "Malware payload (Mirai)", "value": "497591dd581b83ad4a67d2374f90f102", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762663652, "uuid": "9acba113-3abf-4d73-9091-e1b882622e0a", "comment": "Malware payload (Mirai)", "value": "06880406cefb46037fa5f377ede315174b745df21b8bb41fdd9a6e280ec97e51", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762663652, "uuid": "2fd0c328-f0bc-4351-8a93-1b5fb7116e1b", "comment": "Malware payload (Mirai)", "value": "8183d136670bdf0276d9adacc7edb56a75a9608e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762663652, "uuid": "e2431ab5-c933-4f04-b61c-5a124bdab932", "comment": "Malware payload (Mirai)", "value": "86280bfe42910ff76d2d6cb9a9764c738abe0cc4672bf48a9f1516ba0231b91d133fedd940d1bc8a58327cfeb52956be", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762663652, "uuid": "cf9f2bb4-8c75-4ed0-b8f3-2f684493dcbd", "value": "T11C03E196260B0ADAE61750F346D70B291AF50332B186A8CDE7A493A0C79739CD4CF9CC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762663652, "uuid": "c74fdfdd-338f-4275-9417-41717c7b2a62", "value": "768:gjWcrfv5jElEwUql7TSvWyF8xU6r0KfRfLQSt+d4BbRJgGlzDpSO+sW:UNrfv5jTwUgvS1FhG06NUStfBbjVSsW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762663652, "uuid": "c86e9c40-353f-4934-aaae-9a7c02eaa8cf", "value": 38540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762663652, "uuid": "7ba8952e-69fd-4986-b233-d68249ec46e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762663652, "uuid": "1caed8b0-b453-4674-a428-1b03e7318551", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2685b006-bd5d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762686822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686822, "uuid": "a1f685c1-ea94-47df-8f34-7913e9dd4ebe", "comment": "Malware payload (Mirai)", "value": "e9f90173b825054b0d09c35981b335a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686822, "uuid": "b2f0007a-3c4f-435d-92d3-88a4b685b88b", "comment": "Malware payload (Mirai)", "value": "07e56cda1ee02d6e4b2fa0714bc921d251337f3027befa493698ade824451a0e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686822, "uuid": "961f9f4b-d7ce-4b20-8ca7-a84fe229105f", "comment": "Malware payload (Mirai)", "value": "8c5c9eae04d50754fa00afdfe807c02302e018ce", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686822, "uuid": "383d3f8a-516e-46f3-abb5-48c1da3b52b5", "comment": "Malware payload (Mirai)", "value": "98ec2736304d8e8fa2e9d370beb07563a3cfc4e58c2ad1b316a0fe1a7f0845aadb283d8de76492f2803642c35d59d701", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762686822, "uuid": "c8774f63-1f4a-4dd7-a45e-d60114af0465", "value": "T11883C7097F614FF7D8AFCD3745B95B05248C550B22A83B36B970E818F65B24F2AE3864", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762686822, "uuid": "211e3c22-07a6-4ccf-bfac-3aff4c24eb6d", "value": "1536:6WEI47qv4OSfONuLRvY+sp4l+4ubUp+DA9Z0ffma0duybVRp:6vISqv4OSfO4Vrsp4c8duy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762686822, "uuid": "6c3f8d0c-a3be-44d4-8bab-27350c8d3644", "value": 81872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762686822, "uuid": "c612a9f5-821f-4806-a95c-bb8c7defec14", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762686822, "uuid": "82b3ac7b-e110-4e8d-8188-479eaddbc557", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5690b8d2-bd47-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762677454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677454, "uuid": "b3f75e49-d873-44f2-a2df-3006e77ac95e", "comment": "Malware payload", "value": "45c961126a13f387738dc02d9ce3c2ca", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677454, "uuid": "8fd51b8f-01e1-4553-852d-f31b29b027b2", "comment": "Malware payload", "value": "09cd824f91c6dd4ca852ddf4f80aed469c71ab748565b6598f3ffb62d841f9c6", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677454, "uuid": "a89bce24-a49d-4996-921f-f5bd598a843a", "comment": "Malware payload", "value": "53225d1514ce40d501ea7ff05b5985d74785aaa7", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677454, "uuid": "5387558c-9f7c-45e5-988e-7cb8babb6a16", "comment": "Malware payload", "value": "a4b65b62c85be5a154b4f667e438105c75eb307344a38c6e02b7b555bdbd08c4008fd873e77c8ea3d1f511b3de728b42", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677454, "uuid": "ead2b2ab-5c8d-4b98-8552-81b31f931d6f", "value": "T1F4762342F769AA2EC4F3D3321975467A1066CE26C753DB8B645533B928BFBE00B417E0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677454, "uuid": "67959a62-de71-43f4-bf4a-80dfe8f68031", "value": "196608:1LJK3F1RCwxJBlnwgkNTWFzX40vN3cFXbfO/688E5H:1+F1RCwv2WFr4W4zTE5H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677454, "uuid": "99b1a031-2bf7-4870-9308-41cdf4ae7b73", "value": 7490075, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677454, "uuid": "7d0050b0-b091-47da-ae9e-4e72240bf590", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677454, "uuid": "ad1d27f4-46fb-4464-a07d-65ec7d7ad253", "value": "iranian.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cc5d92d-bd47-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762677464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677464, "uuid": "fccd48d1-9927-4c44-8c8f-d65367936145", "comment": "Malware payload", "value": "35d45c097567ccdf3284c4fef141d1e3", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "apk?t=1762637072", "colour": "#6576B0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677464, "uuid": "78204ea0-e90b-4a0e-a8f7-69f3bca37440", "comment": "Malware payload", "value": "0a4d04aafb3754c61f44edf8262e53e38e8c9822a5bd8cf6c41a59b915c261f8", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "apk?t=1762637072", "colour": "#6576B0", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677464, "uuid": "10c06d67-a6b7-4f39-866c-8126c674b5a3", "comment": "Malware payload", "value": "09554e221b4ae2590edd3ed09c7acae42ae8f8f1", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "apk?t=1762637072", "colour": "#6576B0", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677464, "uuid": "1bc2389d-53e3-4d39-a97f-d42d1ba5be5e", "comment": "Malware payload", "value": "4a4c20091cca45f8c4ee1f93f8723e2238fc79723691c3b46f1ddeac63aefa2544ad6c241de55fd36082efd57e29aef5", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "apk?t=1762637072", "colour": "#6576B0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677464, "uuid": "1ea88f6c-582d-4e39-8530-ed0a0d309ff9", "value": "T19B56E0CAF7C4AD5BC8F75332C63656A111474C268B83CFC3A958763C19BB5D04E9AAC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677464, "uuid": "813701f0-5e97-4924-a878-f0e3ef0521fb", "value": "196608:AYabrsJp+gDj5HL8cRGu5bPXCrmdl5F0Qn:A9rjoHL81S7ZNF0Qn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677464, "uuid": "58ca66b7-7db8-4ccf-8ad8-f3c303f908c4", "value": 6380090, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677464, "uuid": "5047bbaa-3fd0-41b7-869c-9c49fc9e33f9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677464, "uuid": "3d8e52e1-68dc-4002-9f7b-7f0993d6ea4d", "value": "rustore.apk?t=1762637072", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b403ab0-bd4b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762679260, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679260, "uuid": "9dc84ee4-3095-44ac-b33e-ac5705fe0a8f", "comment": "Malware payload (Mirai)", "value": "c71336492ad5fffef2bb79dd5694165b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679260, "uuid": "1a5372ce-5c22-44d4-85ad-3df79fbaa4a6", "comment": "Malware payload (Mirai)", "value": "0dc1f23f1aa04089e0d5144ab48af826d4f3aad564f7b2e9ca465fb53ca467d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679260, "uuid": "254e495b-dc96-42ee-a62e-42c6b0bc7226", "comment": "Malware payload (Mirai)", "value": "bd1c0c070005c3682085766eb15932dc0ea618d5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679260, "uuid": "8a930d42-8351-4dae-a558-264659fa7b82", "comment": "Malware payload (Mirai)", "value": "fea89bbff16a485f60c586cf0042d84c199d6d51812be46f26c16c389d4b5eac154f2a21a0336c59cd43b60858760f9b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679260, "uuid": "55b8972d-b8a1-4327-813d-f4c212a2ad6a", "value": "T129A348D7F402CDBDF84AD77B4053190AB131E3A20A831F36626BB967E9751981937F82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679260, "uuid": "104d709e-fca0-42b6-bd29-ce9d6cc693a6", "value": "1536:WLnEwq00chxMJ6XVnykb7g4TEhxQ+S8732H7auqJ3cKxR6KrL01qi0hQUT1v:ShxMIXVnyZaEhxQ+6I3cgRZ20hQURv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762679260, "uuid": "7eddaa07-d5dd-4771-9170-d7146e38b218", "value": 99844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762679260, "uuid": "d24b338f-5f86-49ec-9e7d-02fe400f8b5e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679260, "uuid": "030c1151-733b-4714-934a-da1a20f16506", "value": "titanjr.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "861efa69-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677104, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677104, "uuid": "fe100a4f-77a1-4276-b75b-cd8cbd575522", "comment": "Malware payload (Mirai)", "value": "c5acf67592fd201d2402a7981d72d14d", "object_relation": "md5", "Tag": [ { "name": "arm6", "colour": "#001BDA", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677104, "uuid": "9bb1f996-ec07-4e36-8327-639c544b0252", "comment": "Malware payload (Mirai)", "value": "0dccb139e68484576dc6ce00b30f3a01877486faae34f76545599d4cee3ac387", "object_relation": "sha256", "Tag": [ { "name": "arm6", "colour": "#001BDA", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677104, "uuid": "ec84d455-cb32-4ad4-846e-7908c114ef90", "comment": "Malware payload (Mirai)", "value": "2073e022ce86007b9b3120f4b6d0c25d832279f4", "object_relation": "sha1", "Tag": [ { "name": "arm6", "colour": "#001BDA", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677104, "uuid": "e1414022-5a60-47f2-b1fa-32cbf3794f58", "comment": "Malware payload (Mirai)", "value": "63c4a95b1e896f885028a1ccd5381ba2af014310937cf1288047acc78707a5f4c3d1698dfa2f7ee65421e11e2e397148", "object_relation": "sha3-384", "Tag": [ { "name": "arm6", "colour": "#001BDA", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677104, "uuid": "a847d16f-5355-4c35-ae87-ef2eeb0f0b4c", "value": "T1FEC2E132B4416DA2DEB01C70BAA959D74C1D0BB8D0F5B8B324524584EFD722573B8DEE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677104, "uuid": "46584bff-c54d-4451-86e8-dea71bfab33c", "value": "384:b/9RCLYEU5PFYO7MQ1xFqY2r0y3BW8EhbZQeh0YlFctWLmUwqzoHMmh7qmdGUEpu:xMsEQ97MoUwyhchlFcQ2qnm9q3UELjY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677104, "uuid": "a7e1d7ea-5c7e-4d56-b20b-dcac9c77344b", "value": 27536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677104, "uuid": "2c876537-c1f2-4d2c-9119-bd53d7f906f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677104, "uuid": "7069f37d-b7b3-4d80-ac33-7cfe8e779173", "value": "boatnet.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cc25d19-bdbd-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762728037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728037, "uuid": "9b96156e-0e1d-43a8-8d38-93a81c80e396", "comment": "Malware payload (Mirai)", "value": "c7dc4c829de79d2b7788b9e1b0947d7a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728037, "uuid": "fed0a3a2-702d-49a2-aeab-e87f5df93b8b", "comment": "Malware payload (Mirai)", "value": "0de86e0e38b477f791770399445539c8b9a91eaa00fa5408e052ab245d3561dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728037, "uuid": "0eba9ff9-0396-4f1c-85d7-138b2bfd6438", "comment": "Malware payload (Mirai)", "value": "7306a31624ed32a58a9e990c3e795f936eb8566e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728037, "uuid": "ec4e812e-dace-475c-ba46-904060593c80", "comment": "Malware payload (Mirai)", "value": "1f3bd51961b064dc3820dc7a24a20f98a1438235d2a93f06db59854348bbba6948f52ff6a9a9866f8a19de9a99dc36b9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762728037, "uuid": "b73b226d-111e-4446-999f-551671981c95", "value": "T14124E80A6F510EBBDCABCD3702EA1B0129CC541722A57B767274D518F54BA4F1AE3CB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762728037, "uuid": "dbc634ee-b6b6-414a-a1e6-745791aaaa1b", "value": "3072:B2JZLxaR4/EUIxmKxY8LNqDcdE2+J6hh1Pq0s:B2JZLoR4/rIa8LYGE6q0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762728037, "uuid": "28b0279e-d3ec-4ff0-ba5d-562f97137cbf", "value": 211956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762728037, "uuid": "3e946b16-3dde-4dbb-897c-e27648888dab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762728037, "uuid": "b040cb6f-0c4f-40df-8da2-f11c81c2ea04", "value": "boatnet.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f25ef7e-bd42-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762675347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675347, "uuid": "3ad81413-6abf-4160-9e65-0b733644bf7e", "comment": "Malware payload (Mirai)", "value": "104655c4232fa393118f2026ffdb91e5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675347, "uuid": "2eb22294-8659-462f-b2f1-e97ae54e28d9", "comment": "Malware payload (Mirai)", "value": "0e9773d0299a2c19c79c12c28c0974fe515fff32465c3a79d7ac6dabafa6de49", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675347, "uuid": "6727aa7d-f3e1-4cc9-8e02-6fc59e1a8d4d", "comment": "Malware payload (Mirai)", "value": "65d007909b7656edb501a14aad8cecab05b760d7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675347, "uuid": "38f8c490-215d-448f-b769-61e7ab922861", "comment": "Malware payload (Mirai)", "value": "14ef622c48b9e40d38ca0446efb9566d0c769fd83314128b0dc976da052e6246762e799c63a262ade39346a39a3ee8ea", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675347, "uuid": "e0a3da7d-0c3d-4117-b7d0-2aae5e4d03c7", "value": "T1FBC31A46B9419B11C5D731FAFB5E514933136BB8E3FA3102CD24AF6123C699B0EB7512", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675347, "uuid": "5bbab8cd-34cd-4000-8397-cd18c81f0621", "value": "3072:Fui8T3RxrfuyWuXtWpa9dRUxdgNInFIlYYYt3gubZa3:FuxDWRpa9dRUxdIInFXxtQu1a3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762675347, "uuid": "2c5ea339-3f6c-4501-bdf7-a4ebcf97c2b7", "value": 128472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762675347, "uuid": "049ff472-5abf-4c26-b650-aee6002d8869", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675347, "uuid": "759a9fe1-3b18-449b-8519-af6fd4a42bb6", "value": "morte.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ceefa364-bd1f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762660476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762660476, "uuid": "08538ef7-e90f-43ce-91a1-a3632315619c", "comment": "Malware payload (Mirai)", "value": "b1faa24485907b0a905a99c41651fd19", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762660476, "uuid": "bcb46016-85b4-44f0-a169-66acc4705bd7", "comment": "Malware payload (Mirai)", "value": "0edcbf7bb6b4b62b3639853627fae1129c58989df01702fe1bede75346cec8f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762660476, "uuid": "aee822e2-34fd-438b-a010-870f5fcdcf5a", "comment": "Malware payload (Mirai)", "value": "870d53ac9b8cb2aef14ea00234cad4130e78d39d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762660476, "uuid": "0917505f-8184-4f49-ae6b-08634ba06f88", "comment": "Malware payload (Mirai)", "value": "803a82f9e3596df833b48934e3ed75afaf866e3eddf3ee749be1047e49be09c21a258ea1fa3a5221e5803b7f9d66a7a9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762660476, "uuid": "0bf0547b-5fcd-474e-8961-73e1f03c532d", "value": "T1AF23F153E237F0B48E382D31B63E45469D146E7E9B77320BB0DC58AAA46D08714AF1D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762660476, "uuid": "50eac6bf-6eab-4500-8fad-c55df737e72e", "value": "768:ttOE76EP/gLasLgQHbbnUgldAPK6Z+RLq86qlimcoP66/JrbgxIQpnMO99q3UELt:Lp76EP/gLasLJ7bnRmpFngdScNbgxIQM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762660476, "uuid": "343721f1-056b-40da-b689-6cf51b7c57ef", "value": 47568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762660476, "uuid": "0162d2d9-df76-4ad2-b08f-5f6def69939c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762660476, "uuid": "a2e2a032-0274-4f45-a024-ea3589f3518f", "value": "morte.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce5f00a4-bd8d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762707719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762707719, "uuid": "6eba6c30-22e6-4e32-bd5f-c0fd5c182c80", "comment": "Malware payload", "value": "93a3571e1a57c74daf4cd0138df96d2a", "object_relation": "md5", "Tag": [ { "name": "booking", "colour": "#9F592A", "exportable": true, "hide_tag": false }, { "name": "naskkr-com", "colour": "#4B1242", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "Spam-ITA", "colour": "#DE8A25", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762707719, "uuid": "c91d27fc-9599-4d60-9a2e-47612001b30f", "comment": "Malware payload", "value": "0f5a104c946ec323909661abb8cdd7709e2e36c4d16672194c898c486fece462", "object_relation": "sha256", "Tag": [ { "name": "booking", "colour": "#9F592A", "exportable": true, "hide_tag": false }, { "name": "naskkr-com", "colour": "#4B1242", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "Spam-ITA", "colour": "#DE8A25", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762707719, "uuid": "5836d725-2114-4ce3-b5f3-0c07e8051673", "comment": "Malware payload", "value": "9bfaee3d8550bf5177da42134a696e257277d569", "object_relation": "sha1", "Tag": [ { "name": "booking", "colour": "#9F592A", "exportable": true, "hide_tag": false }, { "name": "naskkr-com", "colour": "#4B1242", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "Spam-ITA", "colour": "#DE8A25", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762707719, "uuid": "93ae21ff-244b-44cd-af77-5e9f2e2095d2", "comment": "Malware payload", "value": "64cbffbd401430149cd7878766dc207470d08ed50ad33e9ad377cbd828c770c9abc666cfabc469c7a0b9f1110cd9c90c", "object_relation": "sha3-384", "Tag": [ { "name": "booking", "colour": "#9F592A", "exportable": true, "hide_tag": false }, { "name": "naskkr-com", "colour": "#4B1242", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "Spam-ITA", "colour": "#DE8A25", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762707719, "uuid": "6f09fdec-c106-4e43-b2c6-22e8d6275801", "value": "T15ED0A7A9BDDCCDC467ADA09004C61D0D27754647C73429E522441E816C4C700CBF70A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762707719, "uuid": "07fcdbd5-c081-4d0f-8af4-3b81f539ad7e", "value": "6:s8SMVnxV7NevE8ydH1O7kC9kO6hQzFSnRpr0UOHn4s+n:s8z9evE8ydH1OgC9kO6hQZUROXHn+n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762707719, "uuid": "a53fdc9a-9be2-464e-80c6-b73d88d860a2", "value": 233, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762707719, "uuid": "26d59f60-79e2-49ad-86fd-09359603f486", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762707719, "uuid": "09fd2596-9da3-428c-98cb-987ca5095b48", "value": "ps.ps1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fc167f4-bd9a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762713037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713037, "uuid": "be08b436-acee-42f5-b171-f923de02200b", "comment": "Malware payload (Mirai)", "value": "209b3da69c288bf684c9fb55c792c9c3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713037, "uuid": "2ecfd068-0621-41fa-9f69-d7aa06a25620", "comment": "Malware payload (Mirai)", "value": "0f5abfde0e337e36e19b9f772bc801d64380b32aad28cc548f2dfa43fea56772", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713037, "uuid": "aa1d7a3f-5ce9-47ac-b334-f3d325ba2507", "comment": "Malware payload (Mirai)", "value": "c4424ef589cdd42afd752e649e2c0ecbfcb28cb6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713037, "uuid": "04b655af-e9fa-4e8b-a032-24184b47cf19", "comment": "Malware payload (Mirai)", "value": "f633a8864c23938adb29ef563054f302616074d57338693643e3ca767b995816455cb67869ab195a1d06c07b0ca669a8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762713037, "uuid": "4823d7ab-520a-4e8c-98df-557f061ff601", "value": "T10B8339917D416612C6E5237AFB2E428D332663A8D2EF721BDD216F207BC691B0E77341", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762713037, "uuid": "5b518f36-c09a-40f0-a49d-d5a7a5acccb5", "value": "1536:tbj/VqXFt4+rPXy5ezPAyp6GRCsb75qFQ4CytE18p7nK4g/57wTEO16IJKvrn328:tbj8qGPW+4ypRHX3w+gK4g/+DKjnmf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762713037, "uuid": "c8a88fe2-09d4-41a5-8414-f6a77db2ba6c", "value": 83740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762713037, "uuid": "251988ac-b182-4aa2-90d1-f31dff81d2b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762713037, "uuid": "3b191a66-d5b4-4104-a2db-f17489291210", "value": "armv5l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ffa27ad-bd4b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762679268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679268, "uuid": "488b73b3-101a-4e7b-8c0f-eefa6c928edb", "comment": "Malware payload (Mirai)", "value": "4e30c4f8e94e62d12483608b1482eff0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679268, "uuid": "806ab529-309c-48bb-895b-40cf1673d851", "comment": "Malware payload (Mirai)", "value": "0feda0f2f68bfa767dc9430253144c5160a2b022362fa1319409c5e3aaa98045", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679268, "uuid": "bea0ee75-2dbb-49ed-b635-152d354985b7", "comment": "Malware payload (Mirai)", "value": "1f64630f98ed16991a0671796676559e3e470710", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679268, "uuid": "e84e7b9b-42a7-4d55-b31c-ba6a576e7013", "comment": "Malware payload (Mirai)", "value": "4b7632c803d18eaf169e379ab2d40ff4f80aaaf47ceede814633da2d6ea85ee1e58189208a940ea9e0f55953505beb62", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679268, "uuid": "0b8e87f1-0f22-40f5-9117-cac76bdbb5e8", "value": "T10B839D23C93A1DA8D94885B0B0B08F7557A3E116C1972EF6585AC63ED093ECDF9963F0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679268, "uuid": "55eea9f2-ef34-41d8-8c67-ae193ea98bb8", "value": "1536:g0msxTt30EGYYixMd3UYiKKPX9JN1YCaNfSnAHy7:ghsxDRtq3UYFK/N1YTOL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762679268, "uuid": "2d677018-80db-4d8e-95c3-db53abefefdf", "value": 83812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762679268, "uuid": "94749f91-a916-4eec-8b32-a0ce06fab75b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679268, "uuid": "7759aabd-e38d-4da2-8d95-1e2fe086576d", "value": "titanjr.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b5715e2-bd47-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762677462, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677462, "uuid": "6d7b4817-5ab0-4b85-9934-86b6d1fa9f4d", "comment": "Malware payload", "value": "fcc32969383e848a20921ae5f3a8964f", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677462, "uuid": "5a5de8c8-832d-438f-b97f-5b7a404762af", "comment": "Malware payload", "value": "10d7b9cf51583b5b53ae1b94df3a9aa2657f403a08458b49218a681ed94284a4", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677462, "uuid": "a74fdedd-5e0c-4019-b328-4ffaa9178833", "comment": "Malware payload", "value": "47457a8b26cec186040c0f666771ed3910eb5177", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677462, "uuid": "5fdae6eb-7f5d-4c4f-aaff-2bf1d2d4ab39", "comment": "Malware payload", "value": "2e6dc10f96cd70eb83ccc563fbfd2f6d4550107bdc9a0919e6d32f182d93689f53fb7aa8e0035cf85edf0d5db23c5d34", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677462, "uuid": "72f6ae23-be9e-46b2-97a3-80a5f3755873", "value": "T10F17129AFB88EF1AD4379132C95A1633325B4C548A429B73750DB31C29B79D40F8ABCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677462, "uuid": "b7c4c583-7ab6-4ada-87e6-1bf2df8f1ddc", "value": "393216:H8ZVLONDWMor+NMVDedq43O/SfJcH1z+5WJvtaZuIVFF4VLShvtl9n:c8WPr++Vv43iS2HF6WJcRz4VLevZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677462, "uuid": "8c2142ad-2470-4c64-9215-02912eb43c5c", "value": 19684511, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677462, "uuid": "72363337-2643-45e9-bfde-17ed7657e0c9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677462, "uuid": "2e1d94cb-4d85-4d23-aacf-9ed832f8ca36", "value": "otthippo1.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1850081-bd56-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762684156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762684156, "uuid": "409d7b29-f71f-4b0a-a108-168ae5d19e9f", "comment": "Malware payload (Mirai)", "value": "462f86112867c9d2229891c321f83d76", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762684156, "uuid": "c16f7b3c-f5a8-4e36-b5e0-16b3be65f093", "comment": "Malware payload (Mirai)", "value": "11771fe16ac5045f822fb2da9e902871439465e8c3d36be2c1788106962e6b02", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762684156, "uuid": "5af781bd-eba7-4079-bd78-49b5c3af6cac", "comment": "Malware payload (Mirai)", "value": "a7724291119b8dd17f4c70b0139ca19076501ecc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762684156, "uuid": "619825dc-e157-4c8a-a013-d473fc5e551b", "comment": "Malware payload (Mirai)", "value": "b22a4bfa08fcd590aa64844ecddfa2caa7b6a9711499070d40f17b7c09fd1a10e2e4d382ceebded05561ffc2b179b163", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762684156, "uuid": "95e82a26-eb4c-479d-8ccc-19bcb7878cf9", "value": "T11DA34A07B8C18EFDC556C234437FB63AD961F0EE0339B29F27D4AE262D8DE611A19941", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762684156, "uuid": "5e757be8-df06-4eda-a9d0-cf103b2fcaa5", "value": "1536:3Lr4yAHoti+fvHj9U62wOtkXqLJD4wgPVBlIjUmlzYDfc5LqY6:3/kHofvHjG62wOT+wOBlIBzYDfkuY6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762684156, "uuid": "f0f02716-e714-4eaa-956f-a972cb596202", "value": 105296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762684156, "uuid": "ac6cf70a-1270-4f6c-af6c-d7820ea0cc44", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762684156, "uuid": "8d67457d-1000-4764-9040-5a06d0bac894", "value": "morte.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8bb94122-bd90-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762708896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762708896, "uuid": "8850fc31-8553-4a96-8db4-5d788ab9446a", "comment": "Malware payload (Mirai)", "value": "1dd028756528e1016baff61641ee4f36", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762708896, "uuid": "5ac1bb62-76e6-4433-86f0-7df98f1089d5", "comment": "Malware payload (Mirai)", "value": "1216bbbcd4d0f59fa900f7ad23f3bcb3612d57a05b9de6962c7d9d9b77fe5f80", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762708896, "uuid": "95c720b6-60f2-460f-a31a-a7bc9f4b25cd", "comment": "Malware payload (Mirai)", "value": "0f26139bd91773f9c01345ea28db6dea4840cca2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762708896, "uuid": "b98cfac9-9958-4ad9-b364-f066f6fcb90f", "comment": "Malware payload (Mirai)", "value": "a930c439eb1caf11e8bde71a023f041b423b15eaa3d03d3d1e2b96c3be7410dfdfbb92761ea916570d596624693d13da", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762708896, "uuid": "7fc336f5-6796-41e5-a2db-bc820c219ea4", "value": "T112935CA1FC02EEBEF40FD77B44534D19B731A36125931E397393BA27A8351A94863E81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762708896, "uuid": "3fc1b569-5fd9-4e68-8cc5-aa2b2f8289d2", "value": "1536:KwbDsMzyUqhzXQIzMpqCQvQ8iny1PgylqK1Pezp+Sk4wSKuRhje6u0:KwcyjqNAIzMpqCQvay1Pge1W9vKuRhjb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762708896, "uuid": "34c60846-6e57-4e15-bc2c-b47ecceabc51", "value": 92104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762708896, "uuid": "13b1e60f-4597-4aee-8e8c-b2965ca278af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762708896, "uuid": "39a637e8-528b-4042-ad12-fba45838572d", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5674439f-bd8e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762707948, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762707948, "uuid": "149d33e2-f66b-43f4-8369-e57e01a8af07", "comment": "Malware payload (Mirai)", "value": "40d8ad0b71dc26bcbcbd72e47825aa66", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762707948, "uuid": "0d158810-cd98-4914-89b7-d21c50771db6", "comment": "Malware payload (Mirai)", "value": "1218d989c7dfeefb8909c0aef17d086d857eb639e9c1d416768eaec1202e4301", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762707948, "uuid": "7e853f54-80dd-4a00-a877-6b51b3310322", "comment": "Malware payload (Mirai)", "value": "91f134272fbbd0d6e50d3d520fc227b5522840da", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762707948, "uuid": "c24d752a-cf56-4c60-b0f3-5fe85774c779", "comment": "Malware payload (Mirai)", "value": "808b2b68f82747978d41b415cf7204444815207fb67365482c3b9db6f14547cec7a502211047ccbe6b0c4430633f0ca8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762707948, "uuid": "ae85e304-17f8-457e-ba85-539489d34b5e", "value": "T120A3D71E7E628FADF668863443B38F31975837822BE0D685E2ACD5045F7428D641FFA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762707948, "uuid": "6cf1c3a3-30a4-42cb-85a7-8caa13f283d8", "value": "1536:ZW5zu/f0mg9nnObOF9KCErHO4seTvV0aeZ/udBqgm/scjeoiqB1VTem9F0Cg+:Q5q30mGnnRKZO4s+ma3Bq5scH1rF0C9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762707948, "uuid": "1afed8dc-16e9-4732-a728-27707ca454d8", "value": 106488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762707948, "uuid": "f6bf6668-a441-4a19-9094-af3212e51b62", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762707948, "uuid": "901296e2-e911-4eb5-9e96-681ae2d0cb95", "value": "mips.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3150e7b5-bd39-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762671378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671378, "uuid": "d16ebd1c-c6aa-402e-bd78-0397ab70753b", "comment": "Malware payload (Mirai)", "value": "71083547b8ff1a2393f354065c4a6278", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671378, "uuid": "8c80b81f-3188-4800-9542-787290b30dfa", "comment": "Malware payload (Mirai)", "value": "1244ee6b6b6435f26dba51ed25185ee79c24b68a8df2550cd7b818d65deaaae1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671378, "uuid": "ab2a66f9-5253-40d0-8465-da6faa95b156", "comment": "Malware payload (Mirai)", "value": "43cbcb4db143b0c465ba0e6d413057f140437496", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671378, "uuid": "10482f0a-94e2-499c-ac70-853d02480713", "comment": "Malware payload (Mirai)", "value": "0a2f0bd65801e2690a092cb7c4168426dc957aee0626458636a5f4aaebfb63c2a44a5f6b34cc7f8de7c8d9c7c2545e47", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671378, "uuid": "97661f95-5ccf-44ae-a577-6df7ea0a83c5", "value": "T1F5C3C70E6F329F7CFBA9833447B79E20A358279627E1D585D1ACD6110E6028E241FFB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671378, "uuid": "cb4c0f5b-ea24-4d32-a836-c6f084911b82", "value": "3072:pufLDFrKhZDAkCctjMY+3fpkmjcQYzvmht4:6LDFrOZMkjtjMY+PD9mst4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762671378, "uuid": "6c8a8975-675d-4478-bcbc-6e06f4f7fdd3", "value": 127336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762671378, "uuid": "1d6d5499-9aa5-4997-b039-8e1154526ac9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671378, "uuid": "02f8c55f-aec5-4122-b2e2-20d1a8eae4b7", "value": "morte.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b78b9af-bd0d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762652658, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652658, "uuid": "5164438d-2e2a-40e4-9fb0-980ecc0276f1", "comment": "Malware payload (Mirai)", "value": "69d68db2745598c87d305c4d509995d4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652658, "uuid": "5e9ca315-785d-49fb-9d58-6ddd956d4a40", "comment": "Malware payload (Mirai)", "value": "14137d927732d21e3251ae39af6afb3a53eb6ce79085591e2bc2a2a17da4aff3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652658, "uuid": "ba6dcfeb-a1ac-47ed-951a-d11e0aa6ee36", "comment": "Malware payload (Mirai)", "value": "9f17a188de5e9c8abb4dd7c736d6226a0174856a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652658, "uuid": "c6529bd2-7ded-4260-8d33-9784a2ff2716", "comment": "Malware payload (Mirai)", "value": "b40b82dd38555028e96cd32acd7026fb0bdd0ce5ba7b794c1fcd4340f4460792be8e98f2de87371c381132443512d2f6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652658, "uuid": "f70af221-f02d-496f-8eb8-f7f472c5b825", "value": "T179833A917D416612C6E5237BFB2E428D331663A8D2EF721BDD22AF103BC691B0E77641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652658, "uuid": "e3822831-a69a-447e-b550-04af9869f656", "value": "1536:eKA36Hw4C4pLCHaBm7keQUYKdyJU7RxwnO5oRuFxcLLw8N/jTVOL2TwcZb6FvtfO:eKACZpOiueDkv8xsFanw81JIV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762652658, "uuid": "60151951-6c1c-4ce1-adf1-bd596befcf54", "value": 87176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762652658, "uuid": "0084d1df-24ab-4e4c-a8d1-6a4c1d90a575", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652658, "uuid": "1e589989-2cb2-4d07-b348-3564779594b2", "value": "armv4l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66050846-bd93-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762710121, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710121, "uuid": "3b2c4189-e497-4890-9224-8927961f8a93", "comment": "Malware payload (Mirai)", "value": "5d4093375bbc74d38fe85bcc0c3d77a4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710121, "uuid": "84dfe13b-68c7-4c6d-aede-c000fa4b31f2", "comment": "Malware payload (Mirai)", "value": "1586b8bf3f8d9cb9fcbd8ab0a22bce833ca1dedb34f601c6c12dd3cc8a8ba646", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710121, "uuid": "3498f0ba-615e-4862-8ce2-6ef571c82076", "comment": "Malware payload (Mirai)", "value": "a20d59cd71f3fe81e082fabcf909bf4e4dd78e65", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710121, "uuid": "ebe5c0b2-63d2-4a34-b69d-8191d28c1288", "comment": "Malware payload (Mirai)", "value": "b67c9f081696a2ec87cd7606184f807e09a49eb61b25c3c574fb04fd4c4ff81f33ec4628e2d0c0472f21b6dba021c4f2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762710121, "uuid": "4bfedbce-7c4e-46fd-af9c-bf5057d0478d", "value": "T190C36C22A5352D27C4D495B712F34332F2F7438A21BC866E7EB60D8DBF1865033576A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762710121, "uuid": "4756bda1-a78a-4dc6-8868-01739d10ea14", "value": "1536:7ltlPRRARLNR5Lw/J1GOKuKlVHkadJpM6IxYLKm1KDkt947Nm5AVXgkZyts+Rmr6:7lADSYmm9r2NOAdCH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762710121, "uuid": "92e1aca6-dce5-4136-8982-777f51d7b1c0", "value": 124564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762710121, "uuid": "ca526759-3261-4d8e-aa62-3fb828e4b046", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762710121, "uuid": "0795847f-09e0-4ad9-a2dd-4416a2ebe9d5", "value": "morte.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d9ca9a9-bd6a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762692390, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762692390, "uuid": "9adc6900-cc80-4c8a-8e24-20ed91c4ef9d", "comment": "Malware payload (Mirai)", "value": "bcd958b84bb9e9cf81de988874199374", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762692390, "uuid": "38118641-4f1a-4698-8837-c5852814137a", "comment": "Malware payload (Mirai)", "value": "16011b3f5882eab56182ac7259954077977cf0872a3654d0ad2f4b428a8cec53", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762692390, "uuid": "fd024e67-d767-452f-8359-80dba9235e23", "comment": "Malware payload (Mirai)", "value": "748b947091d13ffd1669c5f5743a3ca341bba43b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762692390, "uuid": "fe23673c-5696-4b33-be20-4670ab7fe5e0", "comment": "Malware payload (Mirai)", "value": "fb3a1a50bc4257b05588fa2551af37f5048c86852fe150d37a9a9a55be71120258d7f25c3d40b5e5284dfb52e25ee701", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762692390, "uuid": "5abf608c-5f4a-4a03-a617-6cc07e16471f", "value": "T186833B56FD81CA13CAC12577FB1D428C7B2747A8D3EA72039E265F61638B52B0E3B641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762692390, "uuid": "2fd388d4-def4-49e6-94d8-b99900fe38a1", "value": "1536:otXwLdxN+6xZH1kvdWZVOLxGoXqlvjjemf:otXeXpt1klWiMT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762692390, "uuid": "6a762cf4-21a5-4dc0-be72-328ea16dcad5", "value": 81612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762692390, "uuid": "c891ed84-61ac-49ea-925e-662700a51724", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762692390, "uuid": "0924255d-73ed-485c-9b3a-631c9a4f015a", "value": "arm.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "850947c6-bd04-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648755, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648755, "uuid": "4541c76a-bb09-4e7c-86fc-9067581bf905", "comment": "Malware payload (Mirai)", "value": "974253e91b9eff54beace0a471830644", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648755, "uuid": "2846f354-1bdd-4055-982b-589e7e82f606", "comment": "Malware payload (Mirai)", "value": "174b8ab27ddf76f307324ee04686e9211fa2ddf26b0d1caa700551b713301c49", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648755, "uuid": "dee06f0f-acc2-4192-a6aa-bbdfc4480334", "comment": "Malware payload (Mirai)", "value": "257cc9e0bdc7e3f9665acc31884c9995423b1275", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648755, "uuid": "50de951a-cd4b-4554-8b36-b2ded807d51d", "comment": "Malware payload (Mirai)", "value": "733f1bc7c2e99d4b801b3b4f3cf778ef8acca4f794b1276ed9873d98d7eac4c015fc5089435f471f55ece3c2ef7fb4f1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648755, "uuid": "304a16db-f497-4dde-b372-801e45acb2ec", "value": "T1BE8339917D416A12C6E5237AFB6E428D332653A8D2EF7217DD226F103BC791B0E77241", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648755, "uuid": "e59f5310-1d5b-4b50-8395-279453041481", "value": "1536:0eXqoFWznYqHzz8iYPHjgrTy/cH6kjxynCEvZ4t7TG7tH+sA5TWOi3ovJptev0fU:0eXSYOHHY/MrOcP3A+OxH+xLpwQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648755, "uuid": "3a7c791c-2929-43c0-b0f6-21e330ad9160", "value": 83472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648755, "uuid": "e9139b2a-9848-4e8d-bcac-554d45820b27", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648755, "uuid": "22c8750e-5815-41ce-8919-411bc7828e5d", "value": "armv5l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "572087da-bd99-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762712673, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762712673, "uuid": "be92d487-5c63-42d2-bdc6-c44f683bfdc5", "comment": "Malware payload (Mirai)", "value": "8a05a0421dba3d8a58ff78dd61b236e6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762712673, "uuid": "a5e19733-3e4e-400e-883c-c0297c43f493", "comment": "Malware payload (Mirai)", "value": "1830697ccda591cba76a27f1d292b62aca1f2d9b02de8b0dab34cbcfb80afee9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762712673, "uuid": "d0b9f0bc-b85f-47a1-b7c9-98ebaf5e67e2", "comment": "Malware payload (Mirai)", "value": "21b6da6d6ebeed4f43bffeded2546494ec7b2674", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762712673, "uuid": "d3de0660-e4cc-4fe9-90ac-7272e0e91b6a", "comment": "Malware payload (Mirai)", "value": "9fa9294f40809b796e68a4cb55b11da9191bb18efcaafa15b7a9057dff85fb926d88a362447411821278f1f92981a77c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762712673, "uuid": "fd296d13-3015-4d91-b7e9-deb6faa8dad2", "value": "T1B7832956FD81CA13CAC125B7FB1D428C7B2743ACD3EA72039E265F61638A9270E3B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762712673, "uuid": "52d261ef-2e81-4d80-a8e5-bdf72c84a7d1", "value": "1536:EGwLwANBwPpHOlA+IO4TxGGUylvWc0emf:EGf02dOlAdlrW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762712673, "uuid": "fb4b73d0-31ef-4f3f-a83a-6019cb182714", "value": 81676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762712673, "uuid": "c064a7a2-799e-4eb3-96fc-684646ce4dae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762712673, "uuid": "b3bf8ecc-a9f3-469b-b6ac-941c96e1c841", "value": "arm.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e2d929d-bda0-11f0-a129-42010a9c0007", "comment": "Malware payload (QuasarRAT)", "timestamp": 1762715718, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762715718, "uuid": "bb0e4ae1-0a8a-4c52-976e-9e18568822ab", "comment": "Malware payload (QuasarRAT)", "value": "0be2cf4c9a333c8b15286f43c6cddd3e", "object_relation": "md5", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762715718, "uuid": "d191d34e-ee06-4d4a-bd5e-207c1c425892", "comment": "Malware payload (QuasarRAT)", "value": "198aa2e30aeea98954e2d908a3987097245e9096bf0e7e7f758885424c4fdf27", "object_relation": "sha256", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762715718, "uuid": "ba9e051d-e10d-4872-be93-78364e4fc3d3", "comment": "Malware payload (QuasarRAT)", "value": "1cacd5a0017310578bf12ba0f812a3925ac008e7", "object_relation": "sha1", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762715718, "uuid": "bdcafba6-29dd-4ab8-8b10-ca4ba30104b8", "comment": "Malware payload (QuasarRAT)", "value": "a4d131c664b255e761528148c7ccd4d403e334862d0ee0a1c9ce4fcb6aa1d960fdf0d28ae9d3d7a6886c6e16d022c00f", "object_relation": "sha3-384", "Tag": [ { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762715718, "uuid": "b571159c-a0c7-422b-9bfd-249d31673225", "value": "T158737B5E3909BBB068931EB5EC9F913F58F6046129BBA592130483D9AD704BCEFC7C19", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762715718, "uuid": "ff245ea8-8ca0-4913-8ad5-763b00bb7936", "value": "1536:sf0PE9rAg0btdEYfW92EWOcmDyGEQWZ6C8WkDK:G0PTEYO9SmBWZrkDK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762715718, "uuid": "262cc2ea-29b3-4442-8157-97c857ab9849", "value": 76281, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762715718, "uuid": "f04b72eb-2712-4d3a-8cb8-d38683e7671d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762715718, "uuid": "8adef349-7269-4a06-b3d1-0b921dd0b266", "value": "qs.hta", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27383411-bd5d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762686823, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686823, "uuid": "1f034934-6896-47d3-8cd3-93938f25540f", "comment": "Malware payload (Mirai)", "value": "7b265ec7f452236bc608b15a5a909c91", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686823, "uuid": "4511605b-d883-4ed9-ba42-9558c4077bf4", "comment": "Malware payload (Mirai)", "value": "1a1999152e039a3fb1fcbbeaeb4396c09a6d261bdd9a3638a79e11a03227719f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686823, "uuid": "c04308a6-2f92-4cc5-8c51-7cc8ccc69b41", "comment": "Malware payload (Mirai)", "value": "46c5551413d770ae75cab6f9cf183aeb41ecf523", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686823, "uuid": "f8bfe984-7074-4aba-98ab-3ccc93dbdd3f", "comment": "Malware payload (Mirai)", "value": "4567bdac6ddc14d65b793483c68bf0d7cfbb93a36fa8b049f11afc91ed90d9a1bdabba63ac9c4a81c603b63939c5fe06", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762686823, "uuid": "5274b740-3e69-4cc8-aeb3-d84482d80fa2", "value": "T14B4339C4E643D9F6ED450A7E1077FB3656B1F4392168FA83E795F533B841A02A60A38C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762686823, "uuid": "e0c6a292-4f2c-4047-8d6b-c68943b17018", "value": "1536:l26KukJN/lM01P9B3R9vgEX2aJ1Lhqi93HxletRR6:l2B3JN/lz/BB91fBP9X7eo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762686823, "uuid": "87e1d6b0-d7b5-4bfd-9305-83a05ad3fbf5", "value": 56036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762686823, "uuid": "b76327aa-ed6d-49c9-9c2e-f3e7a7109295", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762686823, "uuid": "960a4755-4b2b-4005-aec4-4093884999bf", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57cf8f9b-bd03-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648250, "uuid": "9060056c-2853-4b5d-b6f6-e0593f30e4db", "comment": "Malware payload (Mirai)", "value": "a566763ff41ac3822af7c88b8b01d416", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648250, "uuid": "0bc8251f-7787-460e-a225-1fcd3a16b01f", "comment": "Malware payload (Mirai)", "value": "1a4858ffc7e002c6078868554dd0db93340bf51bc9848accd50d329f6f27012c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648250, "uuid": "97045da9-ce27-4ea8-9d53-677d8e37e055", "comment": "Malware payload (Mirai)", "value": "35e8c3c1c4909ce30f261495cc4a3cdefad8a817", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648250, "uuid": "784d2990-564e-46ba-ac42-b012de69c753", "comment": "Malware payload (Mirai)", "value": "dd95b2663ae9d0c00492c8af2abd636dd05e64b4da2efd5b292edfe261a3691b0a05a719b1981f79a1f9977c7790bb82", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648250, "uuid": "81295e85-d854-4bb6-bbcc-9da609edb4be", "value": "T120230271490A9EF524303C72DF95A793B9E12AB2C567311396280A3C3F697231E5BE4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648250, "uuid": "a4775048-051f-44ad-b5ee-48662b7a4eaa", "value": "768:D/TYCoIxdEk+AxoTZAZHFeq8b3W8G9q3UELbUXfi6nVMQHI4vcGpvS:DECFd+A6YHAxW8rLRQZS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648250, "uuid": "9ddd31b5-b1d7-4bf2-8a03-d1f6c3b4570c", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648250, "uuid": "815568c9-016f-46e7-bc19-3167a749ae27", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648250, "uuid": "5826a5d8-79bd-45db-9595-b08b57fe164e", "value": "boatnet.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b6f570a-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677113, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677113, "uuid": "e6848fb4-1772-4f83-baac-3678e56cf6f9", "comment": "Malware payload (Mirai)", "value": "65c1b58065b6aa31feee0d80f0389bfd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#3C3F0E", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677113, "uuid": "921ee6da-883e-4c5b-90f4-71f610677b9c", "comment": "Malware payload (Mirai)", "value": "1b7a47b6fa159e512272460eb2747f3b31c6f52aa3cd1cc8a267f060bb4ec876", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#3C3F0E", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677113, "uuid": "faec526c-c0c7-4048-a898-20251686a52a", "comment": "Malware payload (Mirai)", "value": "edd2d5478a5b1203d9039345520bff5d2a6f7099", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#3C3F0E", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677113, "uuid": "5d15f855-4e31-4040-87f4-b739bd7a17a8", "comment": "Malware payload (Mirai)", "value": "4e2c76c8589de84112eb14226b38351a31cb76c918f2d906742e54b59ef8736e919e0464e28ca6fe0d6e28b41433aabc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#3C3F0E", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677113, "uuid": "d2a7a688-6fd4-46c2-adfd-a77a1d53308e", "value": "T19033199AB8029D3DFD1FEABE54164E09BA2077C11283072767BBFD93AC721945D02F85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677113, "uuid": "994925d9-8042-4a96-bbfc-8f81a3558d63", "value": "768:1/PfiCPXUYjD2R41kVgdUkJ2T38s6MV+ozQHQXOakeFuhGg:5HRPXDyRFVMHJi38s6MpQHQX7keTg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677113, "uuid": "2f513fe2-fc3e-46ca-8cea-29c4ab23e14f", "value": 54860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677113, "uuid": "20b561cb-5df0-4eee-8009-48df205ce798", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677113, "uuid": "2272b1a9-ad01-4bff-9cc9-8330ccd4ecfa", "value": "boatnet.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b3344b8-bd03-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648256, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648256, "uuid": "ce6a0261-c272-46bd-8fad-ee9eb9dac365", "comment": "Malware payload (Mirai)", "value": "9dc8de0d80db97e4217745dcdecb73e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648256, "uuid": "6e244fc8-5cdd-45cc-9de1-5c1422275d54", "comment": "Malware payload (Mirai)", "value": "1c9292a62c542522f79631a4a6b93e2fea4019b6a3dde18f28c8a8261c3263bc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648256, "uuid": "5883686c-c449-4c80-a2ed-e30cd7bf0352", "comment": "Malware payload (Mirai)", "value": "947ee15887701555cb279c705f30cb0e52e92e96", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648256, "uuid": "fb87a80c-8cdb-44e1-8343-845cb7be234a", "comment": "Malware payload (Mirai)", "value": "f53e07e009e5ab21dcc07e992a11b9f6a6e3a4fdb840799f966d90f11daad454011da71be3e6272c63900a6568c8f3ab", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648256, "uuid": "192124dc-5210-4d94-bc8c-0ea8bc1a0169", "value": "T11AB2D03C1B111B98DA1AC0BD839D1B213CB81F759182DD4B6206FED7AF968747453BE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648256, "uuid": "b6a8c2fe-e31c-420a-9b8a-5cf000677134", "value": "384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuipCmdtJgGlzDpH7uNj1JAB:YeD8ZSWvZHZbs1row697qohQvg9MitJL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648256, "uuid": "634897d8-46ba-4359-9a94-4c3b75d806ca", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648256, "uuid": "ce2e3666-8f5b-486e-b51a-c6d237ca14d8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648256, "uuid": "1d94eddf-c21c-47a5-b006-b0387086a1fb", "value": "boatnet.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab4a0414-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677166, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677166, "uuid": "ebefc976-902c-4f70-8c43-b767ea49f2ae", "comment": "Malware payload (Mirai)", "value": "e65bdce703d707a8719bda71dfcde944", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677166, "uuid": "a5fda3de-062f-4a4d-8d48-5cda31060984", "comment": "Malware payload (Mirai)", "value": "1dae91194e0f5e0e2c997643f0e5c4df24961ca01f329bf8df25f829b0b7c715", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677166, "uuid": "912346dc-aca4-4427-88b8-7e63a969a935", "comment": "Malware payload (Mirai)", "value": "b2000fe884930eda99568ba841b5e766e3aa87c9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677166, "uuid": "7611f6d5-6d30-4381-bb5f-8b7161b35052", "comment": "Malware payload (Mirai)", "value": "324d9fd2d20e4d60125e7c6c07b2556c56842cbc49e376d80159ea585f5fc001d2a1617dbbcb20566b8fd2785e71c074", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677166, "uuid": "5de32dbf-940c-4467-848d-e159e1077439", "value": "T1F2739505BF500FB3DCABCC370AAA2B06399D655761B97B36B930D518B90B24F15D3CA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677166, "uuid": "4f996879-e2b7-435e-8f30-2b836162129c", "value": "1536:NOh58QhI5N+GhmybC5SpT48Vog2vZUCQcso:NOb8QhkAGMybxH2vYo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677166, "uuid": "1e9e91d3-7486-4247-af29-323b1d91859b", "value": 76120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677166, "uuid": "66360469-e2af-4f03-a0f8-8c1666a1705f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677166, "uuid": "b30c890b-6fcf-445f-bb61-4a6a4d4222f0", "value": "boatnet.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a306b45-bd03-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648281, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648281, "uuid": "ad21dfc7-7904-4e45-89d6-620c5189392e", "comment": "Malware payload (Mirai)", "value": "7d7947f21308fad9fa21fb422e91f919", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648281, "uuid": "54e49137-bdc2-469b-ae55-14b810518004", "comment": "Malware payload (Mirai)", "value": "1e8f3496dd6cfa327384593692cb4e5256f13fb92852f805914139c7b2247fb1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648281, "uuid": "c317799e-90d7-45f9-9198-cfe778adf875", "comment": "Malware payload (Mirai)", "value": "13f82b8ef212f0e4ac7d0de65ef2f99295c06294", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648281, "uuid": "50b19767-5c4c-4d00-adf0-db972f832b6f", "comment": "Malware payload (Mirai)", "value": "4157da68def6ee9ad6453a0ff3be3561f1b4456d9aa98f6065fdf313693c77fe3d749b9deb0bd3b1a4aaa6a2343853a3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648281, "uuid": "9eeb6605-0204-4bb6-ae87-215c77d4c1b7", "value": "T1FC630A96B8818F25C5D5037EF92D118E372227E9E2DFB2229E205F203BC652B0D7BD55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648281, "uuid": "3e1edf36-5ee1-4dbe-a2ad-2324b3eefaf4", "value": "1536:itnPsVkFxV8xk6b5VKLNXduAlCjFlIr57uscvIGiojd70k7h:VqVMkWV8PPX9Cjd70k7h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648281, "uuid": "bec65118-ae99-45f7-9903-89d5f6ceb1e8", "value": 66864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648281, "uuid": "536e6020-e658-4ff5-90bb-64d68273a18b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648281, "uuid": "370ec3ee-cb1e-4d45-91fe-7881b471eacd", "value": "boatnet.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31ea8182-bd07-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762649904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649904, "uuid": "98d3f808-c448-49cd-b208-6c0bb6712809", "comment": "Malware payload (Mirai)", "value": "6d95414b918974e1ed792eae1376385c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649904, "uuid": "d862f479-130f-4871-b4d3-ca5333ba49f4", "comment": "Malware payload (Mirai)", "value": "20a97ceb23904d38193dc12b4b2926da20b18cd0dcb9d7558394962dfd973cc4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649904, "uuid": "fcf40333-355e-4f7b-81ba-10b8567dbd8f", "comment": "Malware payload (Mirai)", "value": "af44bccf8aaafbf8ed81c3f81430b50866c32f33", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649904, "uuid": "4efb11f2-aba9-4f52-ab0b-13ff387013cc", "comment": "Malware payload (Mirai)", "value": "65a3a1b00dcf4f3a57e8136c58461d181a5cbc82f0e4d1e523853e5223ba217445af3a4a0861514f131255f3d1b1be3b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649904, "uuid": "93dbdf27-4b4b-4ae3-a359-598e9500f107", "value": "T18273124CF96F54ACF4460C75EAB6916840FA3852636A12C13DAF6F90BEC132ED4DD223", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649904, "uuid": "365ece81-9ec5-46d9-ac68-d406e753bb62", "value": "1536:7Q8a/MlZGSay0q8ji8nHpQodgtQ8SgxnsvnV8HorO:c/x1gqrnHPKthSgxsv+HSO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762649904, "uuid": "84c96f3b-7d1b-46db-b048-91a2f4017dd6", "value": 76672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762649904, "uuid": "487259d3-c624-464d-95ee-91906245855a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649904, "uuid": "e2651ac4-c265-48ff-a5cb-d71a9e062003", "value": "xnxnxnxnxnxnxnxnmipsxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe0f16a4-bd9b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762713812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713812, "uuid": "d1438548-3dfc-40b9-82be-2e1b113261bd", "comment": "Malware payload (Mirai)", "value": "c65661e27febbc555af4b92930994a60", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713812, "uuid": "f6f138ad-f122-4667-a27a-9a890f363393", "comment": "Malware payload (Mirai)", "value": "2151b9bd872c1fc166f8a5b286f0039fefa2d153cfe2afe4129fa3ed409533ca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713812, "uuid": "66b1486a-9729-4a28-925c-9258d9fb74dd", "comment": "Malware payload (Mirai)", "value": "bbf82e0c72f0752130682d9215020c26a5c67391", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713812, "uuid": "c42fe3ac-2b34-4ba5-8545-b3cf4ddd763f", "comment": "Malware payload (Mirai)", "value": "00dfc9a1ff904382a66159be7668b75d4af6234a71aca867d4e2ecfdfe3c761333a38125db10aa5d1cb541ad3fc00609", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762713812, "uuid": "595bd225-f439-4da1-bc7f-cdda050dd665", "value": "T1BC739E63C02AAE64C80499747471CEB51753B44442A73FB78AA9C1F6908FEFCF6293B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762713812, "uuid": "1223d5dc-b9a6-43f5-950f-09bc82b96c8d", "value": "1536:7cWb8IFnxWV+BIeqDl3QYJtKigasIGccC4fyA4RbYU:7cWXFPyJJ0ieccv1F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762713812, "uuid": "5468288d-8137-473d-8a1f-85afb4c8c689", "value": 74944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762713812, "uuid": "4d64630b-bea6-4e9c-8d07-814259084d37", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762713812, "uuid": "725e4264-0854-4e4c-859c-844cea8a2800", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40e87cd1-bd82-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762702758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702758, "uuid": "d60ca343-5c58-4c5d-96a9-f1cd9d942d18", "comment": "Malware payload (Mirai)", "value": "4b768b31c84fe27645b98c7e87eb400d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702758, "uuid": "7207c47f-233e-4fbf-95be-8cf45296f2a5", "comment": "Malware payload (Mirai)", "value": "23adb83ada74a3be1baa9aadecb16ef7cd242ed70e7e3d947b5afae4ce2f997e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702758, "uuid": "4a8352a4-bffb-41ac-a600-d0866f9219ca", "comment": "Malware payload (Mirai)", "value": "bc8321df63394f4bcb1dde3b97f72959348ccc86", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702758, "uuid": "4ca433f2-4a9c-4713-bba3-ccfbd6b7b835", "comment": "Malware payload (Mirai)", "value": "7e17884b2d63d662f589f5f12748ebc617828c284a44e5efbf1900ac5c53ca8a3ab0f69c663f8f8ef3b66963edbf0e0d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762702758, "uuid": "fc13e6f3-04c2-4080-a804-fff392cc3e84", "value": "T14CC33A45FD92CF13C6C626F7F7BE018D371567B9D2EA31029E25AF64338A08A0D36625", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762702758, "uuid": "141c0c49-a660-444c-b387-aa0293ec38d3", "value": "1536:tiKvuKZzJm51GO6wOGTF539iyIru2m+3v4o6WFycsmRVZ1pQkZFGyz+83AOI4v7U:tiKvuUm/ahGZiyHAfiWFyQ/i7kK93", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762702758, "uuid": "77368e47-17d1-49fe-9f86-a22b0808d197", "value": 128192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762702758, "uuid": "72bc540c-376e-48a0-89fb-06426f9d2cec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762702758, "uuid": "10968636-0a1e-4ba5-a9aa-dc706801fd01", "value": "morte.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a14c979-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677111, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677111, "uuid": "575375d7-13fa-4913-bd10-bd8f9e6a0b2f", "comment": "Malware payload (Mirai)", "value": "dfd2f1b0130681b3bf39c417f20bc85d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "i686", "colour": "#720473", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677111, "uuid": "9951a2ed-2b5d-4304-8afe-450f58eaa5d4", "comment": "Malware payload (Mirai)", "value": "2664925cea3aa4dea482f6365ab68adc74392e525df7f6e13f37d571fbe1b4f9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "i686", "colour": "#720473", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677111, "uuid": "7183c30a-788e-48e0-9e43-deeba6d86202", "comment": "Malware payload (Mirai)", "value": "9cde7d1a83f854498c0808a3718575e50abecced", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "i686", "colour": "#720473", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677111, "uuid": "2d5a9318-d4ec-45a0-b153-167f0154171c", "comment": "Malware payload (Mirai)", "value": "e26028a137f13727f10155102bb555fcf8fc847aa05d10824c30526399f817923c182fb693a2dafc722a7e255c97ce21", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "i686", "colour": "#720473", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677111, "uuid": "97e547e8-f5f5-45d0-b923-fc588cfdabf9", "value": "T121A2E166AE4B101AD86AC2BF11A74CAED83A4CD6474F414BBA4B50045FAF4B2D53CB7C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677111, "uuid": "f1e78773-dc50-4c5a-95e6-e6e74f54ed2d", "value": "384:M2vLCYFEs1lf+mf+2L2r5DN2i495Gx/GCnYtHEUz4/YCzy8wpSsiSCuCH+v1R67:1ss1lfs42rJIi43m3n8HEUzsYjPRCg67", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677111, "uuid": "85c23f5f-3d3a-4e2c-a68a-e7c500c9fcda", "value": 22680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677111, "uuid": "ca46e3c3-d261-4d31-803c-09c815ff956f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677111, "uuid": "d7cfac23-3f60-442d-9592-bd1fecac9970", "value": "boatnet.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "126b1eeb-bd2d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762666172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666172, "uuid": "62d8a80e-913b-47b5-b9d3-a6646f6c0257", "comment": "Malware payload (Mirai)", "value": "55fa891b500e12b3dd5374901477829d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666172, "uuid": "d69454ab-6eb9-4f61-9273-f4d4cdbe1dca", "comment": "Malware payload (Mirai)", "value": "2686aee1edafaf93d236d8ae1a32f49cef8e34ccabab06ff5c0ab8fb58a0dffe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666172, "uuid": "c2032ebe-de1d-4298-9f92-2325d46d76ba", "comment": "Malware payload (Mirai)", "value": "f5eb5bbf85bda05cd6853e20b69cc14cc8319918", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666172, "uuid": "4bf915e3-7878-4686-839b-5d36f5209278", "comment": "Malware payload (Mirai)", "value": "2cb1bc6bfa7aa1b146a4d668ad4e811a2a30707e6eb5c288cec94c364c76f2bc889ddbf624de6f578559ece8ea696fed", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666172, "uuid": "7d410ee1-cc66-4946-a4f8-94be688cf3cb", "value": "T137934CE2FC01ED7EF80FEB7B44574919B230A3A129531E357393BE17A8351A54863E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666172, "uuid": "6fcbf606-f245-40a7-815c-b5fc1b3b06ff", "value": "1536:OtlIYY9MXPWp0P/HIb1n04CGRVTpoWw/F5JsTBAg8icyoO1gHkKvtGzpHnt9Vh42:AlBeuOpSJsTqpyoO1Uv89D4ZyIzyXl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762666172, "uuid": "e744909a-fc6d-4216-9ab4-60510a8dde9e", "value": 91940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762666172, "uuid": "aa295843-fe7a-498d-a042-39f5812b16da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666172, "uuid": "c41567ca-a002-4830-a849-d558c906834d", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc4dbb1f-bd05-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762649304, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649304, "uuid": "620504a2-20db-4d4a-8ad7-e08ce8062e3e", "comment": "Malware payload (Mirai)", "value": "4ec496f75bf37f12ae4845d7c9c134b9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649304, "uuid": "ad5977bc-4615-4801-ac7c-b9e5724fbba8", "comment": "Malware payload (Mirai)", "value": "26ee6da9ed5801a1cff5c0fae86dbc7af5f857364380a7fe6a3a7c47ce140f35", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649304, "uuid": "72dbd2a4-2f08-455c-beff-e6b4c6d97f90", "comment": "Malware payload (Mirai)", "value": "7b447a4072d97ecba0c77e8659bca61aa4f27512", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649304, "uuid": "32f27c52-7e3a-450c-9945-bc6df49963eb", "comment": "Malware payload (Mirai)", "value": "904b0a224c094cd919b0434920528454f7eec06c126c83a3930242851a975218fd1bf3208484a2dd2ffafaa95191788e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649304, "uuid": "263bb8f4-cc3e-4a1a-9935-dc2b3eea4c96", "value": "T18993AF62CC615CA4CA9846F5B4E09E3F1333E811568B1EF5569ACB77A007EECF4093B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649304, "uuid": "4a693848-a9e1-4308-b7b7-f3305bb764ef", "value": "1536:U/aLbUjBhCoblFS+JzbM8yxQKNH997a047XC/sKE7YjJ9:UyLboimlFS+1M8O3Nnv47XhNs9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762649304, "uuid": "9326d438-bd0d-48bd-af8e-b1ad7df4dc46", "value": 91692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762649304, "uuid": "483df9ae-f74b-4701-954a-2b4f6033c314", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649304, "uuid": "3f83e505-7e35-4b4b-9f23-3aea787d5c96", "value": "morte.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7b63150-bd70-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762695199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695199, "uuid": "a212cda3-f99c-42e6-b731-13e08a1150dc", "comment": "Malware payload (Mirai)", "value": "de46280ca23d4169f142ef1512ab8c01", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695199, "uuid": "9559aa93-d71f-40d7-a08c-dd3003769423", "comment": "Malware payload (Mirai)", "value": "294e0fa4971244979e8d80876eddfb20b8078ac8ea30417f3caa9a34fc540a2b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695199, "uuid": "e23a2d39-58fb-4479-94fc-3e4a9bdbfd5f", "comment": "Malware payload (Mirai)", "value": "4c6f67b99afdd77bfed6e125238651f00fbcaa3d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695199, "uuid": "9ef0bbb9-e20a-422f-82ad-d9d9190f874a", "comment": "Malware payload (Mirai)", "value": "5c6e27f2fcc946a224391ee070a1b6b929b3338d8d77f73e281a672078396c6ef3751f24bd38568fa89a9b1f28e4e70c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762695199, "uuid": "c7a9c69c-c36b-4cf7-a7e5-4b66d45844a8", "value": "T14DE33A4AE9829F15D4D622FAFA6E914933135BB8D3EF3102DD10AF6463C789A0F77502", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762695199, "uuid": "79194829-5295-4ec0-a24a-b642ff2a3d8d", "value": "3072:47brBa+CCjws88eNaXyf0vdsLTy/MfpGAED7cxJFTxW6:47bkesNaXyf0vdsPy/McAM7WJ9xW6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762695199, "uuid": "5bdeb01e-035f-4251-9e85-2617e11f8642", "value": 153100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762695199, "uuid": "1caa4b1c-a368-4230-950b-01e4285a1033", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762695199, "uuid": "647f815b-d3e4-4f92-bf65-378f01ddae51", "value": "morte.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34dd0178-bd41-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762674820, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762674820, "uuid": "1f325d11-9c55-48fe-8c74-0a9399f269af", "comment": "Malware payload", "value": "1eb9f02fc28be1b7ca3fdaa4016a15a2", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762674820, "uuid": "ab245a3b-c059-45dc-9864-ff5eca98a5cf", "comment": "Malware payload", "value": "2a199218fc50bbecc7a3f6208d2659594846ecffe96208b310c4fb0169a44dec", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762674820, "uuid": "851692c2-f50c-4618-93be-088a9e009c26", "comment": "Malware payload", "value": "70720576660c487fa7607033489fa943f05aa4c1", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762674820, "uuid": "80f82e29-90db-4fdf-984d-f9b83a5c46ae", "comment": "Malware payload", "value": "16984597d22b0ec0f3e3cc76bfc0ca4ec036e441182866212a5586b6bf241abb57305f31320701bfb130300be269678a", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762674820, "uuid": "16734878-a86f-4b14-97aa-524183f59e0d", "value": "T162C6331C92B019BBEDF2857EA4B2D11AD23078EE1F33D58B97E442632B136E05D35A91", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762674820, "uuid": "05f22726-610f-4d2a-9015-055d6308514a", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762674820, "uuid": "24e21076-c9bf-40cd-b15c-46afbfe1cc43", "value": "196608:lWSObUCox1ECCO5mBSeXXMCHGLLc54i1wN+0lV0cSXl74w44HqzNPTVHBzCZ3fml:lWSONo/ECCO5SxXMCHWUjMVg74wFK5PJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762674820, "uuid": "58cb053c-6d45-4a3f-a2b9-9f69744c1462", "value": 12470995, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762674820, "uuid": "a63cc753-fc44-4e04-b5ea-52bd41a1a307", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762674820, "uuid": "8e3ff40e-f236-41a8-8da2-556d3bc44efd", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53f6cb4f-bd08-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762650391, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650391, "uuid": "a1d4bc01-5738-4348-a16d-3f3b4d94c499", "comment": "Malware payload (Mirai)", "value": "9a2a106d8f2e1825ed9150d22e94f7cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650391, "uuid": "5e41cae7-fb09-4b3f-a292-b7f0d96f7441", "comment": "Malware payload (Mirai)", "value": "2da34dc801362d3d580cd01bf24dd1680ef4f95f933396163782fd8b3c6dbf41", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650391, "uuid": "ff0b3fc8-529c-4b96-abc8-8e84820e74c9", "comment": "Malware payload (Mirai)", "value": "6cad11edec791e1230f37f51b48626610635cb57", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650391, "uuid": "e026138a-9a79-4d62-9e64-11e76b9e5df7", "comment": "Malware payload (Mirai)", "value": "4ca7bc3a97820007c5941c17d27448781d6eb8fd0991a620e9136d125b8526a1694132165ad16bc3361dc0e64a66abe5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762650391, "uuid": "61b70f8f-a80d-4e4f-8a0c-7e925ae7f739", "value": "T1AE044B56EA418B13C4D32B76FA9B424633239B64D3EB73055928BFF43F8679A0E27501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762650391, "uuid": "d8b39b77-3624-4f42-b759-3d8b7cffc11e", "value": "3072:UIJneAVsbc4wJasxdxzPd9QkyWJ/T9x48WkrCD2mM/9/mebAf5++H:UIJ7ibcHJa+dxzPd2kyWh9u8trCDLM/K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762650391, "uuid": "05e6847b-2e99-4d63-a19b-3917e243f821", "value": 181733, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762650391, "uuid": "05ef740b-610c-43d2-a9c4-2af30e0866bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762650391, "uuid": "0a8fd962-6e32-450d-89a0-7ceb70a630a1", "value": "arm7.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c9bb454-bd2d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762666243, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666243, "uuid": "3aa55be2-8072-4242-bc37-f4c6e50b4b50", "comment": "Malware payload (Mirai)", "value": "3a7d35057454981f21a444b4536902fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666243, "uuid": "6b3e96dd-0f58-49d0-9101-6088c6c7b649", "comment": "Malware payload (Mirai)", "value": "2de1375f4ef91558fc60355dbc11a29a5f05f11bb7dfede57b261a50f9e115f7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666243, "uuid": "4a6b76f5-2c18-4e87-8a71-6bc7daa5d5da", "comment": "Malware payload (Mirai)", "value": "08932da8fde5d900863dbb255873cf140e0de8f5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666243, "uuid": "f20eb0e9-3c21-46bb-ab1e-d6c73c37b04c", "comment": "Malware payload (Mirai)", "value": "9b509e845742a0968af04957e47b6d6bc2d4e1897f0df4ca25d56ea21b0820e60e572cacc75e1dc7c3ea5539f076f1ed", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666243, "uuid": "5244c629-1953-4401-a410-a0905ab868c3", "value": "T105146A12FB0C0463CA935CF08E3F0BFAA3611A9114F99105690D7F5A1A72E77A58BFD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666243, "uuid": "ae6b990c-21ab-428b-b224-73ea91a5edc9", "value": "3072:B3Uw+fmWzs3JADUQE89gWdKnC5Go9VKIxy3Fs0cGWoyCUaM:BgHiOMC5Go1CZcHoSp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762666243, "uuid": "6c7fbfd3-7cc0-459d-9b3a-cd40fcdc7cad", "value": 197308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762666243, "uuid": "22a6df5c-4e6e-489b-bcb8-bf7cc8085c91", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666243, "uuid": "ecb602ae-4fc2-40f1-9291-e55bbc557604", "value": "xnxnxnxnxnxnxnxnpowerpcxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "609f77f5-bd0c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762652130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652130, "uuid": "1f4d72aa-ce1f-4c0f-9a8a-6b6de2e889f8", "comment": "Malware payload (Mirai)", "value": "9897cc250d8dde01fe54c76d6f9eb19c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652130, "uuid": "1142694d-65d0-4ded-b2f1-70ea7f461fce", "comment": "Malware payload (Mirai)", "value": "2f5c8733380c0b9b31dbc394623f23c31a45338f42458a7db13e9cd0b398fd1c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652130, "uuid": "715f8d59-8673-4f8d-8c96-83353734484f", "comment": "Malware payload (Mirai)", "value": "683f27a4d8365e28f170d211e971288737aadb2e", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652130, "uuid": "7320b81d-91d8-46a7-be84-f01347e30018", "comment": "Malware payload (Mirai)", "value": "b9db3ee4e862f4bf6c4b978ed5476e45ba5ece497abb9d16ea9666812d2afa498e647c6c458a59c911238369fb092c51", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652130, "uuid": "5a16e7c5-8096-4d52-8bbf-b22292adafa5", "value": "T10051938452CE0D309C666A63E375422874995087F8F2AFF99EDDA7F0818FE2535C1B53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652130, "uuid": "d514068a-9961-40bf-b063-b9a412c2af13", "value": "96:iP+gp+zxP+7o+7N7DP+7z+7o7SP+z+oSP+h+6MP+T+IyP+u+3NP+Y+9zP+3+cuPm:Kx4sosJbszse66ugCGy/07o66BQcyqUF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762652130, "uuid": "fd995624-a063-4421-b5ce-44a38db48f9c", "value": 3109, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762652130, "uuid": "72bb80dd-eb77-455d-9129-c26113b4512c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652130, "uuid": "fee41dfe-3957-46bc-8295-20850c985619", "value": "ohshit.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee90a80b-bd51-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762682004, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682004, "uuid": "65f3cbb8-e3c5-44d7-aeb8-74f9862e6f7a", "comment": "Malware payload (Mirai)", "value": "a7f32f266149de8bc329758819038c65", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682004, "uuid": "ba82ccb5-5de5-49f2-b2d5-cdd988d22b7d", "comment": "Malware payload (Mirai)", "value": "308f9f36e4ca8d9703ab4544c19c3efbe61e2e095ac692290f95c469e2a4969e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682004, "uuid": "b18fb784-d5d0-4439-b0ce-f4cd33c15e15", "comment": "Malware payload (Mirai)", "value": "6304e2bd1241eeef380a2aff309adda8f5c156e0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682004, "uuid": "fc6452e8-63e7-44fa-bf18-37c2a553e85d", "comment": "Malware payload (Mirai)", "value": "f37062f5f5bd32aa4383cd9c5f62852c0be505dc502c5dc15f3e69f1dff686bea6bb68f99820b324264bc8e5eba11d84", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762682004, "uuid": "5987dfff-72c4-4936-b770-3362b4957c52", "value": "T1C0731942FC828E2AC5E0137DA66E658D33A1B3E4E2DE3127DE645B2277C160F5D67E40", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762682004, "uuid": "ea682e77-cae5-48d2-b215-1dbff99dcc42", "value": "1536:5Kv6EqwHWVqeyMd+DJgZo3acsYAfAAVuDu4SFm:5KvNqwHWVLylTGwCm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762682004, "uuid": "e9815c38-d829-485c-8df8-5e362bfe672d", "value": 76416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762682004, "uuid": "e439ec27-285c-40f5-9a8f-eca0d3b3154a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762682004, "uuid": "f00e89ee-d478-4ec2-be96-ef113d027535", "value": "morte.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "451530d1-bd9d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762714361, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714361, "uuid": "6989fc19-8a83-4565-9654-27144b963ab1", "comment": "Malware payload", "value": "713ab989db9a1418e483233d91cb7714", "object_relation": "md5", "Tag": [ { "name": "chm", "colour": "#080B02", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714361, "uuid": "13563e93-cc98-45b2-a52c-f323d60081f8", "comment": "Malware payload", "value": "31f516e73bbfec32a1d89829e684434469ce105770e50d715fcfe86e7a2cf4d5", "object_relation": "sha256", "Tag": [ { "name": "chm", "colour": "#080B02", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714361, "uuid": "adf24096-5325-48d1-b503-a677ef7311dc", "comment": "Malware payload", "value": "021ef20da1824e6170a8bc1c02ec12754f4d2f4c", "object_relation": "sha1", "Tag": [ { "name": "chm", "colour": "#080B02", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714361, "uuid": "eee4c1fc-c0e8-43b3-9d22-a8f75dbd88f3", "comment": "Malware payload", "value": "bf5fb7c645338026398c1c64331f57133a9fc157066b333e84b92522759c2117fc59fb0207ab67d8bb7c55559759e22b", "object_relation": "sha3-384", "Tag": [ { "name": "chm", "colour": "#080B02", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762714361, "uuid": "62873b46-f48c-4055-9749-087ad08313b3", "value": "T1C48533E8E1E289E1E8AD333E8186954F9C155C8EDCC5B5C8BE3EF4D124683DD900EB65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762714361, "uuid": "0001d264-257f-44f4-ad1d-5f27679a413a", "value": "49152:YG2x95+srMIHvgSGtTgwFlOTLnoPbVje0Lp+thyEylU:JsPr72l5Er", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762714361, "uuid": "40450955-02a0-4110-beff-4b679e10e656", "value": 1727289, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762714361, "uuid": "fadf3221-4f8f-4a6d-86c1-6a5a9a925794", "value": "application/vnd.ms-htmlhelp", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762714361, "uuid": "e6d35c15-3ba3-45a6-b091-4832739e719c", "value": "Requirement of 61 Maintenance LogBook PCAA.chm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fda2dfa-bd0c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762652129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652129, "uuid": "44c21f76-6884-46f9-abfa-c2660f1a4bac", "comment": "Malware payload (Mirai)", "value": "1a7ff8edfd9f73f0814e678963b7179f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652129, "uuid": "48d6411e-1072-4c21-9b7d-0357022e2365", "comment": "Malware payload (Mirai)", "value": "333799f6f9f3359bfa8da60153ebcf47736dadb0e79b97fbac0a5e4e6620cb99", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652129, "uuid": "1bdd4f21-6a4f-45f4-a410-22136e68527a", "comment": "Malware payload (Mirai)", "value": "1f3fc2cdf0db563c35a71090aa7bf8c4d2b6003c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652129, "uuid": "0e8b5bb0-f114-4fd3-b42f-10f451499a75", "comment": "Malware payload (Mirai)", "value": "dae39b4708c57d81a563607ca75e562e2a80b82e867c87a392cec2e00971441f43b44ea44f34959381ae8b48afc13a33", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652129, "uuid": "cf9beb36-bdd7-46ed-84e6-c585f26d74c6", "value": "T172A37D21E9382937C5D4A57B12F30332F1F6478A20F88A1E7DB50E8DFF296602A57675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652129, "uuid": "6107ae88-2b7c-4b8d-b887-7f96fa7d9fac", "value": "1536:xCJupBcBBLP+RfYfFthHJ+D79VsdKtjF4Ym53KEHSdtWbNx:0uUx8D7rvxeYO6UZx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762652129, "uuid": "b473c605-2882-45ad-96b9-a7c35190510f", "value": 102160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762652129, "uuid": "04779e22-94b0-46cf-b51f-7a69bca73e29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652129, "uuid": "0601e98c-b76c-48bd-93a2-00dfe01affff", "value": "morte.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b02010e5-bda1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762716259, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716259, "uuid": "51edaff5-7796-4a92-84f0-b9bce7194117", "comment": "Malware payload (Mirai)", "value": "d1051a0829e66dc8f11bd398d5bf3ada", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716259, "uuid": "7910515f-36a4-4ec0-b729-bd6401c6a193", "comment": "Malware payload (Mirai)", "value": "335cd9e85928e6693a62d4d5cb1310c8a3247730a173868e6d3d7175909698df", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716259, "uuid": "bc72f89d-0ba6-47be-a09e-227f396fa7f1", "comment": "Malware payload (Mirai)", "value": "7c1e655489cd65bc57f4b7c8983463a0860cd6d0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716259, "uuid": "78fa4755-e308-4bd6-bea2-c56d2f784b86", "comment": "Malware payload (Mirai)", "value": "5a82b91df20512ac78f2462b8d4993b557dac95742b4430ddc12ca57a3c232a6c2aa905e579fc3cc355d0707b7b01988", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716259, "uuid": "908d1224-5c5b-45ad-ad5b-278801d3f672", "value": "T14F931856BC819B11C5C4237AFA2E128D3313277CE2DFB2169D209F2477C696B0DBB946", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716259, "uuid": "a32e9ea1-6aab-4819-a438-005bc561052d", "value": "1536:AZn7e8tbs2PDqNKoRkchqUYVqE5heMamGqwpW17+5ivWlFgBpZ7fV3YHjx:ozqABsEjeMaP/lFgBpZbV3U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762716259, "uuid": "d2318d58-3434-4062-abaf-c710e3c6a349", "value": 95364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762716259, "uuid": "92344acd-24b3-42c4-ac61-665fc22e1280", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716259, "uuid": "f9567eaf-7393-4c46-b156-fcda7ae78f5d", "value": "armv6l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "933c48e4-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677126, "uuid": "33b9ab17-4ce7-4ed0-8985-875f92617707", "comment": "Malware payload (Mirai)", "value": "6c02e510034fc46124fe1eedc65f2ba3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#3BD92D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677126, "uuid": "efbb2657-fe6f-48b2-b8cc-15b87b0761e5", "comment": "Malware payload (Mirai)", "value": "3493c55f264ab91a83c7c69393952ba7efb86c29705adc59ddf1521700d23234", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#3BD92D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677126, "uuid": "7286bb64-f724-4ef7-9464-17a053dde9fd", "comment": "Malware payload (Mirai)", "value": "f563ed036ec3672156eef7a9945862458dfc90f2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#3BD92D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677126, "uuid": "752cc982-50a0-4f0b-b7b9-7bab4f4f91c5", "comment": "Malware payload (Mirai)", "value": "1a8af7b7cbed1513a03e179a9e9a9424864d188cdca5df0f7be26cf682fa7b74a537708fb781d38213ab8648b26874ab", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#3BD92D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677126, "uuid": "bfdc9286-1418-4264-a6ff-7a480de0eb00", "value": "T1A3A2D06EB1051E73D86F3379687E19EE65DC8911EACD4F4B9B05C5CB4BC2201792AE0C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677126, "uuid": "993d0ac6-bde0-4918-868d-870d4494ad40", "value": "384:MyRCjYIWjKgItC8vd+tIV4GnuAn91nVWtZANRaK/C+v1RQh:5RSYIShmktlGFn9fWHM19E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677126, "uuid": "7a57bcac-a374-43fe-b352-bc080550353b", "value": 21708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677126, "uuid": "ea7f2577-def0-4442-afee-b8e8a562d8f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677126, "uuid": "a692af28-d4ad-45d2-b779-47c351a723e3", "value": "boatnet.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c151947c-bd2c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762666036, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666036, "uuid": "703c1152-c562-451e-9a28-b7f3421d17b7", "comment": "Malware payload (Mirai)", "value": "661e9c2b5132e64ee7fa140b23e4ef11", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666036, "uuid": "4f1155d8-3f4c-4c66-8e01-ab35b650b89d", "comment": "Malware payload (Mirai)", "value": "34f25a9200324897a978f22f543ea03f06c11e852da4d27ad208da9f914c60f2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666036, "uuid": "78c135ea-9969-4a50-873f-3e0032407590", "comment": "Malware payload (Mirai)", "value": "beec6234fa111ab1a28307035da779136d61f27a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666036, "uuid": "0c092b07-df68-48e1-98e6-668dfd4be335", "comment": "Malware payload (Mirai)", "value": "73819344bd4fec0c825160da30cd6f2c0cb6e3d14cd8a67dbd23160a9bb436221cf2dc02a6596de1cb88d1f12673fa2a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666036, "uuid": "cc54c765-5240-4a9e-ba86-1e702ef96c11", "value": "T16D2309C8F443D9F9DC5A09742036FB27DBB2F6BA2329DE43D7A495236C51702A805D9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666036, "uuid": "1f783fcc-5138-40ea-8321-5b0a41138e27", "value": "1536:6nJRT4QPfZfW5XTOeY3Dve3AGAZq/4Qw7bn2iQe:Gv4QPfZfW5XTOeoEz0qAQwf2i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762666036, "uuid": "f4e0f900-a8ac-4f99-8159-25d08cdca492", "value": 49936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762666036, "uuid": "e259381c-47de-4843-a86c-c0c1358eecfa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666036, "uuid": "68856c3f-28fe-435d-b5e9-632637c842ff", "value": "boatnet.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c6d6e45-bd85-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762704146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762704146, "uuid": "fed21c05-061e-4dd3-affa-cb4a324644f0", "comment": "Malware payload", "value": "626d777f9740e3e59d95a43037413123", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#D18BB0", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#76AC5B", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762704146, "uuid": "be64577f-373b-4562-91df-6b085cbc6055", "comment": "Malware payload", "value": "3514cd74a09bbf868274991c8719145a9c4418dfd0cf6ba5ad7a5c928ca58667", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#D18BB0", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#76AC5B", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762704146, "uuid": "e3556d83-ac66-41b5-a98d-eb39bef106e1", "comment": "Malware payload", "value": "b8b2f19f3ab0bd1dcf7590ec1a2c746ddd93dd42", "object_relation": "sha1", "Tag": [ { "name": "backdoor", "colour": "#D18BB0", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#76AC5B", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762704146, "uuid": "26f10b82-6de5-4e26-be3d-6dc8bc714eca", "comment": "Malware payload", "value": "edfb194315831180baaedaa7878e81eab63efe281fbb19d9a80b0dde51db02fb4c49c315ad025e7aa40db80ce7530f50", "object_relation": "sha3-384", "Tag": [ { "name": "backdoor", "colour": "#D18BB0", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#76AC5B", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762704146, "uuid": "8f1addf2-5a71-4ec8-b46d-1a49e7a5a291", "value": "T1643833ABB2C95A3CD0992B765833D05009F3AAB5B117FD6726E4C894CF6A5C10F3BD21", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762704146, "uuid": "18838442-e3f3-4923-b8c1-8a1dea667983", "value": "eb5bc6ff6263b364dfbfb78bdb48ed59", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762704146, "uuid": "1e85c054-7e9e-473b-afbc-77a769445084", "value": "3145728:tF6xZ2qf92xOXWA3rzg6Yj4YI6topzSGOe:tFMZ2qExbA7cjrGpeA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762704146, "uuid": "7205fa6d-dfac-4ab0-9a42-5e47172aa5e9", "value": 104507611, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762704146, "uuid": "49b79ed9-7766-44dc-aa02-a37f474498a4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762704146, "uuid": "cbf4601a-0981-4daf-8937-b05f3fe732b1", "value": "Tuewbxhjg.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a99ea75-bd2b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762665354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665354, "uuid": "ae468934-6c82-41a3-86e0-dfbd1921b84a", "comment": "Malware payload (Mirai)", "value": "4f71d1fde321f6c411a506e94a277c62", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665354, "uuid": "54821388-59d9-48f2-b2b6-a2cc9c99186f", "comment": "Malware payload (Mirai)", "value": "364de0d95e47036ac3bef19c19508a5a529db86c4e99b4849721efb6b2b51e47", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665354, "uuid": "f40d405c-d2ea-49d4-837c-fa1a5b1cfd01", "comment": "Malware payload (Mirai)", "value": "d4c4493654e910da528a0826271118047287afa8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665354, "uuid": "c9b9285a-bf6a-4a1d-a46c-dd438d68924c", "comment": "Malware payload (Mirai)", "value": "d80ad6a8d2fec9a7dadd3624e7a508c847922fc5cbca0896cd6359709727397f920a9ee18bb5f83c5d94f9b5820dbfd4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762665354, "uuid": "c0a7e884-2d9d-4cb8-ba31-76be7762363a", "value": "T17523027F50CCB041E53CCCBEC61E03A516B125E537D78F99C72DEE81A348F99552AA60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762665354, "uuid": "bdee1e8b-91a4-46a9-bdd4-0bc86cd09939", "value": "768:yxP9j6xk6xEogiAmKo9uHj9/sgPPrQNCzu8fY+8kt7R6urBQKlCWEg2nsGWw:MP5mtnBu9sCPsNC3jL6OuKlCWJ2nsM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762665354, "uuid": "bdd9dc35-1eae-484f-b7ca-47ba022e038d", "value": 47192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762665354, "uuid": "bb07ba45-556e-4c0e-a164-00ca70d0e8f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762665354, "uuid": "14ac6211-18c3-4d26-be20-ae8dec9915c7", "value": "morte.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acc70ce3-bd9d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762714535, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714535, "uuid": "ed8f0978-df9c-40ad-86cd-236cb3490285", "comment": "Malware payload (Mirai)", "value": "f0428aac5ac174e6bf14d20f4191dd36", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714535, "uuid": "568d4a5a-5fea-4c3d-88f7-1556cb45f516", "comment": "Malware payload (Mirai)", "value": "36fbd489c18453a8751fa85aa1cd7f3e803c056a370f92b787ae9f8b0cfa4cf9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714535, "uuid": "1064c945-26d7-41ea-9c60-b905ed3f6f7b", "comment": "Malware payload (Mirai)", "value": "1b1a8cdbcda074d3503928c6ba8f6b96d0595ce6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714535, "uuid": "632beebd-70e1-4e7e-aacc-5db61d883c5c", "comment": "Malware payload (Mirai)", "value": "ea140de39dd53ec4fae430d0c34ca478852344d763c1f936cf8210842a1fbb7ae1df1d78ce5897f260f58dc469475315", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762714535, "uuid": "5e5ed31c-26e7-4468-a283-1734b1438fe5", "value": "T147733A56FD81CA03C9C02577FB1E428D7B2713A8D3EA73039E226F61678A55B0E7B641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762714535, "uuid": "e1ab7579-4e21-4e27-8ffc-a3960801b42b", "value": "768:TXPEb88TTMgWozQRD2dS4GtBiOdVtRV//MMa/zb/6ahi1j/My/DOSUiaJxaCGT18:r7rQ0tJUxXH8my/CSAapTR1BM3RAemf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762714535, "uuid": "377db4a4-78e1-4b9e-b4aa-c904b941ad1f", "value": 78180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762714535, "uuid": "619ba236-3601-402d-8634-cc08fb2bb022", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762714535, "uuid": "914a8879-6bcf-4617-9e9a-d4bbd7aa36a0", "value": "arm5.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8385e44e-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677100, "uuid": "99501edb-5934-4a96-8f30-641f1f9ef977", "comment": "Malware payload (Mirai)", "value": "34023a32f099513182401df25f67d8e6", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677100, "uuid": "77f3edf9-cd95-4d35-a081-50f12ff45537", "comment": "Malware payload (Mirai)", "value": "37c840c8b22182cedc165aec2473914f7988986132335fee20a3f45626e04f33", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677100, "uuid": "f77b11cf-a271-471f-aea5-52eda3e0435f", "comment": "Malware payload (Mirai)", "value": "756ed8c51093a3d758bfbe4c47a5f2b94579e402", "object_relation": "sha1", "Tag": [ { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677100, "uuid": "d77ad8a2-a4c5-4068-b12d-95979754f4a2", "comment": "Malware payload (Mirai)", "value": "5e096cbac7a92d3654dbff1843ce54d02072378a18385a7a1307d3645600a129b4edb7ad89a71739b3e3afaeb3e544f3", "object_relation": "sha3-384", "Tag": [ { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677100, "uuid": "7807eeba-fb9d-457e-80cf-c72153c30408", "value": "T10CA2CE7484556A3DD7B0E878DC38C58C7BAB1AB0D0ED387B1D498239F39184BB1B2293", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677100, "uuid": "ae3fc2de-84c4-4c04-8b4a-61ecf0a87cc5", "value": "384:Gfsgb/Ig/I1G6vmHJtmXyQs2kx8NOz1pXftp1h7PYOtA/chymdGUop5hA+:jgpLpJtmXcRY+1pvYJ/cs3UozG+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677100, "uuid": "eb55b7a6-79ae-4878-98dc-89f65e70aca4", "value": 22144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677100, "uuid": "d9929f1a-a3ee-4260-900a-e4291b06c97d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677100, "uuid": "bf3c5d14-75d5-434a-a51e-20c70c2cd8f1", "value": "boatnet.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a2618b0-bd9a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762713000, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713000, "uuid": "4e5b716d-d6bb-4a80-b645-ec51ec0d794f", "comment": "Malware payload (Mirai)", "value": "49afc35072fd0a83bf250fbbab184145", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713000, "uuid": "6caf64a8-e006-4547-97ef-94bcae3d8a4e", "comment": "Malware payload (Mirai)", "value": "3860b45dea0ec9b75fb73d9927bf39b779d37c71b5d560c40e1772c17fbf5127", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713000, "uuid": "ac22638f-97e6-480d-ab38-96c95073cc72", "comment": "Malware payload (Mirai)", "value": "f338cb5c79ee874aee164acccf601bafce4434ec", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713000, "uuid": "24d66821-c292-49a4-ae3d-3ba3deadf566", "comment": "Malware payload (Mirai)", "value": "321d03a892e4dccaf97871cea30eee41f2a71ae5774cd361b356e16ea6fd3dcd7ec6800c56cdd24b1a26e1c692645c62", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762713000, "uuid": "e046e20e-b0be-4ab5-8901-373c1adc999a", "value": "T12FF2E10062525330C6281BB2B9BD06F365BB467CA4BE2D3426148F3196877D276FBE56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762713000, "uuid": "23ffb24a-d56d-4acc-99b8-db52c517fba8", "value": "768:yb+gari8IzW4dhMX+ZG0JCIgUBU8ozOy4wNzOl/e3GtM53UWm:7rKzW6Uw6UXPy48zOl/qwMJm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762713000, "uuid": "57e91030-e941-4a54-ba54-7a421c0bdd07", "value": 35672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762713000, "uuid": "71bd91c4-2814-47d9-855f-567a394870ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762713000, "uuid": "839f6bf1-58ba-4030-98ce-01c495eb9b40", "value": "armv5l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c5bea0d-bd30-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762667558, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667558, "uuid": "ab282ca5-e431-4dc7-bafe-fddbb7e80a28", "comment": "Malware payload (Mirai)", "value": "2115612b6096f1e4d3482c7df51b7a9f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667558, "uuid": "74c22c57-5b68-402f-adcf-61dcf0f8d772", "comment": "Malware payload (Mirai)", "value": "389226f1f73881a836c5e16ceb5911524e367a1cc98e08a8a282336e70001354", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667558, "uuid": "9a84743d-e657-4ba8-9c9b-66f96ed725d5", "comment": "Malware payload (Mirai)", "value": "814c76db06e43ee8b166c3e3716b9938066b85cd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667558, "uuid": "d2a0c3ea-6ea3-4874-9bfa-dcaec8835251", "comment": "Malware payload (Mirai)", "value": "e9bbc2a7f67a0dfc8bd950a62d4182863f6f06f6909faf97ef4502734ac47befb5a471a0ed66384d1a9c51ce541dba0a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762667558, "uuid": "c60c6075-3bbd-48b2-862a-2c195e7cb233", "value": "T15BA34AD6B800DD7DF81FDBB68523090AB531E3510A930F26B767BD97BC721A05927E82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762667558, "uuid": "278188b4-a89c-400b-9662-f20658a180c0", "value": "3072:urPxcyRr8I26bcGMgH538sCdsFQnPJzaL07VJu:Axcur8I26bcGJpFYgQnhzrVJu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762667558, "uuid": "245cdec5-9926-4132-8951-64bd1988c8a3", "value": 107272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762667558, "uuid": "2bd58a66-b95a-4306-94f6-6e159a142a37", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762667558, "uuid": "b5623982-a9bc-45a6-8896-08ff5ce70561", "value": "morte.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddea1e76-bd8d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762707745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762707745, "uuid": "a9d1d3e2-e673-432b-a960-f21cca9aea89", "comment": "Malware payload", "value": "2f29dce03245644b619e2c90465aabd5", "object_relation": "md5", "Tag": [ { "name": "booking", "colour": "#9F592A", "exportable": true, "hide_tag": false }, { "name": "naskkr-com", "colour": "#4B1242", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "Spam-ITA", "colour": "#DE8A25", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762707745, "uuid": "b794e1a1-d9f3-417e-bfa6-9e9a5e3e973f", "comment": "Malware payload", "value": "396619b3f50f9f0de1a6ddcf012729e02939927c2234a56c8509e659e3f92b7a", "object_relation": "sha256", "Tag": [ { "name": "booking", "colour": "#9F592A", "exportable": true, "hide_tag": false }, { "name": "naskkr-com", "colour": "#4B1242", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "Spam-ITA", "colour": "#DE8A25", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762707745, "uuid": "5e94605f-4fe8-422d-9dbc-67dfe5c2f24f", "comment": "Malware payload", "value": "4820ccf25e8ab2e49ef4bf6dc454225a205a3691", "object_relation": "sha1", "Tag": [ { "name": "booking", "colour": "#9F592A", "exportable": true, "hide_tag": false }, { "name": "naskkr-com", "colour": "#4B1242", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "Spam-ITA", "colour": "#DE8A25", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762707745, "uuid": "4f4569d5-26e6-4758-b1b4-b300aac16467", "comment": "Malware payload", "value": "46208222217d2d27652de43a1b726b4d8c393f59ce838f4b1b9871a7489456cc91a4835925e15fa1ecc98078cc8456d2", "object_relation": "sha3-384", "Tag": [ { "name": "booking", "colour": "#9F592A", "exportable": true, "hide_tag": false }, { "name": "naskkr-com", "colour": "#4B1242", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false }, { "name": "Spam-ITA", "colour": "#DE8A25", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762707745, "uuid": "19321b7f-1e7b-457e-adb9-db8c74c64c1a", "value": "T1F462C0E24985F4A4C188218F90ED4BFD85B6376510582168F7DB287CB7FD4CC3962F60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762707745, "uuid": "3e462237-333b-4ef5-a0a1-5e234f76131b", "value": "384:cEiB1NQ59ciDR655NGwmPJf1YclyaJZlQ75YIYpiVVgdW:c+59HpPJN7yaJZk6piVydW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762707745, "uuid": "f1342750-4c6a-4ed7-b0dd-5360ab374217", "value": 15015, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762707745, "uuid": "40a7911d-af02-4716-af64-effa660c6980", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762707745, "uuid": "2fc4e098-1450-4171-ad90-622496431a00", "value": "J.ps1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6d02321-bd2e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762666878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666878, "uuid": "7e79e4c4-b5fe-43e8-a8cd-69d5ab5a39a8", "comment": "Malware payload (Mirai)", "value": "82ebb5279fe627ed3b9b65c0a6e18e0e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666878, "uuid": "037b7bf5-04aa-4353-a5bb-87df180158eb", "comment": "Malware payload (Mirai)", "value": "3985b27e6263b77ac99a405fd40d7687af46893a118e9574def83f94050dde3d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666878, "uuid": "ce40dac5-83b2-4031-b566-983f5b1eb84c", "comment": "Malware payload (Mirai)", "value": "a1523c3753ebfde2ae0b813c9ba2abb28253d7d5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666878, "uuid": "7fb8668b-6dda-4471-8870-25bb7de10baf", "comment": "Malware payload (Mirai)", "value": "89c4e32f4141404a2faa3f111bf1cdba69dae58e15f7951dc56ec7a5ba7fb2d0ab01d19797b49005374732412ddc8937", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666878, "uuid": "396b7b31-5044-4f7d-82f4-165337ce1604", "value": "T168934BC1FA8BC0F6D80749306166F63FDA32D8794071C79DEF9A9E36DA375409227289", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666878, "uuid": "a0fda4c4-d586-4a81-9907-b57c2a10869d", "value": "1536:yhSg4ddpk1TdEFKiH2vK5OxtVxo9WGA4yQMV7BdUdUhF3mLmA:yhogVdeKjvwOxXxdT4ynV7BC6Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762666878, "uuid": "f21d040c-36e0-4b64-9d43-ba37ec6fbd2f", "value": 95508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762666878, "uuid": "12a6782d-3faf-48f2-a92e-bc07825dbc54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666878, "uuid": "2d73d35d-698f-42b8-b5f0-61f3848cf7fa", "value": "morte.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a1e253c-bd31-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762667957, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667957, "uuid": "c458a489-c15b-480c-ab82-929ac8861c78", "comment": "Malware payload (Mirai)", "value": "78b0ca5ab299369ecb62d4c02b3d4a93", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667957, "uuid": "c871cdb6-98ee-4491-adf0-43d5e101c815", "comment": "Malware payload (Mirai)", "value": "3a46c51047058b0e1f02d2f8217c9b58452b6db65b7aa2751c2b9c878da5a135", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667957, "uuid": "e1da4ca6-f64d-4248-90bb-0dc0168935cf", "comment": "Malware payload (Mirai)", "value": "846bdd11bb6cc9c331b403e1e486ea770990b93d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667957, "uuid": "5906d52d-07f9-4d7b-8959-5fc26013b075", "comment": "Malware payload (Mirai)", "value": "a661b90144408c7b237f010dbf629ae1c6ef78c97b7b8b3db7ce1ed8a8b361ad28c515c4ba9c18b7cfb7b5e66607637d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762667957, "uuid": "0261c05b-c607-4750-b788-b547d9bccf47", "value": "T120148CA8FE4FB8D1D2C6E37DAE4A0FE271177C748555C0B21A40969FD5EEEE48890207", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762667957, "uuid": "d117bf34-22f3-45bb-87b1-88d850859852", "value": "1536:9F+7gBdBrUuYaquspNaZLAOSIvrRdJz25tt1sZm7+XrC44dbdZ+NNHNYjzPx+aYR:9A7A0zuioOcRdJzWsZ7C1Z+NNNCzPxW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762667957, "uuid": "17443362-7603-4af6-ad32-63011adeb8ec", "value": 197488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762667957, "uuid": "dcc0c6f5-1452-41be-ac70-db803c8477da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762667957, "uuid": "bd222fe8-f313-4280-8e6a-9fccd0abbed0", "value": "xnxnxnxnxnxnxnxnaarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34e90dbf-bd97-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762711757, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711757, "uuid": "a7359931-8625-4019-bfab-6d7be496626b", "comment": "Malware payload (Mirai)", "value": "6fcb6f7b9b932670d24b0b12ddd5b212", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711757, "uuid": "4e089fb2-4ff2-4415-9385-4f894b95eaee", "comment": "Malware payload (Mirai)", "value": "3b712f9a5ee57393b434b42ecbb235d1fd820f799e4f158953af8b359929b150", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711757, "uuid": "a8d7b197-9e87-41c2-927f-e4c95acc2a1e", "comment": "Malware payload (Mirai)", "value": "c2d17d5198fc9dfc345afe611c8af945e052bb38", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711757, "uuid": "32cc1e4b-2021-44ff-b95f-d95220605cb7", "comment": "Malware payload (Mirai)", "value": "6ec6c8971133446edbb8f5b83d9c54a093ee22ce79207c8cd39b9b34c19a8b846008119ed006ff88ce0f22319bbcdf90", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762711757, "uuid": "f00f4683-574b-4f9c-b87d-cb3e8972daca", "value": "T1F4F3C60A6F210EFBE8AFCD3706ED0711158D595A22A87F75B670C918F18A28F16D3D78", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762711757, "uuid": "509891ea-30a9-4f48-86f1-6f7b1887b9ec", "value": "3072:4AwydCxPcg9kngl50n8bjYUCEqyjynXPj:45ydCxEg9QgPq8b0hEqPP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762711757, "uuid": "05dc8ae2-a48d-476d-b229-4dfab4459e0c", "value": 163648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762711757, "uuid": "d3e9c793-9684-476c-b7ba-774ca0a07822", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762711757, "uuid": "0c696b2a-ad28-402b-93f6-6e9c41a164ee", "value": "morte.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e00268d-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677117, "uuid": "a6fefef0-6a9f-4709-85f6-365dd9192b5e", "comment": "Malware payload (Mirai)", "value": "cba6a4f48d92b9bac29cbbea087c49ea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "mpsl", "colour": "#F498C9", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677117, "uuid": "984c303c-161a-4aab-8935-b4144e330e1c", "comment": "Malware payload (Mirai)", "value": "3bbde990012d01dcfd722d4eab5df15ed34cba4deb342c0e5b291234a58aed27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "mpsl", "colour": "#F498C9", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677117, "uuid": "eab96b7a-87da-4eab-b8b9-79c33323c01a", "comment": "Malware payload (Mirai)", "value": "9460419ff2313c2b84e8695c5d60d9c37346a395", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "mpsl", "colour": "#F498C9", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677117, "uuid": "1aa6bca3-3062-4f9d-b98f-6649508f1e15", "comment": "Malware payload (Mirai)", "value": "9391ff4cfb09cf59d64f31962b615c7231638e6e115d988442930b6cb32ed1b1066eb60f2d226f45a1b902bac0f7ac02", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "mpsl", "colour": "#F498C9", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677117, "uuid": "012a188b-28ea-4767-923e-5394d37f3dda", "value": "T1B4B2DF9CB4D86C6FCF5C18BE20A90B722F64A5A1732A0E5C97404DCCD678A5DB48F177", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677117, "uuid": "3ae7de73-5a51-4543-ad82-21f2fa3d9c32", "value": "384:m0aK6AlbytdRhClGAdSx3xCbZ1RHOjS3LsF18p4BPqRWVdNFO/vbiRWGVCz0Nvf2:mDK6AbS5HATMzP8WBZX/O6Wz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677117, "uuid": "e89a4d32-37b2-45cc-8391-1efc0265b134", "value": 25104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677117, "uuid": "94ab103b-4f88-4ec2-b6f6-31a516e18667", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677117, "uuid": "28c3e5c5-0f2e-4b61-9edb-9bc1423c5f55", "value": "boatnet.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "231f5a04-bd53-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762682521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682521, "uuid": "fae18222-a50d-484d-a9f9-24f0cf6f21cd", "comment": "Malware payload (Mirai)", "value": "c6ea4dcfe968f7bb817f84763133fdf2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682521, "uuid": "8172c20b-1eb8-4eb3-8680-d7f775799069", "comment": "Malware payload (Mirai)", "value": "3c1acf47e846e1c9ac7bbb6a0429dcec4b73a8d929fd02459f48dfa18ef8cd65", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682521, "uuid": "70e8a99f-53de-4996-92d9-e287918b490e", "comment": "Malware payload (Mirai)", "value": "799605af5a8f7c4e9de5dc7cd1cdbf90b25e8cfa", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682521, "uuid": "2a18d657-1598-4098-9524-9156009b2e14", "comment": "Malware payload (Mirai)", "value": "83deaae4a18501e652ad74bd5c9237f81b89145fb85007c2d6573b7ed2085ece2962c6be8ccf42a52ed5d66d9ae19a48", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762682521, "uuid": "d29d62aa-672e-4aa7-a715-25c0f216d880", "value": "T12623F2734ED36715E48E6470ECE7BB2E153DE22CD6C9D472A16411AE32817293B346E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762682521, "uuid": "73079063-daab-4922-bf71-b8458d996f43", "value": "768:j87hZdzYBWbnIiaeBHI63MoMWmmxiouJYUIamwhx7gD3bYOLLaDYNiI2HcBznbcE:jIZdm6IijBM6mJRY9a1qbwDPIacBznoE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762682521, "uuid": "61aa5049-03b6-4fa5-b5b5-ae46d94f2d18", "value": 46856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762682521, "uuid": "486364c5-76b8-4b4a-be4d-495513c73e03", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762682521, "uuid": "da3714e9-9440-4210-9f9d-d0889231c5cf", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3177310b-bd53-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762682545, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682545, "uuid": "0fb66e25-8c4d-4ca3-8ea0-47fca623519e", "comment": "Malware payload (Mirai)", "value": "fbd17d102b74001f19711a767a71753f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682545, "uuid": "cd658777-8d86-49b1-825b-28b067c8192e", "comment": "Malware payload (Mirai)", "value": "3d7c0f1f1db4925e3d4c610dd14aa71fddbcd1d7e03cead186719d3f6f2422a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682545, "uuid": "bf889019-55f2-428e-8cfe-1bf188743ad0", "comment": "Malware payload (Mirai)", "value": "acd8dc88b9d2595c17eb8eeeb0313e1aebf9e2f8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682545, "uuid": "a0b42368-6f89-403c-94bf-d18a8684bf6e", "comment": "Malware payload (Mirai)", "value": "ec673d82035c0068869f55eaf5dc7254836f32e2593e34f5a785f8c60c3f0ece0a82b10959d0cf8038f682b2a8c5955f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762682545, "uuid": "2fd0f080-b1e8-447e-a928-3257de67700c", "value": "T16DA36CD5F243C0F6EC6705342176FB3759B2E5B92328C9C3D3B89A76A821941DC1AA9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762682545, "uuid": "b199d36a-5fcf-4387-8db2-37afa66ab5eb", "value": "1536:87pBwyVc0VmAyRHr/UvWyQc39EcNvgawFFZazgKuAtR7kXe4K3SuLgiCQrBn:8bc0+7UWyQs9fR8FIzXuU9ku99CwBn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762682545, "uuid": "35a1bc04-8695-43bd-b956-fc65a3edfaea", "value": 103700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762682545, "uuid": "16380811-1214-4f2e-b864-4b103038056c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762682545, "uuid": "a41eca2c-0bfe-4c8f-858c-5ac72e40995f", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a74982cd-bd50-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762681455, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681455, "uuid": "e2cdf6fb-b861-4e88-9f4a-7d033a2cebd8", "comment": "Malware payload (Mirai)", "value": "533fc9f14cf567f0f034a06761314b00", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681455, "uuid": "f5d99064-f6c9-4670-aaca-db7ce6725b65", "comment": "Malware payload (Mirai)", "value": "3deefeb1c223b2e5606c02819c8b7042c59eb7d88b2ec0af7a1586841eff0d95", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681455, "uuid": "1f350f92-af38-4aea-b0bc-8b5c94413632", "comment": "Malware payload (Mirai)", "value": "656fa9a3b5f1f33ac3c902943bfc0954437449ca", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681455, "uuid": "6ed60962-484b-46b7-8d9c-038981c35dc1", "comment": "Malware payload (Mirai)", "value": "dc0141c3e6188fe9d7b124ce2fec9072d58186e66d9df7396fb7ee7e08eb92e2bee373de4e35acd1921c8e8196ad32c2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762681455, "uuid": "b0fea19b-84c5-4fc4-ad41-81703500ed7e", "value": "T16F230791BC829A2BC2D41379F5BE998D3360B3E8D2CB3227CD614B107AC551F1C66FA5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762681455, "uuid": "b0bcb2ac-6f2f-4b15-9fa0-dc43c5d1cf81", "value": "768:5PwCxmKFReSIn9ygAGxc02k8c6ZQ48PHAmWun/RWFQ/MmUB1mA2EDEy0eYjW9THh:5DmKF7Gxyk8cqoHAmWurAufsG5+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762681455, "uuid": "3de72932-a4ac-450a-b34c-28db8c4c6ca8", "value": 47096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762681455, "uuid": "2901dba5-87c0-4c73-ad5c-279aa5711f6c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762681455, "uuid": "bfc9469f-76d8-48de-a049-cf273d1a9e4a", "value": "boatnet.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2834a17-bd18-11f0-a129-42010a9c0007", "comment": "Malware payload (ValleyRAT)", "timestamp": 1762657529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762657529, "uuid": "c05f1991-a51a-49b0-8a67-592432e02631", "comment": "Malware payload (ValleyRAT)", "value": "75d900c19d178c88868acfb697b4434e", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#D18BB0", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#76AC5B", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762657529, "uuid": "839d978a-2281-4647-bbe6-8da0c78483a5", "comment": "Malware payload (ValleyRAT)", "value": "3ff665979d035249cae40cb40141827f71a3d807a3b25749dde69726d7f325d4", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#D18BB0", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#76AC5B", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762657529, "uuid": "ca1809cf-6f34-4539-9a5e-0ed630ee7cfc", "comment": "Malware payload (ValleyRAT)", "value": "0e12c45da1eaa51ef4ecbfbb8087522c4eb186b9", "object_relation": "sha1", "Tag": [ { "name": "backdoor", "colour": "#D18BB0", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#76AC5B", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762657529, "uuid": "5b966534-7bae-46a6-8b15-0f09270cad88", "comment": "Malware payload (ValleyRAT)", "value": "b6d9c1632dadd604ccf2782ab9de1c51678cab518e5c6b993cf3be030c05afcf389ea89a3e6943a82ba5cd7a15a5c1e1", "object_relation": "sha3-384", "Tag": [ { "name": "backdoor", "colour": "#D18BB0", "exportable": true, "hide_tag": false }, { "name": "dropper", "colour": "#04C509", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#76AC5B", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762657529, "uuid": "af009ae4-f971-42ac-bb40-a46dabd9fc23", "value": "T130D73331728EC636E25D5077D539AE0EA5397C57033044CBE3F8BDAA5E324C249BDA92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762657529, "uuid": "e5cbedb5-522f-40e3-aa7c-6e46c4aa1b57", "value": "786432:Y1lDx5DIk7KN+ootTKxIBj12NSbQjb8MSo7wzBbl9PFyvoWIQTw1qWw023Gu:Y1J7C+bSIBcjLSpZPyvob5qWw33Gu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762657529, "uuid": "20e742ae-7cf2-4410-bd3b-737b8b864a3a", "value": 58532352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762657529, "uuid": "758a80fa-5516-4237-bb82-d08515cfa115", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762657529, "uuid": "4f2e5d31-7ef0-499d-836e-4be0211e4f5b", "value": "Yzusbkuai.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "351837a6-bd27-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762663654, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762663654, "uuid": "8b066cd0-b8c8-41bd-9c9f-12c429ed586a", "comment": "Malware payload (Mirai)", "value": "db9c255ea533a4512bd870f383daeda8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762663654, "uuid": "4da80b41-23be-4a5c-9fea-a18a8897a094", "comment": "Malware payload (Mirai)", "value": "3ffdfcead1610d1e074fd8bf85536ad6858312420f7312aaad7af3159bea75e8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762663654, "uuid": "d103b3c1-2145-4d5a-933a-cb2a6a573a5d", "comment": "Malware payload (Mirai)", "value": "98686d4c3cc1c3d1106056a49677389640b11939", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762663654, "uuid": "6acd20a4-8b4e-4e8b-823e-6dbaa9f41388", "comment": "Malware payload (Mirai)", "value": "3e4fab46902521786ced50ddd7cb1a1fc03ec0fced75e59d8988cb6791ed9fe1743fa1573f34d89be8e63863f575f6d2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762663654, "uuid": "1c8db4cc-37f3-41d9-8a08-32c1cff33d6e", "value": "T121D3CF31E410ACD1EC311AF538B996790714EE7007C66582EFFDED9E2477E9438AE260", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762663654, "uuid": "fc685a61-fb72-4af4-8bc6-3e8614331f51", "value": "1536:T5OEfIHWhd+148nFlLAVrPTtOovUHdNe8T907VZbzewcwbTmvi44pCxZ40r:T5WH5/nLAV9OovUHdNec9wXSMTIdh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762663654, "uuid": "8d957106-f358-4758-a090-9928d45b332d", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762663654, "uuid": "883a2763-bf89-4d58-9106-f5492ce4ab46", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762663654, "uuid": "44fbafeb-05cf-48a7-a8ce-ae43847febf1", "value": "xnxnxnxnxnxnxnxnsh2xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17275e59-bd0b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762651577, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651577, "uuid": "59710942-c559-4e2b-b558-65b645eb6286", "comment": "Malware payload (Mirai)", "value": "3188eb791b040137b264b02e27f7e6f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651577, "uuid": "8ced31fa-ba10-466d-87c7-c54ebe561c69", "comment": "Malware payload (Mirai)", "value": "40691fd1425d76a849713cafc938a707a2b4bc82f6ec84526a47e60886b4bc69", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651577, "uuid": "d4e993ee-fc51-4084-9507-04f452ef65ad", "comment": "Malware payload (Mirai)", "value": "87d5cb1469e2aa66a0e1ae8cc62304a268c4af61", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651577, "uuid": "45ea955e-5515-4d83-86a3-3db7d1419155", "comment": "Malware payload (Mirai)", "value": "558deabd5294c23b5f2c4c909a23fedcba100a1e1ac31045c3d666db9001e04d2d11082669786c7ecdbb8c4b774a242a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762651577, "uuid": "8cf7533a-b87e-487f-897d-eb094c76b716", "value": "T120937CD5BA83D5FAEC1642343077BB364EB6E03E2225DBD6C3A89C32AD22441D51379D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762651577, "uuid": "381e7a27-8342-4e81-a3d5-93eeeba1794f", "value": "1536:/RbPV8cetjeJJVBFn0W2cyn/32XD9a/LvCSVBhk9wtLlw/qDtrYtQ8UBX:FV8c6eJJTZ0W2cynv2zyLZFDzw9Q7BX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762651577, "uuid": "3f35d02a-7b38-4946-9eae-36e43350c314", "value": 95604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762651577, "uuid": "6c9de073-2b0d-4b5f-af6d-5bf656226fbd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762651577, "uuid": "f9ab9158-c123-4fea-b473-47da5c9ace9f", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "119cf15d-bd43-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762675620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675620, "uuid": "80b5acc6-44a5-41a3-9d38-ec8b20f1795b", "comment": "Malware payload (Mirai)", "value": "3751dea816bee918832135590fd24354", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675620, "uuid": "3d093dd9-298f-4472-b073-e4820df3f4fa", "comment": "Malware payload (Mirai)", "value": "411f0108e95470efe9e0f7ab82211bfdda98e968cf2f534e1535efaee3298268", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675620, "uuid": "085a23b6-2618-41ff-989a-dd47d38a3b29", "comment": "Malware payload (Mirai)", "value": "a938602bdc8f124c9c8fc54c11af31cfcba1234c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675620, "uuid": "23ba9a6c-7f99-46fe-ae45-1e373d02555e", "comment": "Malware payload (Mirai)", "value": "49412ef28e5a2bcfca1937e44932eeab928322b28f7561ecca6d879debe5797970957ead5b324fe235fe74ba6fa63124", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675620, "uuid": "6dfdaadd-7e1b-4e86-9738-a750b6c86f1a", "value": "T119D3AE97F7471591C86302F40BCF4F9D2E636282AF5B98E76C2F657B18790DB0902B91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675620, "uuid": "1eaae29e-f33a-4fee-ab05-19f5f7061cb7", "value": "1536:HPwYxcrSV0FZ69nROEN1dxaseSIePmc7b2zZs3HZu+xZJ/sgBeP/LWj:vwYxc+GZ6DFN1dxl9h57a+XZuCsgEPq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762675620, "uuid": "c77410f5-0d24-4629-95e2-cc87275cd672", "value": 140740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762675620, "uuid": "0c382d2f-f1ef-418a-a7ad-53d60c1eff4b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675620, "uuid": "b108b986-3df2-4c57-8445-2f0073b6f655", "value": "morte.arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab86bff3-bd6f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762694776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762694776, "uuid": "1352ed79-8a86-49d0-8da9-e80e98347183", "comment": "Malware payload (Mirai)", "value": "ae3623ec3e6fe1d245042d4c5173f7e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762694776, "uuid": "b8f0eb70-a1d9-4566-87c3-3d856fd86100", "comment": "Malware payload (Mirai)", "value": "415fc47700f65c8e14099c3fe1801e71cb1b088328d742cb3140dc3fe6fa3958", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762694776, "uuid": "aad16755-1108-450b-87f4-7a4686c5bf19", "comment": "Malware payload (Mirai)", "value": "506711c8930ac57b3ac344eda00f816d6435a7ab", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762694776, "uuid": "219dba06-8ce2-4c4c-aea7-4c9a81d4b43c", "comment": "Malware payload (Mirai)", "value": "ec144ec25f344e4dbb141950dc776ed56ead101a3e3407984665a3cf148a7c39d487285ae8f5d03f56c58b07986d7fc0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762694776, "uuid": "782d2b84-e505-4c26-ad75-a2bb67d8e45a", "value": "T10B834B66F9818B11D9C115BAFA1D418E731307BCD3EEB3665E206B30638B66B0E7F506", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762694776, "uuid": "c28a59cf-b6fa-43e9-845a-3b4f323d86c1", "value": "1536:uIni9s2HPS6P76q/5DkMMnn7yaZGanQlMHigY+uxgCb7as55Yapema:8ba6z6qKnn7yaZ1Y+uxgCbesX8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762694776, "uuid": "8f951196-6604-46db-a698-0a2ea005800a", "value": 88584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762694776, "uuid": "2e9cb8e6-685c-43be-947e-929766c1825c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762694776, "uuid": "2bd88055-a799-4b79-a203-d1f25e423893", "value": "arm6.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e46ae02-bd74-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762696767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762696767, "uuid": "f35852ae-cb49-4ded-815e-ea73c160cc6b", "comment": "Malware payload (Mirai)", "value": "8bf08e7f2b3ec29456b079c4f237d5ad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762696767, "uuid": "bac9b615-eccd-4663-9fc2-a710c2077182", "comment": "Malware payload (Mirai)", "value": "4192261d6b9c7ebbebea2c16d7b9e751f99fdf6fadec2927e8e27ff2c98b18ae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762696767, "uuid": "f47c153e-cbf0-4d04-85ec-9d5d966af5ac", "comment": "Malware payload (Mirai)", "value": "6fa603a408832e2cd9f8cd0b2011ddd6222265e3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762696767, "uuid": "8e286cef-9f10-4567-a835-97900e27cf18", "comment": "Malware payload (Mirai)", "value": "14c96c98628f6ac9e1d00507808392f86b729efddfcc825ddee17f67560cb9a0d4942dd7b8d3d1c55302323a908e5a6c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762696767, "uuid": "a8715db3-51f0-4a38-9455-e1fdba38ba93", "value": "T148330105974F89F8CAA838319F9DC69B7A065E28CAE534B7335C099C32E4D2067D69D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762696767, "uuid": "7c2cda26-fe09-4eca-8c5b-333bd9ccff53", "value": "1536:+ZKPoILiji4a8YE3tKyWnX/U7B4o61NFQGF75iyLl:+ZKwIL5pG4ycX/YB961IGF7DLl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762696767, "uuid": "06167153-f69a-4f96-9145-89f5badc94c5", "value": 53404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762696767, "uuid": "e7c11473-4777-4678-9325-b351bdf6e34d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762696767, "uuid": "7e965358-9a2c-422e-b646-45a99dfdbac2", "value": "morte.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4abe350f-bda5-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1762717806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717806, "uuid": "e8398904-175b-4af9-a243-34cabb14400c", "comment": "Malware payload (AsyncRAT)", "value": "4081aaa83fe8d7c1383491351eb7296e", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717806, "uuid": "a937a71f-d168-42ad-b8cf-6225bbf2c9c4", "comment": "Malware payload (AsyncRAT)", "value": "41c1346afc5bd376fb0132a236647a5b94c4eedc943ad40a8d4aee1a20f3e268", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717806, "uuid": "5175057a-237f-491c-ac28-64e926dfd52c", "comment": "Malware payload (AsyncRAT)", "value": "1824aa46bf68a54f1185e86f43a9c8132470ec9c", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717806, "uuid": "e3147277-a22e-41ab-8804-336012cfee79", "comment": "Malware payload (AsyncRAT)", "value": "043ca440bc87a484ed2ef9973425f38646bd6b1696754efde28f4d64fc24b30ac05a9899e4ab6050208c2b6254d35feb", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717806, "uuid": "723bdb5b-7f71-4f1a-8bff-68b9d98bbb2d", "value": "T12C233B003BE9812EF27E4F74A9F26145857AF2677603D64E2CC441D75A13FC68642AFE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717806, "uuid": "0a5bd1c6-7aa0-46e7-8826-942bae3574b5", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717806, "uuid": "f9bfd4ad-0127-4798-a0ee-8d9217972cde", "value": "768:uu201TwwL/dWUdN+3mo2qzeWnq1sE7fgPkJPInuW6UBD0bxoYO+SuOzjQyC/43lw:uu201TwQk2hWysE7IPBnufbxofeOXQyc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762717806, "uuid": "55a4f401-913f-4da1-92bb-e76b2089a4b9", "value": 49152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762717806, "uuid": "2768d8c4-579a-425f-9473-2e5311be13f2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717806, "uuid": "151fd243-d4fa-45a1-8a32-6eff090be11e", "value": "41c1346afc5bd376fb0132a236647a5b94c4eedc943ad.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f824c9aa-bd3a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762672141, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762672141, "uuid": "873acd7c-6ebe-445d-9f70-c65c3a943523", "comment": "Malware payload (Mirai)", "value": "a4794d6cd9fed4eed99dd68291d3b9bf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762672141, "uuid": "876c3481-76b4-47e4-bc8f-99c355312970", "comment": "Malware payload (Mirai)", "value": "421914f8d100f529cc4ec8bef4b5d1689137deee6964d2b2ba07a697abfc7691", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762672141, "uuid": "086d07cb-73f8-4b99-947a-407ff0c515f0", "comment": "Malware payload (Mirai)", "value": "8ee92fdd76464f0597edf87d2c15eb1288b2674c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762672141, "uuid": "4038862c-b4f6-49b0-9dcd-541e1e78efd0", "comment": "Malware payload (Mirai)", "value": "4d39ff7823c8ebd5862a75329970fb88cb7035c41bcf5b5d29fcf33b725cd831d7e9543cb6c576fe2305a90edb82c1aa", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762672141, "uuid": "2ddcf279-d742-4b77-bcb5-85df8ae1de58", "value": "T10B13F13BB117552AC5B2B4BE4C7895C366FB48DEA0A9F262B72404F1B38647F16FC081", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762672141, "uuid": "c2906fba-0493-492e-a273-0331f779b9ba", "value": "768:UmelFy3gj+eagUROZDxWOe00xE2FsZ1vQ/QDAXiifCRpOiCe2Vcs3UozW:jelFy3gjzYROZDxWOGxE2FsZi48SiyMY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762672141, "uuid": "4c44c177-93b7-49c3-9f65-d2e788145f30", "value": 44780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762672141, "uuid": "94859369-c5d0-4349-9e35-0ff8161ca7fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762672141, "uuid": "075c4907-209b-4667-bbf3-8f782ccf17dc", "value": "morte.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "007dcc96-bd32-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762668290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762668290, "uuid": "cb1d63f4-1110-4e32-97f8-d8a350b1be27", "comment": "Malware payload (Mirai)", "value": "88accab8130d6454a88c9e1d9193a7a3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762668290, "uuid": "19787756-f679-4872-8f18-d5b626b4cd7d", "comment": "Malware payload (Mirai)", "value": "42ba5ec6cf3dc802a23063edec39cc0e608e3ddf1407f965cf12d98d2386730c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762668290, "uuid": "9fa9e254-ab4d-4059-b854-b8b0132c47ec", "comment": "Malware payload (Mirai)", "value": "6833c37156aff0a3e711d8662bc0381549e278dd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762668290, "uuid": "125c47aa-174f-4787-bcb3-b12f08489cff", "comment": "Malware payload (Mirai)", "value": "38b0cb93c6f819027727eff654a27b6d718788bae94a46d714afb11569b68fb49dc255ed7dee74f09905da3acd6053bc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762668290, "uuid": "4cf11e14-b0d8-471c-9f77-acd16f3d243d", "value": "T171B39CDBF24701A0C8624AF007CB4BED3E2723815F27C5E72C6A657968791CF8906F96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762668290, "uuid": "e52f46b6-cbeb-475f-b64c-6b5850e055ac", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg1n/LWy:c9sSyzz36YaWWgg1nq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762668290, "uuid": "894bd865-4e44-4349-b69e-7bcc37616557", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762668290, "uuid": "612fedb7-3c50-4daa-8081-ff69bbf212e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762668290, "uuid": "e6c0b366-105f-4197-80b0-d9635db12fe9", "value": "boatnet.arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51e8d5cb-bda1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762716101, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716101, "uuid": "83c4f9e5-c784-467d-99ce-7d66155a39bf", "comment": "Malware payload (Mirai)", "value": "36b0d6beb34b436601fab6c9a228936f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716101, "uuid": "e7d28696-89f3-4c2e-bf73-702cd0e9c811", "comment": "Malware payload (Mirai)", "value": "43a9bf11c074c049b483a292f9762e074308ccb549c36ed7de03ee503ee159fe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716101, "uuid": "97229312-bc34-4d91-b688-c341b72244a9", "comment": "Malware payload (Mirai)", "value": "e43ec51e5c02741bd8a87f86db003361a594e436", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716101, "uuid": "55554cd6-3c2c-4b81-8793-76da40379fa6", "comment": "Malware payload (Mirai)", "value": "4cd97df493e053902c7b86d53ef3607cea085d84ead96ee9b7810c420f23ebf98fb04e31d0dfc2c825ff3be730bd6007", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716101, "uuid": "e2beaa60-fe95-4a2d-b4e0-6cff04a830e8", "value": "T1D8F2E25997ABD217E46F27BDD27E1C4D2820F38B14C07AA6BADE6D3B10E67C04670342", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716101, "uuid": "55409c64-7e3d-4bcf-8fbf-f601a3d2db24", "value": "768:b5Kt1TXp8g9KxLTnml+UiNUH48VBdiGK/mbYDqPXp46+zBnbcuyD7U9URG:9OZX90mnkUY8DdiGomnr+Vnouy8X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762716101, "uuid": "199d6418-3aae-494b-bd38-66d6319320be", "value": 36692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762716101, "uuid": "e599f515-b4a6-4b8a-a682-aa87f915c89f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716101, "uuid": "84d3720d-f572-4378-94e3-3d97b3b0af7a", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff1b06d7-bd49-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762678595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762678595, "uuid": "00683677-13f9-436c-b3fa-3c59d447f34d", "comment": "Malware payload (Mirai)", "value": "908690ba67995d5cda3768cea77443e8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762678595, "uuid": "359fccae-f099-419e-8c65-2d56471c23a6", "comment": "Malware payload (Mirai)", "value": "44e7ce8eaf3c16f88db43537d43ca2d83e1e8cb3aa908b5431d8967b54fd2654", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762678595, "uuid": "c6300243-1674-465b-bdcb-a1234edd3165", "comment": "Malware payload (Mirai)", "value": "9d3c470aeb3a4534d86685635c3a8eafa85c044c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762678595, "uuid": "2e9170f4-4301-4051-89d0-cba9b8b6dc63", "comment": "Malware payload (Mirai)", "value": "729411ae433a222d5178c6e321400135c88149db0b32c97eb91ba2a6c2922a97b4e9385641f31667398a3b669573f3ba", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762678595, "uuid": "24cd504a-e110-4e2c-8994-d5126733117e", "value": "T117A2D025D346AEF4DFAF9D9053C1C2C276F546C7278AC8E340EEAF016516046BB88D59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762678595, "uuid": "a56f52ce-1c31-44cf-bee0-f0d47bedac57", "value": "384:m/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5CXqNM4uVcqgw05VxJ5:mRxsSVsMD6xiJJE5zRWNHC4uVcqgw09f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762678595, "uuid": "706e492a-ffd4-42c8-be37-07f307af4a46", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762678595, "uuid": "1ee3dfa2-e86b-432e-a13f-6ebc591cf2a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762678595, "uuid": "851c8357-1e13-4dc6-a995-76d2c9b0d319", "value": "boatnet.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65d9adff-bd03-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648273, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648273, "uuid": "de8d3aa9-05a4-4b1c-a4c9-52601951c2c8", "comment": "Malware payload (Mirai)", "value": "f8c954cdd0ab90b3ceeadb70d7273883", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648273, "uuid": "8de8940f-31ce-4d14-8264-c312dc90092d", "comment": "Malware payload (Mirai)", "value": "45182f525f17a2a289b9f1e8d02c9a3b8f5fd4c801e7e50d94018d1627680b6c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648273, "uuid": "0dc835e6-ac40-4005-9efe-c9ed9e71b0fe", "comment": "Malware payload (Mirai)", "value": "3dea8c3df416d97ec2be920a755de0971a65bacb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648273, "uuid": "2a0bf4a1-3697-402c-9233-96e4b3494dd5", "comment": "Malware payload (Mirai)", "value": "f1256182877dec5770a4730dbb23de077f59bd2f3f461c728fa8da3a6a83fce8683a2b8b3932641bc2c2b38d53266e15", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648273, "uuid": "60168b7a-fb4d-4d31-af52-4c611c292102", "value": "T172C35B42FA418F13C0D61779B6EF42493322A79193DB73069A249FB43F8679F0E63A05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648273, "uuid": "152f4de1-6558-4592-ab75-2dc150015b7c", "value": "3072:cowpuQyNSG2eRa1styK9flTQPHoOrScVM/9OAvjik:cowpuQyNSG24a1styKdlTuIOrSmM/9nd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648273, "uuid": "1785b046-0042-4b0c-b652-a643583a921f", "value": 129940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648273, "uuid": "33944f97-c198-450d-9446-13589f6ee34c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648273, "uuid": "d4ffa824-4131-4d05-950e-d4b32486f33f", "value": "boatnet.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6346710-bd55-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762683627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683627, "uuid": "38f44f47-440f-4d2e-950a-6461308ba851", "comment": "Malware payload (Mirai)", "value": "cc8d1109236068cf085409e1ab9f0d53", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683627, "uuid": "8bdc35db-4cce-4129-ab46-f04f99cb8cf5", "comment": "Malware payload (Mirai)", "value": "45e44a55da10a6f2b74546065ff32ff00626b7957d1658821147da20eaafd7b5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683627, "uuid": "08f216ab-691a-4578-b433-a2697f74f2e2", "comment": "Malware payload (Mirai)", "value": "62dd3d1f45ae5fd164bc7229ae2282f0a08dbfca", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683627, "uuid": "7b2d8005-fc08-428d-b4d4-9d93649949e0", "comment": "Malware payload (Mirai)", "value": "532186c9557b45a5c658559aef7642e95461855b785f69437329864c5d3e12f3cf3556bca704daa99bdb8130df90f684", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762683627, "uuid": "8aca7d77-7a91-4983-8b62-2fc3df88b72f", "value": "T1C9D3E709BBA11FFBD89FCC370AF91705288C595A22A93F367634D818B24B24B15E3D74", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762683627, "uuid": "e7bd86a7-ffdf-45cf-99dc-8178f329d65f", "value": "3072:oWjQId6va3/6pyCMOMLiHOp8I2L1UMkuGBBHj:oW0Id6va3/6pyCrIiHg8P/kxHj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762683627, "uuid": "a1522a9b-c708-4b67-8847-c797ceca0d41", "value": 141732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762683627, "uuid": "2ce4766c-b159-4822-a587-8193dde97ed1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762683627, "uuid": "03a5f68e-3b11-4fe2-a58f-fbe0e278d106", "value": "morte.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d591405c-bda4-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762717610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717610, "uuid": "ff0128e5-b045-48a0-84fc-faa023521999", "comment": "Malware payload", "value": "3430d273e231f8b4125dd3bb1f1cc9df", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717610, "uuid": "6aad2627-b371-4b10-b788-5c86573559bd", "comment": "Malware payload", "value": "474b6bd7dc779b477173425a260a6aef2adb521dd1f561d7f5274534a3f7ee5b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717610, "uuid": "e36b3819-9af3-47f1-aee5-92ba45c3de2c", "comment": "Malware payload", "value": "183770f4f23dc72695e0d9213a32e22a406c7c5d", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717610, "uuid": "04839bd8-b509-4ddd-90c3-de30d73246e7", "comment": "Malware payload", "value": "6a9bf3e1448c9da7f7235a6e8604da0a40aed646501da11309be071179cfa427bbaefc724d63fdd1b3668a9bce9ff26c", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717610, "uuid": "d35b4253-b65f-49bd-b77a-93df5ad6c67b", "value": "T16B5423C9992D14BFD1CD4530E984EEE9FE1261A6135FAF003227556E6E6B5C0FA020AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717610, "uuid": "4a685b50-a165-48d2-832d-87ccb5f0d11a", "value": "31e06ec6723bcc3b75c69a4521e4b8f5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717610, "uuid": "f8971141-b148-4989-a2e5-4b903efa250b", "value": "6144:/s6oS8lSSRWNm7fW3Xt3VUwlVhES5MEr5yKfhPWYyrhlJZbV:/s6oS8lrfY9VNuEMGyKfYYuhlR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762717610, "uuid": "270730e9-b06e-4882-9dff-63fe4a3ec390", "value": 289280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762717610, "uuid": "9bc173bc-7f2a-42d8-9266-3620298050e2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717610, "uuid": "b7a2d94a-fd02-420d-aa07-aa2d751ae46f", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f164155b-bd39-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762671700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671700, "uuid": "7ec95558-c81a-4d8d-9339-f46ef476947b", "comment": "Malware payload (Mirai)", "value": "5b66b95259cb759b775487ed6bab2b8f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671700, "uuid": "bf3968ef-8ea2-4021-bf7a-61dee3cfa514", "comment": "Malware payload (Mirai)", "value": "47ff6b8c585b17e961c7ccc71418282f1724ad16d15802ffc2817d3444cc6801", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671700, "uuid": "83f221c4-1c95-441a-950f-886c3e36d781", "comment": "Malware payload (Mirai)", "value": "3d1465bbe546859e015a2e5a6f4fddc8f2f6766b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671700, "uuid": "58ff5953-050f-4012-a9fe-250ae618cdfc", "comment": "Malware payload (Mirai)", "value": "1e1c173723f99c9f1327e165defc34b9ab9356dd8f36878db3da1adbad4bf380bf0b0e42fbbb6c4b9126a9c5d8f55c89", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671700, "uuid": "17c01d70-73ae-42e4-9d83-ef553d26d57e", "value": "T119735DC0E653D8FDF9560AB11036BB339733F5395029F6A3CB54A673A893A40D61639C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671700, "uuid": "aeb5b60a-37b7-4760-b21f-f6fbfcba4de4", "value": "1536:sQmRDPcxpYBoG5205C3krmPcgnrbEp3sUHqCTgs41opSya3q3yHVyt1k3Tj6vkl9:sQmRDPcxpYBoG5205C0KPcgrIp3sUHrK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762671700, "uuid": "5929a09f-6e84-4067-9336-43354c9357e2", "value": 74640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762671700, "uuid": "c1112f40-8bd2-4101-b04f-ef05fb46b0e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671700, "uuid": "586bfc13-1c21-4066-ba8b-1df4bab850b6", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d49c6dc-bd75-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762697275, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762697275, "uuid": "121b7ecd-cd15-43bb-9f4f-4ae313a35277", "comment": "Malware payload", "value": "11b3e8b32248292bbe3381812c2a93bc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762697275, "uuid": "64040807-8221-4a13-8d74-1b4bcb5282c4", "comment": "Malware payload", "value": "489428857f2f90e8090f6e072243f14a890bb0bcf0dce09c8550f8a61d281c1f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762697275, "uuid": "b3567ecf-ed7b-43f2-96c9-655e515c0f6e", "comment": "Malware payload", "value": "13b03cb172454a514e19fc3dd6ae590025200dda", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762697275, "uuid": "270b4927-5f35-49fd-95c9-06bad746ddf1", "comment": "Malware payload", "value": "cb893c9ba16f252253fb2dd1a191d63d73cf3f760e303484e7e923a74b2b5a84740c5377b50606cda6983e9fc88b7599", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762697275, "uuid": "510e6a33-422a-45ed-ad52-025cbdb1e94a", "value": "T1DCE633527C88DBBFD4212770C6429B77529B7A74481018AB6F0C1CB66FB38CDE529B87", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762697275, "uuid": "5212bf00-cfe2-42ec-be3d-74b96d9b1d06", "value": "0c40996f6e1e5f2a82b51e9950881bf1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762697275, "uuid": "50c00a5f-7ee3-4b78-9504-3e4c54aedd62", "value": "393216:AYF/OiT86xvk7HiMPo7c7rd+ljUxrwn5UcmQMD17:jrRxvoC/7a0jUxX7h17", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762697275, "uuid": "51dc5773-31c1-4600-aaad-0ba37c25e047", "value": 14782000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762697275, "uuid": "478d4e1c-2712-4c3b-8007-c48619ecf7b9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762697275, "uuid": "b4d0ce3f-8447-4aff-add6-d7301dd4b965", "value": "Voice-Message.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c55ab3c-bd65-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762690402, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762690402, "uuid": "e21d0f0f-8a19-4df2-aacc-e33bb4ea2310", "comment": "Malware payload", "value": "8645dbb7ebda437b01141342b860eb74", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762690402, "uuid": "689f683c-76e5-4e3b-bcf3-579ca9f7ad8a", "comment": "Malware payload", "value": "49190051d8cd990248abf029959da8236b23e90776b2c54055a962a455c0b994", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762690402, "uuid": "1db57456-e09a-4eb6-b7b4-ccab3457d44f", "comment": "Malware payload", "value": "f63b0feafa86bdca890d8934a3e0c8f47318e969", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762690402, "uuid": "3d6e2f10-c7ab-43bd-a3be-b7cc49df715e", "comment": "Malware payload", "value": "a296ea3991fed428cd7634bacf8274c4e77fd1adb7ab0f5e5cb132bf698765846a6254fb5897dcd6a2f12b9c36564e96", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762690402, "uuid": "916796ae-4c22-478d-a6e3-fe6861f778ad", "value": "T104D6334992B019ABEDF2927DD8B2C119E33078DE1B32E18B9BE842633F535E15D34B51", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762690402, "uuid": "be2778dd-2e8c-441e-83bd-4a4fcd310ed8", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762690402, "uuid": "0f31ae84-c587-4151-ad50-812de6fc8b93", "value": "393216:/WSONo/ECZCvyVbXMCHWUjMVg74wFKwjPNBGZ30aRUwEavq:/WSOYCvyVbXMb8kDwFKwjPNBGZxUwEaC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762690402, "uuid": "07a2903d-e875-4d7d-a3be-0963267e113b", "value": 13358946, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762690402, "uuid": "fd619954-03a7-4eeb-9583-3daebe8778ec", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762690402, "uuid": "cc3ccca3-09a7-4bd6-b594-e717f626eab3", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97458614-bd50-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762681428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681428, "uuid": "4e85bbf9-7077-4914-9823-d967ffacdd10", "comment": "Malware payload (Mirai)", "value": "f45476ef4daa5d9685b94a77ad4eee96", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681428, "uuid": "e236f554-c8f3-4eb7-b464-e4cbb1796b71", "comment": "Malware payload (Mirai)", "value": "497fd7ad53163c7557be6f98cccdd4de780e6941e5921c2ec3e66efd3d4beafe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681428, "uuid": "4523937f-df6c-4d1d-aa32-a94d0b4e0c3c", "comment": "Malware payload (Mirai)", "value": "89062d34d7076c8532dd236459a9f3a2c3eef0f3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681428, "uuid": "f438e748-1265-431d-adc8-9d6463c705b1", "comment": "Malware payload (Mirai)", "value": "bda0132023e61677bd9eb1f8e9dd949c25a3adf123547f6df3fed74c482ee898fc25803aab2b322aeb39e875876d613e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762681428, "uuid": "ca798949-5d9d-48b3-802b-23ff3a24c0e4", "value": "T10482CF30619F74E4DBF14431EAAD8EC6971A0BF8D1FC369316586F788A4210625F82CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762681428, "uuid": "d4692a6b-fe37-465c-95ab-04ebe93cdf85", "value": "384:MjWzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMazhymdGUop5h5lU:6GV0P6+kom0tVAoNvm+to1zs3UoznlU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762681428, "uuid": "e773ad1a-b4f1-4c50-a047-202f1679eb4b", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762681428, "uuid": "53646018-e124-40d8-a6f7-a9803b1de57c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762681428, "uuid": "3a92dac4-fafc-4800-a2f2-2851e9040eb9", "value": "boatnet.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50e1c5fb-bd3a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762671861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671861, "uuid": "e57a6cdd-c064-4c32-bdb1-d7dc2b035d49", "comment": "Malware payload (Mirai)", "value": "29db70c9b1d74c2c21d92265e2e7102b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671861, "uuid": "9271300c-d7d6-43a5-a58e-b1c6b473b6ea", "comment": "Malware payload (Mirai)", "value": "49bb46a9666b22959fd771b385348086cb0c06dccc5d6b13b08a91610c4eaaae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671861, "uuid": "c2d1699c-8bc7-440c-9f20-1cc1097020a8", "comment": "Malware payload (Mirai)", "value": "be9ab731275d8f64b3b892646507f68656606892", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671861, "uuid": "96e14483-7ab7-42b8-95b4-547b3e140f0f", "comment": "Malware payload (Mirai)", "value": "f90f059e8f4bdc641b93adc5a630d529ba28d37cab517107a48e49822266352f7492ec7b348eca20efcef7107510fa82", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671861, "uuid": "b7c8b9c1-6e4d-4427-a805-dd22cd757c06", "value": "T106B3D646BFA11EFBDC5FCC3749E92706258C651A12B97F3A7534D928B60B20F4AD3860", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671861, "uuid": "dfc059c0-0208-443b-9752-2664a1a86372", "value": "1536:Fecxi5xA6nk3gesQKjLdgqO1f9R7o+bxithTOCHZj5fGb:FyZk3iOqO1HXifpjlE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762671861, "uuid": "e98f5168-c2d0-4081-931e-d325e9686844", "value": 109540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762671861, "uuid": "6f739ac0-1b65-4385-94f3-ec5847b03db3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671861, "uuid": "f52d4c5f-a886-48e4-9b71-8416f548932b", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43ec733a-bd70-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762695032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695032, "uuid": "fc2386b0-994e-4f26-8383-63dfe6ec0a4b", "comment": "Malware payload (Mirai)", "value": "f5a821958aea1df3b99e2689ea3225f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695032, "uuid": "4937b817-0e51-4882-834c-b96a5b197eba", "comment": "Malware payload (Mirai)", "value": "4a91881f2c6fce3b05a7f9bbabbc8853c9f28a24e37eabaacc40781f51ceca0b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695032, "uuid": "fa8eaae3-0d7c-47d0-a3a6-92e5d8fde387", "comment": "Malware payload (Mirai)", "value": "27b995b77a052f4bae60f66d47aa838b0ca99020", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695032, "uuid": "4e234c2d-366a-4af5-a7e8-89a0b537ff1d", "comment": "Malware payload (Mirai)", "value": "446d9d61d5fe03a60463dba65cbb82629a6f1113309882ef31913f5e5719577f94630ed97dd1c3acffcefa7c50d7974b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762695032, "uuid": "aa409021-bbf9-45bd-8cd7-3fb3bedae776", "value": "T1DB73961A3E25DFADFB6CC73687B78E209748339526E0C585E16CE9015E6034DA41FBAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762695032, "uuid": "79864fc9-776f-457e-9664-5a4d901c6d29", "value": "1536:CL/E3wrWZ4jWzWqRlq0ykpJJTKvmhuC2Si90Za5xbyuybVR0:SE3/ZqM3lpJJTKv2uC2S3Za5lyuys", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762695032, "uuid": "fea975f4-470e-4361-8eca-c8ee75c2510e", "value": 80128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762695032, "uuid": "9db932ab-0d8e-41ba-a84e-4dbefabab97e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762695032, "uuid": "c3751987-3ca4-4e34-996d-e6c644e5d6e3", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3999f484-bd4d-11f0-a129-42010a9c0007", "comment": "Malware payload (AgentTesla)", "timestamp": 1762679982, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679982, "uuid": "0da8651c-dfcb-438c-8cef-05bf08dc2ac2", "comment": "Malware payload (AgentTesla)", "value": "91ee7c5180a99272335444702082ef2c", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679982, "uuid": "77e38d38-e616-4585-8f1c-5d6fd563bd3a", "comment": "Malware payload (AgentTesla)", "value": "4ab35a674e7f2ac1baad9477ea3875ca066c948bb4fe8ac30cdae13d642354e3", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679982, "uuid": "1d4509cb-437f-43fe-97dc-72092b66f8de", "comment": "Malware payload (AgentTesla)", "value": "17b728a763ca41bd101746e3bba57abff72e8f21", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679982, "uuid": "11c85b10-b2fe-4d54-b16e-6fa15a9fb235", "comment": "Malware payload (AgentTesla)", "value": "72f9208f3467089b1b86eade419618414288711f67f49cc362973d7fe64ae20455375923440d7bdeec94b68e4145f8ab", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#0DC599", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679982, "uuid": "c7560256-dd5a-43a8-994b-a90275a5afd4", "value": "T1AFA1755037D0B85507B70FBA412FE5E6F96A88663E01484EF011FC82AF31A12FA906F1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679982, "uuid": "c5a59129-884f-459e-a6cc-99cc6872d6f4", "value": "96:RT7PXj8r6BpRAD3KkUb1tKWD5GGzffv1kQ2Ag8W+WVOWJSWGbeXcWReueuRdB5m3:VjpRzxbfKWIGzP1kNAg8NL2SrCcWRr16", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762679982, "uuid": "d6f17a58-699d-46c2-ac0b-f0cbe72d8f8e", "value": 4873, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762679982, "uuid": "bbc99abb-cc33-4fc7-a867-6cb82b102bb6", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679982, "uuid": "317424d1-659a-4a72-852d-5b46a2f738da", "value": "windowsformatxxxxxxxxxxxxxxx.hta", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c0677502-bd1b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762658733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762658733, "uuid": "68e7966a-0934-4f70-acca-6ded74db0d35", "comment": "Malware payload", "value": "711bf95142aa405eee3ad0de164af19a", "object_relation": "md5", "Tag": [ { "name": "file-garden", "colour": "#838439", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762658733, "uuid": "f060c249-7b42-4992-9ed4-ae2076214223", "comment": "Malware payload", "value": "4b4961ee52cee01089e1806de3dae3f4f323b5a4d21194f56882fd364080b295", "object_relation": "sha256", "Tag": [ { "name": "file-garden", "colour": "#838439", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762658733, "uuid": "8febc1d2-deb6-4758-ab84-4d9bd9fd3b35", "comment": "Malware payload", "value": "dcc80547c6c5a7796b81f05d7fe5d10dd25d357f", "object_relation": "sha1", "Tag": [ { "name": "file-garden", "colour": "#838439", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762658733, "uuid": "572b73d0-2574-4f89-88e4-3fcfd03005b4", "comment": "Malware payload", "value": "90a2b0f5bdcb809cbfc0cda9543709973feedbf1ccc37c497b9cf3655654d0bede8d5a620d5f474333187566c493863c", "object_relation": "sha3-384", "Tag": [ { "name": "file-garden", "colour": "#838439", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762658733, "uuid": "0233ac3b-3437-4533-a0a0-c3d7e476d313", "value": "T1D4510FC2680504C48AD10D6E1BC9AC15E1E3B87EBFFFE798A17650F625225F890E8D77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762658733, "uuid": "f1570f9b-7560-461b-9da2-644139f5c4a5", "value": "24:9A7n98in798AP8lZ9B4BV29uu2XgkpzehYudOgs73eksDTyr3ML8ACHAZCAE+RPg:e7Vmv4Cku6XceSDCACgZ9E+R3nZWExnA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762658733, "uuid": "315f5f79-1979-4a72-9ff8-92d1b7b5aa79", "value": 2515, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762658733, "uuid": "22609fd9-dcbf-4eed-a5a2-ff504e7b5f9a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762658733, "uuid": "0db40361-543a-42ae-a61c-0f1351b43a5c", "value": "final.vbs", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "916270f7-bd4b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762679270, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679270, "uuid": "580dbe97-f036-454b-af08-0814d8f184db", "comment": "Malware payload (Mirai)", "value": "d0d49be80e2d63bdbe47cbaa6f1644ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679270, "uuid": "89983065-475a-4fcf-80a5-d0d4ee573994", "comment": "Malware payload (Mirai)", "value": "4ba70027fdfa176f4ce98a9b46e31070ac40738b0a9ef7f12fcbc126b806d47b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679270, "uuid": "82234aad-8cad-42f4-be2f-dbdd40f6abf6", "comment": "Malware payload (Mirai)", "value": "272a94fab96a9cc8d79556afc8cbd7496019e02e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679270, "uuid": "dc63fae2-2e4b-4d5e-97bc-78022e84b07d", "comment": "Malware payload (Mirai)", "value": "465345420c93e5e05185e829017d69d8211f8813e11d807ef1bd8a3e3a0e635f1d63d335f120b03dc8116344e141e901", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679270, "uuid": "89610666-15ee-4ef5-8743-c8dde04b4dd3", "value": "T17C256C17B1A370FCD167C030479FDB636836F47A01206EBB62D4AA362D52EA12725F67", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679270, "uuid": "57044023-3fa8-494f-ae45-cf49f2e898b3", "value": "24576:uimDYQWYy4et+cFZWKi3Ft0cwdLn16w6N:ur3WYe+cFZBi3Ft0c+1I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762679270, "uuid": "18a931da-80d6-4823-a561-85a01e59915e", "value": 995840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762679270, "uuid": "1f479cd4-5bff-42a7-8d53-70a550769b9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679270, "uuid": "f67872ab-7380-4019-b45a-fc6a3977978c", "value": "titanjr.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e99b3fe-bd4b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762679266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679266, "uuid": "80994703-c06d-47d9-8240-d5dee99fdc0c", "comment": "Malware payload (Mirai)", "value": "c314f2b51bc91765fa339d29ea0053b1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679266, "uuid": "77aac45a-7a0a-45b4-82cf-84a67a2e8956", "comment": "Malware payload (Mirai)", "value": "4c7da7f93f8645b3ec037c6cc501a382bbeecfd74a7b2444d0ec5cbebaa0cef6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679266, "uuid": "f040cd26-ade4-42dc-a7fe-4adc82dd9a4e", "comment": "Malware payload (Mirai)", "value": "c7064722daa99d47832631d522f72facd96fd248", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679266, "uuid": "22705c94-6fd3-498e-a34e-67c133cfa595", "comment": "Malware payload (Mirai)", "value": "65edede7ac4d9db682b5c7b87144c250cc1ca5170baed3d9f525ba1f2c3adab09c88e9e54598f69a90d02202b4044b36", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679266, "uuid": "365dce51-391e-4102-a8fb-6ee6795b07bc", "value": "T160A32956FD814B21C6C512BAFA1E518E3313177CE2EE73229D146F21778B96B0E7B806", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679266, "uuid": "a232add8-6107-4214-a8a1-2434ec66eed7", "value": "1536:Icn87DLFaQa0U2ettgzLtAEP323504KaCB9u4FVZUVi78cSpRx76F9YVgM:s7DLgBttg6EPG3m4KaC78cSpRxU9A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762679266, "uuid": "c8841d06-3fa6-450c-b1e4-42f6cb6d45c4", "value": 100616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762679266, "uuid": "08cec313-134f-48b9-a2f9-beac104237c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679266, "uuid": "e1f0fa6e-f84f-48af-aa44-5d38a9306361", "value": "titanjr.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f5857d3-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677119, "uuid": "30878d5a-8ade-4958-8e34-5f3ac6d323ac", "comment": "Malware payload (Mirai)", "value": "62fe396e4fec81563adbe0ed8715a54d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "ppc", "colour": "#812D4F", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677119, "uuid": "e1308124-7e80-4651-86f1-1d0e4184abe5", "comment": "Malware payload (Mirai)", "value": "4ce84780d5a6ce4904fc3275e6e6f5126a00ba378b09d35ea74d660d17876c85", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "ppc", "colour": "#812D4F", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677119, "uuid": "4643559b-a07d-4b00-bb4b-ed3bbbeaa933", "comment": "Malware payload (Mirai)", "value": "2abbf3c6bd42e30245854c6ed729e1ac984883b3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "ppc", "colour": "#812D4F", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677119, "uuid": "2792d28b-6e4b-4937-8bf9-af466774f194", "comment": "Malware payload (Mirai)", "value": "fb6e1dc417066972dff74b7017de93d0d3e0f11581b9d00e4a9c7befa2b110c1eec8715ba142eeda82ddd0e6a26d2bfc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "ppc", "colour": "#812D4F", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677119, "uuid": "89822f22-0a55-4417-85a8-b347745cc4f0", "value": "T17FA2C0E0C8842EB1CAE5FC643C68D7A6B3A00F6667D1CDE5B5D4FF01662392CA744E84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677119, "uuid": "80cea80c-1c23-4139-82b9-0467dd3e9edd", "value": "384:CQh6YlnjbPulINvZD/aCx1Lo0P639i/Fm4mt7Pz1W4n4Rlxvnf0t6cyVrqM4uVc7:xh6YlnjbPDn7HVPC9i/FmXeLvfgtqrxi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677119, "uuid": "9fa30373-daf0-4eb9-88db-c5da4c74eb4c", "value": 22060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677119, "uuid": "951e0e33-4e34-4d8c-9ba1-f5dd4d7a991a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677119, "uuid": "14b6a987-2ec6-4d06-aea6-f644570b0139", "value": "boatnet.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "325ed648-bd06-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762649476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649476, "uuid": "93f38f7e-dad1-422a-8c3e-982cad349c5a", "comment": "Malware payload (Mirai)", "value": "f27b8398f9da1e2de9ffd3161ecd46bb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649476, "uuid": "8a8d059f-09c3-4ac1-93aa-e213eb93c9ad", "comment": "Malware payload (Mirai)", "value": "4d5a6ae6f69af212137a7a32fcd01cb1cc57903bb320e71d66c9588aee8896a0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649476, "uuid": "beecd8d6-f5eb-4f6d-9a6a-57153cbff649", "comment": "Malware payload (Mirai)", "value": "f033c6d16a40ccea11624bf609388dd2f1e0ef59", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649476, "uuid": "13f5f17d-f8ec-4d43-99fc-9039e47f496f", "comment": "Malware payload (Mirai)", "value": "59ee09fefe080cd5925257ddd039f97a108e1e523c978fc3afcaa8114701e388e4aed6289d189567e9d526fd6c237f1d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649476, "uuid": "16a935d0-ee3c-4d05-adf8-11620dbbb587", "value": "T149733A42731C0E53D5B3ADB4253F23E0C3BFE59120F4BA88651E9B4A9375E325586ECA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649476, "uuid": "c99bf3f6-4607-4137-8669-ac78900ca56b", "value": "1536:CgTQSiQOdWamISSGaUGIROyfyh1tkQT7coKd7iOjc79quNUD:CAfhOdgmGaLyfyDx7Kd/a+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762649476, "uuid": "05224b63-2715-49fb-92e2-af1a29387302", "value": 80144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762649476, "uuid": "9eb08443-c37e-4968-ab25-00daed0c2e21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649476, "uuid": "7ff86809-e8ea-4cb9-94e1-fba63c80f835", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c4ac40e-bd2e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762666833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666833, "uuid": "a162c300-b8a4-48cd-9d60-736b4cde191b", "comment": "Malware payload (Mirai)", "value": "2d097de6012fe2901ee809339e392c25", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666833, "uuid": "eca483d6-bffe-4a66-a8d9-f3e4352904c6", "comment": "Malware payload (Mirai)", "value": "4f07308397e83c948418570f62ec70d811e1947424398b245578dc11a40f339b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666833, "uuid": "d551e343-d603-4473-b2b5-befd0e5d3ba0", "comment": "Malware payload (Mirai)", "value": "085bb3ce81fc30a7b206104b598b2e5f0eb1c666", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666833, "uuid": "8cefec92-0010-4ecf-9a94-db01f53153b8", "comment": "Malware payload (Mirai)", "value": "195c26a28035001e2799d6ccb78fb0cbb6d0be40765881d4a628408dcccf736d9b7b8fa188defa0c7173416c2e14362f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666833, "uuid": "454c14e4-5319-40b5-ad0a-5781d4d40542", "value": "T11D130236B967A9B1C273637717B5A6050401E37D676CBEEBAEC0C26851A2F9D3018F90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666833, "uuid": "329ab9f4-f347-4518-a5dd-c05186dba654", "value": "768:uZxM/0+FdZRbo093Nt+AoMqGg6uA41kWR+jYdRq6mlmhpAGCEB3nbcuyD7UGQRjj:u0xR8a3+AzH7V4OBqq6mMbtConouy8G0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762666833, "uuid": "fe78989f-34b2-48c1-aafe-857f9cfd8219", "value": 44140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762666833, "uuid": "0af59612-bcf1-4227-87f4-25d91388a471", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666833, "uuid": "032bf9bb-8ea0-4955-8b6f-75dbceea88d3", "value": "morte.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d123054f-bda3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762717173, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717173, "uuid": "bc804cd5-f1a9-4d7b-a3b2-d1af7378d3cc", "comment": "Malware payload (Mirai)", "value": "c7810d01adbac8771d8e41238b05ceca", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717173, "uuid": "be99ad4e-28e5-4625-978a-dbbd6f7dd340", "comment": "Malware payload (Mirai)", "value": "4f706ba4683a0be01ef7dad8736a8b60a3a0ad19dbb9162466e911849705d6cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717173, "uuid": "eaa49a20-42a3-46e2-ae81-f50567d79c44", "comment": "Malware payload (Mirai)", "value": "fd2afad9cba7d205788c757cc61bd65faa2a1030", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717173, "uuid": "7e550a31-b69d-408f-8e7d-6c2f7971b55f", "comment": "Malware payload (Mirai)", "value": "867abfe4fdf22dadaf3e91fc6ae02481d26d98eed36bd945db989fc94e2659dc061f82890df71c6824248ee7119d9c3b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717173, "uuid": "d98dda17-04fd-44dd-8cee-fe7d613db133", "value": "T12503F19F27199DC6E5A512B410A607F17F314AF1208BCDCAF0B863D70AE10F3759B685", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717173, "uuid": "cf75d8de-a023-482b-b2ff-ea587ea3374b", "value": "768:ldY1HzIQmsWe42AdL7pWHoWumB808L1DHOdodp8/BJgGlzDpSO+4:lGIQIJdL7pWHo7mK1L1z/sVS4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762717173, "uuid": "1ab07d53-9fff-4870-9d3e-18f089ba615d", "value": 38680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762717173, "uuid": "50489417-0fe0-42e5-989a-b8da29882b44", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717173, "uuid": "4db03447-728f-42a3-9a3c-8f37c8d7beae", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ca6ba85-bd03-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648258, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648258, "uuid": "9e38553f-ee7c-4e3f-9d0b-1e1ff803e4df", "comment": "Malware payload (Mirai)", "value": "0811edc3d627dec8a7b943d126334477", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648258, "uuid": "fb342e99-b7e2-495f-b53d-7c9214a8ea4c", "comment": "Malware payload (Mirai)", "value": "514bf1402e4be7e3be002de77a76b5ee40de6481dd3043ccae7cb4417f82c17b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648258, "uuid": "783e535d-c0d7-4b2b-ae2e-e2baa1c3d4ab", "comment": "Malware payload (Mirai)", "value": "04861b10ad55ac8bdd70653d69c861f68b000efc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648258, "uuid": "9be31471-4cb7-4052-92ec-34412d7de795", "comment": "Malware payload (Mirai)", "value": "e0cb6506ecff86b5cd5243b1934f2aab2ccfd8e5fd21041670880c3ad3d86d9a2706a7691c3dc39d0015fd3ec4ead968", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648258, "uuid": "9669dd9c-256d-4065-965b-86e9209e15a5", "value": "T1ABD32A06730C0A47D2632EB43A3F67E193AF9AC121E4F640355FAB8A95B1E335586DCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648258, "uuid": "3e66b412-e9f5-45b7-94fa-c7cdbc35b4ad", "value": "1536:troGHNTUZNG5IBUiCxfytKteQQvhDajwso7lbEJvAhh3rp+JuQfqAE871nJ:3m9UiCxRteKwF7lLhrMpnJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648258, "uuid": "79370439-935e-42a8-a869-9ff5c2748859", "value": 134036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648258, "uuid": "714c27ca-6677-46dd-85ec-29223a7bdfa2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648258, "uuid": "8bd268ff-e027-45bb-8535-ac46eca8d5fb", "value": "main_ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48de7071-bd1b-11f0-a129-42010a9c0007", "comment": "Malware payload (DCRat)", "timestamp": 1762658533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762658533, "uuid": "972b6ec4-9fd3-496d-ba90-9f3c94cc97c8", "comment": "Malware payload (DCRat)", "value": "bf4f13d82d217ed69d80124c50d9441c", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "file-garden", "colour": "#838439", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762658533, "uuid": "e7a843c4-5636-448c-aea1-f7d12cb44ec5", "comment": "Malware payload (DCRat)", "value": "51890bfc6f223014ff16f4bfa6ace8e2d2ec3c81eb6965406813b9ca32b08508", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "file-garden", "colour": "#838439", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762658533, "uuid": "aa5de559-8498-49f4-b0b7-91820441a373", "comment": "Malware payload (DCRat)", "value": "b7ee7d109f61371342e924e6a0c3505347dd318f", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "file-garden", "colour": "#838439", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762658533, "uuid": "c42c0ab1-3215-4565-ada8-986ed2bf1020", "comment": "Malware payload (DCRat)", "value": "e38c593f574ae27fe88ed0b10866fb7f2c73effd502dfb8f6e4455a6b8cba4a97c137989b54461832c5aff32c4aa5d1b", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "file-garden", "colour": "#838439", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762658533, "uuid": "7274087c-507e-4d0a-b1db-0e0f7484d147", "value": "T164A5CE5669C24A37C27067714067013E92A4D7363A62EB5B361F30D6A903FB4CE772BB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762658533, "uuid": "a48a0f8f-87ee-46a1-b27b-97c8bc9e7575", "value": "12e12319f1029ec4f8fcbed7e82df162", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762658533, "uuid": "70516c73-8d66-4ab2-8c51-a0c978f7ca22", "value": "49152:IBJzOZxI4F2vH8tr79p4MUm96NqpbJEQS8M0fPqnG9c:yBOZxI4Fftr79fkNqS07u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762658533, "uuid": "03e93a16-b914-4c70-9040-394ae637aae4", "value": 2237695, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762658533, "uuid": "ff1380f6-b8b2-4a41-98c0-d9e120025c9a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762658533, "uuid": "dd0e6720-7fe7-474b-aac9-588f07ddeb07", "value": "client.bin", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a81d712-bd03-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648254, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648254, "uuid": "5aca0d20-7175-42c4-8a08-6cb9e77dfb1b", "comment": "Malware payload (Mirai)", "value": "f8ee84450dd50ed780f6345456a24168", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648254, "uuid": "12aba410-7dc0-4ca6-bff2-f35a319a4cd8", "comment": "Malware payload (Mirai)", "value": "5298a6b38daf878f51bad7c59209f3351ed72826a37ff0ac496dd1ee94c79944", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648254, "uuid": "4a72ec86-6904-4c9a-9f28-b871d4c6fcf9", "comment": "Malware payload (Mirai)", "value": "8a5716a9178fd6d50526ff80af9640f14578fbf2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648254, "uuid": "b7eb8d23-0050-4b5f-b8fd-9c14317ac4fc", "comment": "Malware payload (Mirai)", "value": "c32d0e17e688dfb9c5055a57da7cacf2ae56e77116a7982d35ad040ce355cc0b568bc8344fa5f5835303ee651b21883a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648254, "uuid": "3544fb13-f2ee-41cb-aecc-d6dcb1b9281c", "value": "T1E3B35BB3CC26AF98C655D074B0B18FB92F53A59482471FBE19B6C2B44443D8DFA05BB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648254, "uuid": "14583c44-3131-43f7-8338-350fa3945865", "value": "1536:WTW/VCxsHZusk2Li62C8XiKTRpP/PVmAVoWWczTW+A1P7A:WytCxskx62N1TbVmFWWMTbWU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648254, "uuid": "c1414e99-2ac8-4e12-9bbc-22f3309f4ffe", "value": 117568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648254, "uuid": "99d1ccdb-659f-47a9-96ec-67f8eca68cbc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648254, "uuid": "7e0aaeee-a928-444f-9939-18b6f519c9cc", "value": "main_sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b9992ff-bd50-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762681274, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681274, "uuid": "6a607e4c-813d-413f-80c7-58d6b4a9b549", "comment": "Malware payload (Mirai)", "value": "97569c1fb2ab25a3bd6e33daaa91c994", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681274, "uuid": "df7ebe52-408b-4fe7-8989-467f26b36195", "comment": "Malware payload (Mirai)", "value": "52b9e1d4cd4b3fd440c2ecc641d54c7503fbd0b0cc73fc98e6b692c02b76d310", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681274, "uuid": "25f9fa30-5d5b-4def-b307-6ef566646444", "comment": "Malware payload (Mirai)", "value": "093320085053f573e68bf708169fb862d56cd02f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681274, "uuid": "e9f5c0df-df03-4a8b-acbd-55603ce1dfe0", "comment": "Malware payload (Mirai)", "value": "f513cefc6fd652d0256701c6cc660aef631f0fbdd3564cb07b01ad930616723cdbd4a857772c04bf8916aeeef84cf932", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762681274, "uuid": "f11ecca1-17f0-4cd3-9586-d8b96e30caff", "value": "T106C31986F8814B22D6D7127AFA2D218E331317F8E3DE72129E245F2173C652B0E77956", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762681274, "uuid": "ae94d4ff-daa2-43a8-94a7-62ae248f4325", "value": "3072:eN9pOMHtFVWofk+aHTbayIfKcw6vrDm91:eNHOMNFVW45aHHaJm6vG91", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762681274, "uuid": "eee8a5ae-5a72-4a82-b386-ee5bdef7b513", "value": 120288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762681274, "uuid": "69994665-8728-4054-90fb-225c28e1fac8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762681274, "uuid": "e17dc5e8-8c2b-4007-ba51-f6916ce2a261", "value": "morte.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "664ffaec-bd04-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648704, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648704, "uuid": "75f319f4-0256-443e-9ef0-759eeae0f85d", "comment": "Malware payload (Mirai)", "value": "32fdcb1fb488fd6c3c144e63ac652585", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648704, "uuid": "4ed7639b-0512-4b45-ad12-2fb9e114db37", "comment": "Malware payload (Mirai)", "value": "52bfac402ca036f363b38e5832ff1997221be3156ca20c63eee7c1d5ea7a2ab7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648704, "uuid": "0b17806a-67c3-4401-b29b-57d676ccd9e7", "comment": "Malware payload (Mirai)", "value": "c1d94399f21a9de5487e9736a1c201be93be3d58", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648704, "uuid": "e94832ba-a965-4bfa-8b22-f1f5653050b4", "comment": "Malware payload (Mirai)", "value": "40b2a2b073180d1eecadb5aca9be3bab70d3d15936ccf9029710147e1632bb16082be2572981ae9198255ddf6f8a6805", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648704, "uuid": "7068c6e3-ff59-412b-aa00-ea0b0d55d8aa", "value": "T15FF2E150470A55E7C1E646B9E0F28E01A4EECD7CF166B2727208453FF7928A493F9B1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648704, "uuid": "7f73dcab-2c53-4016-ac57-98dca86db9ba", "value": "768:0v2MvpvLHlJYKK6legYzFhOKAo0wPv4MzTFTNyZiw8w3UWB:07pvblWlOoPv4+TFTYoEB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648704, "uuid": "26105b64-503b-43da-bdc9-17c3d4b1c8a0", "value": 35512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648704, "uuid": "9a58bc8b-26a9-4a5d-abe5-5d73fb2c297a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648704, "uuid": "6a36e130-6e91-4b52-a39d-1ce174ba990f", "value": "armv5l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20bb2701-bd31-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762667914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667914, "uuid": "72c7be13-d1aa-4786-9031-ce592c331790", "comment": "Malware payload (Mirai)", "value": "a13b2f2bfe396ae325a56405d5f6f18a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667914, "uuid": "24144102-9953-4cea-9e86-2fbbaeae4b1d", "comment": "Malware payload (Mirai)", "value": "5344a4e6b50e7d5039a7dec6cf65256a10bdbfeea6c528031a51e0340d0a983f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667914, "uuid": "96497f68-28c2-4ff8-a321-14e5da99951e", "comment": "Malware payload (Mirai)", "value": "69e93c7ebcc4737ce11c6c8abd5514b64f58579d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667914, "uuid": "c99d7264-6a80-4de6-a580-04cfa842b674", "comment": "Malware payload (Mirai)", "value": "4a77745da0911157f3efb61bed7f2bac93d16ba10ff62e6f352fd0b2b469d71f7f693c1547cf689ceba19e0bb93f9e62", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762667914, "uuid": "484fc46e-33bb-42bd-828f-4d0c7d7a3388", "value": "T12963025EB626EBD1C9F81D3DE1341F855568A608F216CD3A84FEB41AA7C79CE4C0C11A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762667914, "uuid": "5da26d4b-bec0-4d03-9213-dc3fb501ebb2", "value": "1536:0jDWU6YtAafrmikYC+AfpGAIy/opq8b9qAAeZd8WpWDNqFiOh3OPzNN:0jZ6Y2a79+bIy/oFqARlpfFNSzNN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762667914, "uuid": "9fd8dd4e-f357-4800-acad-b34c362dd113", "value": 72772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762667914, "uuid": "36ba6bfb-ecee-496d-a1b7-e7c55df66335", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762667914, "uuid": "65a5dd3d-58e5-414a-bda4-584efd290be3", "value": "xnxnxnxnxnxnxnxnaarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d378007-bd55-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762683585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683585, "uuid": "e00a534f-7cae-4d1a-ac05-b18e2652cde1", "comment": "Malware payload (Mirai)", "value": "3a2b72f8472c4428065c4a603deb577b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683585, "uuid": "9adc8be9-7953-4a90-80f1-18ccc6938cf9", "comment": "Malware payload (Mirai)", "value": "5485512f72da227fb578451c01d4970c1f3aa4401219ead530e35bb6120a7240", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683585, "uuid": "d9dc65f0-6d8d-40d0-88ae-463d6f47c7d4", "comment": "Malware payload (Mirai)", "value": "f2f035c0335cd97d545b04bab03b87d9d83d64c6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683585, "uuid": "acaebb4d-450b-4535-b3fa-c170bb57f2c1", "comment": "Malware payload (Mirai)", "value": "021776e0e9385d3a39dee5e9b597a1737de71546f8bd45ad2b9497e8a94b7482b0b536b81acbf5232e32267d82a8ef8a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762683585, "uuid": "183b63fe-45c8-4fcc-949a-67f0f153ee90", "value": "T16823F16DD9E82D45CFA9CF7B360029C0EF057A2873C65B1C67549C85276386BA1CF4B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762683585, "uuid": "7b0e3e69-7495-426c-8cd2-819073436e4f", "value": "1536:FYUMYJpRzDi+h+3yZpBmMI4TU6hdmGA17h6czu:KUMu/i+h+3MkMtQ6u1cca", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762683585, "uuid": "223bcb03-1938-4575-a74e-84bba5b040d9", "value": 49436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762683585, "uuid": "8c832ae7-5eed-49f3-b9de-9c2c30954ab3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762683585, "uuid": "0c9216fb-ba30-4928-8684-532af99f6bb3", "value": "morte.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d20ecc0-bd71-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762695423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695423, "uuid": "db588a65-564e-4015-9767-5f73bcc91ede", "comment": "Malware payload (Mirai)", "value": "0f70d3a2ec147ada320b84ea0fa60e9d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695423, "uuid": "d939d4e1-f131-4783-8b1d-83457d32bc06", "comment": "Malware payload (Mirai)", "value": "54a1d616922d58c62a58c6eea2d05da215ff61a35b076dd91c1d79561cc08a5a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695423, "uuid": "20d8b431-32c0-4b66-b5cd-c4e9553ff914", "comment": "Malware payload (Mirai)", "value": "a65fa797e2114bd3fcd2d58b0c7b556d5e16b125", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695423, "uuid": "8a7a3d42-e24e-4751-8daf-4a3fb5b7546a", "comment": "Malware payload (Mirai)", "value": "3c519c8cb1f6ea6acf701b2d1e838fbc50c248ebb49d6590d52e233dcb8207dbaaea565986308354eba15c864085af99", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762695423, "uuid": "1403161e-f1cf-4925-844d-57600b864a45", "value": "T1C8F33B56EB408B03C0D22BB6BA9B425533239BA4D3EB73055928BFF43F8679D0E67505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762695423, "uuid": "f5a5d1d8-b205-4050-9888-c4c4a9cb4445", "value": "3072:nVzDPMvd9t+aZjeo6B3Toif6Bz5KhmoEaKqSM/9lQuBvFh:nNCr+aZjeo6Bci+zoh5EaKLM/9lfBvL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762695423, "uuid": "b6528fbd-22ac-488b-bed9-29b3e5ad6b24", "value": 166576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762695423, "uuid": "9993dc20-98cd-4353-8ddd-1dae0ad173fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762695423, "uuid": "c5e54daa-3d33-46d0-af86-d2caf131f4dd", "value": "arm7.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de32b747-bd51-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762681976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681976, "uuid": "34ea9085-5a9f-42ca-ae9b-a5d2b644c438", "comment": "Malware payload (Mirai)", "value": "876dcfba6b8ac03e152aa6640ee86a34", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681976, "uuid": "b98c1de3-8df1-4613-b323-32df78adfdf4", "comment": "Malware payload (Mirai)", "value": "55e8af460bff650b797f450056553c8038435c32e933504b84ee309745304d29", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681976, "uuid": "27dfb9b1-d8b1-41a1-aca7-f450b969f228", "comment": "Malware payload (Mirai)", "value": "845bf30702bdc8a8677bca77dd2fb91f58b200f2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681976, "uuid": "4fc9c762-a412-4439-bf75-15292b2cf5ee", "comment": "Malware payload (Mirai)", "value": "8e75f6d3ce44d6969058901ba621fe0cc4126b070d59dc2006319c3ab6f7f666693c2d39210d47562f702b7df646a84b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762681976, "uuid": "44f5fc93-7ec8-44e7-bad6-277daf5b9a9c", "value": "T14FD2E1704A3385F1C6A048F6E6D9C188A54215FCC3F9B9317A7186796BDB309C1F68D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762681976, "uuid": "d95b7e02-75b4-4b1c-8acd-826ac59f10f0", "value": "768:XVbVBUUgW/puKurv41/5oadeGU4j7J5gs3UozBJ:Xb3fWO/CTxCVz3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762681976, "uuid": "87a2cec5-debc-4bf9-bbef-fad51a1d4093", "value": 30012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762681976, "uuid": "c1e6344d-de54-46a1-b5ab-91184c1dcb62", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762681976, "uuid": "4bfbd45b-4725-4b3f-a02f-7b31e67e6b87", "value": "morte.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9a43b20-bd37-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762670855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762670855, "uuid": "ae3dd3b5-873a-4f53-b507-fee7f0fe7acf", "comment": "Malware payload (Mirai)", "value": "00648907b7e8255a9e8fa839c55a3e36", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762670855, "uuid": "62881ba7-8c8c-4141-bd98-74f40ed7e942", "comment": "Malware payload (Mirai)", "value": "563dc5d35c07ef636f4a518f7fd0b5e90155e4a34553eab9f9c3697ce28eba41", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762670855, "uuid": "3e1066b7-2ff2-4ffa-bc45-95f9b2b3b4bc", "comment": "Malware payload (Mirai)", "value": "59915b3b8cad0e40962e2347842c8d0e2cc2b916", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762670855, "uuid": "097f11ed-bb72-4efe-b971-ebe66b9e04e7", "comment": "Malware payload (Mirai)", "value": "286d5aa85d179117f2b29a26acbd02e38d5550f7ca31a94e97c65902c51c96f649a8fe8d2f2145f343ed63699f18cc83", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762670855, "uuid": "c9fbbf81-a989-4bc9-8e00-e507f1068fe0", "value": "T191432921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943DB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762670855, "uuid": "61626ce0-048b-4fcc-8eca-8e1305a4e365", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAws:RqtmZPuutfbltZFBSJsBcfDSTFI+BEs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762670855, "uuid": "608902f8-2e6a-482c-a737-78b278496ef5", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762670855, "uuid": "9253e903-f04e-4dcd-a410-a723f645c14a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762670855, "uuid": "a5bbbf12-b817-47a7-821d-73972286710c", "value": "boatnet.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e252d81-bdbd-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762728040, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728040, "uuid": "e7fe04f3-064b-4c07-b3c2-6ab34eb76db4", "comment": "Malware payload (Mirai)", "value": "70e39aacfacfd1fed20774f108636fe4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728040, "uuid": "b3f11ba1-b78c-4129-9ce2-fb69e693941d", "comment": "Malware payload (Mirai)", "value": "5a2d4c52ba5d6f3ef417c8def9b9c8829e4fca7fd8619103af6228c3bdd308f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728040, "uuid": "359b4e0f-42c3-48d8-a6e4-b4c20b1a27cd", "comment": "Malware payload (Mirai)", "value": "41f8635f77b1f1735363b5d9eceac01b88793206", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728040, "uuid": "03938763-f229-4e44-a13a-6768f4410cc1", "comment": "Malware payload (Mirai)", "value": "fd18adeed08bde4c8c584c9447be156957bf2e53267957bd399f497782c32728deefa895e863b5a44dcc09ef01198612", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762728040, "uuid": "c2130844-d3b0-46bc-ba19-a7c2a08cd061", "value": "T14DF32981F9414F27C6C712BBFB9E428D3B2A13A9D3EA7103DD215F203B8695B0D7A651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762728040, "uuid": "bfcf4907-f338-484b-9228-4f5afc554844", "value": "3072:tQC7toK0cm5aWW/i4SXdAcTvEG7kJ6hh19OM4:tQ2PoDUi4sd1T80kmOM4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762728040, "uuid": "e0872632-a2a5-4f33-87c8-f7b36bf4fe08", "value": 158848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762728040, "uuid": "2b52f994-4d3d-4b47-8982-c16c32f50d49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762728040, "uuid": "1c9fea17-7e81-4842-b8e6-816b87f4a183", "value": "boatnet.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f175134b-bd4e-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762680720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762680720, "uuid": "d3e6d6ac-a16e-4c5a-9ba5-fc589ab0bc28", "comment": "Malware payload", "value": "8401802c23e9a5c6291a0a53670edb45", "object_relation": "md5", "Tag": [ { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762680720, "uuid": "03434c63-b95a-490a-a886-9d898d789394", "comment": "Malware payload", "value": "5a5c51faf768bdbdc7bc11d4ec7018deea73230874786797b1cc091e8a7f0f84", "object_relation": "sha256", "Tag": [ { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762680720, "uuid": "bcdd46fa-291e-4dee-92d5-daca0638dd70", "comment": "Malware payload", "value": "dbb5ca22bd75048c5178c0467213d798298d8fc0", "object_relation": "sha1", "Tag": [ { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762680720, "uuid": "5b15211d-1abe-493e-b7c8-42ad1de08804", "comment": "Malware payload", "value": "57db1d15b00cc1578c9471847363b24378f9e47e1a26210783e2797af6b8707df737668197dfd91a7d0bc3f74e95c792", "object_relation": "sha3-384", "Tag": [ { "name": "malware", "colour": "#90B709", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762680720, "uuid": "5af6a57b-8c61-4b86-98f7-73f552978f65", "value": "T12DF313FC40FFDA79F3E8053B505BE98B7B7765014543230B67E2A94B9F986615830C26", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762680720, "uuid": "8732ab14-549d-4e61-9566-bf407f9ff63b", "value": "3072:S9ionbzqL2xOvWgIHyp98quDjQXdYDBPu+FxRXRIgd+hpNVds:YiObzqL2xOvO1qk8XdYdPuqXXRPyNrs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762680720, "uuid": "204d58df-553b-4b4f-bce4-33b04db9f592", "value": 165730, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762680720, "uuid": "bc685097-a156-4e22-93b4-b9d5809d5365", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762680720, "uuid": "6bb83b16-6d2f-4d39-a598-71bfb08f67d5", "value": "EFT Remittance.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90a53965-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677122, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677122, "uuid": "698bb6f6-e760-4b84-b1ec-8c1b4036ae68", "comment": "Malware payload (Mirai)", "value": "184585c971112f39c15e40805a4255ee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh4", "colour": "#7BD36F", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677122, "uuid": "271d1f9f-9300-4eb6-9b97-38784008529d", "comment": "Malware payload (Mirai)", "value": "5b64679b39c0b345b7163cd85fc4ddfa8767167795ba104b5c2efcc2960924d1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh4", "colour": "#7BD36F", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677122, "uuid": "ab764f56-a598-4169-8542-25f50c362f0e", "comment": "Malware payload (Mirai)", "value": "6643b0f78cae5a55f7d819f0bd47382ef732e604", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh4", "colour": "#7BD36F", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677122, "uuid": "afb286e1-b978-4b21-ac3e-f98ef72c7a84", "comment": "Malware payload (Mirai)", "value": "da167166ef890d2638bfd91b8e8aab038762fefe38fa0f86eddea29f034c8fe7d7ed79e38e076e96c75c4c0cf720d925", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh4", "colour": "#7BD36F", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677122, "uuid": "c32ed815-5c97-468e-8067-62b01d7f3aaa", "value": "T1F6335B31E02D8E94C6854174A4AC8E791F13F1C8A3532EF726E586F96853DA8F509FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677122, "uuid": "7915085a-5fe4-4bc3-a9f6-4275a23bb731", "value": "1536:ZakB5KC3C2b3wFAJ5Cx4ggvhXLc0udCnm:Zt5KC3CO3w+5ZggvZLc0udH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677122, "uuid": "00f6dc57-78a5-45df-b175-7744721afe20", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677122, "uuid": "9efeaf9e-0e8a-454a-a70c-e4d933dbb334", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677122, "uuid": "91df8f79-d181-494c-a1e6-768146b74a61", "value": "boatnet.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4e9accd-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677156, "uuid": "02995328-4c86-411b-8538-4503385435ce", "comment": "Malware payload (Mirai)", "value": "2ecef50dc8b36a4828d9af29518f41f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677156, "uuid": "080a3fc0-6105-49bd-9cf6-c79cd9956f13", "comment": "Malware payload (Mirai)", "value": "5c3201a03f266b8a5a7125d44862f3b0217e8bec18762f262b62eb5cd0a574a9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677156, "uuid": "3e6dd55a-0abe-4521-b89f-76d00f75d526", "comment": "Malware payload (Mirai)", "value": "ac360edb2d3988e6048a1eb3989a21c729130ef5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677156, "uuid": "b01c5768-6e1d-4d2b-8004-154d0f19f26d", "comment": "Malware payload (Mirai)", "value": "18a84a6890e715e34549643376d871b90ae5b7ceb527bd442a5266c9e7edfd4b373a5fe91deb42088d51bc00947ba740", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677156, "uuid": "2edf1629-bc9d-4ff0-92d3-572202b9bfd4", "value": "T15F631946F8814E25C5D5027DF92E118E372267E9E3DFB222AE105F203BCA62B0D7BD55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677156, "uuid": "6a8e82f7-9ef4-47c9-83c5-a5e2e6b5b455", "value": "1536:StnsXZzRXjdclOv9px/686OnRFgBtAr4v/cYINib05w0qyT:vZz1j+2L6OnR+05w0qyT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677156, "uuid": "03729ae4-3041-4ac3-83de-b83a8ef10f90", "value": 66864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677156, "uuid": "b341d8d4-e809-4bcb-ba1e-629218bbd4f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677156, "uuid": "61435674-5ccc-4a67-a972-4c84558c88d4", "value": "boatnet.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7ac959f-bd97-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762711949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711949, "uuid": "f7e5226d-b4ad-4a04-aab3-5dcf32567283", "comment": "Malware payload (Mirai)", "value": "301e4638684c51c30cf64e1cae905119", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711949, "uuid": "efba1a9c-521d-4e42-bd89-64579b5e1bb2", "comment": "Malware payload (Mirai)", "value": "5c8a74f905ce07e090b74674dd7e30cd89171c63458a5780479db20f70dd9936", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711949, "uuid": "1b561344-e073-47f7-852f-3b3be92af908", "comment": "Malware payload (Mirai)", "value": "169e6a6b9b74eaf0bacaed5f513a2a12aee16061", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711949, "uuid": "f90dd921-696e-46c2-b644-5bf638d08ec8", "comment": "Malware payload (Mirai)", "value": "ecbc8430d02d8198dabe4391594945998b938a288a716f208b139aa445a53ffa36489bba666980b687e931d70a645fc9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762711949, "uuid": "eb051bbd-b454-436c-902f-a8390ca5303d", "value": "T16BF2E000F086DC9EFA4F9EBA801AFA42DBD40B9F35EDC0D23952EFA19110E156634DC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762711949, "uuid": "0f97d2c3-4253-489c-9574-da45865acc7c", "value": "768:iz6bCavG6ezH42IfEORQxtNUf8q4p1TwiRh4uVcqgw0E0tLy1:vBUr42iFKHNZyiRh4u+qgw0Vu1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762711949, "uuid": "57a28857-7238-482d-89de-8f49c1f29759", "value": 35836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762711949, "uuid": "ce873ab2-4dde-4555-bd5e-6b8db75b189a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762711949, "uuid": "f55ee906-6038-41d4-9dcb-36096c4057d1", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f3b6f80-bd35-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762669710, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762669710, "uuid": "49781f08-db0b-40c9-a3d7-68712599ec19", "comment": "Malware payload (Mirai)", "value": "a48594c393048f0d2fc1b4609fc00316", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762669710, "uuid": "98838558-5044-4d3f-b205-b9a6cbb90482", "comment": "Malware payload (Mirai)", "value": "5cc0f0ad21bc1d6fb5d9ed8709758c57d19b917f0d9bc49d6653ac4e843c1b83", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762669710, "uuid": "0f6aef8e-7ce6-4428-9ef0-0bf0ee149bfa", "comment": "Malware payload (Mirai)", "value": "888604b904fa16c979ce8da77a3c0e6404f5dea5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762669710, "uuid": "46c61627-5bc7-4a98-823b-7ff20cce9107", "comment": "Malware payload (Mirai)", "value": "ec5eb05ac58214d0e785b88b4137ce2fed5f1424d18eeb88867846707901dde79f672fc74813d5f4616f9ca4f14f8ebe", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762669710, "uuid": "c33075cd-f543-4212-9a0f-1f110bb5e6ba", "value": "T1BDB3B047A25075FFE09D6E3FC4635E96A7248FB04B871B6961BAB5D0193B3D03252E03", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762669710, "uuid": "60150d40-cc44-499b-afc2-f3e3d89fb82f", "value": "1536:7x86WFikZMsK8i70+JS2Fzrd0aajpkHnev41LyFzokOp7tX8lGiPx8rSA:7xvWQSXI3Swzrd1geJyG7tvwUSA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762669710, "uuid": "b5369488-cd63-4c87-a56c-d528dadf980f", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762669710, "uuid": "ca0a9fa3-1279-4cdf-9616-8f34ad9323c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762669710, "uuid": "1c378edf-2176-479f-87fb-1371c2dac0f5", "value": "xnxnxnxnxnxnxnxnm68kxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5fb3fb8-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677157, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677157, "uuid": "997643ba-0cd3-497e-9488-4e6d739d02e0", "comment": "Malware payload (Mirai)", "value": "6b4a92e091cac6119ff9bd25517ee5d9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677157, "uuid": "5eb6cef8-5eaf-4462-9579-0524bf547148", "comment": "Malware payload (Mirai)", "value": "5d353c167d3d8c2f523303dd7f9cebf880547d116273cea3feec43edc0106f6a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677157, "uuid": "aac960e2-fc7a-4499-b7b6-4800f2033227", "comment": "Malware payload (Mirai)", "value": "fa3efe274625fd9eeb9584bcff3af01c332aea70", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677157, "uuid": "253fa271-6acf-4c09-8110-db146faf89d1", "comment": "Malware payload (Mirai)", "value": "f0eb4fa97155d8980fdcedfe03811a3aa3cf83a192685726f57aa560f25850fccaa19e490e005c07b8bc566f05191c68", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677157, "uuid": "18ee3c25-2d5d-4d1b-a876-7b5a1babf44f", "value": "T174C35B46EA418F13C0D61779B6EF024A3332A79593DB73069A249FB43F8675F0E63A05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677157, "uuid": "4a647842-f399-4119-898d-f52281cc5fff", "value": "3072:5aRKW5fsMmnO1styKTRlTyHRourQmKM/9YdOik:5aRKW5nyO1styK1lT8SurQ3M/94Oik", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677157, "uuid": "cddc5776-309a-448b-8d8a-7abd1353c2fd", "value": 129684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677157, "uuid": "1147a9e2-8f13-4a91-a9bc-70d3d9335c8c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677157, "uuid": "41cec15c-29f2-448b-b8c1-5771ab5984d3", "value": "boatnet.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68ad47e3-bda1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762716139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716139, "uuid": "3b60ecf6-5e26-47f4-bb96-b44a6f1429d5", "comment": "Malware payload (Mirai)", "value": "8811d864c23c231228c3373ec99a224f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716139, "uuid": "6ed9b2b8-cf0f-499b-950a-17486bed6175", "comment": "Malware payload (Mirai)", "value": "5db29cf49739028ccefae208a6f98e5a68421610be678b814df76e83f73b7f9e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716139, "uuid": "0ae5c9b1-5bf8-41af-8ed6-3e587d99ed35", "comment": "Malware payload (Mirai)", "value": "5662661b42444d10bc627bdd4bc441283af61c47", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716139, "uuid": "87421d4f-b74d-4330-9490-d931e65134e5", "comment": "Malware payload (Mirai)", "value": "eb8cfd7f9b86e6877c18b567296a76f90089e9bb58be23e299de706c176b8fbd96f6ae694c480ac70e7746bfcf6e016c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716139, "uuid": "5e7c173a-16c9-4052-a0d3-4c002ce5cdf0", "value": "T170736DC1DA43D9F9F9570AB01136BB378B33F5395029F6A7C7946B33A883A40D60629C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716139, "uuid": "b68de5b7-eb7b-4cc1-9552-fc97b980ff1c", "value": "1536:Px20qSvebYZzo8CTtwVFE6S/oZItcwZb4S5I5C4QYpSUgSL3DHaxPSkhpTjSRUXC:Px20qSvebYZzo8CTtwTJS/oaewZb4Sj4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762716139, "uuid": "397f1581-c537-4247-b6ec-c34fa463e847", "value": 74640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762716139, "uuid": "6063417b-40e7-478a-8306-1083f0b24f7d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716139, "uuid": "e13a2d75-bcec-4d19-9b5c-6ce7dfa7aedd", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6606df8f-bd15-11f0-a129-42010a9c0007", "comment": "Malware payload (XenoRAT)", "timestamp": 1762656005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762656005, "uuid": "efde5205-6052-49f7-9c00-3f8b64639590", "comment": "Malware payload (XenoRAT)", "value": "a05a1d3c23f1d5eab91c84b82c3f7ea2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "XenoRAT", "colour": "#CCBDCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762656005, "uuid": "48c701ed-a398-483c-acf6-581f6ccb4472", "comment": "Malware payload (XenoRAT)", "value": "5e84212896be25f411d5185406286fe5ee898afe757623a6acbf736c20c3e838", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "XenoRAT", "colour": "#CCBDCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762656005, "uuid": "776b91a5-f1f6-470a-8730-82d13fee7d25", "comment": "Malware payload (XenoRAT)", "value": "757f35d592aab92e0cf3768be9be8e96f4a2e815", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "XenoRAT", "colour": "#CCBDCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762656005, "uuid": "203fbb66-8748-443a-9c7b-7a4825cfb632", "comment": "Malware payload (XenoRAT)", "value": "79169689b648408e50401eca0363571049b621d02b49e4cfb239ec350fb9c4ad29d1626871598ba2a8455259443d948a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "XenoRAT", "colour": "#CCBDCA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762656005, "uuid": "d4d23c30-f67e-4ee1-84dc-f0f831627a45", "value": "T1BE23E74C5B6D8923E6AF1ABC9432425387B3E267A532F38F48CCD4E9379338554453A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762656005, "uuid": "d910642b-cc98-4ba8-8812-ba4ce8d34a6e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762656005, "uuid": "976899d7-3616-4fa3-9a7c-e15dfb6aae80", "value": "768:DdhO/poiiUcjlJInsonH9Xqk5nWEZ5SbTDaqWI7CPW5ac:Rw+jjgnnnH9XqcnW85SbTDWIP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762656005, "uuid": "add0f2fe-d4ac-4fe2-ac70-29fb063f7371", "value": 47104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762656005, "uuid": "57701dc9-3936-4ea1-bf1b-3e87576d846d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762656005, "uuid": "e0368d9c-c7a8-48c0-a412-fe4568495f5e", "value": "A05A1D3C23F1D5EAB91C84B82C3F7EA2.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1877272b-bd4a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762678638, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762678638, "uuid": "9066cabf-fd0e-4756-8bf5-b46c8560742e", "comment": "Malware payload (Mirai)", "value": "a6f1612d2a3bbc45adf02215c8276277", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762678638, "uuid": "327888f9-da46-4cca-b2cb-cae48133e225", "comment": "Malware payload (Mirai)", "value": "5eeecf90deb98be00def287ebecd74e577326aa84fad7f84fbe7781d0ce62634", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762678638, "uuid": "4431a502-c4fa-421c-aed9-f451b4fd884c", "comment": "Malware payload (Mirai)", "value": "c7c05398bac1e99162196bd3d938d2adb1f0fe86", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762678638, "uuid": "c9618732-d325-4592-b324-4fd3e0d28fcb", "comment": "Malware payload (Mirai)", "value": "b0f9b46486f0d996986307ea77bf02b594ab81e6c89d778a6ad75791732a77be6fa3e95fc1356cbc12dfed3812ead874", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762678638, "uuid": "b99aca51-a3c4-4bda-b1b2-a152d6700ac4", "value": "T1D7334B42322C0F17C0A35974252F5BE487FFFAD122E4F685251F8B668A78E371489E9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762678638, "uuid": "09dff1ad-409e-4bac-ac93-43ab5603ae4c", "value": "768:3SjbGSLlRrYj0a8C/dQOhPC/+I20Ja6ZZ+GwPS4yns96BktDgIPi8TwX:ivW3jdQGqt7Y+Z+zN9cGgI6bX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762678638, "uuid": "a36ed375-a5e3-4925-bc39-ce5642e76721", "value": 54364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762678638, "uuid": "00b3d831-e1e0-4c39-935d-7a44fabeb63c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762678638, "uuid": "732d24b4-23f0-4d59-9245-06dc855c6c05", "value": "boatnet.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5eb1038e-bd03-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648261, "uuid": "3fcc4f83-22cd-4aa4-8e6d-09e59612d3ba", "comment": "Malware payload (Mirai)", "value": "b0cf4685a6d359ada804ff91cbdf8307", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648261, "uuid": "d7e9d530-69f6-416b-af0c-779e6aa4170e", "comment": "Malware payload (Mirai)", "value": "60e8acf25c1c3429ad3df745c07a023f00fe604e1431f4c6a6a7bf759e4b3213", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648261, "uuid": "de9c55e5-be5b-4f65-b27f-97b96bbbc460", "comment": "Malware payload (Mirai)", "value": "94adf9f6d2736fa407404e1187e75df9c96ff615", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648261, "uuid": "356b4dd7-99a5-4f51-8f38-256a79ca81bb", "comment": "Malware payload (Mirai)", "value": "dc8f473c2ad3f706c1d253e0ff7f76c56021ce3756288b5ac09084d419a7ce56c7f2b678fdb5b2fb8e0a68f5e1e147a8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648261, "uuid": "715ee4f0-348e-4b51-83bf-1dd37939feb5", "value": "T13AC31B45FC405B23C6C611BBFB5E428D3B2A17E9D3EE720399255F60378686B0E3B946", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648261, "uuid": "76451af9-155a-4945-acee-73ad3e9c7d41", "value": "1536:pXKa0rG5yC/cMChygtpOBdWFAcJX4VlgXTA70FoDUGBr7k51WhPV1lHFwywEReQb:pKaprMh7POXWFh4UX40FoDJBkvWR2SU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648261, "uuid": "c4c73deb-d2d2-42ce-90ec-403850ff0e50", "value": 129824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648261, "uuid": "493c4511-cbd9-4a71-822a-0793182d787c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648261, "uuid": "bba26a6d-f26b-40f7-a1c9-9ad860f12e78", "value": "main_arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d5d3a13-bd9d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762714294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714294, "uuid": "7026643a-0fc4-40ab-9bfa-c75dcc1b4d16", "comment": "Malware payload (Mirai)", "value": "361e9d2ed247f67b09f98442028d6295", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714294, "uuid": "b441da00-d5e9-4fa2-81b2-fc90968a1c03", "comment": "Malware payload (Mirai)", "value": "61ae0cbae9991c012f36e341e914df42b6bda20b9a48925a2f0092892f7e15a8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714294, "uuid": "9ddb24bd-1697-44f6-bedb-5a775ae28902", "comment": "Malware payload (Mirai)", "value": "d6397ee6c9c1a0d582c01f9495efd039cecbda3f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714294, "uuid": "6e58f247-d808-4682-ab43-8bb87a1142d2", "comment": "Malware payload (Mirai)", "value": "eb16e4852f0c0acc5a59a513a607e34342805d57ae485bde57947d6ef0de9002dc593f273b039845eb3bdbc9ae2c6301", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762714294, "uuid": "bd4d3924-2e04-4c6c-b378-7a9acb9e2f8e", "value": "T15DF33B56EB408B03C4D22BB6BADB424533239BA4D3EB73055928BFF43F867990E67505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762714294, "uuid": "b960c106-46c1-41c6-98cb-50e21f055997", "value": "3072:nTDAcn+NHtmanUroL3Ltciw6zFzAUGmpXaqcOM/9eT1OFh:4JvmanUroL32iJFz7GgXaqZM/9qOL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762714294, "uuid": "7299d569-570a-4301-a16f-f6b82fed767e", "value": 166576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762714294, "uuid": "39227007-3321-46de-badb-07421189ebc2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762714294, "uuid": "17168856-2074-429f-9b54-f6a356cd3615", "value": "arm7.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3ffd2d1-bd41-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762675114, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675114, "uuid": "6edea1cd-30aa-46db-9480-d5f6aa877d01", "comment": "Malware payload (Mirai)", "value": "5226c7fce0cf7830d0ac896e8e69b692", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675114, "uuid": "9a618d00-9d85-445a-bdec-b81cb2e1f732", "comment": "Malware payload (Mirai)", "value": "62f5264ab121a4cc68431367e1603e8b3f43513bc05bd1054a5fa4dc49bf0ec0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675114, "uuid": "d5e80993-8fcc-4134-9d1f-90ffdf9c068f", "comment": "Malware payload (Mirai)", "value": "6bb4ea001b74872c00f08f61fb4a2c3e20ddaacd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675114, "uuid": "01f5991b-9f39-4358-87e9-df8818d67ad8", "comment": "Malware payload (Mirai)", "value": "6b8e43157bb2c7ffabc5712cacde0a7e079cd6899f5200149e6538375ed66f0b8059237dac1b96fb59d4bef5df3bf2be", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675114, "uuid": "2e68f311-8c6b-4f8b-bc6e-76aeba7623a0", "value": "T1F823F2A915005CD9E58CE0F606880FF17EB44921D491AC467748FB8BEF1A29E39F6EDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675114, "uuid": "17ba3a31-ce75-4f16-af2b-c85973eb817d", "value": "768:zxlpoHKR9eMe+QOeHm9+1mo/VOZQTq6fOAL/M4uIMSIKKZNssJgGlzDpbuR1Jr:tlpoqRwdxmOH/V2QTq+OAL/hMOsHVJu1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762675114, "uuid": "6127ab8c-a3ac-4e35-a382-363af3c59048", "value": 47720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762675114, "uuid": "4dea04b7-fe5b-4ce1-86cf-0e1f0f308925", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675114, "uuid": "c4a3e8ed-d1af-4af8-9d10-d9bfec8aa93b", "value": "morte.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce635da4-bd69-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762692258, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762692258, "uuid": "0effa49c-cf04-4244-b0cd-8357e2fc2e24", "comment": "Malware payload (Mirai)", "value": "4ce9c49e2df377edf7039a69f0040ec3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762692258, "uuid": "391ed7d1-5841-4a61-b224-f308a2bb1f69", "comment": "Malware payload (Mirai)", "value": "638be4d8cdbde633a266b43efcae51e9f6363d69f54a0f75c6f723e1f9d3cb7f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762692258, "uuid": "72462526-0fbf-4631-8e04-cbfac08c2b84", "comment": "Malware payload (Mirai)", "value": "ab806f0bbbd9800691281963e3246f95f186a410", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762692258, "uuid": "4b4f1a20-ead7-41d1-a10b-f0e594f7d32b", "comment": "Malware payload (Mirai)", "value": "ec11cb922d65c2ea45662efd5a10003b3703af631d0ce2a9c0d5c324399bd7cb3c9d34f3313d80b2477c88660081a55f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762692258, "uuid": "0b5b3ba1-b211-456d-907d-2478924a42fb", "value": "T171A3D709EFA54FFBE86FCC3706A9074524CC661722B83B767574D82CF64A1470AE3964", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762692258, "uuid": "d12155fb-ce61-4307-8192-d114464f2eb3", "value": "1536:Un/Fi+/aOEaocfi6fW0lOP5idLguZ3JqEzw73ErzJHZzblpRn2yWI3kMNme2jTes:Uno+5Elcuem8hzk4rzJHLRjMe2BD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762692258, "uuid": "4ccc50a0-86a1-4e1a-abd0-9fbd69728d2d", "value": 106488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762692258, "uuid": "eea4bf37-ff11-48e0-b959-23a4307c2f6f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762692258, "uuid": "855f4a87-a9a6-4283-bb43-17e5316d34ee", "value": "mipsel.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6009dd54-bd7b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762699803, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762699803, "uuid": "dd8600b5-6b40-4eab-b085-f93697abb07a", "comment": "Malware payload", "value": "63bdf08b83281570209d16523cdd5b95", "object_relation": "md5", "Tag": [ { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762699803, "uuid": "ae03c914-ee65-441b-99cf-c824e8672fa1", "comment": "Malware payload", "value": "63cd140d822d51635e871ab1287b531d35b8a792489687b6e2efc0967e86f08d", "object_relation": "sha256", "Tag": [ { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762699803, "uuid": "ceab65fb-c1f7-405b-be00-c7a3af87045b", "comment": "Malware payload", "value": "5a45ecc7eb39d39fcba5f3ac1acc86b824ed4b1d", "object_relation": "sha1", "Tag": [ { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762699803, "uuid": "587a032f-1455-4f4b-b974-e46b05faa4d4", "comment": "Malware payload", "value": "5dae2e590cf6cb401820f03dfe489baeb2a25dd490e30baf5324be6606a16ada9f4bfa6e0e7a1088269811e96cac19f7", "object_relation": "sha3-384", "Tag": [ { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762699803, "uuid": "2f8dae40-eb97-43b2-bc11-f0ec366f0607", "value": "T1C6829E93738907E5AA980BE90164952B94F5D06A383119CDEBF3B697F03DAA1FC1C374", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762699803, "uuid": "0e05b863-5968-40f3-bc5c-1fd0aca92e0d", "value": "384:9pC6B9pAyDklX+4NUklWbW0lvHYRvMXRUe4fuhpCO8z2Su:fH0umeVGvMXRUe4fuhThSu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762699803, "uuid": "1e8f87f9-5859-4c95-b343-a34760319e91", "value": 18702, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762699803, "uuid": "9f822a41-7a3d-455f-984e-44c91aeef18a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762699803, "uuid": "54b6cda9-a988-4995-92da-29d6aade3799", "value": "kaleb.ps1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8295ef74-bd05-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762649181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649181, "uuid": "7527c84a-0f12-4f47-9d8b-2274b22aad02", "comment": "Malware payload (Mirai)", "value": "b1a1e75954042aa2c426c14733ed9292", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649181, "uuid": "342202d2-0fdd-426c-9b8f-5e3daabf4716", "comment": "Malware payload (Mirai)", "value": "64296ddd854d46c567bb6bb5007a5f3e53027fae7b3f7b53c0ca1cb534638ed7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649181, "uuid": "bcd04a98-a08d-4e6d-bc43-adee56bfa389", "comment": "Malware payload (Mirai)", "value": "2ba155b4e1a7634909a19b05f7a14c1a25a37f69", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649181, "uuid": "8e4e21f3-28d8-49da-a951-0e6d47102144", "comment": "Malware payload (Mirai)", "value": "893299797837e18ed52a26940e758141a348634462b5541a87bea656f1470454ac05ae6e91e29f614d704ce8428076a4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649181, "uuid": "fb826b0f-fac9-4c0f-93b2-530d00358605", "value": "T121631885FCD2C96AC6D423BAB76E228D3321B3E4D1CF3247DD185B2427C925E5E36A41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649181, "uuid": "10d3f999-9a00-497a-bc89-f67ee5c5ab7d", "value": "1536:c4QAOmQ0aAOXGqknm7bU5rNtm53IAU/cywrAQfE5dB7:7jbQ0FO2454AU/1LR7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762649181, "uuid": "9072af44-2c3b-469a-9ac5-550495a5aa14", "value": 67608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762649181, "uuid": "2ffb8408-1d7a-4696-a922-5c8ef8600b4f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649181, "uuid": "d0e2db44-800b-4c6e-9b67-8fdcfaf0cd98", "value": "morte.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "160d2e51-bda3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762716859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716859, "uuid": "8095fb80-1a95-4620-b88a-9beca933fdca", "comment": "Malware payload (Mirai)", "value": "5581d5430d7de6eefb2261a422c4e832", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716859, "uuid": "92d182c0-2003-4960-b343-8c0f876e89e7", "comment": "Malware payload (Mirai)", "value": "64ecf21b966ea96ee14d27f2bfb200532f91d5cff6ae5a20ef005a027aa7198b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716859, "uuid": "865bb58d-7aea-4acd-b368-024da94fccc9", "comment": "Malware payload (Mirai)", "value": "2d48bc72f8b2259b5e8258ba0b6ed764a25090ac", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716859, "uuid": "01328fe3-e44d-48c6-b749-62e7fe2d56bd", "comment": "Malware payload (Mirai)", "value": "9818468c8710b26c4224ced7080956b759ecf1c690913032b23f7bc83133d276f5f53c1a03b0aa783be15bcc21224dd1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716859, "uuid": "582195ea-d2ac-4943-a198-1114d4501488", "value": "T1B0B3D646BF612EFBDC5FCC3749E91706258C691A12B97F3A7534D928B60B20F0AD3864", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716859, "uuid": "8f35cb49-f134-4b63-b6fd-be4ac5464c17", "value": "1536:4l8RD3VAVRmDlZsQKjLdPxO1qmQmd+bCPtbxfctZr6fGCi:4kCmDSJxO1+qPHorG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762716859, "uuid": "45d1900e-91d5-40b3-b9c4-a6956b0355d7", "value": 109828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762716859, "uuid": "b992f51a-14f5-4610-9297-d59e5d181a0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716859, "uuid": "99e99ea9-d530-4f2f-a7b6-f0af3b85501a", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a87d7c93-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677162, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677162, "uuid": "b92d2298-6154-4b5b-8b7e-a362567424d3", "comment": "Malware payload (Mirai)", "value": "f19527894de3020fe82a751d79f7bd1a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677162, "uuid": "1bd4aa77-0ad7-4479-8e71-91fa57c864b4", "comment": "Malware payload (Mirai)", "value": "65588390470a8481cf8048b5307b094685a277803eae12822a9a196d21fb8856", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677162, "uuid": "82e9d85e-25e5-4c27-9d5b-eb2cb676905e", "comment": "Malware payload (Mirai)", "value": "9a3a31f5f6826f8f63cbcb30cd2d2876d15b85d4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677162, "uuid": "cb59b15a-ef98-4b56-a9ba-74fe9959bac8", "comment": "Malware payload (Mirai)", "value": "2d48163b59d95ca64c702d63e86cd68394d589f7692136932ba170af5101c010afd74bbad3f9fed7f6b06a78e89f4572", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677162, "uuid": "cf99d3bf-c6df-4ceb-9953-ba246dbafb8f", "value": "T15633E681F94F81F6D40B483450A6FA3FEE31D9E942B1862EEF995F32DE675438101A4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677162, "uuid": "fceb0c3a-a9af-4071-b5a4-a5bbf6ff0d98", "value": "1536:dteZzKHLp0yHv57oowENRISlhVHFv3r5Q2u74TifADTti:dteZzKHLp0yHv57oowENRISlrHB3dQ27", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677162, "uuid": "adec4267-1ffb-4d94-a5e9-021cd5c07b93", "value": 54928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677162, "uuid": "86b84b7c-58f9-45a1-be19-594a8db7ae1b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677162, "uuid": "20f2b8ad-9ed8-4e56-ba3b-157bfdeccd7d", "value": "boatnet.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e53f41de-bd8d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762707758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762707758, "uuid": "f601dee1-3cc0-4c04-b1ab-efd49f72122f", "comment": "Malware payload", "value": "78f69b0a4fee11f613e2c76e3090073b", "object_relation": "md5", "Tag": [ { "name": "booking", "colour": "#9F592A", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "naskkr-com", "colour": "#4B1242", "exportable": true, "hide_tag": false }, { "name": "Spam-ITA", "colour": "#DE8A25", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762707758, "uuid": "0784ff2a-9130-44d2-96af-1cb5b973da26", "comment": "Malware payload", "value": "65a44df3f521f11fef1138c8fb32ad16749f12830025eeea925f9fb19f32edf1", "object_relation": "sha256", "Tag": [ { "name": "booking", "colour": "#9F592A", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "naskkr-com", "colour": "#4B1242", "exportable": true, "hide_tag": false }, { "name": "Spam-ITA", "colour": "#DE8A25", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762707758, "uuid": "3358dcfe-d833-4dd0-8084-98fda7804689", "comment": "Malware payload", "value": "eebb091db3af6fd4e81e8590f52b2d1d49648347", "object_relation": "sha1", "Tag": [ { "name": "booking", "colour": "#9F592A", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "naskkr-com", "colour": "#4B1242", "exportable": true, "hide_tag": false }, { "name": "Spam-ITA", "colour": "#DE8A25", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762707758, "uuid": "519e1d2f-00b9-4b93-9a1f-52a6c0376866", "comment": "Malware payload", "value": "2b74b1893ce3a0c132f565f93c465ea1f806497f9386274971fcb00d847e3e5511255eaec04d0c7c52c42d8a2b6cbdb3", "object_relation": "sha3-384", "Tag": [ { "name": "booking", "colour": "#9F592A", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "naskkr-com", "colour": "#4B1242", "exportable": true, "hide_tag": false }, { "name": "Spam-ITA", "colour": "#DE8A25", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762707758, "uuid": "66d4f5d4-36c4-4243-95b3-87da2ab04b4e", "value": "T1F786335E9DE60FAAC1208F7E4171352C44DADF93F267C47B484ABD2DA47B1225CA3B18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762707758, "uuid": "2583e46c-659f-400b-addc-f7d576114340", "value": "196608:QiubkYQGixjtnjDGty9eNTTrRjT7Mb3LQWX0Wch1Qqd:wXrwjtnjBENTTrRPM3rnch1z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762707758, "uuid": "b9cc7472-6e32-4d38-8f72-9663d3dd54e9", "value": 8413184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762707758, "uuid": "5146ab1c-387f-4f07-a392-c00b8eeb41be", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762707758, "uuid": "fe6073d8-f91e-49ac-85c9-665dc4b26df5", "value": "OHKJZRUM.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7878dee4-bd2a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762665055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665055, "uuid": "787d62c6-d165-4738-aa85-d2835f8b2bb4", "comment": "Malware payload (Mirai)", "value": "b2f57c0b1832d02fc2f85125dbfff27c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665055, "uuid": "d792aaf7-8966-4c2e-a854-56c3f94a78ea", "comment": "Malware payload (Mirai)", "value": "6677a0194c095e6e649c3289f979c23ed9f81b1ab72371d01dd99076b988dbd0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665055, "uuid": "6f46a473-7357-4da5-a29d-fcf7f95a7d67", "comment": "Malware payload (Mirai)", "value": "74de80e0eabf42d6aed637b6339c5045d6c427f9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665055, "uuid": "b2e33a89-2d9d-42ca-b581-c20115032187", "comment": "Malware payload (Mirai)", "value": "35813e2e43efd85e8ac7023b259bf913ff0b8e11c302e973e9a301899d3225386cd3eb663c8b46534df6e3853be3ceb4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762665055, "uuid": "8c4a71e8-16a5-4b74-9008-46f1a9c8ef05", "value": "T1C0834A56FD41DA12DAC025B7FB1E428C7B2743A8D2FF72438E265F61638E46A0E3B541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762665055, "uuid": "d599fcd7-8e03-4b28-b5e0-7bee5d6980d9", "value": "1536:OZyr/6lyb9k4c7KbbUC06VGS3HsRUOemf:OZyrylyyz7KbZ/VH98", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762665055, "uuid": "dbe373a7-dca3-4d64-914c-700c92634866", "value": 88656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762665055, "uuid": "1e60aec4-854e-4a56-b84b-d25f1d782c78", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762665055, "uuid": "c4e357da-a880-443e-ba12-dc19db8b1619", "value": "arm5.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d038600f-bd4c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762679805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679805, "uuid": "8293ec6f-2013-4b5a-8af1-4fc55c86580a", "comment": "Malware payload (Mirai)", "value": "bf9f9ea31bed97f1b218bbd2dd4d37d7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679805, "uuid": "c9e6b1c2-1c12-4c9f-8174-84f3a71a102f", "comment": "Malware payload (Mirai)", "value": "67bcbf77cd005b90200f1285f65d687023dcdd4649e447aabd52e3aef99bf5d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679805, "uuid": "14ceaac7-50d0-4ef1-a2f6-a8fd46cb8fce", "comment": "Malware payload (Mirai)", "value": "7b414c87361556199e6e13c617412ce62f583d7f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679805, "uuid": "f288e9bd-6e89-4333-aa43-1d12dbc4aaa3", "comment": "Malware payload (Mirai)", "value": "6084e5990bbe37c9d15d5c1965af13514a1097206b5850b446f4b0c90ccbd5d9885691e94e87e9cec4f121dd7c8884af", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679805, "uuid": "0526b998-a1f8-44ce-b0cf-405fb0aab980", "value": "T19B13010622EED808DCFF453B98EEEE2B1810E2ACAD5E407D47D325EF5C05B816E20616", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679805, "uuid": "ac302e87-71ee-489b-bc92-61e734737a4a", "value": "768:vhMsowtuFZ6nzttTICCXhBk+arNetVtEWbnSqY4Yqi/MRdunbcuyD7UHQRjJ:vhMOuFEnztRlGhyotBbS/4NiXnouy8Hm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762679805, "uuid": "748532f2-8190-45f2-ac94-1557fc9fb7bc", "value": 44064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762679805, "uuid": "6aca29f1-2a7d-4b88-8b22-9bea01cf546c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679805, "uuid": "d2d5e7a9-21f1-4658-aa77-e24a9562477f", "value": "morte.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ea9fb23-bd82-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762702700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702700, "uuid": "9cae56ee-56cc-43e9-a8c6-6e841afbcec8", "comment": "Malware payload (Mirai)", "value": "e7f2da6c72ab0218d75716901a02e659", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702700, "uuid": "1cbf0f72-a70b-4a0e-a4f1-4eb82bc779b6", "comment": "Malware payload (Mirai)", "value": "6a7d9348e63a3d48bbf8c423f4b129de09dec30de6b648ea179b54bfdffca1dd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702700, "uuid": "b3d36916-f2c9-4c2f-84a5-fca9b899dea0", "comment": "Malware payload (Mirai)", "value": "ba0b6c8c3a3a7d40363c62fd2db8cc5e5e8e9bea", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702700, "uuid": "db4cb450-54da-42e8-99de-b89d616d25b0", "comment": "Malware payload (Mirai)", "value": "1f41721266efd2fe2eceaec0b79b4fe114163aa18cdad6b8684c22bf1ad8783612ba0365ed4645d49ca9bb86a36d959f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762702700, "uuid": "c505e85c-93b6-4050-8b23-ff37fd7c694d", "value": "T1FB23F1F1E62B76B34642503E55E8850319AB3DB5C2DA323E7814FA2C724F369D8F9252", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762702700, "uuid": "beff4fda-c518-4b1d-afa3-52801627c0aa", "value": "1536:T8x8cZmE3hXHi74e+zUcNwjjauc+r6jVzD:gxFlRXC74LvpOcv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762702700, "uuid": "ee92e0f9-55cc-4c05-a29b-76cbb399a53a", "value": 49304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762702700, "uuid": "5d1d6694-4fd1-41d8-b7ba-0ac9e1ded877", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762702700, "uuid": "3394683e-8d13-4915-bc1f-4298e8ca5a89", "value": "morte.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34963ef3-bd14-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762655492, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762655492, "uuid": "0533c7cc-3046-4099-a1d0-c0ed8af90381", "comment": "Malware payload (Mirai)", "value": "c0bb716cda408da2bdcf77ae650a6ffc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762655492, "uuid": "be5fd6e8-b316-4f07-91c5-cbea99273b2f", "comment": "Malware payload (Mirai)", "value": "6ac8be317e8c0b229abbfb00238fd7e5567247130816fb3bf8bb60e922bf4a1d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762655492, "uuid": "0ad69088-f313-4d6b-9bdb-c373948eac2f", "comment": "Malware payload (Mirai)", "value": "10e4f356993b9df7459bce3902c7e0b6fd5093fb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762655492, "uuid": "61cb2ec2-9b64-4441-b1c5-8aa5dbb1983f", "comment": "Malware payload (Mirai)", "value": "3cea8773f6ed9fe56bff60939ae2a9bb37528e473b99323483d212fdd018bd9d39c6a0617acd75c99a2964cfcaa7cee2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762655492, "uuid": "1a2efe5a-267f-4574-a8ef-09abd202529a", "value": "T16CD3CF31F41A6CA0DC2106B430BA593C1701DEF017D51943FFAEE99E24B7E95BAEE660", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762655492, "uuid": "b395ed1b-ba24-413b-bc03-9f5ccd877a66", "value": "3072:BDoehcjf4A4iy3HMHCBsRGJGdcTiwD5b0Zr:BDzhK4niGGCBL4mGwDNOr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762655492, "uuid": "9f864c48-e51c-483e-8f37-61a9d231d975", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762655492, "uuid": "08e64125-47bd-4388-ad4d-6cf2fda79ff4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762655492, "uuid": "9ccd08ae-83aa-4919-b596-19290d48534e", "value": "xnxnxnxnxnxnxnxnsh4xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9afaadbf-bd2e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762666831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666831, "uuid": "100d0619-44b8-4ace-91b6-acc7d4cfe816", "comment": "Malware payload (Mirai)", "value": "cf4e0a48fce8541ea3e136351469f086", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666831, "uuid": "f5464bb4-f893-4eec-83f8-0f2fc0ca6cf7", "comment": "Malware payload (Mirai)", "value": "6ad4f96f7120073baefff3f599ea4c7ea74868c0acf81d439e2aa774f5b1c328", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666831, "uuid": "706ada49-0407-4ea1-91bd-363430a6b786", "comment": "Malware payload (Mirai)", "value": "3002396d4990dbad4f3e517394335996794d27a2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666831, "uuid": "51e40f7e-03b3-4be7-80ae-b35e95945a1f", "comment": "Malware payload (Mirai)", "value": "5dd88ed4b59e95083da2bb80296aaffb4851dbf8425698237249b508e5efc2a12752810839e68e77c9ea7f391703917c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666831, "uuid": "d3f40065-dde0-4ec0-b67d-4554ffc059a4", "value": "T11D336C36E029DED0C6560234A4E88F751F03F1C883536EBB2AE546B2645396CFA19FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666831, "uuid": "599fbb88-16da-4601-89da-96c62dc85881", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762666831, "uuid": "d64c0161-14f5-4921-9e5f-af192a162d18", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762666831, "uuid": "eb53b6fb-3573-4802-9020-56e3283f2101", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666831, "uuid": "2ed7a87d-a2d5-4f3f-a9a9-c027e4aada4e", "value": "boatnet.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "397b4912-bd2b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762665379, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665379, "uuid": "ccd75b0e-6520-43da-b646-80566f172fc3", "comment": "Malware payload (Mirai)", "value": "48bb3bbfd3f3c74cfb2de7a41b593a69", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665379, "uuid": "477921da-3f60-4be9-aa30-1900c24007df", "comment": "Malware payload (Mirai)", "value": "6cd91e8f07e185d406e442572811531dfa2480e030fae3e3c707981474bd9c15", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665379, "uuid": "3a407948-3f70-43d8-adc7-7ae1f24dc621", "comment": "Malware payload (Mirai)", "value": "4fbfa6134d54406c5d080fc4696090b41fbecdf2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665379, "uuid": "62aaef54-0b43-4555-938c-578fe3167acf", "comment": "Malware payload (Mirai)", "value": "198a3ccf4336a9a4fbb12897ab47f2e31824f63b5a02bdc9965337521a24d7203bcdb6e64fbc08c0cb708cf01547a1b2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762665379, "uuid": "eac015d3-a0ef-48a4-a3b4-0918d2474ccc", "value": "T149D3F809BF610EFBE8DFDD3705E90745248C582622A97B75B630D818B64B28F1AE3D74", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762665379, "uuid": "8ca6715c-71cf-4f48-b1b5-cd4a1add69bb", "value": "1536:8aiYsGzztZT5gdKkIeTvIuPXMo9LuARWt9HItR4XVwpX37XZ8f8niXjB3yt7/1:ZtsSrTmdnIeTvIuvXLUtWpXrXSl6t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762665379, "uuid": "238edfa1-e55d-4fe7-86d9-ed6317c20ce6", "value": 130856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762665379, "uuid": "91522066-465f-4e4b-a099-4627646fa057", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762665379, "uuid": "bcebf32a-e64e-49d9-aaaf-cc6f8bd8a0e1", "value": "morte.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4215b007-bd44-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762676131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762676131, "uuid": "8a2b6a99-b4b9-499b-b768-47e92fe2c6ea", "comment": "Malware payload (Mirai)", "value": "e63cd0f74f65286c9f68a2f2bf1fd36a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762676131, "uuid": "7f2a7cfc-626a-4d4b-b03e-ab6c9c84388e", "comment": "Malware payload (Mirai)", "value": "6d9f0e2505b8ea470548cae6d45b5a5913c84b96bbd39fa4b8504e21101fa757", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762676131, "uuid": "2ad8f9af-cf3b-4910-8964-b1cfabfeb765", "comment": "Malware payload (Mirai)", "value": "3258e27bacaa04a121c3504609653367e7c9a519", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762676131, "uuid": "88285091-4b74-49ab-80f3-26bb876e4cc9", "comment": "Malware payload (Mirai)", "value": "b42cbbb2f62c601c11a26dca381676c85f84ff1d53b80297d8845a904f4bd9f95647be7e6f30f31eeaac589d7b38308d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762676131, "uuid": "e8d4516f-283a-4a12-9a4c-1f181b66efee", "value": "T186B34B42FC819622C5D7237BFA6E428E372663F4E3DA7207DE255F21338652B0DA7941", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762676131, "uuid": "572c2e7b-d0a6-4adc-b3f8-d2dd64d90da5", "value": "1536:f3iCMXsf8x2u4Ua9sJsXOZ8YxRziMskAFRcmOgIUhXkrOTv7kV:fSCMXfx2tvqRYpFROKB7kV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762676131, "uuid": "4e32aca0-c1c1-479f-b516-de26d7428c96", "value": 112632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762676131, "uuid": "05da2d7d-a2f5-41c7-8fbb-a7107248417c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762676131, "uuid": "7859abb1-b285-4ef8-9692-1e3c121ac08a", "value": "morte.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54a79ba2-bd47-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762677450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677450, "uuid": "3595df04-0496-43dc-8b26-7b06ce59756b", "comment": "Malware payload", "value": "d142bb04f32a50db476b63bbe1ac2ee7", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677450, "uuid": "a8688957-2344-4269-9873-26258dfb7c52", "comment": "Malware payload", "value": "6e3eea7fb31b8e81026021307247f6eecc5b7f97f35e900796f4786746cde3b8", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677450, "uuid": "e2875bbe-ff40-4904-b867-a81bbf9607b8", "comment": "Malware payload", "value": "48a0de6a43fc6e49318ad6873ea63fe325200dbc", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677450, "uuid": "90b63b97-9617-4ab6-a069-e1b38ce0553b", "comment": "Malware payload", "value": "68d117c58a7db9c7240beb10aea46bc15dddb2e258c7eac81fb59744cea590c3c1afe4f5d4fe161edb7dabe2741d1ebf", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677450, "uuid": "c40cd6f1-2df9-42ca-8355-d62e4cda0d8f", "value": "T187D5BE97F758E9AAC8F383B645758362111B4C298F83D6C36D14337C18B7AD42F4AAD8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677450, "uuid": "71c34aa1-e379-400d-9b4c-ec7ccae50118", "value": "49152:3l5/B40ynpOptLqG8tVDY0dcLohDikF9dS6s9dS6UKFJp47SM+5oLN:3l5/B40ynmtLq9b9d+ohDrooZSM+5oh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677450, "uuid": "b1cce55d-2020-4af8-a09d-5f80714a1f4d", "value": 2945352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677450, "uuid": "4b799bb3-6eea-491f-97b1-8b9a110f4d94", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677450, "uuid": "28149c6b-aadd-4b8b-8913-12e967d0008e", "value": "PROTECAO_CARTAO.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a930d94-bd4b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762679259, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679259, "uuid": "403166b3-1e64-490a-a2f1-62241b2dd13e", "comment": "Malware payload (Mirai)", "value": "5860778920068962eaec3d66ce8b277a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679259, "uuid": "3499c88b-eb96-4d17-8ed2-24ee2ef6dcec", "comment": "Malware payload (Mirai)", "value": "6e71fc264c78348a8b7af5f36e7b58ee19edcd6237713514f07ebdda4e3c5f9d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679259, "uuid": "d19903b8-aa85-4074-ae5b-07e43702b82e", "comment": "Malware payload (Mirai)", "value": "b99b4b1e3a43e3c7d20e98b0801b424d89aef44a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679259, "uuid": "7d316ad3-cc9d-4f33-bdbe-e695bf2ac231", "comment": "Malware payload (Mirai)", "value": "8bd9cfbcd9cecda2dfa17d2c3b717b15f019bd828233703c806cc46f073d6744feccca3c546ba4e28f1ef3b9a6202252", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679259, "uuid": "1ceefa8c-0a23-4f0d-9f4b-cc3d79bbd529", "value": "T124B35BCAF402DD7CFA1FDAB74463090AB931A39156C31F26669BFD93AC321A47C12D85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679259, "uuid": "d7fd8eaf-c7e5-4ad1-8add-b50233fefe55", "value": "3072:2bnLAHH7F84YL5+vc7ujJHe87NHu3ov7sI46:usHH7F84YDOpeENBv7M6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762679259, "uuid": "fa057678-be49-4b8d-8f62-b586665b68ae", "value": 114412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762679259, "uuid": "f1949368-88b6-468e-9e86-50a9d60eb854", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679259, "uuid": "7a7b1038-867f-402d-bcb4-598ef61e7baa", "value": "morte.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a85ae2b6-bd97-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762711951, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711951, "uuid": "d5f77517-e232-463a-b4a6-ae7a921375a5", "comment": "Malware payload (Mirai)", "value": "b3e2e48d8353456927ec3dcbaeba4d96", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711951, "uuid": "a7e4a624-055b-417b-bfe3-b2cf0efdac3a", "comment": "Malware payload (Mirai)", "value": "6f5cb665adf5a2835d7a61dafdbaafc5b0bb7bcaed9f79f085d600e47fffb27d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711951, "uuid": "02cd48ba-0238-4b4a-81a6-d4499a29756e", "comment": "Malware payload (Mirai)", "value": "a6c32ae22a765a59dc492313ea1b8c18c973ce17", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711951, "uuid": "0f59c8ed-551c-4e52-af23-1ca5e62255e0", "comment": "Malware payload (Mirai)", "value": "d4fb0752c851db1559f0bc12937db0a1afec407cb74e763001e29ad1601943f53178cef724f6e12a30d592b888d147b8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762711951, "uuid": "61b8a300-9ab7-4fd7-bc8e-f9558feaefce", "value": "T152534A21A9392D07C8C4687A21F34778B5A2275E71E8C72E7D720E8EFF14654260BAF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762711951, "uuid": "264992d1-d3e2-406e-91d5-ff40b56c8677", "value": "1536:r5+SIPagCwlOh+hM0ZerEVa8iHRXwyI7QLW7ei7uhE:dfvwqNcOE7yvK7eiD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762711951, "uuid": "73d91377-163a-47ed-b2f4-f16a47b13f6e", "value": 66424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762711951, "uuid": "10210191-22c9-43c7-9e9a-41d9426dcb0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762711951, "uuid": "466765f4-f99b-47cd-8252-a59c41fc11ba", "value": "spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2be9c89-bd91-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762709498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709498, "uuid": "8857b5f1-6427-451e-9def-bc79bd4651e8", "comment": "Malware payload (Mirai)", "value": "9a4ed5cc63d69e643d57887fc6ad5a5d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709498, "uuid": "9bb350c3-1c1a-4c1f-a94d-e2086c39ce4c", "comment": "Malware payload (Mirai)", "value": "6f61c5e597e457e6d502ceb2cc1c890f12f91be1c4088bd286dfd15a3213fccc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709498, "uuid": "ed2fd57e-f760-4676-ab57-360e61c207b4", "comment": "Malware payload (Mirai)", "value": "a3ca4872fc3b0f1bd3278f808e8f446513d80d23", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709498, "uuid": "67062779-f158-4a6f-9faa-1e207d851056", "comment": "Malware payload (Mirai)", "value": "490b2c57d874834e5b2cc37eb3dda6391517dabf107d0f11de5dcb16b4c898331347109357ed3705f5aeed6a468da68d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709498, "uuid": "e8ba4262-ebf8-4c67-b71f-954edf6965de", "value": "T1B533F148B51E86E6C91F85FA0F160FE2B9B25FB2F841AE44296CC6C66F450DB74C3853", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709498, "uuid": "2e72699b-0825-4a02-b469-2e1b98ee09af", "value": "1536:gurKxLRn15MCR/am4vtZu8pZH4+nGjVJuX:gumBRn9R/AVZbpZYuGjVQX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762709498, "uuid": "135f9e4f-25c7-4642-b722-eb6d52b220bc", "value": 51884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762709498, "uuid": "8550279f-92e4-434e-bb93-7b5169ceaa66", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709498, "uuid": "4510f64a-b3b5-4e81-9d92-9e8ef8c3ea4f", "value": "morte.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd432f5d-bd39-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762671640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671640, "uuid": "bcbb3877-15a8-4791-bf79-f6851382577c", "comment": "Malware payload (Mirai)", "value": "2bb3af4da49eaa1235a781b9609217be", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671640, "uuid": "f343c92e-4b9e-4a94-bb6f-09a09633b385", "comment": "Malware payload (Mirai)", "value": "702273e7b31cdb2bd0341c70efbfe153eed4288da1b9c63123d99620b6dfe072", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671640, "uuid": "6cca417a-26ab-4ce1-b9cb-0b9733aa63cd", "comment": "Malware payload (Mirai)", "value": "24ca31d5b2c6fdf560056c82f29561953656b130", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671640, "uuid": "c78feb1b-195a-41e7-a728-6900bd3d1fcc", "comment": "Malware payload (Mirai)", "value": "e12704e39953d178416e39e7f7759a60b3ff522f4333dcae499b4b08e8c6efaa11b92f6f806a2d9d701b53eadcfd5004", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671640, "uuid": "8515e39e-19c8-4fba-ac2f-e512252057ab", "value": "T181F2E1FB15A99E14D02E11B704BFAA8E2BB0A14C249076D4DF8C54BE0A58A49BA1D3B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671640, "uuid": "18439af3-56c8-491f-8d66-4c7b47f0d1a7", "value": "768:iK4ZXTVFpq4N5PRr0C7GRLxxfvsLD5uMyl4s79cHnbcuyD7U9UR6:iK+RF10iGRPkLD5uVTZcHnouy8n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762671640, "uuid": "9daa6d15-9878-4b7c-8fb1-001b189d876e", "value": 36600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762671640, "uuid": "c19d24cf-2575-4274-b2d0-a406b4de9308", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671640, "uuid": "e72a0ef1-0672-4208-aa6d-ee34e4926713", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "312719ba-bd7b-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762699725, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762699725, "uuid": "3725a120-f77d-4a4e-9b3e-1605d8a8c898", "comment": "Malware payload", "value": "9e3c3c9565b48ecd3d264b0466ae37f0", "object_relation": "md5", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762699725, "uuid": "b8e3cc4e-88e1-4b44-8ba6-b918e220c07f", "comment": "Malware payload", "value": "715af322d6c32a2701fe28af1fb282ff9b02b549470d24b21fa1cd1e0eb0f003", "object_relation": "sha256", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762699725, "uuid": "76973c39-7c12-4f5f-be6d-019630ba4b1b", "comment": "Malware payload", "value": "eea047f54af98a7e23078be20f0a5e11e53d584b", "object_relation": "sha1", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762699725, "uuid": "243024d7-24e3-4768-9bf3-dba53f8dc875", "comment": "Malware payload", "value": "a89aff3fc6e2e07c7d9050c358499d8ed15e92085623b3da278f0224c7ca5bb34f7d95619ab9e393ea46763f5fa3cf96", "object_relation": "sha3-384", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762699725, "uuid": "8ab9ae69-6830-4b12-96db-acc4720aebeb", "value": "T1FAD194176D124B3AE431C1B636B3E01EE91082938C1808D4789CC8B61FB9E7E96BC0FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762699725, "uuid": "e6dcd3bf-1ec9-4857-9864-a34b981669a1", "value": "192:AtrxPgnLiVrxx27O/GbO/p7O/Ca/ZZpb22XO/J:qrxPgL4rypshYpK2XA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762699725, "uuid": "71d03d05-360f-403e-9f1e-af63d150d590", "value": 6698, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762699725, "uuid": "720be8fa-cdd1-4d95-b489-515ae83ad640", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762699725, "uuid": "3c7884f6-5366-4183-b52f-a78c94747e06", "value": "PURO.vbs", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58845d34-bd03-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648251, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648251, "uuid": "d7743d3f-e669-4bb2-b24b-3f5214120451", "comment": "Malware payload (Mirai)", "value": "c06c0fcd1128751b89d2b9cef94ed8fe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648251, "uuid": "37157a6a-e6e6-49aa-8e47-9275c2671dd2", "comment": "Malware payload (Mirai)", "value": "71bd68ea56ab81b7d2c441810818163f4990635721dfec67ce133411f83b9a39", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648251, "uuid": "a641ff2e-a259-4138-a9fa-f42239782718", "comment": "Malware payload (Mirai)", "value": "73267d73fbdab8ee7d49dba38ba4628b7721570d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648251, "uuid": "4d9b659f-3aeb-4d27-aa35-f1b098bae28f", "comment": "Malware payload (Mirai)", "value": "b09e1588e9941055a8c5ef88f46555b9b7e977388697e628208e1f78577613801982f50a2f51861415fd56c965a7386d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648251, "uuid": "70e2cdc7-e262-4719-860b-ee1c4934e891", "value": "T110D35C17B5C180FDC4DAC1744F9BF53AED32B1A91238B26B27D4AF222E49E205F1DA54", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648251, "uuid": "230b65d8-d54f-47d7-9716-fb501883eb95", "value": "3072:79eSuygEPjt6qkWq9dKmDnYMb0gBd/gQyVGsdqml6taj:79eSuygEPjt6qkWqueH2lata", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648251, "uuid": "84b9b243-ee92-4c21-b9a0-9d0f2c8909dd", "value": 139800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648251, "uuid": "346f9e96-5ed0-4f9e-93c8-ac5db8577234", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648251, "uuid": "866c95e9-ab8a-4855-bdcf-177f5dfe2d4b", "value": "main_x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a8f484c-bd9f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762715149, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762715149, "uuid": "aa3ec560-db12-466a-9a4e-b25dc0eb17b9", "comment": "Malware payload", "value": "3bc3205d31c6f026c69fdd3d535a4dc8", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762715149, "uuid": "b01ddd77-ba36-40a9-8b4c-0e0d71f16811", "comment": "Malware payload", "value": "71cab506af00a68cd056fedc01cd4e6743df024c949ab96e346195ea37c21529", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762715149, "uuid": "7861bbb9-fcd7-469f-99ac-ecbe93595afd", "comment": "Malware payload", "value": "b617967ccf73e9893770f1bf4ae695ac5638f00c", "object_relation": "sha1", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762715149, "uuid": "6daf8c06-fde2-43ed-a5b8-6018d4e9683b", "comment": "Malware payload", "value": "5ff6ad7cc4012feaf48997991d7b2a86e28921b8e043186ea0d75cdea54a31e6f2fe13321a2aa4924bfd311433b1dfcd", "object_relation": "sha3-384", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762715149, "uuid": "3d2d5dfc-f756-403f-b49a-f9ba057d7574", "value": "T189F689102BF21314D3B78A7AACF6F2015676BD55EE238FDE428092882865525E875F3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762715149, "uuid": "6dda5205-090e-4af5-aa36-845ffe88b163", "value": "48:8XCvKfuwysFU6hlRNHq6hlRIoF90mBcaPnq40:8X68llNHflIw90EccnqT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762715149, "uuid": "49b0aab0-6e4b-4abe-a799-da6a3579a725", "value": 15990048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762715149, "uuid": "163469a1-511f-4382-a1cf-a578404e923a", "value": "application/x-ms-shortcut", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762715149, "uuid": "0daebc11-4060-4c9b-a611-71eb522b61e3", "value": "Technical Task for Promo Campaign November.docx.lnk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50886439-bd7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762701495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762701495, "uuid": "d4318795-8ac5-485f-8af8-e6307b8b0c1e", "comment": "Malware payload (Mirai)", "value": "23fcb9f7b6355a03886f790fcd67796e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762701495, "uuid": "e0200f61-10b0-4d7e-989b-97e98a2fb5e0", "comment": "Malware payload (Mirai)", "value": "72048b98db006bc590fc3a25f940cf3502c570da58de3c4ca7989274e8e3081c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762701495, "uuid": "bdbf35e7-e7bb-4e67-b460-af3290c566fe", "comment": "Malware payload (Mirai)", "value": "2955fa7376a6888e62a054577a38a390ea28dabc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762701495, "uuid": "262bbfc3-7c26-423b-bea5-dd73a2ae9d16", "comment": "Malware payload (Mirai)", "value": "5482e21fdc91c7bf575d7d4a5c530f2a523d9f8db5c80b31a12f7a10f260173afd51d45d6a7c917acbf1524c13ab01f4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762701495, "uuid": "1583f085-8826-478b-b4fb-770dad6e1463", "value": "T1F5C32BC1F68784F6D54B8C3070A6F23FDAB194B98075C699EFD59E35DA27801862338E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762701495, "uuid": "b1184bb0-c54c-4c1b-8354-028d0a4a081c", "value": "1536:Igwz8Dt5Btm9oQu/6J+XQy8UvteKQm706HWakcvOp70qzu62y2yAfWGORGrY0:IgwwB89i/6Jhy8pmOH0Op702uurS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762701495, "uuid": "4f0a6cfe-f9e8-4130-9602-3edf70c596c8", "value": 120272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762701495, "uuid": "a2a4fb75-25cb-4bc6-8a14-2b34f2354b92", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762701495, "uuid": "966da31a-b57c-4f94-ad0f-febe0092b95f", "value": "morte.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "921c678e-bd07-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762650066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650066, "uuid": "9d403e17-f0bd-459b-a23b-d0ab59334a0a", "comment": "Malware payload (Mirai)", "value": "38be133e95aa4226f2e5772826cfcb04", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650066, "uuid": "106ed8f2-4a0f-453d-b8c8-bdbbdba35724", "comment": "Malware payload (Mirai)", "value": "72a3d8ffd275805ee48964eb860d1f298882e85cac3b69774e4656d46e9405d5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650066, "uuid": "2f80eee8-0dbf-41c5-979b-baeb616f179d", "comment": "Malware payload (Mirai)", "value": "67ff0225e3db20fc8a51d77d4a5eb1a5928efdc5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650066, "uuid": "fc09da5a-190c-4cb4-a6a5-3de1c830a2e3", "comment": "Malware payload (Mirai)", "value": "bfc66ed3ab25d6c06257d89f7d95a794e8204ab53b7b41a819c5a0c2bfbde121d4a16aed38a267053a98251a49e2da94", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762650066, "uuid": "7dd97f76-5f36-4590-8724-1167af7570b7", "value": "T186530213CA0578DFDC46913182320BA825B46CEF60BB4C5466F1678AF196DE6F34C5F6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762650066, "uuid": "b33e4f2a-55e7-4d22-a695-6efddb8efef7", "value": "1536:hTKhjR5TWd085+3+pQlQq02esiPh3NETuA8Z+JBLkg4azHAi:hTKVRUd08gmQf02esiRPeLGazHl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762650066, "uuid": "9f6083bd-fdf9-450d-8356-cbe09825726b", "value": 62576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762650066, "uuid": "bc405c31-0fa5-4164-ac94-ade02e2d3f4d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762650066, "uuid": "ef651b5d-b5ca-415b-98ef-b3b22c7898c2", "value": "xnxnxnxnxnxnxnxni386xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2d49321-bd47-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677716, "uuid": "61ad3cb6-e0d2-47cd-8c4b-9821348e730b", "comment": "Malware payload (Mirai)", "value": "b0253ddd42a39c024fbf5703d4fcf00a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677716, "uuid": "bcf66c92-2102-456e-8b94-6deab7534f66", "comment": "Malware payload (Mirai)", "value": "73a7d1dccf72976a892eb2ff3f11d2606e5d1eb4237a074f6d16f14db4c92ec4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677716, "uuid": "ac50e217-0871-47e6-bdb5-829ec4f7bebf", "comment": "Malware payload (Mirai)", "value": "29f685c9544942e6d24fce9d2ae717e39bd9fb3b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677716, "uuid": "a485891c-9548-46fd-95dd-50f5ee84ea33", "comment": "Malware payload (Mirai)", "value": "df11294ff54ff3e4564837b0fb25b9a29222762abede95f44c160db7fbf188e63f1965550cf5578d321c8eb1db96cbf9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677716, "uuid": "c55836f2-22f1-41d6-86c0-f451a75463fb", "value": "T1CDC3E705AF650FFBEC7FCC3706A90B4528CC651722A87B7976B4D428F64E2470AE3964", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677716, "uuid": "24ebbda9-ff3f-4e2a-8954-68c542409237", "value": "3072:sSlFf9HnRiMyImHSw2lyS2f8RurwYjG2+rsuH67zMLDHR:scFf9HnRiir3H6kX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677716, "uuid": "7cdb4f6c-fcf0-4695-b187-b4731a511bda", "value": 123780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677716, "uuid": "13a50e43-e8d3-484b-a6c4-9fc249523539", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677716, "uuid": "5a1408c8-b685-42d6-abc0-cc3689a430bd", "value": "mipsel.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "211acad8-bd06-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762649447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649447, "uuid": "6bd92a7d-85c3-4842-9007-43c7b95fd764", "comment": "Malware payload (Mirai)", "value": "98d61536b9d5687da084b41d4d000fc4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649447, "uuid": "4bdce817-bb08-4372-ad70-28aa1a55044b", "comment": "Malware payload (Mirai)", "value": "73d57d502693b9147b9bc2c35c93486534a1f1ab1f8f7e2739bb6300add4e232", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649447, "uuid": "a388c78d-1103-49c6-b22c-52d661192660", "comment": "Malware payload (Mirai)", "value": "435d495a4e3c71e0d606b2f9cbf7f04d4fbb0ab3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649447, "uuid": "5c963e50-7be5-4572-9330-8fa8f3949a32", "comment": "Malware payload (Mirai)", "value": "8afd9ee174463d4e7a5e693a5bde5490eb34b4273cde17386e92ed571ee9a4eb4f8851967697ce2d737bb8462adda1e8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649447, "uuid": "9a701853-cfbe-469c-9719-9ed3f158e00e", "value": "T169F2E1C6EED56DC2DE2F1EB1CD2F1B8927D08C4517AAECB398000EE1715703A4825B90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649447, "uuid": "17e51245-43bf-4560-8ef8-e06100e5837d", "value": "768:EdgkpJUTkJl/aNO9CtcrD7wrlgbt4jMg5AdW58v4uVcqgw0E0tLyvo:EdpJUK/aNCeW7nbGj8m8v4u+qgw0Vuvo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762649447, "uuid": "d4e22890-045f-4423-9c61-be6a29c4004a", "value": 35836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762649447, "uuid": "16f4f728-1b7a-471f-a4c1-eeb5c69402ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649447, "uuid": "3445bb73-3bd0-47bf-9df1-c62a7f1c0cad", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "306d3da5-bd0d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762652479, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652479, "uuid": "95596d59-10a2-4c82-b3a9-537461b42173", "comment": "Malware payload (Mirai)", "value": "f1da51fb3fdffebb3540046f554282c2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652479, "uuid": "06798b87-3447-4389-b96b-decc033772cf", "comment": "Malware payload (Mirai)", "value": "748500d369c00c452eeb1ab91e30eefb24ef74b835da58387632fca914524c1e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652479, "uuid": "f3b79278-a907-43b8-a081-fd7616ee6de2", "comment": "Malware payload (Mirai)", "value": "d42589f99979a3b947e80175fde08884ad1a25d8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652479, "uuid": "295fe309-e8f2-495b-bb8a-f80f0cad899e", "comment": "Malware payload (Mirai)", "value": "3cc005a4fe67597040a78a610e517e53c354cd9708d61f2b31d8a99c405de06c996e0cb098123144fcba8cf9933412d9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652479, "uuid": "34c46a4e-badd-4d67-810f-05210e0efb0a", "value": "T101937DC9BAC3D4F5EC1606392177AF335AB3D57E2026DAC7C3AC983AAC12501D41766E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652479, "uuid": "27e39d3b-4455-45c2-9bb9-100da51b9547", "value": "1536:dBtwKTkzURkGJzC3ZCu97lPpucEgYmCWUsgsDsrsNxn:LtxkAkGJe7VYcVYhPs7Xn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762652479, "uuid": "1f646843-2ce4-4e26-a221-d4e140f50f09", "value": 91412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762652479, "uuid": "79ae7862-a264-4d43-9b54-3174db1af6c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652479, "uuid": "f0816aa5-2d55-41ff-ab4b-8fdc485130e6", "value": "morte.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe2ee487-bd41-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762675158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675158, "uuid": "4f1f3658-4a55-4c2e-b44b-8f41758b501b", "comment": "Malware payload (Mirai)", "value": "dba84beed19154d7ba52d5841443950c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675158, "uuid": "417ca258-30cc-4da1-b466-f10e6b3bbc15", "comment": "Malware payload (Mirai)", "value": "776097ea28a62419945c291b3f395f35a0d4ee958691e677604eb958b04af5e7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675158, "uuid": "9f57fe98-4a8f-4f32-89c9-22de0b10da9c", "comment": "Malware payload (Mirai)", "value": "c17724be6d93775d108987457c6f37dcdf6712dc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675158, "uuid": "a9785e7a-d321-4277-9183-c82a9be8a298", "comment": "Malware payload (Mirai)", "value": "71f12e4d5160e9ea31699f24f375c95187194efbae23410fa5600308957c5e22f08d4929aacb64e18fa837b6ad06f694", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675158, "uuid": "d6877049-47d1-4f15-9b66-77d0bcd5b8fc", "value": "T1FBD3D70E7E219F7DFB99C23447B78E25A65833C627E1C585D1ACD6112E6028E342FFA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675158, "uuid": "94ee8de3-a209-4a97-b791-45441401de7a", "value": "3072:LmSvZnhkUpXvVhOw5n5MpO07mF67prZhOO83XUWskcOfVt6oYZm:aGySvVhOi5MR7prZhOOAEtQtpYZm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762675158, "uuid": "35a4a875-e679-4035-a014-aeef7b1a481e", "value": 137412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762675158, "uuid": "c606c3fa-f032-48df-9c3d-c0b899a7b46d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675158, "uuid": "25f9b118-68ee-486c-9659-4be0378fa8f5", "value": "morte.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74800b6d-bd71-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762695543, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695543, "uuid": "3619f693-6abd-4d19-9faf-8190abae6c78", "comment": "Malware payload (Mirai)", "value": "0b742f783492902051fe8fa3b2d0628f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695543, "uuid": "285e378c-c1ca-4bed-9a01-bd2a0d10be2a", "comment": "Malware payload (Mirai)", "value": "77931039f828d4ff7d68fc87b52b5d4f4c51982d420057cf3215d1874d2bc0d6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695543, "uuid": "084ca989-5ae0-46aa-9368-f912e21962bb", "comment": "Malware payload (Mirai)", "value": "7ee8fc84bf713843a6cb3f1de12d935cb56cc932", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695543, "uuid": "9954e5fc-be77-4738-aad8-1d7a45897467", "comment": "Malware payload (Mirai)", "value": "156ec14d5cadc28fadccaecadbe673ee25dc6fdc91c4adcf543e972fbf0052a2d907edfa22b328ee54ae2f8add487d43", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762695543, "uuid": "f45a0ddf-a4d8-4015-aaa7-6fe2c0611e62", "value": "T184B3AE63D4102DA8C26502B971F4DE75033B9910A6871DF263AACA7D904BDDDF23E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762695543, "uuid": "5429e5d5-e207-444f-9d10-5e3df3dd8252", "value": "1536:7/RJmPHaDL69/eKcfq/giBimVKBG7th7j0XjgCHeXrFOhQyORGrSm:7pJmfEmIU/hBim8BEXUXjgzIa+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762695543, "uuid": "8ffe1f75-f261-491b-ae9d-1c8d5beabe09", "value": 112320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762695543, "uuid": "70305e98-615f-4db6-b9c0-859f8093a118", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762695543, "uuid": "0463fb2e-0920-44f1-a727-427439b09920", "value": "morte.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa978aa0-bd80-11f0-a129-42010a9c0007", "comment": "Malware payload (Arechclient2)", "timestamp": 1762702076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702076, "uuid": "5dbccc18-cce1-4a25-968d-408a49787072", "comment": "Malware payload (Arechclient2)", "value": "9c99db64db1c57360b6cb2f1b1be06b5", "object_relation": "md5", "Tag": [ { "name": "Arechclient2", "colour": "#FEBA91", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702076, "uuid": "f634fe91-b149-43d3-a737-53944803c420", "comment": "Malware payload (Arechclient2)", "value": "77dec68adc9d69b54bb2121cdb1d0a188e4da2f750958062311f1be8133fa3b0", "object_relation": "sha256", "Tag": [ { "name": "Arechclient2", "colour": "#FEBA91", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702076, "uuid": "5ce0dca0-b324-499f-b904-e51ef6201b1e", "comment": "Malware payload (Arechclient2)", "value": "1c94ad568757b800a33a03b776d1c7d8ddd750f5", "object_relation": "sha1", "Tag": [ { "name": "Arechclient2", "colour": "#FEBA91", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702076, "uuid": "278f4579-e99f-46e7-9210-8fe813f2ff68", "comment": "Malware payload (Arechclient2)", "value": "d3ca2e9ecdea702e92a44b104bf5a42f84b09f558b69c0575832591b2a37d7874e240c135425f16b0ac66b8066059ceb", "object_relation": "sha3-384", "Tag": [ { "name": "Arechclient2", "colour": "#FEBA91", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762702076, "uuid": "b3639912-821b-4475-8133-dff68bab2047", "value": "T10E67D016B2BA01A5D42BC1388997A727DB717811033087DB63E4DAB92F73BD02B7E745", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762702076, "uuid": "c1e337cc-ea30-416c-bc57-a5e2a7a19d95", "value": "393216:VGRD5QLMDnGWOtsVn9BOXoSopOvtXncVYIb1zCwzC9cqEO3FNy/p1CPwDvt3uFXN:rtsVn9BOXoSsOvtXwYOBCwGBbn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762702076, "uuid": "9adbe28f-c0da-4f12-9032-59e8f5c212ab", "value": 31073412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762702076, "uuid": "c0350cd1-a4c8-4556-af74-941cca5bb2b3", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762702076, "uuid": "d3011f3f-6d2b-4d9a-86aa-f46e1e858e5d", "value": "SecuriteInfo.com.W64.ABTrojan.PWCT-7500.1285.27012", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a1dd56a-bd52-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762682184, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682184, "uuid": "0f6342d3-e0d1-43df-80b2-d14005f3ac5b", "comment": "Malware payload (Mirai)", "value": "711e5d28cdec2a37ad1acb8d215cd218", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682184, "uuid": "ac1e6bb9-985e-4c95-8833-47dd4f947c4e", "comment": "Malware payload (Mirai)", "value": "7878093a9efe8c38ec14c3aa6f40325bca565950cdbceee828d3d0fb20aa671d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682184, "uuid": "6df401ec-0d94-446b-bb07-6448e51a88d2", "comment": "Malware payload (Mirai)", "value": "f9c1d2e33ab5d867bc9093bc108bec0bf4d30bad", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682184, "uuid": "148294ae-ebf8-451d-862b-5911c1a964b1", "comment": "Malware payload (Mirai)", "value": "9cd6a557c687c4f917b14ce9cf1703939db0f94bd42fdba10193949acddfe9ee601767c05607ea1ff45126aabf31841b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762682184, "uuid": "4165d984-73cb-45aa-a039-1fe9c5f89b3f", "value": "T11FB339C0FACB85F6D50B88306176F63FDA31D5A94071C79DEF9AAF36DA376818102648", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762682184, "uuid": "d87faea1-45ec-40d4-9f6c-648fea2d99d4", "value": "3072:qFdFmuQ5obMKmGwRA0EtaZcKd8xFSNEWzr:mNwobZmGwzEtWLZzr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762682184, "uuid": "9b4b599c-3124-4932-a4a8-f08ef86a0c39", "value": 107796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762682184, "uuid": "e6ccf9bf-c4ef-40ce-850f-b07bcfd48856", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762682184, "uuid": "bb9036d6-848f-45f3-b739-a492be0bc049", "value": "morte.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e0207de-bd0a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762651374, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651374, "uuid": "6e98e6b2-7b88-4241-ac49-c59ca72e100e", "comment": "Malware payload (Mirai)", "value": "91e97f6c63960df69a263165467bade6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651374, "uuid": "cdecd51f-854b-4310-bab1-531413ff809c", "comment": "Malware payload (Mirai)", "value": "796c8a73d6364875c5257356c51d80f507093ac8a447c86a3250e4eec2fbafa9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651374, "uuid": "4c24d35f-0c7f-4fba-b731-ca02e1612d5d", "comment": "Malware payload (Mirai)", "value": "7be7ebdf95ac4a4a87bfa68d973ac714a1d616ed", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651374, "uuid": "e9f5e296-fa6f-4ed6-ba03-a227efc75de5", "comment": "Malware payload (Mirai)", "value": "25dbcaf0a875f1b6b1d6b0310fa000ab1d3913109bfe7472efd473cc8658cc90baa22fe1b4ec1c3c5b113c2b8e68d828", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762651374, "uuid": "e1b4351a-905f-4787-bb32-93afa3be60da", "value": "T14A833A22B93A1E27C5C0687B22F34725F2F6538A25F8CA1E7D620D4EBF2565031876F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762651374, "uuid": "06328450-cb90-4439-a92e-8687ba6413fe", "value": "1536:y/nd6kOh/FU5cdwyLbx9Bt/bUOt5JQHgo8wtchMGe:ogkO/TwqRll/URV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762651374, "uuid": "a12e7fc4-8a1f-461f-a2f8-f3b734737406", "value": 88500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762651374, "uuid": "fc95c930-a605-4b9a-bfee-5ce3ecc4c359", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762651374, "uuid": "bd1ae383-e933-49e5-8e11-089d31ff5b42", "value": "spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5939edd0-bd47-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762677458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677458, "uuid": "32a16838-25a9-4270-a843-a1375c502fa6", "comment": "Malware payload", "value": "5545ee53cd7605e6ac319e36e35444f3", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677458, "uuid": "2dc3add9-b755-4dea-ad93-7efdf7a6c90d", "comment": "Malware payload", "value": "7b56d9a4ac698e1d6cc4ab7d9b5b5f9244e20a0692d82d48500051ff0f529a51", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677458, "uuid": "63be110b-da37-48b9-9261-e25cce58c4c7", "comment": "Malware payload", "value": "4b77c780cd893e0f0483c3ffb9ff6b81c2a1989b", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677458, "uuid": "a14a7245-195d-43a0-a48c-5a78e0862feb", "comment": "Malware payload", "value": "8e0f7aa5d0016ff8e4393cef43c605bbe871ef726ea33359c84bd35429205b14c6056c2ed9b79a8cf73fab46a18ff5e4", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677458, "uuid": "90af3c9a-5f3d-4a0c-b805-6f02f3c7ec86", "value": "T1427733DBFB68582FD9B306728DAE5132B7614D0085427B1B26447B2C6C73AC85F8DBC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677458, "uuid": "45c3945b-fd63-4433-b800-f0d81581916d", "value": "786432:/DigisAie0e+DIH1hSfBORpkb6NV/B3pdTg/:72ZHbSJ2pkGtpw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677458, "uuid": "9fc536bb-2b97-4047-96fc-c323464dcd27", "value": 33311454, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677458, "uuid": "bed6316a-07e7-44d2-a925-d0412bc86902", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677458, "uuid": "a9e604b4-87e9-41d9-92f2-ed640fbb4066", "value": "magis-celular_vlatest_2.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd263760-bd41-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762675156, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675156, "uuid": "d4c435ca-3014-430f-853d-7ba859c3e4c4", "comment": "Malware payload (Mirai)", "value": "0591390a1ad766ceb70591b745fbfbe6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675156, "uuid": "e269f488-73b4-47dd-a725-2403fe1b400a", "comment": "Malware payload (Mirai)", "value": "7b990c45eeea355a71901bac8b1f0edae236dd16359aa38fd7672af362432823", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675156, "uuid": "554d0af3-0baf-4ebe-bc72-42df0d88c714", "comment": "Malware payload (Mirai)", "value": "eabe60dfa6b7ff440f768fba52799c9f07531d04", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675156, "uuid": "9cd863a8-c5ae-431e-b546-1d2a24f79918", "comment": "Malware payload (Mirai)", "value": "24072adec702d1e72ad4a0f68b444f0bc45faa8155f44dbb8916011e45323e4654934f308bc7755ee58b0133cb11595b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675156, "uuid": "1f26b5e7-c7c4-488e-9a37-fe1434fba35f", "value": "T16973A409BB600FB3DCABCC3705AA2B0139DD665721B97B36B934D918B90B25F15D3CA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675156, "uuid": "13ef2fc6-e57c-4a74-8de2-f10e932dcbfd", "value": "1536:zJPEBmW5iNWqcGTkwnXHZ84OqdZerEStk:zJPEB8NWq9hqqd0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762675156, "uuid": "a64a7a1e-d625-49a7-95d3-437c3272880c", "value": 76120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762675156, "uuid": "3780f818-f0bb-47d9-b2d7-a43a609dc8a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675156, "uuid": "a52e9026-03e9-44a7-a54f-46d8227a1340", "value": "boatnet.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e35769b5-bd41-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762675113, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675113, "uuid": "ad21dae1-1542-4f08-b34b-8ec264666462", "comment": "Malware payload (Mirai)", "value": "55836ec0ec4f1cc120789b7a69629157", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675113, "uuid": "f58da3a7-6a71-4a91-b4a8-493404b96f83", "comment": "Malware payload (Mirai)", "value": "7d98201dcbfeee116f1c019cc65df468203805542da413e944254e438a01d11c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675113, "uuid": "99af32a2-f39a-44c1-b831-dbbd9b67936d", "comment": "Malware payload (Mirai)", "value": "c20b15db4d61ebd6324846b69402bb187784f58f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675113, "uuid": "7ea735e5-5ea1-4d70-b87e-445e93206722", "comment": "Malware payload (Mirai)", "value": "70439959447f7a44ca5d65857d68e4872cbeb9afdc9477d480bf75e2f48bd08335b8209f8d601c15df0cb5fd1421b093", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675113, "uuid": "0e77c930-7ffe-47c1-8650-96db86f0c33b", "value": "T100B2D0CD60843184CA8D7C7C278D4A664F6CA1C0BAED9B26E354CD9873BEA4B385D079", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675113, "uuid": "fa9dbe1c-8a54-4b1c-9196-c6a820383576", "value": "768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBp8LCZqSWv9:4QlS07FUXqIYSXQKqu8CqV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762675113, "uuid": "80bfd35e-63d3-420b-a243-01e6911e0596", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762675113, "uuid": "4197faa2-a947-495d-9f45-752af6ab4767", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675113, "uuid": "e93dd5e5-db93-4403-b396-09c42a88dccb", "value": "boatnet.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aca89be0-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677169, "uuid": "5245bf21-bf50-4362-bae9-f309b3f3a353", "comment": "Malware payload (Mirai)", "value": "deb9b143143841cacd122c8c270a8049", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677169, "uuid": "1ce196d1-b4d1-4110-a800-aff7e5903c1b", "comment": "Malware payload (Mirai)", "value": "7e36b5b845d923ee56a8b6b3a4faa395394a5b1045c78acad2f2b01f7513dfe8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677169, "uuid": "b32ce1a2-f525-4c4b-8d44-53dbfb7ce848", "comment": "Malware payload (Mirai)", "value": "03b03a07d6df77651f583ef227d543db104824b3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677169, "uuid": "2e6973d4-687b-406a-b634-72b77c0b99e3", "comment": "Malware payload (Mirai)", "value": "bf8be2055e436cffd3a2f6e13a0d1a8be891408e4a920dd09c481a389625c20eedd6e8f3854fbfa1d56cd14ae5211d83", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677169, "uuid": "9979c5cb-582c-498e-a250-66926f68f2ad", "value": "T1AD334C42725C0E07C0971A74252F5BE18BFFFAD122E4F689651F4B668A75E37108AF8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677169, "uuid": "5809c955-2005-42f2-bb1b-e0508bc0cb97", "value": "768:YN+hqrBz3suFz+l7fH/kA2CZIdAHNV6GXUSLIns96BktDgIWiiwl:oBiF11MAHNV6p+9cGgIBbl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677169, "uuid": "ee73fa17-7f7f-4a4e-ba3f-09913c06713f", "value": 54364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677169, "uuid": "d85a562b-bc6f-4290-8b77-4e326c173fae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677169, "uuid": "35f2bf27-6728-464c-bcfd-df36b6f027eb", "value": "boatnet.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4172323-bd97-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762711997, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711997, "uuid": "862acfcd-6578-4b2a-a711-6d2ec9a2fdef", "comment": "Malware payload (Mirai)", "value": "57c6b3328f64f9c63d61e955a5d2725e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711997, "uuid": "3bc4f35f-b72d-4b91-a3b6-abda8a1f1328", "comment": "Malware payload (Mirai)", "value": "80907f1a80aee9e4d55d7d9eb2db86dbfb5650e0860d8593d3c24b53386a5243", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711997, "uuid": "2fe9c6e6-09b2-4ee1-b8c5-0d54434c35db", "comment": "Malware payload (Mirai)", "value": "ab5d39e848a960ae5ad645b3a7e5ea74c199943d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711997, "uuid": "645e1637-da9d-4516-9edd-b31c9488a770", "comment": "Malware payload (Mirai)", "value": "2c9a9f101dec6adf2d1afb864e2cc674703cb3985946215bba1afbba7bb0b9a8ce6ffc22053426bd1967ac17b64a0cda", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762711997, "uuid": "92bb7cba-e4ed-457d-bb2e-a2a0a60b0c8f", "value": "T173732A02731C0E43D5A3ADB4253F27E0C3BFA59120F4BB88655E9B4693B5E325586FCA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762711997, "uuid": "200534af-0bc2-489c-8064-082508be8dc0", "value": "1536:d3Q9oaK9YQF1wUXO6fuenvZj7kRKdj+Eq20/qQNUQ:dg9dAD1wf6fuE7ld0rJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762711997, "uuid": "9a64fafd-2368-43b1-97bc-fbdad5a67a6b", "value": 80376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762711997, "uuid": "c986a4be-3fe9-4a7c-b990-731c85f0d328", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762711997, "uuid": "7fd0794b-c714-4776-8f03-434a358630bd", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20c39007-bd37-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762670491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762670491, "uuid": "e2bf4f9c-aa19-4bc3-a544-bd06eff2ab2b", "comment": "Malware payload (Mirai)", "value": "4bdf10929cd76fcfc8b0dd5d2edab6ae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762670491, "uuid": "c0c2827f-028f-4f8c-b59e-7cad46f2cd27", "comment": "Malware payload (Mirai)", "value": "8121b29161555b0fa59bbe122c8230844948ea98ab96f52bf67219f80eb26ef4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762670491, "uuid": "299b9441-0228-476e-90c7-4bc1675214ca", "comment": "Malware payload (Mirai)", "value": "c9f7eb2094a77e2dd0da63f7ce793356a6a22a86", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762670491, "uuid": "2bfa2206-4625-47c9-bbda-bb45f58c7f21", "comment": "Malware payload (Mirai)", "value": "8ef427ddda49918d0289c545eaf07782252f85dc43061b7197ead961f37775f3822be3aea259dc7bf493c52a9cdd82be", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762670491, "uuid": "93465f94-b013-4e72-9fc4-d301b55c7537", "value": "T107C3F909AB614FFBE86FCD3746E90B0525CC551722A83F7A3574D828F64B64B4AE3870", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762670491, "uuid": "ccfcca74-76f6-4a59-aa93-1b6d6261baae", "value": "1536:mtJ6cGVoVBFf+g6z3jLv514RXPkneY0+YdW0OKhZ6Qpos2Z5uxrKnr1F2IFSEhAK:sJ6cGVoF6TPS36Qb2C5udFAd8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762670491, "uuid": "cf618461-fea6-4853-bc9b-f495ac84cc75", "value": 122496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762670491, "uuid": "fe12368b-253e-477d-a725-62e80059f06e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762670491, "uuid": "bad0a28f-c3f1-4df3-99e2-140a21a57644", "value": "titanjr.mipsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9d34563-bd7d-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762700867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762700867, "uuid": "71d74d51-1dc3-43a4-8710-9055ee7e8653", "comment": "Malware payload", "value": "14f37f11bf649a115b68138464c06048", "object_relation": "md5", "Tag": [ { "name": "CVE-2025-8088", "colour": "#53BCD6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762700867, "uuid": "15734a27-89b8-46a8-98d9-01817ecc16d3", "comment": "Malware payload", "value": "816e1b0da80e63e312148aab5c29f6d554095a2d0c78796d36ff9ab5951d2916", "object_relation": "sha256", "Tag": [ { "name": "CVE-2025-8088", "colour": "#53BCD6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762700867, "uuid": "35018375-ef70-4fa4-ad09-2b4148265087", "comment": "Malware payload", "value": "1556e21dcd82eafbc9027e97aaba4915ea52bc54", "object_relation": "sha1", "Tag": [ { "name": "CVE-2025-8088", "colour": "#53BCD6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762700867, "uuid": "248682f3-e572-4c99-a4d4-5c9b3fe75a71", "comment": "Malware payload", "value": "9368e9e074fb8d91f304a9786af86964bdfe5dfcfee0a49ec5c26ed4fc80bbd009bcb00047b4365f32cf4ae35b88ea83", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2025-8088", "colour": "#53BCD6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762700867, "uuid": "74674096-a89d-4e0f-a91e-a3d707a14ef6", "value": "T1C2E31276E050ECABC1D9BB67B0434512111900B0B6A6A44A0D9DFFC99E7DE3D109B7BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762700867, "uuid": "82246f18-c48a-4abd-a1f6-357b2d767d95", "value": "3072:TyxU1ELKyHvOY1ZKK8FP/gAPkJzlZPxHHJO6XsmQLiP8DzZAGgsDqjJaE4IY:OxU1ERvJalkJHPhjsmrP8nZAGjDWS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762700867, "uuid": "350e974b-4d42-43e1-99a2-347284f7676e", "value": 150969, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762700867, "uuid": "24624079-534c-4110-9ffc-fed6e2af5ae7", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762700867, "uuid": "f3fd3c05-d608-4ae3-8411-ddc7128abe3c", "value": "KrakenVM.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8bee16af-bd4b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762679261, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679261, "uuid": "67bf28e9-8328-4aba-912e-1f2a4fe487e7", "comment": "Malware payload (Mirai)", "value": "3ab355ad84a88f2592208c3229568c46", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679261, "uuid": "baece882-c2bd-4d7c-b687-63e77bb93f5f", "comment": "Malware payload (Mirai)", "value": "818d53bf873aaaa9be3683e53602a3c961c8faee11ef0b7ba92b778ccb0ed53b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679261, "uuid": "6bcaea19-6d39-4b21-b7a6-f06a87fbdb31", "comment": "Malware payload (Mirai)", "value": "b63751cac283739b58c7a1f98aec94d2f72a23a5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679261, "uuid": "01e3b760-cb14-4f08-a23c-0d1d4ec1b8f1", "comment": "Malware payload (Mirai)", "value": "d11753edaa12f073314d695ee335329a3251cb47b47c0df16b6601ba32030461159d3450028c1874ffe10311291e39fc", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679261, "uuid": "f3fd4274-5175-4273-911e-df9e83f29f94", "value": "T1B6935922FD75192BC8D4A47722F34331F2F6478A25A88A1F7D620D8DBF646403267BB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679261, "uuid": "219281c9-e6e1-4500-98a0-030ae3a4d98e", "value": "1536:qONy4L9Lz3DxXK2jELdgGlx4GajkyDBO79ucthaYo95hl8HkXk3AAtoPa9V:TEuvDLqgPkPdoPhiHmNiV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762679261, "uuid": "773817b2-fb75-4f08-8a7f-852c9436c625", "value": 97608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762679261, "uuid": "70aff174-899e-4190-98be-b35efd224502", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679261, "uuid": "f4b61d93-fd61-46e1-960b-8400d17d9afa", "value": "titanjr.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e629613-bd99-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762712551, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762712551, "uuid": "0924dd49-5b5a-40c9-81c4-69578c88f0e6", "comment": "Malware payload (Mirai)", "value": "dcba7872cf884016da1ca1d883762c12", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762712551, "uuid": "d78b227f-4642-4e14-b755-4599884fce3c", "comment": "Malware payload (Mirai)", "value": "81f2c3ad4ac29556a4315c4d86e6fb824f4271d94c1cd55e26a39876fbdb6763", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762712551, "uuid": "92096bde-8169-4a6e-8d61-1870accc33dc", "comment": "Malware payload (Mirai)", "value": "ae1d55faa743d1dad8ffba15662d335119378a8b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762712551, "uuid": "3dc2f51d-bcdc-420e-be55-7c27f88d88a3", "comment": "Malware payload (Mirai)", "value": "a8b2e4b70ef9e6f058a01bd138ef03db4b6cce7a6752e9c1b31529534c749468132688a2e711804d3ecaf2d9e9967b3c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762712551, "uuid": "8b48c8d3-1dc7-499b-9da4-dd14914e8766", "value": "T196635CC5D643D4F5FC2242785137BBB78632E6391215FE46CB68BA32AC16A02B71B35C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762712551, "uuid": "13941b98-2206-4563-831a-dfdec5cad7a3", "value": "1536:GuMIMgbvdzWWjmAY3KHpYPC8LkklfULB0S+8e6:GXgPjg3Ap+C+NlIR5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762712551, "uuid": "2a9e5e02-c1a4-4b05-b41b-cc07242b6a78", "value": 69364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762712551, "uuid": "ae0a4623-f822-4dd1-8e73-836ce696727e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762712551, "uuid": "89959713-6991-4613-919e-cf9a8e4cd678", "value": "x86_32.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6510c5e-bda4-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762717638, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717638, "uuid": "2ad4cae2-5f02-449c-b254-be7401593ffc", "comment": "Malware payload", "value": "1d2ba0580453c27234b72941fecf2c17", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717638, "uuid": "f4cc09b0-c421-40cc-9ac4-bd7c231f5ec1", "comment": "Malware payload", "value": "8301958fc51814aab02026b6cb4080d37231eb65d1fe3fc33e08fb08ac25d4a6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717638, "uuid": "7d602033-5c5e-4208-a01c-8fdcc54c3f09", "comment": "Malware payload", "value": "2cacdf5da78135ef28b7033c862efe605a8b07d0", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717638, "uuid": "f8d21d09-856f-4403-bb1a-ab34eb5bbf14", "comment": "Malware payload", "value": "78d1ab5032ec65ae26d12ce6561471cff1db84e1fd9bf9c1ace9d0a64d5bac146fc3e56e77d23e7986a14dd6c4dab332", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717638, "uuid": "e4fd41d0-701f-46cf-9059-35cd710be7ad", "value": "T1CED48E7AA490D297FA1880B504F1972DE9207435C6762AFF05A0D1A2D91BBF08FD47FE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717638, "uuid": "d29df422-52aa-4035-a870-9da590cd622a", "value": "69b1c029b2300841771a0354f944d1f5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717638, "uuid": "4f4b3661-591d-4700-b6ad-cbfaf600c423", "value": "12288:n9iIot+cETT1qeGSAFcApgLRouFg8OV8cgzVPjdQl4UQEakwmrwgPi8:9iIA+LscApgLfIgJjdQGUQHZmrwgP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762717638, "uuid": "0f270b30-283f-4aa8-a44e-5161a98fef17", "value": 645120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762717638, "uuid": "41f22459-f1f2-4b5e-b806-a4e4edbbee0d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717638, "uuid": "7846e657-ca29-4a70-9c3e-954929a5d86c", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf1ce664-bd13-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762655322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762655322, "uuid": "9bef46ae-d47b-4db6-a983-0152c84f8bb5", "comment": "Malware payload", "value": "fbc10155eda3501aff7e20aac8e78017", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762655322, "uuid": "5643bf66-fb9d-42e3-a048-98a463543ff4", "comment": "Malware payload", "value": "858ff399466f5d900018582c028bc411bce9c321146b9329908f496e984aecf7", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762655322, "uuid": "c13ae0bf-86bc-4bb9-938d-a5390b253f87", "comment": "Malware payload", "value": "c7a6b5a41810bf4921d89249c28e257541b71605", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762655322, "uuid": "4fa7a2b3-6afe-4cad-a180-8c3caeedd4e6", "comment": "Malware payload", "value": "1dd25914401dcc99dc7615947c204109976c8199ecd083c2efc40973639e72497144f995731efc5d111abdfbbe909648", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762655322, "uuid": "cbd44886-c5ed-4617-8143-35c412850bbf", "value": "T19AD63348D2B019ABFDF2827D99B2C519D23078EA0F33E14BABE842532F535E16D35791", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762655322, "uuid": "ec7b29fa-29ec-4307-89cc-b31b45820ec3", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762655322, "uuid": "a7ccc6cd-5e01-4a0c-85f4-81c899227291", "value": "393216:iWSONo/ECsXMCHWUjMVg74wFKwjPNBGZ30aRUwEavq:iWSO7XMb8kDwFKwjPNBGZxUwEavq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762655322, "uuid": "e166f5dc-97f8-4e6f-9b45-94645da9810a", "value": 13340356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762655322, "uuid": "bbe81e97-9f7d-4b6a-a691-1619e48c1933", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762655322, "uuid": "f59c3d65-c522-4541-b5b3-ec2f3d998aae", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cba1be50-bd39-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762671637, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671637, "uuid": "bf1e81cc-c5ee-4519-8c0e-ba5450d74585", "comment": "Malware payload (Mirai)", "value": "afd7d2a0047e5a5c069e3134d2307199", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671637, "uuid": "da3aedd4-fb69-4adf-b44d-bf865e17a9b4", "comment": "Malware payload (Mirai)", "value": "85dfbefa0d5cc79941c6acd3f311eb72c846ae1b6e86532a15d79f20baa228cb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671637, "uuid": "0b19fd29-cc1c-49b7-bd3d-5ee111d7afbc", "comment": "Malware payload (Mirai)", "value": "dd6db4ab6de39486d45b3197df50ca3c324ceb39", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671637, "uuid": "e7921fc8-8b5a-4284-bf83-01102e9ff292", "comment": "Malware payload (Mirai)", "value": "0d9cd9845cb68db6a358dc2f0d232fe2cd7b33092c4e71cb85b482a0a51e9a2765333b48203215483ad10435b51b5fce", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671637, "uuid": "6bc1f22c-acfd-476b-ad24-a2eb6a555cab", "value": "T140D3E0D5BE626C95D07752FEE8C01AC383512F768B924209068CF7B83879AFA1F54CD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671637, "uuid": "b33a9079-c425-4693-809e-38e13f214778", "value": "3072:55fS6XOhnbUF0dz1iBfpSeBfT4FT2ccDsiMMTnG:vQQSJufpnFTtD9xTnG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762671637, "uuid": "87a1bfb9-5b0a-48b7-9395-0fe99c0528db", "value": 131912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762671637, "uuid": "cb0cdf97-5462-4eca-82ce-1b0230785acd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671637, "uuid": "d4e019f0-6e3c-4de9-96c5-9c0901ecd648", "value": "xnxnxnxnxnxnxnxnriscv32xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23b17459-bd69-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762691971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762691971, "uuid": "27510aac-7dce-4b0e-afcf-71ef24f214af", "comment": "Malware payload (Mirai)", "value": "4040011337b973d056ced66a5261cb20", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762691971, "uuid": "d15e3c23-2c23-4613-acc9-22150f26b51f", "comment": "Malware payload (Mirai)", "value": "86a072d641426a61506593c2db02b2ac17530c5716a37a48383261afdf8cef87", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762691971, "uuid": "2c5df618-9c82-4976-b4da-0de76aa75137", "comment": "Malware payload (Mirai)", "value": "6efff19f2db4da824cfb371053f6408cc79d1c6a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762691971, "uuid": "63b8dd79-ba13-4ed6-99a5-08c673938217", "comment": "Malware payload (Mirai)", "value": "5d3ab14ec821d8de843260f2b3a937910a0c97ac93077275fefecd3e82d1d11f5359a786158597aa29fb2730f29cd981", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762691971, "uuid": "728f2cce-e30f-40eb-84c8-321245e9a0d1", "value": "T1AD63E746F891CA15C5D952BAFA1E11CD331317B8E2DF7213DE206F647B8A82B0E3B941", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762691971, "uuid": "2f4f1a28-f9e0-4774-aeb9-f46c701eb5d8", "value": "1536:FtnnufXfc6LLeYgwQk+XqGOtBOCM3b9w7o3+Muimr1YFds5uybVRL9:OfvcS2wQk+aGsO134r1YFds5uyj9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762691971, "uuid": "eff8ff2a-119d-434a-9eaa-0cf7f43ce58d", "value": 72292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762691971, "uuid": "ce888210-ceef-4524-b662-869084d45b75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762691971, "uuid": "14c69e59-8f58-498f-bb65-b2db1952c324", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d878de4-bd56-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762683774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683774, "uuid": "dd819abb-5e0e-42b3-addc-b96b9b25d3d5", "comment": "Malware payload (Mirai)", "value": "ee3fb8fffd8c8ba2ee9294bb0919f8db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683774, "uuid": "9c2400f0-7072-4182-b623-b84bdf7f3762", "comment": "Malware payload (Mirai)", "value": "87c1763ecee3c0b6e24b3098db7192cb695abf7a82ec73dbf389769fa8b601e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683774, "uuid": "6fdfe676-6b5a-45e3-a396-b9f7faee3ed2", "comment": "Malware payload (Mirai)", "value": "d0f615847b73606f1aaf11f2618dbefe36de466e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683774, "uuid": "2787ff48-290d-494d-9870-069750333edb", "comment": "Malware payload (Mirai)", "value": "b0693a4c8421e40e84fdc40dc28b951965266fec55b1b73af4f196416da0ae4c53697bd8fa3dba4b434cd7e9eb934018", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762683774, "uuid": "c000e0be-f849-4f21-a5e2-d283598b24d6", "value": "T13A1302ABD27E9401E77E9D3164C4E5E403F26E84F9B2DFE0ABC4E60253850937384AD6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762683774, "uuid": "174ee7a0-9684-4606-9009-bd9ccef7de79", "value": "768:AYStUpRAeteae+8Pqfy+cM2/KcsGHEohinZVm3gNtRG4PRjyurw4uVcqgw09b:t6fedaV2IGohqKU7Fdw4u+qgw09b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762683774, "uuid": "2d7f7bfd-2d70-45d1-a043-fe95fb6c522e", "value": 44368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762683774, "uuid": "cfcb0044-d7ec-4cdb-90cb-2c29a28835bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762683774, "uuid": "1b89c73a-d150-4a8f-93d5-c07ab8451973", "value": "morte.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4df205f5-bd27-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762663695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762663695, "uuid": "1c63f579-201b-4eed-8c38-61acdfec8f6f", "comment": "Malware payload (Mirai)", "value": "30353bbd91f02e7595884a593cf97c3d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762663695, "uuid": "5a6df6aa-76da-4515-a876-0d568d9615df", "comment": "Malware payload (Mirai)", "value": "88d0ddbe221802b8e94b002f0f9884711ff0098409bf9ee8b58056b4b1a6ccfa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762663695, "uuid": "05f91656-f1e1-4f04-b4cd-f53cc2baa9d2", "comment": "Malware payload (Mirai)", "value": "7210b8574e83c5334746ea2c5b1407d6a0743cd0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762663695, "uuid": "29c2ee97-980f-4af3-ab42-a3c5a0ce459d", "comment": "Malware payload (Mirai)", "value": "78dcb1c3407e0a776911d86e88b703c10d79077045726abb7d4811e411fc56c0ac11ab5e9466532d64c47ac5506a0e30", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762663695, "uuid": "31366164-677a-472b-8e3a-37caf1e5add9", "value": "T1D4A3C61E6E118FADF7A9823047B79E22935C37D737E1C685E19CD6046E6028E141FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762663695, "uuid": "34393fd7-74ee-4744-a8cb-c074c69e41a2", "value": "1536:G54D8cG6eYyuQGjEf4/XKFjjKbTrDo3RCQyL53MnTtIojVeunpFyMPWJGb:w4D8cG6BZDjEwIjjKb9LBMnTeoKMME", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762663695, "uuid": "3a062480-c8d2-4ed7-ad62-c1bcc2b0f701", "value": 106336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762663695, "uuid": "8e003398-b0b7-44b8-ac57-7393a0ba846b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762663695, "uuid": "cc08b48e-09eb-4fce-9c57-08ba7f9d88d2", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88f6930f-bd81-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762702449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702449, "uuid": "5619b6c6-0adf-459f-b49e-83d83b6f032e", "comment": "Malware payload (Mirai)", "value": "5527e3722a95254a8a3e59083253621d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702449, "uuid": "2007822a-c0cc-4941-bd9c-1236bff24ffc", "comment": "Malware payload (Mirai)", "value": "8904730e5d116f098ee6ce754da8b909c5105c2a87c99ce923774c6d701f6bc1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702449, "uuid": "32545087-9141-4f10-a37c-cca1c18fa7ca", "comment": "Malware payload (Mirai)", "value": "48e9350b6fdcd17ad435040703dba9e2dfe439eb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702449, "uuid": "16c43a39-f83e-4bd2-9b51-810d68435f37", "comment": "Malware payload (Mirai)", "value": "17d357cee41030d0d14bc3cdcc13849f144529bfe2177fd465ac6efee3877ea610a386edcfff0b15dcf0a2b7011c2b02", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762702449, "uuid": "2b7b5da1-344f-4091-9279-8544e1881c8a", "value": "T183D2E1632021FCF4F5D28837F95A8787776E4C61F0D9302B0B58866C714915162FAFAB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762702449, "uuid": "7323a835-d60c-4740-b0f6-eb7b45756a33", "value": "768:ySQ37wQLhJfKYl0NJm5JUcHXwm72puWs3Uoz6:yvLhJffoJEJ/HXd72pAz6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762702449, "uuid": "c11cf535-b901-4d7a-92a1-0cb7f0ccdcb0", "value": 28916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762702449, "uuid": "a83a0101-2aaa-434d-b5bd-bc3bc13efe0f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762702449, "uuid": "143f5aca-758c-46de-92d6-aeb6705c9bda", "value": "morte.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29382b13-bd97-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762711737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711737, "uuid": "50709443-83e8-4404-8c22-a795d4fcaf13", "comment": "Malware payload (Mirai)", "value": "39d6c6614ab32ae3ad6ce263a7596047", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711737, "uuid": "83c6a9c0-6ea1-4013-bc4c-3f5aa2b4e33f", "comment": "Malware payload (Mirai)", "value": "899503c8ea80afdb25bec3dee3527a3d23b3399e30fd84b2d43bf15eecd867c2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711737, "uuid": "6063a5cc-b5f2-487f-bf25-3c3f82108b23", "comment": "Malware payload (Mirai)", "value": "6964176413732ce53f5999103e4bf7ee04a5d551", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762711737, "uuid": "1eddc40d-787a-4f6c-8d0b-1b8e81b20bbf", "comment": "Malware payload (Mirai)", "value": "6c560f23edc00bfa5297bdfd701cfe6811146abf8b886ae30e64186191a343f7f0b60f04679a5d988403e60ace09ceb5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762711737, "uuid": "d17eb4ee-24c0-4604-a93d-d1543c11cb6e", "value": "T1E53302ACE6F66562F71DB13E607F1372EC021004738EDDC507044AD39BA8E6A9C5E9D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762711737, "uuid": "bacacd2d-0c0c-40e4-9728-8b5e7cc72e9d", "value": "768:yWWRk2fFM+u+w3Ju1YyAcgVU2sBEvjmpZhjdXrf8fru3KbjqB1n6hsLWn:aRVfy+KgCYgV1mpZhBXYfi3ajq65", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762711737, "uuid": "e31c2b2d-91f9-44a7-a20a-52bfd5c0063c", "value": 53136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762711737, "uuid": "c76eedab-58c5-47ca-82eb-9f2d0e9f734a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762711737, "uuid": "8b2ada69-08e8-4dd8-af83-00926362a4ee", "value": "morte.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a37e8172-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677153, "uuid": "fbccbb83-0b82-4122-af0d-85f29e9d23d2", "comment": "Malware payload (Mirai)", "value": "9600f321ccf6c945af008681bd82d0d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677153, "uuid": "e10fe832-c21a-44c7-ab6b-225ca7289917", "comment": "Malware payload (Mirai)", "value": "8a2ecc23df9034a6fe827f842f0fe8cd179703d14821e25e7690a7186993bfb9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677153, "uuid": "62b1833f-fffd-4c36-b879-d86dd9a903a1", "comment": "Malware payload (Mirai)", "value": "f5b2716dbccf1226238b704d7786d8315db1c1e5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677153, "uuid": "1e411640-e195-481a-8816-8b8547972b79", "comment": "Malware payload (Mirai)", "value": "0f36b76c118a59b3f63516a7fe36ac052674de50f9ad03765dbb48a6ae9ede612f966969c305ff8bbc2c2e131b1fe98a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677153, "uuid": "4d51a984-0116-4b2b-83d4-32e7ea3f73fa", "value": "T19823F891BC829A27C1D4137AF6BF998E3320B3E8D2CB7227CD604B113AC551B1C66F65", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677153, "uuid": "b0da5d14-4586-4425-ba15-9631ce5505f1", "value": "768:1nsqlmbMhchoBff1usGTAX9uaD6lF91GfG0abEA1mA2EDEy0eYjW9THv+VwfnRw:1Tmbef1usHX9uaD6loZhon6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677153, "uuid": "4a9af023-1f50-4c8b-993a-0d40e2e64012", "value": 46664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677153, "uuid": "dc9c76bd-2adc-4331-be69-657ef3531fd1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677153, "uuid": "50b0c85d-5352-4d75-82a0-58bb5b7076a7", "value": "boatnet.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdc41143-bd66-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762691049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762691049, "uuid": "fd85c8d4-ae07-4903-8c8c-ef7055552858", "comment": "Malware payload (Mirai)", "value": "dde68ea399f78daaed88c725f06140e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762691049, "uuid": "b8ec1d0c-d6bd-4fb8-9f2a-9137d9098489", "comment": "Malware payload (Mirai)", "value": "8a6c9f191b269fc003c5c6b8deaf7c6ce26655e23a93763f4841075601b0c77b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762691049, "uuid": "ac2a2fce-4f08-4cba-9bdf-9ece8d5315b9", "comment": "Malware payload (Mirai)", "value": "6373acef0aa18ccf5dc9ca901a1d120b9320e2a0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762691049, "uuid": "4d42bb1b-aa91-484e-b9be-52b675dc1066", "comment": "Malware payload (Mirai)", "value": "51d1509640f6bec9d994d2c7cc01af7edc019534188482da452f7fb55e4b704872a4c10660f1eb3e30b45f795c44086b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762691049, "uuid": "a4ac25f3-a271-463c-852e-3bdaa79f26ea", "value": "T1F183E64AF9819B11C5D962BAFA1E11CD335357A8E3EE7202DD105F247BCA92B0E7B901", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762691049, "uuid": "17987abf-72c8-42f1-8cc8-5b0bc27839e7", "value": "1536:UBn1IwAQXu6+VykAweWnqKOKAkEOPL5xp2JpX08GqMllFQi/JbHK8cuybVR:1wfuPBAweWqK+Ozjp2JpX08gTbH3cuy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762691049, "uuid": "836d5e0a-bb32-43a3-99c2-b2f01345ee85", "value": 85352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762691049, "uuid": "756a1411-53ff-4b42-8f31-f528ba30cf9c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762691049, "uuid": "e8486355-576e-4936-8c8e-388a1ac17584", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cbc4fed-bd4e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762680524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762680524, "uuid": "6116a28a-64af-4526-8806-68fc0348e4ef", "comment": "Malware payload (Mirai)", "value": "1231f0752a3732b79e8b7c10df34ac6a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762680524, "uuid": "7c29c6b2-e621-4936-bba4-493079ba1ba5", "comment": "Malware payload (Mirai)", "value": "8dd039fb21288c1f179c8f371ff01a93f1272990455450050338f2fbfb21f05d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762680524, "uuid": "b0e98211-906b-4d7f-b7f1-e62e8271c480", "comment": "Malware payload (Mirai)", "value": "3896eec1056d9a3ad7863c103426fff7aa0b59c4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762680524, "uuid": "aba5bd34-bdfc-49bf-80cc-476c189a759e", "comment": "Malware payload (Mirai)", "value": "9db25a553bac08481987701a168c463b12ed687e2211fe7371e8a66668079cb04e1ce522318a03f167f0e6ffc3371d8e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762680524, "uuid": "5d3c3c53-ac00-4932-adeb-a632ac3feef8", "value": "T1A7535AAAA401CE3EFA4FB67BCC164B18F515770045920F37A76AFC939D320A48D1BD82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762680524, "uuid": "16066ec3-f226-423b-93c6-ead4e4d33344", "value": "1536:C+KktP2qF//OVCsHsAzHRKi+++++jtCWvqYmjuDbdLjM8NPzaTPj:C+/tP2e2CsHsAzB+++++jtNiYdbhjnE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762680524, "uuid": "fb3b35d8-08e5-49c0-963e-1d0f20f2252b", "value": 61768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762680524, "uuid": "dc8e9a3c-3552-4b85-9f6a-ab4cdb6752d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762680524, "uuid": "2b7d8366-3ec4-4a79-a9d4-f2e8cf48ec16", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b015d2db-bd13-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762655270, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762655270, "uuid": "6f77bef2-cf6a-4530-b136-27f0bdef9424", "comment": "Malware payload", "value": "b9c9ba706167d191704836813bbb7e89", "object_relation": "md5", "Tag": [ { "name": "github-k53xupn43", "colour": "#582980", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762655270, "uuid": "0fd1809c-55ac-4869-b0f1-8c3b7c42ccc3", "comment": "Malware payload", "value": "8e2197d11e581a9b80612469708c0602e6fa2eafef62bc562f33a1776f00becb", "object_relation": "sha256", "Tag": [ { "name": "github-k53xupn43", "colour": "#582980", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762655270, "uuid": "564eaad7-cb02-41f5-8ea0-7e8b0cfadb02", "comment": "Malware payload", "value": "dfa2d4c354032a83119349a01e8c2ac294b0ac50", "object_relation": "sha1", "Tag": [ { "name": "github-k53xupn43", "colour": "#582980", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762655270, "uuid": "b91e0e32-669d-4e77-a1ad-019c1dad07a4", "comment": "Malware payload", "value": "9b8af4217b9e9713b4b8a524d43656bbc98672f6663cf45e571b35eceec627a05af9a1e6b88b6cc13a1ffe5fbe2d9752", "object_relation": "sha3-384", "Tag": [ { "name": "github-k53xupn43", "colour": "#582980", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762655270, "uuid": "5b7ec7c8-fab6-4352-9fe4-e45aec962624", "value": "T109D28E9235549CAC4E26353B1999A880325B01FD63766C4CFB9C7EE0C723785FF9903A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762655270, "uuid": "a8707b4c-0c68-444a-b90f-e0a7dafe158a", "value": "768:yOjlAToOAK8iAfTKRs4OVA1S9smNmimY3QV8F+H2ZjAgAlAL:yboVzTKwF3QV8F+H2Zr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762655270, "uuid": "d4e8f37e-4ca7-4075-84c0-2efabe221b89", "value": 30413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762655270, "uuid": "8425b108-a7f8-4ec5-b147-b5aae42c14ba", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762655270, "uuid": "7dde6bde-4ca7-4af7-bc8d-64c7dac7b23a", "value": "m.ps1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4716777-bd03-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648405, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648405, "uuid": "65a249b8-4fb6-416e-8610-d1b7ca6f26b6", "comment": "Malware payload (Mirai)", "value": "9aded53d4e87649992629a94dbbe3f59", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648405, "uuid": "03a39bba-5925-4493-9a2b-1be1f1124362", "comment": "Malware payload (Mirai)", "value": "8e3609432f8f35865250ac6ecf783eb81cae278fd247ad9967aa910add9a2633", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648405, "uuid": "d53f0ede-f5e0-4f44-bf2f-57eec3eac951", "comment": "Malware payload (Mirai)", "value": "7fe1a41cc6a32c92ae790423e457e8eb74866fa3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648405, "uuid": "41a0793e-8ab0-4f51-b761-746cb8e9e4be", "comment": "Malware payload (Mirai)", "value": "ed6881f365eeaaf0610cd2a7089c23650186dd41bd80c2d2eacca63ab445fa91369ba8019392e5530e0193ab39648359", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648405, "uuid": "305ac2fb-5c52-40e3-b0fe-2ad7e23e372b", "value": "T1A9A2D01172632D65F3EC1C3CC9BE8367F9A70BFC90F6327579415620C94D20A2E39A4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648405, "uuid": "d8e19400-36ed-4c6d-adfe-803c670aa5d9", "value": "384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxju1ChymdGUop5hK:vvQn4j+ZO5fKAlxoCs3Uozs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648405, "uuid": "85be0323-506c-4937-9016-40d281ffe7f3", "value": 22160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648405, "uuid": "7cc115db-be15-4525-b09b-d053d07eda5d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648405, "uuid": "2c95d9cc-a11d-4f10-8020-3ad3664b1d9d", "value": "boatnet.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8fae0277-bd81-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762702460, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702460, "uuid": "6f9845aa-3d9b-416f-9de4-4e61e3359312", "comment": "Malware payload (Mirai)", "value": "c47e6f41c7bbef78a33724d72482cf19", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702460, "uuid": "bc8721ed-05db-4992-8125-21cb5fbdf622", "comment": "Malware payload (Mirai)", "value": "8e3a9e5e29c74468a1f041c7552479560f03d04ff612c4f8ea186a5e17cc8a47", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702460, "uuid": "d64fc380-3162-4c67-8771-ce6dbd1368ad", "comment": "Malware payload (Mirai)", "value": "22ae345e83689ade3f8ff48c2fdf807c99e2a166", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762702460, "uuid": "5559a95c-d6a4-46e6-8bfc-ba314e2bad02", "comment": "Malware payload (Mirai)", "value": "32dfe36f086740a7c7a83eea0bd7d6bdde50dda277fb8919a6fbd4f15d6a1ceed3cf5de0d95ee0f0246452425db2aae3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762702460, "uuid": "8329c635-1792-44f6-8b89-29df0662178c", "value": "T19B731A85FC928B6EC6C017BAB77E218D3322A3F4D2CE3243DD295F25378910A9D36945", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762702460, "uuid": "13cb4718-24c3-4795-9ba7-622ffb877bf3", "value": "1536:XsFAfap6xQZHhWmi20L3Rr6bQNX4aAnDibbO1u4x0alORGrSLi:8Fxp6WkLNX4lebbzUMi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762702460, "uuid": "f5bedc68-fa7a-47a4-b8cd-6be4585ec063", "value": 80004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762702460, "uuid": "66e8ee05-ed57-4ada-8e14-79090d4d751b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762702460, "uuid": "0e24bbbc-f6c6-4e8e-ab46-34cc8b40fe91", "value": "morte.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "030af88e-bd3b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762672160, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762672160, "uuid": "39e7f33b-ffb1-4afc-825d-cfda34a37574", "comment": "Malware payload (Mirai)", "value": "af3cc4762ec1c78dcf2e68f3b4a83a5e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762672160, "uuid": "49f7c686-d2e1-417a-85cf-eeba58e57865", "comment": "Malware payload (Mirai)", "value": "8fae3246ed164abef801f13e373315c378711837969ad7e7d290b21b9f7d43ae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762672160, "uuid": "6321fc1c-0b7b-42d8-9c73-39930c3a8a75", "comment": "Malware payload (Mirai)", "value": "7505079dce1679ab4d18d510d110d2ed5b8b24ff", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762672160, "uuid": "01220e75-b726-410a-80e3-e8ec2330e484", "comment": "Malware payload (Mirai)", "value": "2239b05258a57e2cb6b50bbedd8b58184614a32af3165c52f0ee306ea2408e04541500abadc90b912a86b43c6bcb60d6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762672160, "uuid": "f0026706-9a4d-4ae6-a1d2-51b549a387be", "value": "T11EB32946BD82CF13C5C222F6B7AE018D37157BA8D1EB3243ED28BFA027865DA1D36551", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762672160, "uuid": "90712b3b-9687-4252-9ebf-871d46c377db", "value": "1536:vJO9Fp99yRD59kpj5uqCTEN54c++j2nRb/V53PeFtFs/fn60covXC6b:vJO9F0RctCgLl+c2RTVxPeRi3y6b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762672160, "uuid": "493eae1f-f554-4bb4-8e1f-72cde060a285", "value": 107672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762672160, "uuid": "2f4ab187-9344-4d23-b221-5c6f2b83dead", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762672160, "uuid": "94faeed2-adb0-45ff-a1e3-511988df50ea", "value": "morte.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d756c3c-bdbd-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762728038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728038, "uuid": "cdc48f18-ceb8-41ab-863b-9eb85f7134f6", "comment": "Malware payload (Mirai)", "value": "d58f91757ad9e0c0c05d0e9c1e1d1056", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728038, "uuid": "e01d0ff6-dfcb-4ac7-8061-65a5d01d3e5f", "comment": "Malware payload (Mirai)", "value": "90b6e27eecfac541b1aec8f67f5f24a0dea68bdd0a66474abd5f504a074388f5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728038, "uuid": "ce808d47-991b-4bde-8e4a-31be1a2c8c67", "comment": "Malware payload (Mirai)", "value": "a36d918d1267b8f80f86d980a7c93698d40e53ee", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728038, "uuid": "8b46da8c-da11-4a45-9659-a7096b4726b1", "comment": "Malware payload (Mirai)", "value": "0704960b63f6b1b64b927bfa7f1768f0a8dea945fdcc8a1502ecf29bce4d1a64c2e63e3f34656392a90974e9b79aa2f8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762728038, "uuid": "2f4ba5fd-5fc7-47eb-a40d-ff8b9c07c361", "value": "T1BAF31A42F8418F16C5D211BAFA1D128E37131BB8E3DF7212AD245F607B8A96F0E3B955", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762728038, "uuid": "dc76ca00-2fae-4de0-be4b-39a413f98f8f", "value": "3072:XkGROPfU3yLPrW40QdIA2XSaRuwXOcJvBCRlYOP6hh1zt5:X3RgfU3yLPrWlesXSaIwX6RlYO+t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762728038, "uuid": "8f69a404-5087-4d3d-9684-93374952f935", "value": 170940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762728038, "uuid": "231d8f20-f129-4122-bc34-6b548daa865e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762728038, "uuid": "4cc543bd-a57a-4da3-a712-7a3c2fb9954d", "value": "boatnet.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa258454-bda8-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762719389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762719389, "uuid": "9386c949-d7b3-43ae-9614-e9663cb3fc32", "comment": "Malware payload", "value": "575b63016cf55e4741ec78caef51cf22", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762719389, "uuid": "f8f5c6e7-67d0-4a7b-94a2-a40b02fb0cb9", "comment": "Malware payload", "value": "935e9815a88a0b395e6fa44d6d30315082a6701cf3ebc9c44177dd57fa787b87", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762719389, "uuid": "6a1e1a0f-a5fc-46fb-beae-06a57f7516f8", "comment": "Malware payload", "value": "492a0b9e87b6c8b67eea35765eba3c129532e7cf", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762719389, "uuid": "620d0518-01d6-44f6-bac8-22e4312b2e67", "comment": "Malware payload", "value": "9713d9b6d4dd2a9f6f95d465d81027b4ccc50e242e0781c8e8719458cb3c9413d2fa2a29cffed121a3cce13c23a77d26", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762719389, "uuid": "a10b5eb4-7e98-4451-8e25-a7284e60f73c", "value": "T1D012874AD217B6F2CD1E0D7215DBE6AFAB703E34D475CC11FB609E12AF92C2A5518B08", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762719389, "uuid": "547fda5f-59df-4bf9-98b1-bf1e718cdb97", "value": "192:tbN88Jf/+7+h8oEMjxCK1ULb7bf6HLGcVhuzYNtcjcwVi:he7+h8mNCK1NIi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762719389, "uuid": "6f73c5b9-f036-47ae-8d6a-9b0e87f92b5a", "value": 9551, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762719389, "uuid": "9566b156-ed1d-491a-8a42-a99aae61df4d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762719389, "uuid": "3303e747-afc0-430b-8df4-45c7e04e2b49", "value": "SecuriteInfo.com.Trojan.DownLoad3.40744.13679.19095", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e64db30-bd03-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648288, "uuid": "39f6fde4-87a9-4667-be75-2dd0862d7d45", "comment": "Malware payload (Mirai)", "value": "20b1cc6aa52617f4dc3eac6b3453e835", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648288, "uuid": "1f83b77a-ef12-481c-aaed-af2a7193ad11", "comment": "Malware payload (Mirai)", "value": "95d2b9b6373e587ac13e440dfe0aa025715749556e2cd6a733f5f19998fc89e8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648288, "uuid": "88b9a8cf-3e19-466d-8435-2dff6e94bf17", "comment": "Malware payload (Mirai)", "value": "acf33287d2b7c834ab7f7405681ea933253db0e1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648288, "uuid": "eafc1999-3d89-45a2-bfef-addcb9b57654", "comment": "Malware payload (Mirai)", "value": "9de024e9e4bc5386ebdb374817f25c2184c946cd3bc1cf193a651b5dea5de06b97dc8d0a1db0d6721ee7630009dae765", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648288, "uuid": "bf586b54-ddfb-41bb-a0ed-9240203daf65", "value": "T1C163951E7E219FBCFAAA863447B78E16564833DA37D1C581D1ACD6012E6064F340FFA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648288, "uuid": "491542fc-1b43-4b69-bb2c-19b51d4c1f6e", "value": "768:7ZmnnogDILQHYLQHPVVMr4mgYVVMwKykNVVM6r+g/RtrVSYogDOsS5siv5XLatA8:UnN4ZH2SyOyuIq8LMEIUq+cvtpvXzfL8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648288, "uuid": "c7a324f0-0982-4a4d-8843-36e14b9a9a7e", "value": 72024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648288, "uuid": "f92dcd10-e1c1-4160-b530-b3a8690152cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648288, "uuid": "62fa9daf-f3f7-4663-9efd-9a273ec8b1b5", "value": "boatnet.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90aa3056-bd4b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762679269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679269, "uuid": "6cfcf7ea-4d85-4d04-b242-6364cc3f2bfc", "comment": "Malware payload (Mirai)", "value": "d6ad4b1c05cfa795eb968c01aed8c0bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679269, "uuid": "75875d09-959e-47fa-b166-8ef3b0480e0c", "comment": "Malware payload (Mirai)", "value": "99c8064702b0727a422f9a8b38b7964472d41846acfed5aa2b933f05ba3fce26", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679269, "uuid": "f0acd7c9-6f3c-43b3-bcab-2530e50aa143", "comment": "Malware payload (Mirai)", "value": "cd790dd1c8bf9e64ec85de3cd4e007a9154bb819", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679269, "uuid": "865b5fb2-f835-4891-9d23-5a6d518f4369", "comment": "Malware payload (Mirai)", "value": "195455789ce2c9033e49388e7f9f174b3152d7560eff3408590e79af2c3a164f8713b5a0024773718b31451642cdf9c7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679269, "uuid": "1fa602dc-b93c-4edd-b55e-7675fc8aec10", "value": "T1F8C3F909AB614FFBE86FCD3746E90B0525CC551722B83B7A3574D828F64B64B0AE3874", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679269, "uuid": "e366765b-0fa0-4a9b-b4b4-3667f6dd3eb1", "value": "1536:KEL6cGVbgZBFf+g6z3jLtdhuaL7ivg7r0KYdjfObhYsgpPyZWu9jKniGFjYVK/8w:JL6cGVcR6TN7resglytN+ip/4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762679269, "uuid": "df34027a-b640-4e95-a59b-0364663565d0", "value": 122496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762679269, "uuid": "ca16cd61-448f-4bb6-a315-0c3c978a5e68", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679269, "uuid": "8d7e2ede-d3cc-49f6-9216-becb8127a494", "value": "titanjr.mipsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8df7bf27-bd4b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762679265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679265, "uuid": "8e7625d3-5f8d-4b1b-b15a-9cff4897feb4", "comment": "Malware payload (Mirai)", "value": "3b3339a1e6308bd356a7f42e42b04f25", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679265, "uuid": "d247bca1-5213-4641-be0c-c9c83e376c41", "comment": "Malware payload (Mirai)", "value": "9b9dbb95ba9e39c1706de99639adffa83a9cd25d33932218fc728f2578848950", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679265, "uuid": "3e3c15ae-8eb1-4a25-b45f-2ac53741837b", "comment": "Malware payload (Mirai)", "value": "5ab089bc043ef61ea4f1b9f1a3988de418e7935a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679265, "uuid": "97204742-07be-48a6-a92e-341cae68531e", "comment": "Malware payload (Mirai)", "value": "03bd9d0460157282eb67ec5b17c02d9a1e55b38fe93f51d55e7cd13a7b7990c4abbdc0af03a8d20fd6d1c9f79b05b696", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679265, "uuid": "ebe980a6-a427-44dd-9d0e-c4d910a107d0", "value": "T105933992FD818622C6C116B7FB6E428E376713A8E2EE7203DC155F21378B95B0E77542", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679265, "uuid": "c8c49387-0ef4-43f7-ac72-c785345ddd20", "value": "1536:QTD7AJDP2cSxcal7MUoFJ0QDXG9YBhoqssC9vr1ow2Xvz2p9:QT4JDPxSXls0QCOHoqgpaq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762679265, "uuid": "2bf88194-3a6f-4dd3-94a6-fa993d1be157", "value": 93396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762679265, "uuid": "1bc141e8-6b9a-4af6-8b26-7ae1e3dfcd9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679265, "uuid": "2119257c-0cb6-4b1b-8baf-12e778707c39", "value": "titanjr.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "deaec922-bd2b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762665656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665656, "uuid": "f697ec25-a25b-405f-913e-3271109ea15e", "comment": "Malware payload (Mirai)", "value": "d2151172edf7ee042c8a7102e603c7fa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665656, "uuid": "5810a4e3-1532-4e33-b3af-c9be552c1152", "comment": "Malware payload (Mirai)", "value": "9c39e17d4a433c1f3dbd60f57c024c90145581fcf2fdaa428e23675f7b9a01f5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665656, "uuid": "0a6aeed2-4b6d-4467-ba7f-0471e5abb15b", "comment": "Malware payload (Mirai)", "value": "ee5c4fbec78681568f0400a91f01db079b75695d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665656, "uuid": "90825f33-1a85-4b4a-b835-c3805ac27e52", "comment": "Malware payload (Mirai)", "value": "14cf067a5684e132711b9571b7e9f2389dec5aba1d62c4ce668aa41327155f2e5b12e0c06931f7c82c8eabc968e24361", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762665656, "uuid": "0159b07f-f7b1-491e-acca-b92d4349111a", "value": "T159148020FA0663B1CC721A38A7962E5A2E7704559FEB26312D1F533DDE62C509B31F8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762665656, "uuid": "fe74b27f-f219-4f81-b850-c022ac74fb62", "value": "3072:pgPqMosQAxQr9+JD6wnKpdbR9HI/qjdHPenXJUKd:pAovrw56DISj5u6A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762665656, "uuid": "678a6ebe-1be2-4c9f-9886-bde4c92c85ad", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762665656, "uuid": "152d5aaa-5359-4999-97e4-87a1eadc3632", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762665656, "uuid": "8b7947ec-d968-4fb1-8504-2c2cdc68bca0", "value": "xnxnxnxnxnxnxnxnmicroblazexnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bfd309e-bd44-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762676067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762676067, "uuid": "4a637d69-6c15-46f4-9f63-fda85cfe0004", "comment": "Malware payload (Mirai)", "value": "fc473b341517f413f6f942a764496a6b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762676067, "uuid": "e2159e29-547c-44b9-ac09-96a9b9007689", "comment": "Malware payload (Mirai)", "value": "9d56835db500bf30b8e6fad9950233c2b1f9fbc91e34ad8ce9ca8d4d236323ee", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762676067, "uuid": "fccdb467-fc64-4dab-8f18-a004bd3f1f46", "comment": "Malware payload (Mirai)", "value": "df78ef6afca4e2419c99a0aecf781c360da01149", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762676067, "uuid": "4a072ae2-81d8-4ad2-b35c-692a45238f2c", "comment": "Malware payload (Mirai)", "value": "144e289e2bc20deed9033a79b93eacb62c27de1bdae6cf143ca2d72992d1187661bde9238a96f3683401e4a39b0982be", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762676067, "uuid": "be285253-b23b-4953-a180-5359885f8faf", "value": "T1F723F1BE99462930DAA4CD7BDFD0810141A383B4D2A5B3778558C632DA439D16BFCE2B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762676067, "uuid": "d6d1a360-4d75-4199-8522-3de655df97c9", "value": "768:oAoiXtwMnpIxB1AF7XF+btfqdz2YPhKTKmzsqqZJo6WaKoTSTDEo2Tydbws3UozC:o1GtwMpi2zF+btUpKmpqqZIuE4o2glzC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762676067, "uuid": "56a77be3-f880-4f46-9cca-943d752205ae", "value": 46408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762676067, "uuid": "75e2622f-08b2-4fe1-bf5d-fceacc9c18ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762676067, "uuid": "c0f6f7b8-4a75-4994-b129-fce0e93923be", "value": "morte.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64985fe4-bd47-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762677477, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677477, "uuid": "002619e7-1d79-4f4a-8ad7-e49e8f949ee2", "comment": "Malware payload", "value": "bc40519be3cd6a4325436f908d9caff0", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677477, "uuid": "296301f6-ee97-4236-9616-a3c1fa0a1673", "comment": "Malware payload", "value": "9ddb1f7c615e58e94e6f845b6ee1cd1c68ee1af199d5952059ddcb28962ff8d2", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677477, "uuid": "4897c06d-cb57-47b1-b40e-1d67df729a5d", "comment": "Malware payload", "value": "af779ef78d243ab881e935bb0f5d53c0dc55a021", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677477, "uuid": "ec32a30d-dd0f-4745-b24a-d0a095b66817", "comment": "Malware payload", "value": "5cb13b212d6e6462647c55a63a8e30ad47716eafea6c0edee27f00f6c88f8c4e6de963e8fcc0e371c99faee12715c005", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677477, "uuid": "42ddb146-2c22-433b-9834-338bf82544b1", "value": "T1E7172286F748E95AC4F3C3378AB55632500A4C658F07E6D72919B3BC19B3AE45A09FCC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677477, "uuid": "45603233-3f3b-4b73-bf55-fefb81ac08bf", "value": "393216:opMA21Ndpa6nK/V4dfuvIw8CUid2/q7/oYAC6QzjM9DlI4rbX:op61RrK/V4dfs8CBd2CLoYaQzjM9JI4H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677477, "uuid": "b577a620-552d-495a-9887-41e5b39fd22d", "value": 19804352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677477, "uuid": "e7704512-3608-4aaf-aa98-1a152cf5ffa5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677477, "uuid": "988bfd38-30b4-45a6-9688-d9a6b3666554", "value": "download.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b583ed3-bd05-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762649142, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649142, "uuid": "54af0068-04ce-4314-adf9-223b34c329e6", "comment": "Malware payload (Mirai)", "value": "80c125b26223cf071b917df8a3e2c9aa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649142, "uuid": "626e96cc-1d0c-40d9-a45a-ddb8b7d54d5a", "comment": "Malware payload (Mirai)", "value": "9dff495aeab1ad81f5d87ea42c9da20fc20d40564704798041899f0a3efff0b5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649142, "uuid": "b66b2380-af07-455c-824f-f4b780c52c2a", "comment": "Malware payload (Mirai)", "value": "c456dd79d0dbb29fe77df28bec947e419df93794", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649142, "uuid": "2eaa9152-7b9f-4652-bbca-ce6a0cb0f092", "comment": "Malware payload (Mirai)", "value": "037aaeb0019dc5bade19091ed0f931161fd2329f235d1bd7ab4ec6b41ce15bf2a4aa790575da956924da9843ed40262c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649142, "uuid": "220d3f63-2d5e-4388-8def-4a33f11dcedf", "value": "T100C2D051A252ADB1D6545336DE95C58203DFCBF8B3AD6133B0B84C386AEBE1516F408B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649142, "uuid": "dea9423e-66c1-47c1-b91d-2d84af0bc86e", "value": "768:SdTLJ5s4hTZK/B1XODoPSeWuukscBajhs3Uoz/Q:qLH2B1DSOpajMz/Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762649142, "uuid": "81e3de4d-17e5-423c-95fa-b87f524c375f", "value": 28160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762649142, "uuid": "e30ae0c2-a1d7-41e5-9b39-4b1daa20d6c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649142, "uuid": "9b955454-d502-4c18-a6fc-4e2f30069a11", "value": "morte.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "57267a56-bd03-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648249, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648249, "uuid": "2542a1cd-8690-4e85-9e37-07a4d4d3ff7f", "comment": "Malware payload (Mirai)", "value": "4a622d9bc3d8e164bc0e261fa30700cd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648249, "uuid": "9c982c56-1a1f-4928-8a8b-3c109b662290", "comment": "Malware payload (Mirai)", "value": "9ea925357177de6606cf9fd16494e7f0fb8978054f972a0d40f27921a1204bad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648249, "uuid": "fa987d92-9298-4144-96c5-fd339a3b153a", "comment": "Malware payload (Mirai)", "value": "9e906483edbc42b5ee11653b9734234fe20e5dc2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648249, "uuid": "af9bf7e9-0a89-45ab-aec2-5ed344073047", "comment": "Malware payload (Mirai)", "value": "312239991e9926f7a98d5d2e226ae51fc8b3e5b94b54a7f6c85cdd9c82fa5caa0140751c7f0b56b5941734291adad408", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648249, "uuid": "4a7a48b9-3b15-4b1b-b2bf-d33fb8469c85", "value": "T181042945EA404B13C0D627B9F6DF42453333AB9497EB73069528AFB43F8679E4F22A05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648249, "uuid": "7393d1c6-9d5f-43a0-9708-4d3e6ef58178", "value": "3072:OzeSvtfk84oALv2eEQakGzORuGMzw99Lmd38YhTfYo+M/RM+FDhdLn:2eSvJGoA7TEQakGzORuBGLmd38+x+M/z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648249, "uuid": "aec14964-80b7-4049-b7d7-77bbb2658fb6", "value": 181466, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648249, "uuid": "64a74b9a-7c4c-43a4-8b75-770c19890528", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648249, "uuid": "eff24bcd-f5fd-40ba-ab72-6add9ddbc0e4", "value": "main_arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2970a21-bd90-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762709015, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709015, "uuid": "cfd44712-629c-442c-9521-3c44b3dcd63d", "comment": "Malware payload (Mirai)", "value": "fcc32eb609162a0db2810c130b5fe577", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709015, "uuid": "22f3bd79-a7ca-488b-ae29-833027f6a006", "comment": "Malware payload (Mirai)", "value": "a0b0d8a31f843cd8b071bf2e794fadc9f4175c95ff0c6f2997f302c9e89dae74", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709015, "uuid": "1db5ed0d-2320-47f2-8c7c-401616db2ead", "comment": "Malware payload (Mirai)", "value": "14ed3a0adc984c6240759c3adcfaf4842db219e8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709015, "uuid": "cb26c236-cb5b-431b-910c-980bed2dd289", "comment": "Malware payload (Mirai)", "value": "399e5ff7e22a626d7898794cdbe437c690f1aca5c52165c98de796ee2dd4b0fb288827bbc4aa1ec1a37524181198ec84", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709015, "uuid": "7cbaa4c7-79f3-4f5b-92c0-c4e9784a7930", "value": "T1C2338D76C42EAD94C54822B4A9368A756B43E104D7933FFB4E85C5A58047DECFA0E3F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709015, "uuid": "34999079-ceb9-4d50-b96a-dfb5c16ade5b", "value": "1536:UaPwt7s+Z4gqfX9IrcdfZ54oJCI8uybVR:UAz+KXvdb4oJiuy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762709015, "uuid": "b2c01850-1a02-44a5-9f15-2347990f86b1", "value": 54960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762709015, "uuid": "583aacf1-c747-44c0-8e90-f11225737fcf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709015, "uuid": "53f1dd21-ff88-4b3d-ad99-0af326550491", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ba30b29-bd2e-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762666832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666832, "uuid": "79491595-cf16-442b-a29d-e98afaec8d2e", "comment": "Malware payload (Mirai)", "value": "83a1e8b6598ae687c3972dc5e74c2da6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666832, "uuid": "ffab12a5-08a8-4aec-a731-c5675d0c4805", "comment": "Malware payload (Mirai)", "value": "a0e8dee32ca93ba9721fea42e5e20c88b5f316d34c971961afe9e8ecf99165fd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666832, "uuid": "32ff30cf-2952-4800-a39d-5895bd98b7d7", "comment": "Malware payload (Mirai)", "value": "18170c273d7dc2c4190bcea74d9406027b94e668", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666832, "uuid": "03343a45-f127-4e43-820b-ff8356f82802", "comment": "Malware payload (Mirai)", "value": "d7eb8e2dd5bdedbb4e5df1c1622622292fa09f925e65772bb65e995070699905835a9d5f6ccf47eb2ad2d9f958b167c0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666832, "uuid": "702e9533-8563-42ba-89af-c5fc19ebd80d", "value": "T11A933956FD41C602CAC125B7FB1E428D7B2703B8D2FA72439E325F61638A95B0E7B542", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666832, "uuid": "c84a6659-120b-4e18-b166-5b0ecb2b2db3", "value": "1536:L5vJ6KvX5F2dRD1vkXxCmX7aULXTiYqlv83hemf:LNJ6AXX2dRF8xCmJ+1Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762666832, "uuid": "947ac896-2f29-42b9-a5ea-6d43103c3f72", "value": 92168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762666832, "uuid": "915d9da7-dd02-4b50-8682-20a2a5310a22", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666832, "uuid": "e93c6af0-1ea1-41cd-becb-095b6d961527", "value": "arm.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d40a483-bd4b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762679263, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679263, "uuid": "86a85772-a777-476b-a720-c405f094fd17", "comment": "Malware payload (Mirai)", "value": "7b75a4e85545e657fa6f856138ba3e39", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679263, "uuid": "d98bd132-3607-4925-a697-e2ca93cca45a", "comment": "Malware payload (Mirai)", "value": "a1dab206a740808694a3a99b6f98f531b4b5df2eb9b5832efe87a3d928a45e50", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679263, "uuid": "7722a7eb-113e-4123-96b2-72e47bd94d6a", "comment": "Malware payload (Mirai)", "value": "6636f1aa4fbf3503d375208c27b4b4624d024846", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679263, "uuid": "4623a95d-ae9c-486f-bff2-7e2b0aca02cf", "comment": "Malware payload (Mirai)", "value": "642b3da29a8b0777b255950c4b54bc7175f1b256900c5657ef14fb509624a9b243c7bc8e7a5da28ff4150d940ef4ecd2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679263, "uuid": "2607d207-50ff-4389-bbc0-a70f2adbd26c", "value": "T1BE836CC6F743D0F4E8120A71217BEB319677E13D5069EA83C769A872FD12641EB1A39C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679263, "uuid": "3ab8d7d8-935b-4fa9-b127-dbb79905b18f", "value": "1536:6bNScVe3cVw2A2vBM9d3Vk1/3RLF0C+WtsrswWe5U/:S0hOwevBs61/3RB0C+AszA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762679263, "uuid": "d5659b73-aa5c-433d-8568-9d61fe15e452", "value": 83600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762679263, "uuid": "d992e87e-44b0-42bd-a9e1-0ec42d7b5c01", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679263, "uuid": "c69d01ae-8ed1-467a-9507-6cbb99dfe8c7", "value": "titanjr.x86_32", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18e8a7e7-bd41-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762674773, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762674773, "uuid": "f895999e-008a-4d42-815e-061e421895a3", "comment": "Malware payload (Mirai)", "value": "4c42f82fd943eae7c6f4ea97d6ead630", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762674773, "uuid": "c3016dfd-adf2-46b6-a1bd-49f1db415211", "comment": "Malware payload (Mirai)", "value": "a3bd9ea071de3f025fb1d6320c3e672f42dc50effbb1b8f32be96ce88fd7eb9c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762674773, "uuid": "8abd7422-2155-4193-8991-f17227f05d00", "comment": "Malware payload (Mirai)", "value": "4f1a393e5d6254be80d54f801925c74bee955589", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762674773, "uuid": "438c04da-a9cb-4a0f-88c8-dd3caecf4f7f", "comment": "Malware payload (Mirai)", "value": "34840d4d054f900f29cef060fda262936705c046214e5af1d631a914ac386ab0b6ce966458bcd4452a57e23564479c81", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762674773, "uuid": "bc9f3908-87fb-4c4e-982a-61732ef5139c", "value": "T1D46193FB1342473BACAACED332A884047545809B95CF5FB65BEE38B60C8CEC96C41652", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762674773, "uuid": "6e30bf06-97c3-430d-bc2e-e814790da426", "value": "48:ipQNpjLpahpLTpxfpdvpL6L1pUVpNDLpIfJpjzp/3puJpxIxBgJsprHk:ia149bDQuvLSZhsX2BgJshk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762674773, "uuid": "624b3152-0095-497d-ba37-50530d09cc7e", "value": 3344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762674773, "uuid": "5bfa6f27-45c4-4f91-afac-0e16a234fd28", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762674773, "uuid": "6c2e8c3a-dfa8-4ba4-8bf0-c24e5c44523a", "value": "1.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1367e2c3-bd0d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762652430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652430, "uuid": "37f3b77a-398b-46d3-aa30-b405a762be3a", "comment": "Malware payload (Mirai)", "value": "b4fca6f84e1854d20f36c49000e2c12e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652430, "uuid": "780bbf35-5f63-4002-9432-40c844ce8992", "comment": "Malware payload (Mirai)", "value": "a42a40607203b8bac19fdae2a7bbec650190b145a7fd6a205ddb90d4f81f91aa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652430, "uuid": "90650e2b-2ad8-4dcf-8ff8-38aeb78a7956", "comment": "Malware payload (Mirai)", "value": "136a3c14ac5617134335f39805a0b4a3d4f33e0d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652430, "uuid": "d5700db4-950d-45ea-8c7a-c630bc90ade2", "comment": "Malware payload (Mirai)", "value": "22d75d3e61b4c32770ea76708408d42efd785eb6fccd7221974e9be91438666e40aa33b7a9744818b46bd09516b70a43", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652430, "uuid": "526e5eb7-cb71-44af-8187-b64d78948a6e", "value": "T1C013E1C768F18068C63D717A0B9AF25942D08C05E0C5A8AEA7DE24779ACDF5C3534BD3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652430, "uuid": "a89c8a0d-b3c9-4406-a883-1556381edea7", "value": "768:4z2z4ahGF2Jr9OuLcC/7GqhBpwrDnntRvgez80gP1eGl73s5nbcuyD7UGQRjy:N4aG2Jr953/79w/zRgPLlLYnouy8Gy2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762652430, "uuid": "99b8e1f1-c10c-4602-985f-fcae99a66ae5", "value": 42484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762652430, "uuid": "f36efedc-88b4-4afd-ba3e-5061e25f0f54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652430, "uuid": "2c6f5d75-9013-46e9-913c-7c45aa1b655f", "value": "morte.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4380a557-bd52-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762682146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682146, "uuid": "4e49f164-3b0c-4efe-bd75-dee6fb0aefe6", "comment": "Malware payload (Mirai)", "value": "12eed924f7564144a98aab5418f03ec2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682146, "uuid": "d4fe319b-83df-459a-bcbb-20c037d11b80", "comment": "Malware payload (Mirai)", "value": "a5f52f2f9f968a4ef90f947eed307b8d3cb56e944e756170f9e47df90f4c4819", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682146, "uuid": "1335bd94-4b77-4ddf-8a0b-7e99e5725695", "comment": "Malware payload (Mirai)", "value": "8192f95af3869f62e7844a994748657381915080", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682146, "uuid": "fbea2d6f-8179-4f2e-88d1-756e45f9b6e5", "comment": "Malware payload (Mirai)", "value": "27f79c837518928ac0cf097b1da427c42624463b0102ac3f912149956d42841ff74b5b51c948f8a8d5b0e8ff4707057f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762682146, "uuid": "cf7000ee-b809-4894-ac3f-0e3317273db7", "value": "T1CE530986B8919A13C5D4A2BBFA5F41CC332653F8D2DF3203DD116F597B8A82B0D6B641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762682146, "uuid": "dd2a9cce-5f01-43aa-a679-d759a099498a", "value": "1536:rLDYP0HnY146St5krxbKAlzBEpzv/9CeEQuybVR:rLDYiBMCpzH9IQuy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762682146, "uuid": "00f3c9d6-80d1-456a-903b-e175238dbcdb", "value": 62316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762682146, "uuid": "d0ec68e1-fd24-4006-ae4f-d5287f7887ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762682146, "uuid": "b72d3abe-229b-48b2-9ecc-645bc4072900", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ed650de-bdbd-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762728041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728041, "uuid": "57f70d52-2f81-4ae6-ae22-466085466e1f", "comment": "Malware payload (Mirai)", "value": "79863ef0358cd3edd819a70a1581475e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728041, "uuid": "db475733-da64-4e76-9689-e515bba2b6d2", "comment": "Malware payload (Mirai)", "value": "a67ecf57ba83fc79184f246f6b568464c620dd7ce8fdecda37249de0d176c4c8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728041, "uuid": "d41fffb9-0154-4497-9422-ad964416a959", "comment": "Malware payload (Mirai)", "value": "02f624425c49974ca9bef2435d055bd58361403b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728041, "uuid": "fd0365d5-c5fa-4c2a-9a29-b303a3565e4a", "comment": "Malware payload (Mirai)", "value": "68745b63afdbabe388772b417ad8ea39eae9e02e9ecaa993e3295abda0ac2d5f7c2a69403dc31d023655f7f31f3f76b9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762728041, "uuid": "8c329ceb-f503-49b7-bf31-256bee7eef9d", "value": "T1B314B81E6E228F7EF6A9C73547B74E24975823D623E1D641E1ACD2111E2038E641FFB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762728041, "uuid": "5c6eb258-2c0f-4f42-b82f-f05b1b62dfc3", "value": "3072:QDy7dCcHfWaKYCYv5RuiMK3+cQOXfj56hh1PmDV:QDy7dCaWalr3bt+eX7EmZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762728041, "uuid": "16faa1eb-6240-4981-bb93-4a167e923bb8", "value": 207860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762728041, "uuid": "ae1840e4-a783-459b-824e-d10ee26af1fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762728041, "uuid": "1d8f27a7-9f90-443c-b3eb-5f1f613d4c4f", "value": "boatnet.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bf3d389-bda3-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762716842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716842, "uuid": "82b2ad6f-7770-4ff2-9fa6-6c29c3a695d8", "comment": "Malware payload (Mirai)", "value": "1f2ffaec4d09e2a20d73fdd678965d9c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716842, "uuid": "0cc0ff1a-748d-4f37-882e-c1b4cba05c9b", "comment": "Malware payload (Mirai)", "value": "aa411b917adc4679b80965d41af587db0d38b46cf2d14f210e9934c0a5fbbd85", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716842, "uuid": "1759ed36-50d6-499d-92fd-176c0c13dac2", "comment": "Malware payload (Mirai)", "value": "87220d35c7d31f577d7215c00eb65d9d1102fe2d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716842, "uuid": "1bc1c260-dfe8-4070-aed2-57b7e12a84a4", "comment": "Malware payload (Mirai)", "value": "b13c09a8394809b98d62b966fd77a3a9cc21c009559015d60c23fcbfc5fdb7e2d2cdf77e08884c41996c53b4dbd1bce6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716842, "uuid": "2ff4b7e8-3ed5-4230-8a9a-ac0719f95fac", "value": "T18703F24EE8119488D86E14BD319C97A028E8F161B37E1D4D2702E89DE7CA90B719EDB9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716842, "uuid": "49fa1c9d-3056-4006-886b-778fcc28a153", "value": "768:9dp6rhUWhWEIuLNngnxcwVvT+RC8Sdjd6mQWWYsfW3WlOb:9dp6rhrWEIuLNnGxFVveCxTWWMY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762716842, "uuid": "d34988cf-29d0-431b-bb1b-3c02e02be0a3", "value": 40192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762716842, "uuid": "ef7e5cbf-f895-4f86-98dc-ef0d36b53c82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716842, "uuid": "6da3ae12-6497-4721-bfe5-3c60164a1447", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f3381d7-bd0d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762652611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652611, "uuid": "14df9838-8c1b-4b3b-baab-959b5ad7c903", "comment": "Malware payload (Mirai)", "value": "420fbe2aff71ea6697891b18be197948", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652611, "uuid": "ad29f778-cd53-4b13-84ea-6c7b89a24431", "comment": "Malware payload (Mirai)", "value": "aaa042e9b6f1489f1ec892fd38a523e4661d6f1ea62c43e8af93f0ecd5abe9a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652611, "uuid": "60a8aedc-b9e5-4a91-8998-f0944a324faa", "comment": "Malware payload (Mirai)", "value": "a9c6768ff435ac711aaedbcacf1d6df28c7caf52", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652611, "uuid": "c0d76ae9-f00a-49bf-b742-9dd8495c34d2", "comment": "Malware payload (Mirai)", "value": "7f63429aebc4858faa9e42e777fd811ff61dff64464e1efae2faf1ba21c205d2fa9c19f93bea3579969ba0c5567f83aa", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652611, "uuid": "85e6c969-6823-472f-9a21-978c64a440b3", "value": "T13CF2E19563636031EAB548B2D92A0455FB4E4F78C9FA31175B20EA335DC7C326C7F606", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652611, "uuid": "cd5bdcf3-6295-49c0-b464-852fa83550a1", "value": "768:Ee5PaZs385Tq1HxfM/nRhfLqiUhYYJSG+8pWUw/jYaI+/G+3UWE:Eg3Aq1Z2HYJF+qhPCE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762652611, "uuid": "6c832ca8-55ab-4aa5-8218-e386e9543d31", "value": 37252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762652611, "uuid": "ae826536-d1a7-4a9d-b1e4-a3df22430a01", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652611, "uuid": "9823f41f-834f-440e-ba7f-b5f27cbec8e3", "value": "armv4l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbe0b745-bd45-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762676818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762676818, "uuid": "24adc329-7c30-46d6-94c5-7ebd11c7de1c", "comment": "Malware payload (Mirai)", "value": "25f3aef104bdfa2fb0d95eceb528e3fa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762676818, "uuid": "20bcfb19-2902-4679-aeb0-6d916c4eeecc", "comment": "Malware payload (Mirai)", "value": "ab2360295df88c0c48dba166e019ef38f9752d3f0907c3eded7ca3b213b9c3a2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762676818, "uuid": "fb645a6c-cdba-47c7-b3a3-8b8c0609d895", "comment": "Malware payload (Mirai)", "value": "24288cebe1effe9427ab8984df4751d181ed72b4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762676818, "uuid": "6809ad14-f2e0-440e-bb3e-2e0df782958c", "comment": "Malware payload (Mirai)", "value": "ca743b779eca810e670f21daa0237a9fc8aa7d62944e07495a050a560a6b0b518e2c883c4659603e01de9420d2898fbe", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762676818, "uuid": "27d65442-52ea-450e-8f5b-c96a50d9c042", "value": "T16AB37D21B53C1A27C5E1A47B12F74726B5F657C911A8CA1F7E710E8EFF211902A03EB9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762676818, "uuid": "50040bc6-3eb4-4250-8e98-52b5d14e2197", "value": "1536:hL9CjifLHqOP1KPGFubrPQDTMjM8Kcrjzm8LrTCwt3tInzY8Cm5qt9h9Ym5VZQ/u:iu7qs4WA3m8LfCUmnjCLvh9YO/lafi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762676818, "uuid": "f4e185a8-a9d9-4f61-8491-c229b6aa116c", "value": 110984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762676818, "uuid": "d1267545-2df2-4935-839f-c5de8ac58f11", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762676818, "uuid": "d8c8bdcd-fa9e-422f-bccf-8ed097111c94", "value": "morte.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d52e999-bd9c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762714053, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714053, "uuid": "63eb079c-a0cd-492e-90e1-70fd34b0b0f2", "comment": "Malware payload (Mirai)", "value": "6f3e574f95ede79fbc80edf0e6247e2a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714053, "uuid": "e9194982-f3fa-405a-9cc2-f1b795e59b41", "comment": "Malware payload (Mirai)", "value": "ab4065c1ea6cdc5a536549e59847481004706d0cf870d041532e7e2edaf4a810", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714053, "uuid": "c4fd59b9-f7d8-4a39-b82f-97b37ae6cccb", "comment": "Malware payload (Mirai)", "value": "0c478858c6d59d33e4302349abf097f03a8a7356", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714053, "uuid": "ac13bfde-bcf7-412a-9909-acf429d392cc", "comment": "Malware payload (Mirai)", "value": "be7c537cb4c894e0fd562f45dfdc798a59f996ac1a47bd2065ba08b281667e4eb4b25896c6bbbe0b5139dba97a8c202b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762714053, "uuid": "4ec5d88e-9ea7-4c58-8b4b-cd9a3085607d", "value": "T15BE3BE8BB78F01A1C04B02F407CF5BAD6AA354349DAFC5F7AD9EB23B04395EA5516390", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762714053, "uuid": "984502e1-388c-463a-b9c0-36d5ced11ac0", "value": "3072:JUM9L9KYi7yuufvMBTbxq1LBW9EjvSgTq:JUMbKYTqI1cyvq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762714053, "uuid": "bb64faba-0f1e-4b90-a4d4-cb78bf3b2500", "value": 157256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762714053, "uuid": "04bd6760-975c-4003-8958-54b312181ceb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762714053, "uuid": "f0fe493a-9f31-4689-a407-3c9a89e6b604", "value": "morte.arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbd61045-bd88-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762705568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762705568, "uuid": "87d362cf-4eb3-48af-80b6-a95d485d27d6", "comment": "Malware payload", "value": "0b90e706fee56db841904f3ea1c8c1eb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762705568, "uuid": "3da9bf1f-34f5-4d39-9ce8-69cc2822eab7", "comment": "Malware payload", "value": "ab9962d875c057836dd7e5e3fbfba7b9767d15d3c272bff83f130a12c85d7554", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762705568, "uuid": "63cda4ec-0efe-4c51-a688-1ffcc9c06678", "comment": "Malware payload", "value": "3e13e20b0fd514da8bee48aa826d5dd9547a8c43", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762705568, "uuid": "843310b3-3305-4542-819c-52c038099a94", "comment": "Malware payload", "value": "a2f7b267c59049300df39abae2c04d659eb5d02d785bde7fd1942d25db28c68e3f8626a61f23411616800d0ff3ab3186", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762705568, "uuid": "492a75c5-83f8-484f-aba0-4ffd9bd3d849", "value": "T1F4F35A24B6A48239E437C47AC9D3AA16DBB13D015B2147CF324DF62A1F323D29E35636", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762705568, "uuid": "adc97f49-1dcf-4d89-8c33-d94aa794297c", "value": "af99073c12a1959b0b05c315b09e4a2f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762705568, "uuid": "337b4b44-288f-424a-b045-40f441659dac", "value": "3072:/qUIASf2kZ/NOk8Qrw/FsfLVkS0bbswIb8PUUIKpHosvY:2WkZhtwEkSYob81HC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762705568, "uuid": "f1d8a59b-9eab-4ba0-b58a-311a40dab625", "value": 166712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762705568, "uuid": "1f8e7110-90a5-4dd1-aba1-63f0b3d939bd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762705568, "uuid": "69c5592b-aa77-489f-bea8-2380f6951c02", "value": "AutoHideMouseCursor_x64.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6b2edeb-bdb7-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762725745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762725745, "uuid": "bcfc53dc-7509-489e-a12e-e27dfdda0787", "comment": "Malware payload", "value": "61c1368e3fec6140b656a0dc9c7cae25", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762725745, "uuid": "e6cba4dd-9bd2-4a38-a9ef-412c976d1446", "comment": "Malware payload", "value": "acc6721dbddad55c6a76b460a8a53bc5d4e97d00990e4cac686b2ab2877e1a91", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762725745, "uuid": "9748cbcf-d056-43b4-b85b-2b0d800db8a8", "comment": "Malware payload", "value": "7b408f991eb1f8b562ffacd0103df6d575f53090", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762725745, "uuid": "b469cca1-b82d-4196-9ea4-c3b19dc2f256", "comment": "Malware payload", "value": "a72d9697c4e4914c7739cd31b7c74a6e2a28280fa6af33ddd38e93c8a1f1bc673f8b2ff3a1ac22ca28577faaabb2d767", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762725745, "uuid": "b519e658-b0a3-4830-ab94-084bb993a45b", "value": "T1FB461204F7A5061DF466FAF62D21711146B3BE479815C649E3B33088EA76E43CE6C2EE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762725745, "uuid": "c3928916-d5a9-4c29-8fd0-93918c999719", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762725745, "uuid": "1b15265b-f975-4ee8-95a1-00f7535171b1", "value": "98304:Nh/evJLeTmDDi9UeK7kqXf0FGxLCbD3ha5Uc6v6O3xUM3/L9LI/cbt7/Cp/z2OIn:Nh/ev5eTeW90kSIbDoUcfOhzT9cEt720", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762725745, "uuid": "4320429b-60c7-4d07-8008-47c1f7416a61", "value": 5858856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762725745, "uuid": "5fa1b5e4-d0c3-40ac-a419-4251a4ca3179", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762725745, "uuid": "6de41de1-19cd-43f4-810a-d876a8ee2315", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96926914-bd3e-11f0-a129-42010a9c0007", "comment": "Malware payload (QuasarRAT)", "timestamp": 1762673696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762673696, "uuid": "bc503f73-9ab7-49e3-a25a-f594a1429842", "comment": "Malware payload (QuasarRAT)", "value": "8c0ff2a7a8a7a56cab87b2e127097e81", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762673696, "uuid": "6d1073c2-896a-4b7e-9e77-a61c3ab12002", "comment": "Malware payload (QuasarRAT)", "value": "adb8b0b453f04365cc3dd487d7875c7e7139faf1959ababd7e7c630aaf459207", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762673696, "uuid": "dc183ccd-8de1-4677-8464-1153772aa638", "comment": "Malware payload (QuasarRAT)", "value": "3c710d93dad04e6d6c1a65fceabc7c16233e0f1c", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762673696, "uuid": "1d0ed218-8604-42b5-8529-e73208970c03", "comment": "Malware payload (QuasarRAT)", "value": "b55d88615cec1db2ce1f9397a449fa9e53f658c95bacd05ba1b6df9e7210142dab843ddb4089d538f9b501624572e714", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762673696, "uuid": "22551aca-ec74-46c0-aba6-8376bf8282f6", "value": "T1A1163383C624504AC98BFDF6C014688838E19772D53C1A43EFD607171F7E29A599BBBB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762673696, "uuid": "4abd8867-aee7-4714-b90a-fc026b7d0a27", "value": "2e5467cba76f44a088d39f78c5e807b6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762673696, "uuid": "92e588e6-7264-4055-a064-65ff58361712", "value": "98304:HR7uRdPkRVfUGupl18q1Ikc4+lB4Z+d6cldpP2TqOCjkR5e8uJ7a8:HpuRdPQV8ppnvC4IBhdI2OnR5e37", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762673696, "uuid": "8cc2e7fe-497b-4b21-b672-c4e8e2689495", "value": 4285440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762673696, "uuid": "a6c5fd92-860b-461a-b467-6718e9aefb91", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762673696, "uuid": "0c7f5cd8-c9ae-458e-8923-9c15fd952252", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c96daeb-bd4b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762679262, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679262, "uuid": "8a41c0ed-5c39-4897-a4ca-e8d31d8f2445", "comment": "Malware payload (Mirai)", "value": "1397e133e2848cb61392c55f2840c216", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679262, "uuid": "831094a5-4f91-49f1-b189-9a3cdff5ee52", "comment": "Malware payload (Mirai)", "value": "aecb17419e4a5aab5829745c9aef9ee2cc3f06926b151883589a89bc0dbde733", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679262, "uuid": "4b0538c5-3ab3-4e25-8f11-bf04397d7471", "comment": "Malware payload (Mirai)", "value": "00499029558a557e9100353ee234dee19822e54f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679262, "uuid": "bb842f56-18bd-49ed-b378-883aaa65f46e", "comment": "Malware payload (Mirai)", "value": "7982a2477c66339190a438f26f5a4cb3aed61fb2028cdcc2209961135de6a4e3c9da19066da98e8ca6fbf17af7418da6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679262, "uuid": "abe94f0b-22b3-4a34-8f7d-9b908aac1da4", "value": "T1F5936D02B70C0E43D1675DF02A3F27D1D3EEA6E021F4FA88691EDB8591B6D361586EC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679262, "uuid": "dc0b9c88-4fc5-44dd-8e54-7d83ec5ed5bc", "value": "1536:sK+I+jZqYTrwreNikbxcq1hekHE+DIbvGGWplAWK8kF4OWMTXyC3McY+VEyAtc:v+5jNT1kb5mAWOaMeCwXc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762679262, "uuid": "e779707d-cfd2-4170-893b-1d10254b901a", "value": 92048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762679262, "uuid": "c4e71376-06aa-4e0f-95d8-0f5cf2f254d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679262, "uuid": "b252a764-4a30-4249-a95e-0b0fef061b91", "value": "titanjr.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32929c7c-bd07-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762649905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649905, "uuid": "222ccbed-e165-4420-b6a7-e54cb21b899b", "comment": "Malware payload (Mirai)", "value": "7d8ad9d9f6780b7e6e9afb6cd6b659f9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649905, "uuid": "81307735-07f5-46e4-abf9-10ffbea89b67", "comment": "Malware payload (Mirai)", "value": "aff8d113346c835c0eb7ce516f4d455b63cf42cb032801285496be094a5b0318", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649905, "uuid": "385c43b1-57f0-41d6-88ca-b46752ee46f2", "comment": "Malware payload (Mirai)", "value": "18ea57c33ef32330abc3950fc3cdc64a7e47ff44", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649905, "uuid": "dcb11092-c391-47b4-91f6-00029ec4098c", "comment": "Malware payload (Mirai)", "value": "2381717ecfaa1b38997bffd9a1a5f3c8aa14f07c3f1d7a7502fc224c495395c7ae8610e795be08cdf9c79646ad5cc514", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649905, "uuid": "a0ca8c09-24f4-4e52-b4c7-bb3e20b1bfd9", "value": "T1DCB3E194B720EE49C11662FCF0C60D5097B25EB50B96050B9453FEB869BCCE87E06EDE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649905, "uuid": "2872c337-aa2c-4825-b4b1-a5019136d2db", "value": "3072:gSVP5/OeJafI/sYN4675uwRqUSRsjTwuPI:fPduI/x4M5nM8TwSI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762649905, "uuid": "9fc4658e-e323-4958-97da-a1947de3d990", "value": 111776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762649905, "uuid": "74a10ea9-3c5b-451f-926c-6aeb67635028", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649905, "uuid": "6414e636-8104-486d-b8c7-69d41b20b949", "value": "xnxnxnxnxnxnxnxnriscv64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "823d10cb-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677097, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677097, "uuid": "2b2e9caa-7b17-4283-aa98-f18d6fa3bcc8", "comment": "Malware payload (Mirai)", "value": "2ae0584760ee2f5840cb7260cdebd3c8", "object_relation": "md5", "Tag": [ { "name": "arc", "colour": "#C3096D", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677097, "uuid": "4f035641-7cbe-4663-a8de-8f6e87d54ce5", "comment": "Malware payload (Mirai)", "value": "b099477b5d41e0408582a8a503ba53101ae857669939640e3c5fdf90bdebe56a", "object_relation": "sha256", "Tag": [ { "name": "arc", "colour": "#C3096D", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677097, "uuid": "504abb07-0576-4ae7-b1a1-586a9d0b6e33", "comment": "Malware payload (Mirai)", "value": "5bffd96f797435133289d541c5dbc019de9182f2", "object_relation": "sha1", "Tag": [ { "name": "arc", "colour": "#C3096D", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677097, "uuid": "fa49731e-6b0b-4409-a215-aefdebe203cd", "comment": "Malware payload (Mirai)", "value": "e454b8f646ac3edf580ffa57a8d33e6d3d90dfb84dd198c65bd47dff08715287318db608c48d4c83362d142339ade8f4", "object_relation": "sha3-384", "Tag": [ { "name": "arc", "colour": "#C3096D", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677097, "uuid": "064893cd-3557-4462-877a-14c3fcca18bd", "value": "T1BBB39DEBF2471250C8624AF007CB4BED3E2323816F2789E77C6A657958791DF8906F91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677097, "uuid": "63414577-6499-4076-a327-b8feefddb898", "value": "1536:RG1fZ0iCNrBzHMNISpnZQnxolvalWKgsB/LWx:CfZ0XNreNIyZQulvalWKgsBq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677097, "uuid": "61c2f63b-5e78-49af-87a9-311f89837499", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677097, "uuid": "12827a4e-5ae3-4828-b2ab-09403943b5e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677097, "uuid": "9793a978-85f7-4715-8a2f-ec09b33c2846", "value": "boatnet.arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55f2ef67-bd42-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762675305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675305, "uuid": "70335fca-8358-4560-a61b-c5491e206d16", "comment": "Malware payload (Mirai)", "value": "5ae04335c6336fd3f5181366d9b0f275", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675305, "uuid": "96e4fc39-263c-438e-b83e-361acc0c7811", "comment": "Malware payload (Mirai)", "value": "b0f39599814f51a33c6e756d10462fdc187c24192636da9c3c76707806df67a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675305, "uuid": "50501067-a350-495c-a5a9-d87eb045cdbd", "comment": "Malware payload (Mirai)", "value": "526eeb47aa2de84eb67fd467ea471f801dff18b2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762675305, "uuid": "76e0419f-252c-44b5-8fdd-cbf78542afe2", "comment": "Malware payload (Mirai)", "value": "07a3932bf728c15113b8034f83421b96399dd7269da9ce99a8eafef7dd6ee2482e458897a01fc92fc4d4c125a8a97c90", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675305, "uuid": "282cd95b-76c1-457a-a947-c365c7647152", "value": "T1BF330211A312EDE9BD302AB590B301D375D0AF78E69E33D6051E49CD1BBB08695DE8C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675305, "uuid": "1d9230fa-3bc9-4e9b-8bcd-611b90c69966", "value": "768:64oYamMoy5IP/yeuiAkI+tq71UwgReAUHof3aP5iQj8gddNPP+FYAd39q3UELO1:Lodm8e9d5wgEAUHu3ahR8qiYyGLO1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762675305, "uuid": "c4154a0d-ad7b-4913-a022-79ca720a764b", "value": 52720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762675305, "uuid": "8eb09a57-888e-49c3-8dd8-647687ba2856", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762675305, "uuid": "1c572ccb-8b85-421a-89fc-f7f65eeaeec8", "value": "morte.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffac5324-bda2-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1762716822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716822, "uuid": "0194baaa-6e09-416e-a3a5-d69fa1260f57", "comment": "Malware payload (AsyncRAT)", "value": "26d671473d4ebf18c902eff8ee9f7131", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716822, "uuid": "4d75938d-e192-4491-988c-a922e929c995", "comment": "Malware payload (AsyncRAT)", "value": "b2399c31bbf662df6ed5ce34b2e31912701911d39cf4bb0fc609be5cf35c92e9", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716822, "uuid": "0e727580-9b9f-4b87-acef-369444c18edf", "comment": "Malware payload (AsyncRAT)", "value": "f3bf7c1dcce98d6588b4863d791c4634de25f316", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716822, "uuid": "209aa502-4130-47d8-9a68-1e13dd869f2a", "comment": "Malware payload (AsyncRAT)", "value": "8a54afecf17a3aec5090e14dd524ee9045ffbb4cf78f143a8c3073636fd655003bdbf056f3d235a2709097c294ce82be", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716822, "uuid": "ea367d36-77fa-4d76-9360-51721ec475fb", "value": "T184639E1877E50119F0FFAFB55DE13262D639F7535903EA6F64C9028A1A13B8ACC503EA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716822, "uuid": "db6785be-1ab6-4d04-adb4-f831aec79ae4", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716822, "uuid": "19cc96d7-73c8-43e5-a305-f7ace7f3fdc8", "value": "1536:3LjXX02HC0csQrCYX315VIWJQx+wSbPB3CH0jxOHBb/7g:bjn0MQssCYXF5+WiGbPsUjxOHBg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762716822, "uuid": "e74a351a-f7b1-4f2e-8115-0a55b9c55cc5", "value": 72192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762716822, "uuid": "a8378e11-24d0-4773-91d6-21a1357ed074", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716822, "uuid": "1ca7079e-d780-46e3-b286-11a586dd4d4c", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "683fcf8f-bd94-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762710555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710555, "uuid": "28f59412-cd5a-49e7-b5c9-7e8fbe922088", "comment": "Malware payload (Mirai)", "value": "e28d70e9c7fe7f4de1d49a55684a2be0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710555, "uuid": "27fb3d29-6191-4e80-9499-1847e0007dfe", "comment": "Malware payload (Mirai)", "value": "b38b485d04d73366aac4721cfe0f7c8530620bf5ef1a19b20bac5d8f41446c86", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710555, "uuid": "45c898b6-d21f-417b-8e6f-b410c9bc57ba", "comment": "Malware payload (Mirai)", "value": "75227377bcfe4e9c87a1cfe3a6ec5eea20bdb4cc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710555, "uuid": "6f5f97d3-6141-4b03-9efb-4855b8836beb", "comment": "Malware payload (Mirai)", "value": "46d2e33c60c86d0d098138b9d761ef4675c0f598f82628e49381a8f0fd5bc196ce64407f184b48ad0dfbbd0d66cee901", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762710555, "uuid": "12134347-0f7d-40b7-b567-62a9d8876ef7", "value": "T19C833A917C416A22C6E5237BFB2E428D331653A8D2EF721BDD226F2077C691B0E77641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762710555, "uuid": "b40dc054-c1cc-4173-982e-9305d121d5b1", "value": "1536:GDRSBUmRiosTHP707LTChm4HctUFZLz5ZOiAsDhPV/rze2fnTHOwW/tKQRfZvWfU:GDR6JIzO/d4HTHKtstdTze+5gi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762710555, "uuid": "4b28146a-e74c-4ed9-8783-585591393213", "value": 87252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762710555, "uuid": "ba8b8b8e-507b-4606-bc75-7f3a08ded61b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762710555, "uuid": "cad53380-a07b-40cc-8103-a1e5b795bb8f", "value": "armv4l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7a9bc47-bd4b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762679442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679442, "uuid": "b414d43f-5d5a-4a80-899a-f08adddb2c67", "comment": "Malware payload (Mirai)", "value": "376dab1113e2a064bd2226eff16a9bcc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679442, "uuid": "94f0c5ec-d112-4d07-8123-383da4320d28", "comment": "Malware payload (Mirai)", "value": "b3965b3b51b86e4e14f5b5bf3af1a809e1865a519b72b0f5315023a9078874a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679442, "uuid": "ae7cc0af-39da-4f8d-a1b5-4ac53bc7c368", "comment": "Malware payload (Mirai)", "value": "7ff82c9b5d4d35c47054b04fb1cc6a73824c513b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679442, "uuid": "5197f0ca-9f95-41a7-8f38-ac41d4a4e654", "comment": "Malware payload (Mirai)", "value": "ec3497b7f39b41a1d22853ca410aeca8c0dc4ea87749d34d433df0f768b7e448e4fe4fb6c4c7ba9cb130cf2af35c23d1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679442, "uuid": "16cf16c7-2a02-4a9c-9ab9-9231f0cd307e", "value": "T17B93BF23D42A68D4C1554538B4E5CE356B33E6C07A832EF316F5C6B66097EE8F809BB1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679442, "uuid": "daf3a802-4721-4bd2-9ce9-085544d07574", "value": "1536:u/oHx8yAaRghEtB33ut7KWdVOKjniw7dZrPCFIbwQCY5jcK06xYe:uAHxhSW3uKWdVhjTPrPCFIbwQJo36xYe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762679442, "uuid": "c1b5e43c-ca68-43a4-9def-a384cb1d653a", "value": 97504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762679442, "uuid": "36c7901c-c8c4-49cc-b742-2259455bf65e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679442, "uuid": "4c2d3e69-d4dd-442a-98e4-a08520f42c35", "value": "morte.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eeaddfae-bd07-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762650221, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650221, "uuid": "43774437-aab7-4846-bac9-0139ddc925a0", "comment": "Malware payload (Mirai)", "value": "b73e2f34c81302d6172912c645a73d35", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650221, "uuid": "20bbbcf0-7525-44a1-8281-f5ee52e8af88", "comment": "Malware payload (Mirai)", "value": "b3ca9890c518a29cc09ff6859a8b51e2631243c04a708c1c5746d0967a8fdedd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650221, "uuid": "cb7fdf01-2185-480f-beb5-145bc393d166", "comment": "Malware payload (Mirai)", "value": "b26aa92e6add2c5a495d9bb6561f36e84d99d12e", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650221, "uuid": "a7f166e1-35d3-4810-a87c-7f399ac22f08", "comment": "Malware payload (Mirai)", "value": "00b84ace9ebe71da994e47877e3e5c37bdb75daf2cb633067d10f61c6407401233712fac15fa93ac0119e6f7c2789ff0", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762650221, "uuid": "5ef687bb-713b-41d1-9f18-d69f13b79c2b", "value": "T198C080D950521553DC813C44F0A74556654DB9D85E044319E25B027515151B070D0540", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762650221, "uuid": "26c67796-ebfc-4cd0-b49a-a1becd82e9b4", "value": "3:TKH/bYTAJsGLpvQEFMLkVG4FBKsPF+bNTKKgqRHFIipVaK+HJP1N0v:AY8JsGFQsI4Fh+bNVfp7uc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762650221, "uuid": "c756d680-6821-478f-898a-9467bc1f5c4a", "value": 166, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762650221, "uuid": "eb856694-6270-4357-8870-135ade33dab6", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762650221, "uuid": "b009bc84-3212-4d30-89c6-73d87729a446", "value": "f.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8233e3b-bd0a-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762651525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651525, "uuid": "c6f6e230-fad7-4456-94b2-a67a86f7812e", "comment": "Malware payload", "value": "3602df56b8bfe0961f10f1b05044f524", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651525, "uuid": "d4734ad2-758b-4fc7-b2f1-be02967198e1", "comment": "Malware payload", "value": "b4837d75bb375a3e119dc3731321c333e441b438c49d5bf5310feacbc560e8f1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651525, "uuid": "6c83b9b0-2c4c-490f-8231-b3fbc006d229", "comment": "Malware payload", "value": "a03055196706a951ba3389cb479c39cefe9e35e6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651525, "uuid": "ca54771a-3d42-44b7-affa-b5dca1740d92", "comment": "Malware payload", "value": "a890ec9da426ce281fa34100dd7e1e53c58a8eb6f20eb764d720f542719af9903c0f1226b7354b39175cf04546e4f693", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762651525, "uuid": "5d9f83a8-c59a-4808-a602-1628b71a1701", "value": "T168B50657B8914946C4E53A37ACBE81C433265FB99F8A631B6D04FE7C3ABE1D90A35304", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762651525, "uuid": "11de65bd-78cf-4769-8791-0ae84436fb5e", "value": "24576:3MRqnt9tVNhSvHCoJs1oUuVPaT1ky8+RxLFzUbQJMr1z5ImW3rMQyxtMBDORn+Rd:3V7IZFQT5otJVn5DE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762651525, "uuid": "a0a78b44-88f2-40d4-9c62-b9e87309ad6a", "value": 2490552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762651525, "uuid": "70297534-219f-4569-a590-e436ddb12bdd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762651525, "uuid": "8ceb8552-2bd6-4f95-ba62-76fafcc9851c", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a239bda-bd3b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762672306, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762672306, "uuid": "7c0be69a-4323-4fec-92c3-80647deb491c", "comment": "Malware payload (Mirai)", "value": "40bf7d52fc5b4698732893cd907dbe49", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762672306, "uuid": "621a2f8f-4da9-4264-bdec-2b44317244b2", "comment": "Malware payload (Mirai)", "value": "b4d9a480c2ed033bd267f1234ff26c783544adf85311bb7ddda64d5078e0ea21", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762672306, "uuid": "b5b57024-6fb1-4e4b-8f2b-ea2c2e6d2490", "comment": "Malware payload (Mirai)", "value": "3788c1361295b1cac0debc8c56b754afc883024c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762672306, "uuid": "7779fb53-7f1b-4001-96db-1feaab41b86a", "comment": "Malware payload (Mirai)", "value": "ce9ac7579d75cf42b89320e6ded0d320118da16101d5035650cec9e46161999ca6719b6ce2c577661e3cfec69dce5746", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762672306, "uuid": "c3f51ec9-282a-4a86-a192-700568869c45", "value": "T138147C2BB3C3ACE6C11163319C316362376FC7041918EAFFDA1A37D4A9977625A246C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762672306, "uuid": "30299cfa-53bc-4299-b0fc-43ef45507d04", "value": "6144:FUNpOm515RK1emJcvvEPqeJInybW7IKTtX:FQK1Jgvu9bW7Ia", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762672306, "uuid": "9aa81abd-21a5-410d-a30b-74fc31653f46", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762672306, "uuid": "8e98657d-75ef-46c4-9a27-4b3bb226c856", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762672306, "uuid": "d6e7c246-c877-4b58-9234-bfe8e1aa6ff0", "value": "xnxnxnxnxnxnxnxnloongarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d05f4ce-bd30-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762667559, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667559, "uuid": "53c05981-33ec-48a0-8406-75fb0a6c524a", "comment": "Malware payload (Mirai)", "value": "3a9e626a1b844d030793e343a5fc99be", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667559, "uuid": "edd3ccc3-4263-42a5-aec6-fc2773517e4b", "comment": "Malware payload (Mirai)", "value": "b62f61ff3db716859ea6e47971a99c90579cf2dc347ac00417d34ceadaa0bd8a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667559, "uuid": "cc017833-c72e-420c-ba98-05635331e883", "comment": "Malware payload (Mirai)", "value": "64d2081b36a59832a4f39e1e1e264668c566c443", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667559, "uuid": "22224760-6342-42c9-849f-0a789bc9750e", "comment": "Malware payload (Mirai)", "value": "e0f05d37642b932ec85d6b41a3884b521e0f6e43775b770c47b0dbda25015b0e9cb01c91f5502ce9a2b01a2d895a37a4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762667559, "uuid": "910b43af-8623-4088-8718-8457c23ba382", "value": "T1E113F1AB33B9E37CE8649471354A8F00AD71751099224B7B47EB71BEE93218B1A35FD0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762667559, "uuid": "937bbf10-1625-483f-9666-ed235077fafa", "value": "768:6tY4VWTCt6g67vlCRpUTBjUYMOi+uGAEnyRnhgQL0p+/RCLn/6DNn3aXggx0L9:v4oP7dkUBUYUhBnadURWn/6DR3WVa9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762667559, "uuid": "d931bf0f-782e-45dd-89a8-affe719cd861", "value": 44572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762667559, "uuid": "2012f2d4-222b-45f5-9bdf-75b8b7024a20", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762667559, "uuid": "0ded48a3-3c47-4948-bc7f-c79c9d9003b5", "value": "morte.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d4e207f-bd03-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648259, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648259, "uuid": "0521bb41-bc31-442e-bb88-f62b8f0879c0", "comment": "Malware payload (Mirai)", "value": "1034e9c7d88075c858d8e7f22cd574db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648259, "uuid": "ffa28c84-312b-4e44-bfcc-cd89f023c96d", "comment": "Malware payload (Mirai)", "value": "b6a909522aa9df3e90c42f8022204c9b89bb7a7428f574f962a035d93ca141e4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648259, "uuid": "aa3d32a9-caf8-4cee-9fb0-a31535debf8d", "comment": "Malware payload (Mirai)", "value": "bdbfc453c60b02957b4202f1247ef916ba6a9601", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648259, "uuid": "046e1659-58c9-45c1-8a8b-d48f9928254f", "comment": "Malware payload (Mirai)", "value": "8e1a301abd1065b985616cc93d9318b0c1b99df2f5448c274467d5ee8632bbd5a90ba1c9f3d63d2345adf7aee07401bb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648259, "uuid": "65b731f1-5f8c-4f16-be77-e4e46e027dba", "value": "T1A7D30945F8504B23C6C611BBFB5E428D3B2A17E8D3EF720399256F60378696B0E3B546", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648259, "uuid": "31ad8e96-011a-4b8a-b479-f73f46fe0ae0", "value": "1536:QKdzElm18uZJNb4AGFa8eAZHk4VB7fzTTnf5mgYivCyeqZ/Z20lCmwyw6RNPUTuX:QKp50ZU8e947L3f5mziPtRZ55ZKU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648259, "uuid": "4ff565a3-1635-48da-a0e5-9577e68cc8ba", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648259, "uuid": "18011b2f-fbb1-40f4-932d-bff8feb5e1dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648259, "uuid": "06ee8030-dfcb-49bf-a2e4-cf35f60c1ad8", "value": "main_arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b11e852-bd39-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762671475, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671475, "uuid": "0d221047-de57-44bf-bd49-e30cd2a88827", "comment": "Malware payload (Mirai)", "value": "cb748fcc261c69014285f63af20a6df7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671475, "uuid": "09259d01-cb8a-47aa-a19b-ee51def703ed", "comment": "Malware payload (Mirai)", "value": "b6b9d83516da5960a75b474b2e54bbf50156c42bec7b24b5a33cd4c12f52a985", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671475, "uuid": "0e6933c6-7b38-444b-957f-f2c2d01a22d3", "comment": "Malware payload (Mirai)", "value": "95316f0bdae155ec84b5bc632232ccb1c8533ed7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671475, "uuid": "07eea351-8b40-43bb-a246-5da36a377c60", "comment": "Malware payload (Mirai)", "value": "0d3a9324731ebfda2031de49c9d9276f578cd99790b8d4237a3b158298bdd475d928d30347da2eec56696b366a174def", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671475, "uuid": "2e263550-3848-4067-bea6-d15c2e29a56f", "value": "T189330A8EB8029D3CF91BE6BE54164E0DB93177C152830B2757BBFDA36C721A45E02E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671475, "uuid": "7bdf00a7-d539-40fe-9efa-1d4161232c69", "value": "768:gduPBFnHooqR8qOCKq2cH4Fje+TK806MMUVjzMfQXOtHud2oGo:r/hqaJMcjeqK806MHdMfQXoHuCo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762671475, "uuid": "3fd57b1c-3340-4324-89f2-7d0ac1ba7401", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762671475, "uuid": "cc6822b6-db26-4804-b8cc-e4c5d52b2e6d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671475, "uuid": "b5602b4c-117e-413d-9601-6bcb4155cc08", "value": "boatnet.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "888e9144-bd1b-11f0-a129-42010a9c0007", "comment": "Malware payload (Hajime)", "timestamp": 1762658640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762658640, "uuid": "7554da77-0f27-43fb-9a11-be89a4960104", "comment": "Malware payload (Hajime)", "value": "f4fda3cdbf0ba99319f44e8a865dfaa4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Hajime", "colour": "#A08D3D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762658640, "uuid": "3e0783bb-fbf1-463c-ac20-86cba84faef5", "comment": "Malware payload (Hajime)", "value": "b7470f07cace85a6065df567f94356520e644e537b46ab7af1a0f0f3b1d96ca6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Hajime", "colour": "#A08D3D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762658640, "uuid": "566e4c91-86c3-43ec-b37c-48b144c6474a", "comment": "Malware payload (Hajime)", "value": "84be88c8d424e4aced9458d6d65bd493ae6eb217", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Hajime", "colour": "#A08D3D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762658640, "uuid": "03757e72-0ce0-4e86-9605-f2bb1089e230", "comment": "Malware payload (Hajime)", "value": "760966c5ea2114dfa56d0918d2ba98100e428be32b0623a0c2f8b5e738f2487cbf158c15a1a41636068efa1677817028", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Hajime", "colour": "#A08D3D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762658640, "uuid": "c835237a-1d2e-4668-8fd8-4a3e4b79ab74", "value": "T145431206236A2A76857149F4E7FCBF8DE6463E688FF55C197C107A28B57136C2CC881C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762658640, "uuid": "321c3a69-2d43-4b15-abf6-4b42d94c4ad3", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6EfyqD:yYI0ARqw1qAEv7UIFM8oJorFquyjD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762658640, "uuid": "1f153d0b-c08e-4b84-ada6-454974c7691c", "value": 59248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762658640, "uuid": "49a6cfec-b43f-45d9-b9bf-677739dea79b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762658640, "uuid": "49c1b58b-d7f0-4585-bcff-4a5fcdc1223a", "value": ".i", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59d74d7c-bd03-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648253, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648253, "uuid": "00e525a6-a8d0-4e8a-9d98-c3c3ec16fe3d", "comment": "Malware payload (Mirai)", "value": "c801a3a271492322570f192aca08cb71", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648253, "uuid": "32dcb4eb-9d32-4826-a184-e291d102988e", "comment": "Malware payload (Mirai)", "value": "b7496334d805b7a5f6bc0728e13bdd90463cc7b4dc61f2976ecf8584eda18718", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648253, "uuid": "68185a21-8eca-4775-b107-a6aa266febf1", "comment": "Malware payload (Mirai)", "value": "e55e855579c46f35c89e499b8f429ecb83b7a70d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648253, "uuid": "d7219837-b386-4403-9dbf-98bd721021c3", "comment": "Malware payload (Mirai)", "value": "1744010430196d27e9024c65cbc48e443dc011a5549e095ed0c91ead4fa088d4cb902d5c8512803e408e0690ac4e9d6d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648253, "uuid": "9ca3e6ca-9148-43ab-a9d9-e8ec90dad85f", "value": "T1C1C2D0E07726FE31C4206C7DE52A4D8A3A51067C90FE353664258C358FC1A9B63B88F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648253, "uuid": "299071ad-4948-420a-a3ee-e5678c2ee410", "value": "768:DMKyhegCCMqfizjoNpd2vJdX6vwrj9q3UELu+:oKy4qfqoeJdXWgiL3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648253, "uuid": "42e03285-91de-495d-8d5f-5b652f5d9193", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648253, "uuid": "cb587a26-91d9-437e-a1c1-329b4e115ced", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648253, "uuid": "c1c70941-23e1-417f-b759-6a298b9f9d6f", "value": "boatnet.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5bf2e59f-bd03-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648257, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648257, "uuid": "b52bd129-391f-4b9d-84d5-0df81dffd3d3", "comment": "Malware payload (Mirai)", "value": "7e9978322de1ea3c8f68922c73f99cb6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648257, "uuid": "cd97d3da-96ba-47d9-a35b-c0bd605b5b32", "comment": "Malware payload (Mirai)", "value": "b7d70616f4b344dd6b9daef3182f38648f39cc80be30a78c5f6f378ffaff0644", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648257, "uuid": "3e0dd8d9-3d3f-4d4a-bd14-1b0553b448e1", "comment": "Malware payload (Mirai)", "value": "86292ab9bc7c0730252d5caa01c1ad0ed79603b7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648257, "uuid": "608f1c40-3059-4933-a228-782bd13fbd72", "comment": "Malware payload (Mirai)", "value": "ee176914a925fb49b2dc6e51645230ab2d2174a73f02224ccf5bd86af2fae2f66b072d5f23668a288adae771d90a7a06", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648257, "uuid": "27f4c26d-5d87-433f-bcd4-ffbbc4987743", "value": "T11BE30A46F8814B12D5C111BAFE1E528E37131BB8E2DF72029D246F647B8A97F0E3B915", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648257, "uuid": "97fb3c3f-10bb-4711-a66f-3d6b7fc291a9", "value": "3072:yneaYC/2Uau4JQXkDHTz9ai5oudNV0/4fLT:KevC/2NBQXeHTpaVC0/4fLT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648257, "uuid": "9b2862e1-94f3-4936-bd0a-e85669bf2f28", "value": 144124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648257, "uuid": "b3d06410-c917-4989-ae2b-2ad873840eea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648257, "uuid": "83a30901-6646-4efc-a465-65fa486843d1", "value": "main_arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "055241a8-bda3-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762716831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716831, "uuid": "baca7cc1-0170-4124-a1b8-4cea849fbd66", "comment": "Malware payload", "value": "409be42e5afdaf3b4bf3c5e0b586303c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716831, "uuid": "168e3241-42ff-4a51-ad34-e47e90e54d5b", "comment": "Malware payload", "value": "b916bc643d180a36bc60f70ca063988ac5f568e56ceae372f55f313097750989", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716831, "uuid": "6456de7d-1b67-4b45-b19e-35e4fad8a9e1", "comment": "Malware payload", "value": "406eec79770228514cefcf1bfbb31bd78cbe620a", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716831, "uuid": "28f1e430-6af6-4489-98ba-c1a12b9a4d01", "comment": "Malware payload", "value": "ef552062cdb3784186a00de88b52151a9c1c9d1c180f50f9adc53d2355f6ffe97bcf82b1e2a2550cd192d256943909fa", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716831, "uuid": "a7cc7fa3-9e6e-44d7-87be-842c68b8c5a1", "value": "T1E2461204F7A5061DF466FAF62D21711146B3BE479815C649E3B33088EA76E43CE6C2EE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716831, "uuid": "e178c520-c504-4338-8201-17821ab81f14", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716831, "uuid": "98024977-73e9-4f06-bfb7-06da2308749e", "value": "98304:1h/evJLeTmDDi9UeK7kqXf0FGxLCbD3ha5Uc6v6O3xUM3/L9LI/cbt7/Cp/z2OIY:1h/ev5eTeW90kSIbDoUcfOhzT9cEt72j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762716831, "uuid": "3f9cc6ae-26c5-461c-985f-09eb974f3942", "value": 5858848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762716831, "uuid": "60e9b9a9-3c42-413b-97c0-fc20f11b9a69", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716831, "uuid": "72b2d882-5de4-4cb5-8c58-5072f73ab321", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "876e014a-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677106, "uuid": "357ccefb-8f5c-4a42-994c-b7b57612b473", "comment": "Malware payload (Mirai)", "value": "cc559a9e0bea54281285bd2a91a3c197", "object_relation": "md5", "Tag": [ { "name": "arm7", "colour": "#30FEAD", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677106, "uuid": "057c4756-a5ba-49c3-a3c7-ba7ceefbc2ca", "comment": "Malware payload (Mirai)", "value": "ba3e5f7429468ab23488e67c0e17e70ccb393fc74f87d161f6577a7f377edee8", "object_relation": "sha256", "Tag": [ { "name": "arm7", "colour": "#30FEAD", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677106, "uuid": "af856b31-5964-45a2-9a23-d083387d0886", "comment": "Malware payload (Mirai)", "value": "64bc8583840bab8f4ccf7c51bd9eaacbc674c35b", "object_relation": "sha1", "Tag": [ { "name": "arm7", "colour": "#30FEAD", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677106, "uuid": "2a418189-4a17-45c8-818a-fad14d2ba6ca", "comment": "Malware payload (Mirai)", "value": "44c62264fb6962ba279549c848933f454c47126c71fb4a4d4ebbebee7db2b04d0c19844f6bfd99a615eaebfa9fa35212", "object_relation": "sha3-384", "Tag": [ { "name": "arm7", "colour": "#30FEAD", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677106, "uuid": "a179f4f1-8703-451d-ad65-47c27b4b0299", "value": "T136230239EB37F474D5D12E7357A27885539CCB84F668757F2B70036091886921CFE492", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677106, "uuid": "7c7c948b-3ca5-4c89-a493-53d43186ef41", "value": "768:YNxfpOzqO37dS7IOqnYnjEg2RcIVbWy5D+l/l9q3UELPorj+kdmmRHs8/ry7x/NZ:YXfp387dSUOcEjExRcHaawLQfHRRM8kd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677106, "uuid": "a599cb90-1faa-451d-a73c-469bab65b04c", "value": 46816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677106, "uuid": "78c251ec-0055-43e5-bcbd-2d3f18638b1c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677106, "uuid": "d205fbc2-6e3a-4c1b-b0cc-6ab800b0c109", "value": "boatnet.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "681269b6-bd47-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762677483, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677483, "uuid": "2667d542-4e1e-4253-b34c-e69a03b696e6", "comment": "Malware payload", "value": "8dd632df4d05b22406f3f6f362f8993f", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677483, "uuid": "42d09d54-84a3-4fd3-a330-30b97551395e", "comment": "Malware payload", "value": "baf5854c62e0f0698da1a8b1c6aae02f49994d1c319465df7a6d6b1946073717", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677483, "uuid": "37a50453-e465-4703-90b3-426b7d880fdc", "comment": "Malware payload", "value": "1505509916daa542c0f17cab603a47354574bb56", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677483, "uuid": "8aced535-7a90-4e7b-a0e4-75a86be6c974", "comment": "Malware payload", "value": "bb25ed231986c3f575904d0f9dff9a6fd9a8dc8387c0717c5e5204a7333d4c169353567bc2223e75aa725b9a7b947dab", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677483, "uuid": "5bbdf2c3-3888-44d4-9ec1-4d6a3f40fa65", "value": "T18356DF99B358A72FC877503349FA563112874D178A83DB436858721C7EBBAF40F99BC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677483, "uuid": "2372cae8-486d-42b2-acad-9ec9e5d9cfa1", "value": "98304:RXEi0Y2uS7SZItv3G2hb39SLlGKXoKOB/Hu9HSB+0pd2ZrnTw:RX10Y2DeZOO6b39yfLOlHKy0tw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677483, "uuid": "18b45436-ac83-4659-96e4-7640a6ec1734", "value": 6363025, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677483, "uuid": "b8f0dead-4f28-47cc-a5ef-dfdb08f3f749", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677483, "uuid": "b1e86e77-261a-47a8-96d5-972c41075dfb", "value": "install.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09757d26-bd92-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762709537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709537, "uuid": "3cd534c5-d2d1-44d0-af3a-42a7b1bca984", "comment": "Malware payload (Mirai)", "value": "af3dcdd21c7c90cfe0b8113330163ea2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709537, "uuid": "e2109516-a7f0-4935-8743-5d759a9055ef", "comment": "Malware payload (Mirai)", "value": "bd2db426a5846ad3ddcbbd3d9ca200c68fe4649832dbdf02b30393ad6488164c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709537, "uuid": "a09bad5c-9b21-4c23-8173-10e2a108f353", "comment": "Malware payload (Mirai)", "value": "6355a54c22a6926dc2c6f7d76e2b157bbd374b6c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709537, "uuid": "46011ebc-fdc0-44fd-954a-ee7c6e530b8f", "comment": "Malware payload (Mirai)", "value": "7b3999ae8abcc12f4e9a3ac2682c970e063924044db9000d2d6a1020a760b5d188844b334578847ccbe4523d6b789343", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709537, "uuid": "5c51350f-83df-4ef7-aa73-caa300a67814", "value": "T15AF3E80E6E315F7EF7AC833447B34E60A799239623E1C585E2ACD6151F6038D642FBA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709537, "uuid": "41cb2cca-666c-4a55-a607-bce64fc55a15", "value": "3072:RbeQ1sdYF3az0yc/02xWRMEX9lCXuavglL7Il/nOD0:RbeQ1sa3az0yc/0RMEX9lxrFmnO4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762709537, "uuid": "4328f065-e21a-48ee-8395-825067f02924", "value": 160204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762709537, "uuid": "9922fa7d-561e-410c-8954-1f2bc1d54711", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709537, "uuid": "27304d78-4a05-4b52-aa0c-28898b700062", "value": "morte.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63f92b3e-bdbd-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762728157, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728157, "uuid": "b0c72eee-f428-418e-80a3-0a5e3efb82bf", "comment": "Malware payload (Mirai)", "value": "cf1ac71bfccb8b7b10fb01a0f7c5eee7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728157, "uuid": "aa9ce168-5b5d-468d-bc3d-1b29b5e240af", "comment": "Malware payload (Mirai)", "value": "be789993559624b258544d617b5cb56555f354569e3a7e2d88f60237f42c14ba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728157, "uuid": "54999fb9-2319-47d6-8067-2a37f64d17e0", "comment": "Malware payload (Mirai)", "value": "b6eb031cb7b038a2c6bdbc2346e39e4a6566dd50", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728157, "uuid": "7afc3575-4273-49df-8594-28b40f427cc0", "comment": "Malware payload (Mirai)", "value": "c8b7fcad5f9fdb5c074f8e16147ed116fae11f4695506cdd824bcf0f7e205b62ced5eaad21656796640ce5bc9a423722", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762728157, "uuid": "bbc85e57-5a07-458f-95f1-504f3a5a810d", "value": "T103C36CD5FA43D4F6DD5305B12037BB378F32D07A1125EA83E3B959229CB1A01D61ABAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762728157, "uuid": "df761ddc-7ef7-4e9d-8fde-01299934fa75", "value": "3072:7W2WA4KfsQDNSHjiz2FBOez5Bts4ceGM5UQ30hAB1ER:Zr4KEKcHmz2F4emeOQ3GR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762728157, "uuid": "9e7e0f14-26d3-4770-a09a-eb29c099a4b7", "value": 123208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762728157, "uuid": "52a09752-b184-40b9-8974-e1632a4a3236", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762728157, "uuid": "94254f89-07be-4e4f-9a3d-014a23c497ea", "value": "boatnet.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44dc6e46-bd49-11f0-a129-42010a9c0007", "comment": "Malware payload (LockBit)", "timestamp": 1762678283, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762678283, "uuid": "c58b785c-c80a-45f5-9945-6d18b4077f42", "comment": "Malware payload (LockBit)", "value": "9d0d235ef84a1ac2e9fe07c3451136e6", "object_relation": "md5", "Tag": [ { "name": "lockbit", "colour": "#8CA32F", "exportable": true, "hide_tag": false }, { "name": "Nebula", "colour": "#98E84F", "exportable": true, "hide_tag": false }, { "name": "NebulaDropper", "colour": "#869492", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762678283, "uuid": "fe279881-8a92-454e-805a-3bbe9c2350e7", "comment": "Malware payload (LockBit)", "value": "bfe5a9f95eabd077326eb54b3079b4f2d1739952ef24686523045c470bbd6152", "object_relation": "sha256", "Tag": [ { "name": "lockbit", "colour": "#8CA32F", "exportable": true, "hide_tag": false }, { "name": "Nebula", "colour": "#98E84F", "exportable": true, "hide_tag": false }, { "name": "NebulaDropper", "colour": "#869492", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762678283, "uuid": "41d7a2d8-a020-49da-b08e-17551ae63b76", "comment": "Malware payload (LockBit)", "value": "5576c640c5b193deaf349a3eeda69ebd2ce969aa", "object_relation": "sha1", "Tag": [ { "name": "lockbit", "colour": "#8CA32F", "exportable": true, "hide_tag": false }, { "name": "Nebula", "colour": "#98E84F", "exportable": true, "hide_tag": false }, { "name": "NebulaDropper", "colour": "#869492", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762678283, "uuid": "4cafdf7e-632b-4191-b10f-1f8f8f258399", "comment": "Malware payload (LockBit)", "value": "b918bf58315e26af85e19b6250d525d019a319dcf67d507eae704a31fa3ca091f0958dfc434b6e43d4ec1db1da98ac71", "object_relation": "sha3-384", "Tag": [ { "name": "lockbit", "colour": "#8CA32F", "exportable": true, "hide_tag": false }, { "name": "Nebula", "colour": "#98E84F", "exportable": true, "hide_tag": false }, { "name": "NebulaDropper", "colour": "#869492", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762678283, "uuid": "1de29069-67ae-4961-ae64-d810bc8cc141", "value": "T11824E071D122EFE777D9951A106D0F41AE04A69B4110DF84BE48AB537AC2B49F03CDEE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762678283, "uuid": "711ece80-2d24-4f85-b4fb-73d7d49cf799", "value": "6144:xVMa3ZOuCAudFMBJayE9ixMoPthGHzdNL:PeZ849ixRPj+9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762678283, "uuid": "7f316984-4272-4831-a717-a4c420349d11", "value": 229881, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762678283, "uuid": "be9a759a-bd97-4d40-828b-0bde774c681a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762678283, "uuid": "28564706-9e15-4f8b-ab86-c2a317a6d0ad", "value": "WJBgYT.vbs", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cf82ac4-bd70-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762695181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695181, "uuid": "3d9a9bb8-9fe5-4246-aa4d-ea7825d7fb0f", "comment": "Malware payload (Mirai)", "value": "1ac8be349a35b9cdaa9410f6e7cb7850", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695181, "uuid": "cb2a17c4-f88e-421f-8b10-523b8e22ee67", "comment": "Malware payload (Mirai)", "value": "c0cd97a7c3b09b068cfefda533e3fe4568f45e8aee231d6ccbb902d7a01b57a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695181, "uuid": "e0559845-69d6-49d0-b77f-d6ba2aada79c", "comment": "Malware payload (Mirai)", "value": "9fee24fde7546ac52faecd1f6e02dad1fe1ca121", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762695181, "uuid": "47956b20-e65e-472b-b431-b5a51cfe91e7", "comment": "Malware payload (Mirai)", "value": "b5fb37ae1ae0a65ef9d874145c64836a003e3cf9a98a3842a9f85b198b6221dbc57693c017209627c0fec5f115f13933", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762695181, "uuid": "f3607ec5-30e0-47f9-a28e-3aa1c98ee44b", "value": "T15643F1C85275D636C4B22C72CACA080BFF50ACB9E0BC61B39C728649B98344747ED5D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762695181, "uuid": "d0e3f939-f0bb-4e13-9ccf-de5627666213", "value": "1536:9KRqAd/wNckkYNuqVxJ4JKPVyQ0RwGycNPRAAuLX:S/5wCk9xaTwGveAuLX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762695181, "uuid": "e0bfe9a7-fef7-4abe-9213-a8a4af12aba3", "value": 58684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762695181, "uuid": "4c1e43e4-25ff-449f-a922-232436613280", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762695181, "uuid": "53a1a8d9-a0b8-45d5-b745-77ae9075a916", "value": "morte.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50290be0-bd5c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762686462, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686462, "uuid": "671ae838-4218-4a0b-9017-c1206ec27961", "comment": "Malware payload (Mirai)", "value": "d550346b89bda9518032b5d7d154fd87", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686462, "uuid": "5c62aea9-3216-4763-8c27-8280c879b21f", "comment": "Malware payload (Mirai)", "value": "c18deef077228c5cd8fd1fa44761e5e9c798e007f0784873edaddbbffbf46507", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686462, "uuid": "a056236c-7678-44e6-9848-e44a98cf9dfe", "comment": "Malware payload (Mirai)", "value": "67b1541e190f98eee7c4f1739703d8f1e11ae537", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686462, "uuid": "2b58c7f5-8ca2-4def-b8fd-3d7efe537bba", "comment": "Malware payload (Mirai)", "value": "d0163d6f4bc54f265ae986c8a0e2be348a5a9f7ebaa567c77fc95da1d34880e9a3c856b28b8dbd254b34a2a035a083de", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762686462, "uuid": "9ba2fcdb-dec7-4511-a23f-288c73d04f1b", "value": "T1C7338D77C82EAD94C50822B4A9368A756B43E104D7923FFB5E85C5A58047DECFA0D3F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762686462, "uuid": "5f57ca6a-4159-403d-93f7-6f0e2c610d0b", "value": "1536:UaPwt7s+Z4IDqfX9IrcdfZ54oJCI8uybVR:UAz+KISvdb4oJiuy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762686462, "uuid": "311d6e53-dac5-49e4-b11e-4c951967514f", "value": 54960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762686462, "uuid": "54d51050-9d9f-4284-9728-3c399e97fcc3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762686462, "uuid": "d027fef9-39ed-4388-93a6-a0a6a401094b", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91f4d948-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677124, "uuid": "ce79374e-3fd3-46b9-87ec-8ded7daae2b8", "comment": "Malware payload (Mirai)", "value": "fd254c4c7556fb6aec19703de56308ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "spc", "colour": "#540676", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677124, "uuid": "c9066d82-fa6c-4192-81c3-9c43b3104383", "comment": "Malware payload (Mirai)", "value": "c2558813bd15ad94d79bd45970343d5ef3e0ef4efadc35df5cd333cb7b186472", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "spc", "colour": "#540676", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677124, "uuid": "80ee3631-304a-4310-8ace-75de7155f247", "comment": "Malware payload (Mirai)", "value": "bfa3e4de87ac557771f5ad8e250087a45d9b26c9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "spc", "colour": "#540676", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677124, "uuid": "ffeed66b-a977-48f2-a159-c974ab9b1b0b", "comment": "Malware payload (Mirai)", "value": "3a74b50f8f336da4f452dd195c81d5908018a36d5829d40df5fe6b19da5d6e31055914832dfcae218bdcef890b3dff38", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "spc", "colour": "#540676", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677124, "uuid": "f6176395-47fb-44dd-b692-0711c80bc28a", "value": "T1D1433A21B57A1F27C0D4A4BD12FB8B1972A156DF22A4C24E7D730E9FFF216846842DB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677124, "uuid": "9dc55e11-5de5-4811-bb6c-5e7076599cc5", "value": "768:eSo7oBPa7Tc3kQsa9Cy/KsHGGtCPz+8FhxzjsrnEbr/XsO+5IJOdwC:eSHBPa7Tc3FsaP/KsHG6CPz+8Fnm5wC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677124, "uuid": "f83f12ac-8bf7-4d03-b1de-80efcfac0fed", "value": 56808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677124, "uuid": "4f34d583-0c26-48e4-a9c3-5ca72b59a4b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677124, "uuid": "436a0d74-2a71-4b9c-9f44-153428d53aa3", "value": "boatnet.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fc7f1ed-bd93-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762710030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710030, "uuid": "adab82b2-bc80-4639-af6a-58f9141919e4", "comment": "Malware payload (Mirai)", "value": "884c5cd46ae14f55808d7078ca157a29", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710030, "uuid": "96783bc8-518e-4bfd-8b50-1f6fe6d79ad7", "comment": "Malware payload (Mirai)", "value": "c35775837fe8137edc06dc36435528143da541716bd4817be005a6f0fd263048", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710030, "uuid": "7920dc9d-26af-4b08-87b1-67b44215ea82", "comment": "Malware payload (Mirai)", "value": "b0af3b4d675e525c4b302fc03e22fb88b0a7e6fa", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710030, "uuid": "acaf08f3-2982-405c-afa1-3541728db8ea", "comment": "Malware payload (Mirai)", "value": "88c5c5ef3066aaf15ef21e3c182637ab0c6598448d861a3797a08e4335ac3df44a0e7f53e68e49c7dda0ff2428b1e96f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762710030, "uuid": "7c2a9684-7072-4d01-8955-716a64cdf8c3", "value": "T17923F2B26A9E6E4CE93D323102FEE7433710E64D605640F139F05C6A9D68F2D6138AB7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762710030, "uuid": "d7eacb05-3918-4587-8ae0-1449d2653454", "value": "1536:a7QFjxSsUNqIVmCAhtzJPQZZ33dVuyEZ1wvZnouy8Hy+:K+xdBvtzQ33dVuyy1moutt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762710030, "uuid": "68366d9e-551e-4e6b-94a6-33141e4d771a", "value": 49692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762710030, "uuid": "1c22743c-e277-45ce-b024-766a217985dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762710030, "uuid": "8231ae43-016c-4028-b87a-8b0227641345", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55394116-bd07-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762649964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649964, "uuid": "8ee069c6-2ccd-4f68-9133-1dd135d1513a", "comment": "Malware payload (Mirai)", "value": "0554fb5a9322b14c309ce009942669f7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649964, "uuid": "7211666c-a741-4d24-9829-b6c5a7c36fc7", "comment": "Malware payload (Mirai)", "value": "c49cafb0ee7b5345faa70d7c5f01b6de25ba730802011abf5417ea8bb185ea88", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649964, "uuid": "08dd4a48-d96b-4b0d-94f0-5136efaa388e", "comment": "Malware payload (Mirai)", "value": "bec8e3df403ce685f7bbe9e86b7859b96c381206", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649964, "uuid": "8450cbf9-d65d-41c3-929c-09782546db82", "comment": "Malware payload (Mirai)", "value": "539a74b75a941bc35ea3ff8282be03803cb0c9faa1255dcbaf3d9f29671deea964c360940980c00567a2e227d7ff3099", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649964, "uuid": "bdc89141-65d5-4603-81b7-950ff7d49dd9", "value": "T1E7144C0B7B518FA0C368D63009F3CB6796E6259616E19886E66DDE107F3035C6C3FEA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649964, "uuid": "76564217-99e9-4c9a-aeca-57a1c3ad9725", "value": "3072:5B7DBPXAjpP/m6Tu2Q3sF48OLz5Am5zmBlxpyDiqyzqoTfar:5BHBW3m63PF48OL5JApyezO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762649964, "uuid": "d191a7c2-1d43-452d-9170-fce97a526ca5", "value": 199132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762649964, "uuid": "02d3a1b5-d109-4972-a5b3-162154c6b05d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649964, "uuid": "779038ca-20e1-413d-9a68-271c1d1e103a", "value": "xnxnxnxnxnxnxnxnmipsxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6017fe6-bd9e-11f0-a129-42010a9c0007", "comment": "Malware payload (Rhadamanthys)", "timestamp": 1762714980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714980, "uuid": "2f188ffa-6235-45cf-849c-1469f2173548", "comment": "Malware payload (Rhadamanthys)", "value": "a5f78637a7413acd799b434f07452f64", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714980, "uuid": "b157ef3b-af00-4b3e-9272-31a004b44214", "comment": "Malware payload (Rhadamanthys)", "value": "c4c8b21d07ee92524571daeccd9f0d861d3d62b3a49a9339255066709a095aae", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714980, "uuid": "d1a0767e-a445-4ace-8b48-9256dbb47461", "comment": "Malware payload (Rhadamanthys)", "value": "aa0b7162c7f777715f1dd18590e545d208eee278", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762714980, "uuid": "f4b4cb0a-6a48-4b88-9aee-6866ec9eb005", "comment": "Malware payload (Rhadamanthys)", "value": "e620fcab029e46435d74ffdbfcea96c2fe835aa702d8c5d1c4458977045f44bd84add70c7ae0792e36503ef5d1a192fd", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762714980, "uuid": "26939d05-2fb3-4f28-b97b-0d284dfd1622", "value": "T14706291A3C9B4460C0D5E236C47571806228FC145B7DABC7DB62BA7BEE727C4BA39B14", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762714980, "uuid": "f969e2e7-8531-44e4-b76e-074431cc551d", "value": "9cbefe68f395e67356e2a5d8d1b285c0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762714980, "uuid": "e05a397b-fbc7-48f0-9385-37ccdc9163d3", "value": "24576:dun5jRxQZUY5jE0lQFelwggcQBjMqiqK7gsNkW8bD1R/+WkXkMVc:q53QZv5Iylw9hBjKgsND8bD1R/+WEU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762714980, "uuid": "2ca8bbc0-c965-44ec-9286-5ae2767a8387", "value": 3742000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762714980, "uuid": "01b79503-40e8-4699-b0d9-486b2f9c863c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762714980, "uuid": "f6d88e9e-830e-44c5-8684-d3a9d6629f43", "value": "MobaXterm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f46a052-bd4b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762679267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679267, "uuid": "dd46ac4b-06ec-4557-aed8-66209d80455f", "comment": "Malware payload (Mirai)", "value": "4fe0a8f37f8df375b2b3c54dc95692a1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679267, "uuid": "6afd1ffb-6818-44d7-8f92-f717e1101bd5", "comment": "Malware payload (Mirai)", "value": "c5f329b6c92027aa18f2055d5893c483f26ec6ece96a3ca65c5e24d55324e2cf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679267, "uuid": "d48403ce-cd6b-49db-bb8b-8d34c2c91969", "comment": "Malware payload (Mirai)", "value": "4f0ef6aa15a2e5f362ec39fec1cac85b85a7c1b0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679267, "uuid": "403331a8-036d-46f4-af9f-827319155526", "comment": "Malware payload (Mirai)", "value": "8f7d8474122ed55fd407b13cd58b534a539ebe6ac86de5d166c94b57dfc3f7e0a3120fa4268daab19ead08d4efb34682", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679267, "uuid": "34663f1e-e6d3-4a1e-9be6-de3564dd69df", "value": "T14AC3C75E6F218F7DF768863047B38B21A75933D626E1D685E2ACD6005F7034E241FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679267, "uuid": "e5d84b21-a657-47b1-8656-920eb7966f6b", "value": "1536:+8B1LkQRae4eyJjkKJCITjPCLkufph95epym7H/vV0E5DejsMWNdp9BW:P1LfRav5kSH/pym7H10E1NJg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762679267, "uuid": "e90d7dd5-4a98-486f-aeef-35f96491733a", "value": 118400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762679267, "uuid": "50837c8c-efee-414b-ac4a-618c436e7c38", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679267, "uuid": "49da1992-7e51-4af0-ae6a-8b2744ab748d", "value": "titanjr.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a615f3d1-bd07-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762650099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650099, "uuid": "0a82b6d6-fffa-4243-91c5-bacaa8332d32", "comment": "Malware payload (Mirai)", "value": "ffe1927ce8cd9304c37cbfe24f2d29f3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650099, "uuid": "1d229e60-d767-4431-aed9-638f477774ec", "comment": "Malware payload (Mirai)", "value": "c8a88c6864ff2df99b947bceaf9767e1cd2f105a93724d97f7c7c734d193fa00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650099, "uuid": "bd4c182f-7f07-4e35-8bd6-59178021d905", "comment": "Malware payload (Mirai)", "value": "6c7e9bf0925327e4ee0d9f61c3eedc7104b16049", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650099, "uuid": "aab1b051-0746-40d4-8110-832597e4bdc7", "comment": "Malware payload (Mirai)", "value": "ee0e92e2c7e40191a5210a613053556aaae494c18a4b1bfa8b28a1c9dd746a087c9aa22dcfb2ec2776b5baaf68570999", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762650099, "uuid": "41d06b7c-7148-4f67-a0b7-18b2b256fc86", "value": "T1AED34C0A79D274FCC687C17092AE9F61F63A749C02183DAB93C7AE711D36DD02E15E62", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762650099, "uuid": "4e96120c-43d2-4724-909c-8729bdea5062", "value": "3072:tlgNRpLSRC2RglpkGX90APePTIHS6RQ25WQ/gYQ:YRpLxzlpzX5HS6RX5bY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762650099, "uuid": "63ccd539-1ed9-4806-add8-894373a917d4", "value": 140160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762650099, "uuid": "4aa990f0-facc-49e8-b229-f38bd7cfb8a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762650099, "uuid": "2264ba34-eb12-41a1-8189-ffcbca93b4a9", "value": "xnxnxnxnxnxnxnxnx86_64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d782249-bd06-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762649602, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649602, "uuid": "56b0d427-228b-4034-b8e6-51be3bb0f30b", "comment": "Malware payload (Mirai)", "value": "311e504896febd3f9b13dc9ee1dbdf12", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649602, "uuid": "9bbabedb-57cb-43cd-8a25-b6d573c35d40", "comment": "Malware payload (Mirai)", "value": "c9ea2cafa1624e1bd50ed1ebfadbd34287c6f093f61771c4185ab65cb3071303", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649602, "uuid": "f3e56775-7aac-4cc9-80e1-73a67d233a06", "comment": "Malware payload (Mirai)", "value": "d325bd7f62c72de5bc29c4c997cdc276b0c8b313", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649602, "uuid": "87f5704b-8224-4ad6-b6dd-7c4337f8e140", "comment": "Malware payload (Mirai)", "value": "5a883f898867a6265698c29a4f620747d2752b8cd7b4c439a565e88833e781216c548c46e3808e14ef7dc9a0834857a0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649602, "uuid": "f449c1b7-df97-400a-b5b8-f29d9cb541a5", "value": "T19813F160E845BE16DEBBAE16FC4593D4370ECACAFA9484D263C92F10B53109F9163D64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649602, "uuid": "684b3822-9db7-4ffe-add9-9908da5c67fd", "value": "768:gM3BgLKaMbYwnpk4f59nFjYGPmZ+eX+dhGViaGyjc6MGS4uVcqgw09E:XmLcbYYOALNPZrhjaG8C4u+qgw09E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762649602, "uuid": "a233adea-a076-41d4-b929-84d7da028482", "value": 42464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762649602, "uuid": "a34d776c-da9e-4929-9e0d-e69fcc0e590c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649602, "uuid": "4dc8381e-4077-4e76-8708-3fc84468150b", "value": "morte.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f2878ad-bd50-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762681253, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681253, "uuid": "94efe663-6bf8-4247-95f3-8a9d640c9790", "comment": "Malware payload (Mirai)", "value": "98bebfa5f781def250f6305302dc9cc5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681253, "uuid": "f5b490f2-79d0-48f3-ac01-7fb7f286d554", "comment": "Malware payload (Mirai)", "value": "c9ea9a8ea3b17db8fbfb2ff3ff98afc19bcf8b302b906af3d807d6ebc8fc66ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681253, "uuid": "aef29723-04d4-47a0-9d3b-867b121c35ad", "comment": "Malware payload (Mirai)", "value": "22ce37ba858bcdf42ea1c65d9266508549c46d25", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762681253, "uuid": "e8ad0bbb-f47b-4a42-89e1-83d1413ad09b", "comment": "Malware payload (Mirai)", "value": "54805d90339d5a4a4d4a16d1688f67643ba18dcbf906797a243d9c8d06dfbfbc41a4d3d2d34eaaf85d274cb408f80a44", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762681253, "uuid": "87f18aec-ac19-447a-8864-54ebce760384", "value": "T1482302006B3938D2DE64DC73AAAC7982B6DF36B9C0E91057165988442CF5CB279BC5CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762681253, "uuid": "16ded93b-000f-4239-9c30-0e73dcc9d8dc", "value": "768:fKwSL2f0t89ITC+ZNuunhQiUDCEs4RTqFUgA/dNDX6LX18cHVh9q3UELm8:SVqfc8aTC+vnyu4l8UT3il8NLp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762681253, "uuid": "dab5fdd5-8472-4138-9f3a-63b2f6e277ae", "value": 49252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762681253, "uuid": "be91ace7-0b0c-428d-96c1-610d998b18d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762681253, "uuid": "2e8af825-8c3e-41fa-a660-ef8d71130eb1", "value": "morte.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa3560b8-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677164, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677164, "uuid": "285fe4f8-33c9-4833-b573-62dfb8367257", "comment": "Malware payload (Mirai)", "value": "d55b2cdcc56364ede8ef8c5cf388ae38", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677164, "uuid": "b49f43aa-a1ee-41b7-b08a-4e051ac04452", "comment": "Malware payload (Mirai)", "value": "cbc4aa3050b5e3a8d975f129151efae6a416c4a45eb1db4f118eccf5c311e34d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677164, "uuid": "70571707-4ff8-4cf4-b98f-caa350aa6e79", "comment": "Malware payload (Mirai)", "value": "85826909c3f1096eafb589950e5d695fbc3c8d2a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677164, "uuid": "5e5ea27c-1ab7-40e7-8069-7af33f897bf7", "comment": "Malware payload (Mirai)", "value": "8bcd69620ca731382aa2cab65414421dcf659b865fcc99ee422d912cb0bf7aeb991fe938ea608bc3e4f8c953a42ac439", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677164, "uuid": "b2e6b869-d089-42a1-b65b-324269fb1868", "value": "T10163941E7E259FBDFA9A8634477B8E16564833DA37D1C181D1ACDB012E6064E301FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677164, "uuid": "7d841b2c-91c0-4763-a38b-605ce9a244e3", "value": "768:Pqm5g5e2QFHkQFHV2VwzZmIz2Vw9y3aw8Q+4yRtreng5ensuOJtvgvutA0S8LMFy:XW5eRxLEg5enY1S8LMNB0+lTqkk4ktz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677164, "uuid": "55ef6f7f-1887-4f94-b9a7-bb3bd46cc888", "value": 72024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677164, "uuid": "8970457a-01ce-4e6c-8613-52e87e2c1872", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677164, "uuid": "8fa8066d-a0b9-4dde-8c3e-4c836648665f", "value": "boatnet.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12ec98a9-bd39-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762671327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671327, "uuid": "5a2758b8-b768-4df2-9cb6-4f4b99a894f0", "comment": "Malware payload (Mirai)", "value": "9aa2e81e69b0e9ba72a3541dc87b45fd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671327, "uuid": "9cd04ff7-82ba-4fb2-9934-3b0b5772ea83", "comment": "Malware payload (Mirai)", "value": "cc1e78425d690c7c9a31a308fc128fbc00b517ae3f057015a5e1f6d2bf666e7c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671327, "uuid": "98b3cf85-60ac-45d5-8fa0-3625d6948310", "comment": "Malware payload (Mirai)", "value": "f669bf33db4e2d12abe6a69a8c30a0fb867377b8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671327, "uuid": "fea96ab0-3efc-4ec1-bcfd-e621f4767162", "comment": "Malware payload (Mirai)", "value": "abfb719a3bfa724c700cd7696f3bb6875d1a51fe64a33b3a721c84efb59d6743f16529d918eac2a094beb02d1eed955a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671327, "uuid": "35b067a6-05c2-4cc3-8753-cefbf8cc5234", "value": "T18C23F16D49960AE8EB3DC4BA7B669740C0B5A7163493EE5D780BFC9F7DC00D82083AD0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671327, "uuid": "469e2a59-b8c1-428d-9b24-da6736549ee8", "value": "768:76y99cmP7KH3JmJA6zcv31dGduLab3TRkcu0Aekb+FfLxHe7IJgGlzDpbuR1JEW:b99c47M3UJAdv31yjRI0dFjE7IVJu1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762671327, "uuid": "ffff6a52-2904-4062-ba4b-453d99356fd7", "value": 45840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762671327, "uuid": "eec2eb57-1ea5-4934-b343-e48d0ebc3ff3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671327, "uuid": "77cbdcba-2975-4735-9881-f78474c2ad61", "value": "morte.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61ee9c1e-bd94-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762710544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710544, "uuid": "de1e84b7-0c24-497e-93ae-7d321dea63d8", "comment": "Malware payload (Mirai)", "value": "31a7671fdd46b7bde84e254b4dfdb396", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710544, "uuid": "75766789-bfbf-4eac-8a98-bd2424fff0b5", "comment": "Malware payload (Mirai)", "value": "cc487183002a4b29247e70844c39027a3b085a69c13c6a262d247512ec9a4887", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710544, "uuid": "b6a94f01-e92d-427f-866e-cf4c498901b4", "comment": "Malware payload (Mirai)", "value": "05bcbef80ad1fc4fa3d9a851e3b9daa7b64d6570", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710544, "uuid": "bd1bc05d-5413-4baa-8178-5c058d6b318f", "comment": "Malware payload (Mirai)", "value": "65ead3ec280c70ede3641c5325086c804e592b21cc8f09517c7bf5be7009de65b0f36164c97dbfcd07926c43b592d1f0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762710544, "uuid": "d402cd87-454a-4753-af20-a3d40681c2d0", "value": "T1A6F2F150DE006082F3732C72B5151804BF544ABCF5E6FABFB190A371AA1A09579FFD69", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762710544, "uuid": "99ae6980-a043-49b7-b191-ca4cfb301b4b", "value": "768:WMybgMOH48rm4BXNLKz7vzWgfUKq4WJfDhbBQu+vq4Jy3UWH:2OHfBXor/x7WJpB+vqLH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762710544, "uuid": "d96e6b30-86c3-47e0-a86d-a8c6541b2e0d", "value": 37288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762710544, "uuid": "dc6869dd-e240-4747-aac3-b77c4292c437", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762710544, "uuid": "cb8b2729-bf48-41a0-9268-7146ddb533f6", "value": "armv4l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13270679-bd2d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762666174, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666174, "uuid": "f75b73e3-4477-43b7-acb4-bc035fbf303c", "comment": "Malware payload (Mirai)", "value": "5366d3d98e509b4679c1fb5038ac5775", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666174, "uuid": "5deded79-af00-49b4-bf7d-1bd69cb070fb", "comment": "Malware payload (Mirai)", "value": "cd0601a2ec5582a0b70034fac8b0b03d950c43d171c123e1858ed0fcfc40a31c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666174, "uuid": "179316e7-7c1d-4fd8-9b9e-069750f6ae76", "comment": "Malware payload (Mirai)", "value": "2abb5713e6f73bdc007bb088c40ca71dc22a6386", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762666174, "uuid": "99350f2c-cc16-4191-a930-cb40508cc76b", "comment": "Malware payload (Mirai)", "value": "8bd94e52db8ca56c3dcf012cdbb2190fac8cd03e36c6598279335e7b7865f06de0a67bb92155d25d888d5d6a154cfbcf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666174, "uuid": "99af4072-4c59-4cbc-b9c0-30b08599bc25", "value": "T13A63128796D2F0AAEE837DB7E1953D38DA24461AF5FF5031712F1442275B1B522F84C8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666174, "uuid": "c1004009-ea36-4025-99f9-f9bdcc67d34b", "value": "1536:MKzVEWSHUmF/2WwJogZwrzQhzGzhIQ3p7ef4ll8QkE8izf+3Amfa8+blFY9q6rP7:bzyHHUmFXwYEzGz/pefGlgkfoAIa8+pA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762666174, "uuid": "4beee436-d300-4cad-928e-02b866546ec0", "value": 72364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762666174, "uuid": "46f08b77-44c6-4e3e-87dd-d7268f3c1da9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762666174, "uuid": "a054005b-6b68-4ac6-b7aa-181f5f59525a", "value": "xnxnxnxnxnxnxnxnpowerpcxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64a0cd3b-bdbd-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762728158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728158, "uuid": "635dd55b-0d85-4d10-a1e1-c5676951c06d", "comment": "Malware payload (Mirai)", "value": "bd6429a1f929ed95c473efc8d3525e06", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728158, "uuid": "d5de34ee-f884-447c-af5b-83b01f0e082e", "comment": "Malware payload (Mirai)", "value": "cebf0476ef1970c64e795d5afa480a9aeb7b96104bde11c5fc77fcc85a7d60eb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728158, "uuid": "851dd42e-9bed-44f7-b6b1-a4cbc4ee8913", "comment": "Malware payload (Mirai)", "value": "fec6ce916f3f81be188159aa63f82c6dc24c018a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762728158, "uuid": "4232d39e-68a0-4de2-b436-d139418a9217", "comment": "Malware payload (Mirai)", "value": "a8510a6a35f5b7b0fdd81a29cbf8f280c1784b8b6818b3fdfc0f9bda31a3f72422743e1017a19d4202810e5354ac0912", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762728158, "uuid": "7f1b37e2-de77-473a-9c4a-c349433a66c2", "value": "T165531A92FC424A2BC1D402B6B5BE5A8D376213F9D1CB7227DD614B407BC5A1F0D6AEE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762728158, "uuid": "c7b603e1-d0f3-47c4-8dca-7b33de3bf9f1", "value": "1536:AkvvADrAJ9yAPw4+x60GgxDkRucdHHmo1IEwhg9y2IymQY2AUm6hh1Z/C/C:AooDrU9zo4lXC6hh1ZKK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762728158, "uuid": "e994a2c2-869a-44b1-ba6c-f80d88e754fc", "value": 63820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762728158, "uuid": "8058186b-7176-463a-98eb-ea5ff7c833cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762728158, "uuid": "7ad9c688-d47a-42a2-9acd-67c5e715ff75", "value": "boatnet.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0a597c6-bd56-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762684128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762684128, "uuid": "babb325b-1f93-4497-9489-bca462428876", "comment": "Malware payload (Mirai)", "value": "6faa52f6494f0e3ad15508e0411aaf10", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762684128, "uuid": "71b34cfb-c6cd-489c-ab61-46170f3606f3", "comment": "Malware payload (Mirai)", "value": "cf8a32ea107eff1a1e3c15a0652585e070a8a0e8fa26e686fef568a5fb804b6d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762684128, "uuid": "a577e5c4-cb7d-413b-8d36-4b517c05d9d2", "comment": "Malware payload (Mirai)", "value": "5aeb8ba999adf8b9668102161d423edf2032675e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762684128, "uuid": "a0bc57eb-28c7-4301-8200-251eab41f009", "comment": "Malware payload (Mirai)", "value": "59529182bfc105a72cd49f2cafdbd2acd59b6d36b6074407387b0bf25778a5b61ecdae68ec17fb7c4e2fc02861d1a2e2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762684128, "uuid": "65f0785b-95fc-47bc-b49e-01883619f59a", "value": "T1F723F1B7A7BECCBCE4029132057A2FF8F12A7E26DE42678B545DF27458F98441431A91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762684128, "uuid": "6be52a95-df66-4cc7-b25a-cee22bd73230", "value": "768:LsPvyiasMJkpbKuH5M5//t1tU/kIvI7jqA+FTcLlaHx0YM:IPVMaKM5I/l1XSI3qdTcaxM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762684128, "uuid": "16283ed9-abe3-4b3a-a0c8-64794b9839c3", "value": 46492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762684128, "uuid": "986fabd4-8189-429f-80d5-62481687d93f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762684128, "uuid": "0928f751-1028-4ea2-91f6-ac463e47e10c", "value": "morte.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86fafa1c-bd68-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762691708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762691708, "uuid": "a3ab3af3-ea54-4c1e-9776-d4784c535fe7", "comment": "Malware payload", "value": "40784dca35fa06d4c4cb932e101e56ab", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762691708, "uuid": "15dc646b-e8cf-43e2-8537-3647cd70b3bc", "comment": "Malware payload", "value": "cf9cdd5d26283d31c43eb4df35a0dfc867da74441e5363890a84b988d8514c62", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762691708, "uuid": "97f7d1e5-7318-47c0-b9e7-8f07b9d614db", "comment": "Malware payload", "value": "b105724b5bee4ad43b23cf35d8d29ff231f94aec", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762691708, "uuid": "3ad8cc2c-12d0-4112-bf0f-c1d6f4f818a5", "comment": "Malware payload", "value": "d9349b6d5a3120cdfd315ca96ca4336c1734481ecf19375cb3cf57900eabf1bef75d803073164d4265cd2e85e643de72", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762691708, "uuid": "a094fab4-c69a-4c99-b7aa-ecb9f44fd167", "value": "T1DD33E522E913D177D38D0EB0E9079E5ACE796CA6CFE071C3FB911DEA08209D5A739605", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762691708, "uuid": "c2e6c4dc-62dc-4963-8a07-efaa2ca70371", "value": "e44ab922d75327a3c67ce12ffb001154", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762691708, "uuid": "452507da-811d-45d2-9c5a-acca97963dee", "value": "1536:9NKW7bUJASj9+gJjprSuC/q69XE4knG8z0b:fKW7bUJASj9+gJj5Yq691+0b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762691708, "uuid": "57345008-9a84-4f15-802b-190e90d37e7e", "value": 52224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762691708, "uuid": "12ca1102-4145-4af1-a152-8d61ac1e62ff", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762691708, "uuid": "7b8a1283-a0c4-49c6-aad8-e0c8896b0267", "value": "Dll1.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afbf6d35-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677174, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677174, "uuid": "8f3d5f45-1a2d-484b-bdaf-bfaa1b136a0a", "comment": "Malware payload (Mirai)", "value": "c62705e895a0d3458017e4b896bbd4ca", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677174, "uuid": "88a3694a-0284-49f1-9cd1-4ff24e922c77", "comment": "Malware payload (Mirai)", "value": "d1f5fbf8658f470a67230e03d3977599a8bed261e67da2b2ef7231a3ba1ecc8d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677174, "uuid": "90b0dc6a-75a0-4b73-9d16-81d0ff0bee44", "comment": "Malware payload (Mirai)", "value": "f82f9b9153c5d774db78f6ce3b79e6f13859d740", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677174, "uuid": "28e88413-d4ac-4190-afa4-65b44658727c", "comment": "Malware payload (Mirai)", "value": "055d718543d9bc6acbf9358429ab39acd1023043350d20ce700ec451310ee84714690fbe5f948ff7c3e6a1cd5436fe5e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677174, "uuid": "af9c4c1c-75d9-4d16-b6a3-37933dee55b6", "value": "T19033E707F84281FDC55AC134477ABA3AE93671EE133CB6A777E4BB222C56D224D09D48", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677174, "uuid": "c42621b6-9ab7-440d-9713-0882ea584b26", "value": "768:qxewNAGVQxjmABT39OOTMg6UD1vnw1HCeiKP52UA6xW91SLnsgcx:DwKGVtA1XTM9UD1Y1HI82UAj1SLs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677174, "uuid": "e2fbe5e6-b663-40cd-9c0d-c681fe615701", "value": 54528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677174, "uuid": "276c5de5-3cf3-4dd5-a81b-fd968c32d01f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677174, "uuid": "3ff20d14-93d7-45b5-8fa9-d6e4d6e7962c", "value": "boatnet.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d7ba5b2-bd93-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762710080, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710080, "uuid": "2ff9ca3c-f156-4741-b4c6-540874ea2ad5", "comment": "Malware payload (Mirai)", "value": "46c28e619f7651786c55b6c01407af1b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710080, "uuid": "ae6a6e87-cc6c-400a-b6e6-e1721b7f8ad8", "comment": "Malware payload (Mirai)", "value": "d2050e7e8266ec8dcc4ec755e8fa8a0046388ff6f415463601a26d5055c1ce65", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710080, "uuid": "a7367539-fd38-4ea8-891d-4e66f344bb26", "comment": "Malware payload (Mirai)", "value": "773ad4fb7ccaa5b32d779c0bc3a209a3ffd26d09", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762710080, "uuid": "9e5b9f5f-8b00-4e34-92aa-c11192f008fd", "comment": "Malware payload (Mirai)", "value": "d5da311307cc894cecd056e35758cbd60ee2448ebd15c62d6c2013da4d570ccb3fbc7c859a3eda616ec9d5117865c26e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762710080, "uuid": "d952f354-4d4a-46f0-b0b7-954ccb12ba85", "value": "T12CC36D92E743E1B6DC0546356037BB36D9B9C53E223ADE81E7B8CA39F832241C417A5D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762710080, "uuid": "c2f23a01-740a-40fa-83bd-7bd7c920757d", "value": "3072:nJFPhOOBFgdG24xQ5EwPd5H4H3NC0PwCmBf:JFJBidDPdaXM0PwCmBf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762710080, "uuid": "62e5c9ce-c9c2-42fe-978e-2487612d6caa", "value": 120272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762710080, "uuid": "0fb2bc82-eb65-4467-855d-3500ecb9ff93", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762710080, "uuid": "45fd063a-3721-453f-9e7c-6154d9331fdd", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d126f69-bdc1-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762729809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762729809, "uuid": "47932e2c-01ef-44a1-aa2d-003e72a72ec5", "comment": "Malware payload", "value": "c99427c560b233f5b1f7be1823474b75", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762729809, "uuid": "93c7fce6-1d29-468c-938f-51008483baee", "comment": "Malware payload", "value": "d2c37690d6c4fc2cfa348ce7f7837433c55315b96b4c9f767a32ad7fa9233246", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762729809, "uuid": "35e28d59-a127-422d-8b9c-61deeebd36be", "comment": "Malware payload", "value": "b29435b072f9636e8af236414869efc16a85de7d", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762729809, "uuid": "4284bb0f-cceb-47ed-bc3e-672eb7cf11e1", "comment": "Malware payload", "value": "3316214f44483be23d6b29481365b23a81ee2da33760dc8140df57702304c220ee86dab15fbb8cbfc7f383573ee1ed5e", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762729809, "uuid": "2960a0a9-5663-43a6-8bfc-f8dd6fa9a93c", "value": "T135461204F7A5061DF466FAF62D21711146B3BE479815C649E3B33088EA76E43CE6C2EE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762729809, "uuid": "35c08636-ded4-4693-bb64-b1bd41aa7676", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762729809, "uuid": "939c94dc-eea5-4751-8dc6-7531f9756789", "value": "98304:lh/evJLeTmDDi9UeK7kqXf0FGxLCbD3ha5Uc6v6O3xUM3/L9LI/cbt7/Cp/z2OIC:lh/ev5eTeW90kSIbDoUcfOhzT9cEt72p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762729809, "uuid": "3cd75f33-9755-4da1-ab07-da52f01bdc34", "value": 5858848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762729809, "uuid": "7de53341-e58a-4bc1-9eba-69d16f266566", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762729809, "uuid": "b3f87395-cf42-4cfa-9435-5b73d3022c4f", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "359d44c6-bd7f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762701450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762701450, "uuid": "66ed845d-1a34-4ff3-82a9-5dc530e9fdd0", "comment": "Malware payload (Mirai)", "value": "17b9666c99a2f3f5bdab40c22d39c37b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762701450, "uuid": "abb53df5-8e71-4854-9b25-23a46248a507", "comment": "Malware payload (Mirai)", "value": "d2f06e6fc974bcdbb6d78bd607537f5801bba0b8ccf9f15e98975a4278263044", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762701450, "uuid": "a5dbdbd1-5437-49d4-9e3b-853e8c21a859", "comment": "Malware payload (Mirai)", "value": "b253f8dfc60bc537a82d7dd53724a064fe6c1b95", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762701450, "uuid": "7f1f1ef0-f180-49b8-999f-50e75fb57b22", "comment": "Malware payload (Mirai)", "value": "26251dd095d593dc818b5c651af015b907f5f55d7142e37de81e07e8e1fc76dfdcb267d94b1a8388e3da29be841c50c6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762701450, "uuid": "93b9502e-53b0-420b-b279-1a8f49da02dd", "value": "T19C23F1FC2F4A514BC02D157E02B776632214E0485EFC9BD28BD63C9A9D789B5EA1CEC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762701450, "uuid": "0f84dc27-0748-41ae-a89f-ba59eda5fde0", "value": "1536:eOYSCC7UrutAT476VeamduUbD4+wmnouy8Gyz:e8CC7es5Y7Woutv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762701450, "uuid": "354ee2de-6e4d-42a0-acc9-ba9194fb5791", "value": 49448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762701450, "uuid": "53eb788a-3ac0-49dc-874b-4bcee71028cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762701450, "uuid": "2b05084a-b911-434b-af75-47d064c010e2", "value": "morte.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "475f033b-bda6-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762718230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762718230, "uuid": "1b148a4e-048d-4e6f-842e-89497edb9a99", "comment": "Malware payload", "value": "dec907d5d16d3e7852fd981d86670ab3", "object_relation": "md5", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762718230, "uuid": "67bf58f0-b352-41ac-a934-3226b1436bfd", "comment": "Malware payload", "value": "d402498aa5c5cb5b0019da7f31ac217ba29a764eb89c11c3428991946e8cdbfd", "object_relation": "sha256", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762718230, "uuid": "f07b97cf-0731-4563-937f-2a70311f6c6e", "comment": "Malware payload", "value": "f958f1121f0fee54f41d451ba79737d3eed075a9", "object_relation": "sha1", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762718230, "uuid": "1cbd6d0a-9e79-4720-988a-7324ba1d30bc", "comment": "Malware payload", "value": "e42b0e82a09cd608c7ff5ebf0f49c60ebabe88ca458a2a81c359609418e18e4a1c0916e245d648ee459d4e0e6e55af4e", "object_relation": "sha3-384", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762718230, "uuid": "3773ed64-fa67-4073-a8da-ff978deb2434", "value": "T1EC513D3AB1E65B1045200CA0A436ED4213D5E8C7CFB9054BF6E652C20EB9789CEF05E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762718230, "uuid": "b87ec044-3394-4f49-b2d3-aa10308233a4", "value": "48:P4DY777x/CDGqAFSteiu5gXdm4jk2lLqPjrX3ZdXltgt6tYr4o:P4DqSteiu5gXgS8PvXpNP+k/o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762718230, "uuid": "8374c63d-8e6d-41a8-a1cf-760737f4c969", "value": 2480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762718230, "uuid": "5efb4cfb-dd96-49fb-ab83-51b1f72882d1", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762718230, "uuid": "286968e2-5c5d-4c1d-a770-bb8b8e13f15f", "value": "craftrise.bat", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ccf6cec2-bd05-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762649305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649305, "uuid": "b1be23b6-fa5e-4f94-8b7c-489953c3c60a", "comment": "Malware payload (Mirai)", "value": "78cd70cd05c10ab979bf8751577ce771", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649305, "uuid": "74e065d4-6879-4484-aa52-a1312580ff07", "comment": "Malware payload (Mirai)", "value": "d4d1eca3ff7776e94beb50f41ab6fcf5de5dfe6533f7259f88cd3491d7106590", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649305, "uuid": "7e727706-95a7-4890-8f13-59cfb776bd7a", "comment": "Malware payload (Mirai)", "value": "ac897d2b985d26a60530e42a4807019da6d238f5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649305, "uuid": "02fd93af-5c10-42c8-bd61-82e134ff2b09", "comment": "Malware payload (Mirai)", "value": "248c4f659bacb8ea5f9d28db85c3494d954eeb92263dac8ea640824c4546912ddf9cb529dd5f161091d0ae281f49cc51", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649305, "uuid": "e71a197b-280a-43ae-a708-c7845b27a067", "value": "T12203F0A0A2B0E956E1B8D4B58EBC01C36FABE334F4A3780A7954015AB5837FF5D160D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649305, "uuid": "8bbf6f8d-1f6a-4e73-8d97-a8f98e456329", "value": "768:gPi2d7V86CCZjXWZxR9uTFcD8FpIsNzpdMN9P2zjcRMNq3UYd0:gPi2E6CC5GZx/uBc4Qs9wlMjJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762649305, "uuid": "a789a65b-d340-4e38-abe5-96fe6493d14c", "value": 40840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762649305, "uuid": "408e6b7d-b500-4857-9860-e07194418af5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649305, "uuid": "83a617f4-1a99-4ee7-bb82-06cf4a98acc4", "value": "armv6l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b967fbd-bd56-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762683797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683797, "uuid": "c5db25fb-0a11-438f-8358-4f2bc570b686", "comment": "Malware payload (Mirai)", "value": "91455bf4b9dd32bdad6b5ec0a6fa99c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683797, "uuid": "bfa37f55-e506-4642-9dd7-f345924678d3", "comment": "Malware payload (Mirai)", "value": "da12e0c8430ba431e4b12a574792b51bfe2dfd6f45c427dfd88c5d88c15c05b3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683797, "uuid": "b9b2de03-be53-4996-94da-6aa3891c6e59", "comment": "Malware payload (Mirai)", "value": "a549108ac6d8d0b8594b7844ece848cd001ddf61", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683797, "uuid": "46d4f226-6eb9-4f66-b886-2128f071de95", "comment": "Malware payload (Mirai)", "value": "582e3a04c55b6c233c4ee284b3e48fcd1703c5aabcf5ba5d4374f25b222cb46894540bbecba36c6792d039db3056e5a1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762683797, "uuid": "ac787df1-eb9d-42a5-93cf-3ce716cffa4e", "value": "T190B34C0273180B47C1970AB02E3F6BE587BFE5D121E4FA89655FDB5642B2E37144AEC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762683797, "uuid": "dca0d4ff-0d77-4ecf-bb8c-f0d27bad098a", "value": "1536:3+3w+lY1zc96dBudfSt2/8p8KfS9se/9L+pu29zL/xbFa9d:3+3w+lY1X8St2/l7L9+u2K9d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762683797, "uuid": "b7cce17d-d1b3-460e-bd1e-8a6c910029df", "value": 108108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762683797, "uuid": "13a68dcf-d536-45d7-bb96-867f0db8fe8e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762683797, "uuid": "459c9bb8-06e5-4d1b-8122-fe22dce1c96b", "value": "morte.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "272960c1-bd9b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762713452, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713452, "uuid": "f8f3a944-0d5c-42c1-a31c-13cb5314473b", "comment": "Malware payload (Mirai)", "value": "b11e70d5006bbb3ab44c111eaa77ed2f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713452, "uuid": "817df679-2248-4e39-a7d2-14f51bb62800", "comment": "Malware payload (Mirai)", "value": "dc429fb2adf667330b96b8baa54ad0f9dc6de16c527d4de8135087107cc37c12", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713452, "uuid": "89af0925-eb93-4bda-a333-ff647597ebdd", "comment": "Malware payload (Mirai)", "value": "17ebf7fbd83d6e8b683fd00bfd7143f1ab7a5684", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713452, "uuid": "66ad75e6-53bd-4a97-a40f-d381f2da573a", "comment": "Malware payload (Mirai)", "value": "b04f0547f73cb1df786ace198bbbcd9003c53de7048d71a474ca8eb2da2dfd008c8b9ce3d07c6b6e1324a453b9f18c8c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762713452, "uuid": "aa17924a-ad16-4d84-99bf-6a45505464b8", "value": "T1613302CBE37A93BDC03120BE117502E436154892BD8E633B596AF26F5B562693D01DB0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762713452, "uuid": "3c159ce5-68ae-4843-a824-0eba4bcc2bf9", "value": "1536:Z/NgLll+V+RaGlnITojI1lgwUWF3nn3YZmt3Mtms6XqxYmQFi:Z/NOQQR7jI1lg5W33yIs6a6Li", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762713452, "uuid": "8203e97e-b704-40f5-b34f-87a4e5e028b5", "value": 50728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762713452, "uuid": "4f827105-1c86-4c01-b852-0061b5cc896b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762713452, "uuid": "d6ee3298-8fcf-41db-9f55-43633a384d5d", "value": "morte.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6449c6e-bd4c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762679842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679842, "uuid": "8282028a-9253-47d8-8445-258005f602a9", "comment": "Malware payload (Mirai)", "value": "d310182bdbde7a16d12ed600847ea7a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679842, "uuid": "fe2a696a-0c05-4079-8f6f-5b1b25ef6806", "comment": "Malware payload (Mirai)", "value": "dca6fc83b5fa859f3b88c9b45d35ce54f9025262c85619f456406eae171bc1c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679842, "uuid": "e351861b-e8c3-4903-a04b-b4150ad92a81", "comment": "Malware payload (Mirai)", "value": "e904a7be6ad72933c90d0a5c10d3e1226561202e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762679842, "uuid": "79f8998e-3b35-41ed-a287-60b3c98f33f7", "comment": "Malware payload (Mirai)", "value": "db3a7e7c507fb67ea94116e579628550066b97e2aa64706d89f80decd0e8643218007b92f2cd476dc45521ea75fc43a6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679842, "uuid": "ddb63d08-e5fa-4b7e-8085-9e2f439ae6e6", "value": "T1D9937EC5F683D0F5EC16013061B6FF379DB2E5BA231EDE87C3A4AA726C22541C505AAD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679842, "uuid": "d6bb9a40-20a4-4e6e-b26e-66f8e415f8b1", "value": "1536:F2bHI+3PJwC1Nw5I3uC92x6mz2docdDj3d9jtGVuh5JGayZiiOc:IbHI6Jw+f92wmz2doYDJpUW5pRiO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762679842, "uuid": "9a675596-c9f0-4d44-bf6a-a8429c34e879", "value": 96020, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762679842, "uuid": "866aadaa-494d-4bff-8a7b-a79d323d16c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762679842, "uuid": "e3b8ade5-6e95-4221-ab03-04837fa9b886", "value": "morte.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c557a7fb-bda3-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762717153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717153, "uuid": "28438111-6f17-4a3e-8234-c53abd81ab6b", "comment": "Malware payload", "value": "8b8314523f544d2cdeff2603be22be75", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717153, "uuid": "358be869-e155-45c1-b481-173310a7f28c", "comment": "Malware payload", "value": "dd12cb47aae0d70f084f7fe3c6c58a1e417cf8431af5a637473f970bbcd04fe9", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717153, "uuid": "90195cce-c7ec-47c7-84a4-b8ee278eb5c2", "comment": "Malware payload", "value": "7363dac35fc1f0883913ad98229c40c7e45aec28", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762717153, "uuid": "0669dad7-3179-4689-8e35-c074ad9b3600", "comment": "Malware payload", "value": "017648874bc94f6d665315dc0b82dba4cc3746b69f70e58f30bf258082496d28bcc9a477ff49996ec9cd10ce0373ee1c", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717153, "uuid": "eb53debb-2b0a-4522-9ff1-c44dc5cc4411", "value": "T11BD48E7AA490D297FA1880B504F2572DE9217435C6762AFF05A0D1A2D91BBF08FD07FE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717153, "uuid": "9355d505-1cf0-47e7-869f-01267e478d7f", "value": "93136d667479015878a35144e3d585a7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717153, "uuid": "4696c5ea-b62b-4de1-bf96-fccc60f0e462", "value": "12288:b5iIot+cETT1qeGSAFcApgLRouFg8OV8cgzVPjdQl4UQEakwmrwgPi8:1iIA+LscApgLfIgJjdQGUQHZmrwgP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762717153, "uuid": "703faed5-2b7f-4203-b3e2-3b394e33b3d5", "value": 645120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762717153, "uuid": "73868569-d376-43cb-a75c-1fbe3b09e35b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762717153, "uuid": "1775c75b-5e67-4967-aa3c-77230f88eba4", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2013eb78-bd37-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762670490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762670490, "uuid": "4ad5c235-6223-4942-b231-21c2058fec0a", "comment": "Malware payload (Mirai)", "value": "1cbb084680567f93adfb39cd008316bb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762670490, "uuid": "132d0a23-799c-4f02-9ca2-053cf942120b", "comment": "Malware payload (Mirai)", "value": "dd7b26703a576962c9beef6bef6e0ad44a8f61c546548f954ca3cdbeb9badb2b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762670490, "uuid": "7e3fcbbc-2a9c-40bd-8d9a-abd523feabef", "comment": "Malware payload (Mirai)", "value": "61b158243c418bde05b2776a6eb9f1389c86fe25", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762670490, "uuid": "a4f0be56-3ed4-48f8-a892-eac5b2e4e6d9", "comment": "Malware payload (Mirai)", "value": "c614be9fbc9ecbef0fb5a92f7009184d97223cd881eb0dadd701395e3b642c8de637d45343898b5afe46bac7407ddeef", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762670490, "uuid": "a31d02dc-66c7-4575-b051-448a558c363b", "value": "T168934922FD75193BC8C4A47722F34335F2F6478A25A88A1F7D610D8EAF2565032A76F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762670490, "uuid": "b34b5789-6859-4baf-abfa-82e3f887459c", "value": "1536:2L/TdLi4omXgJEE7nDygx9FRHuFvzCluut9Go957QRQXWot7OJ+fa:2/k8Hgx6wHGoP78f7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762670490, "uuid": "83460d76-0e72-4c61-b0ed-66ff2b56399d", "value": 97448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762670490, "uuid": "a4f3f849-0211-46a5-86e3-75ff8fca7ec5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762670490, "uuid": "d9d6e0a1-929b-4c7b-a9d0-817741d2529b", "value": "titanjr.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67e02384-bd32-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762668463, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762668463, "uuid": "21a12998-d542-4c60-9a53-480381a7ff39", "comment": "Malware payload (Mirai)", "value": "f481c2514a970fea534fbc9af63b9267", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762668463, "uuid": "c6e1edb3-20db-451d-8a14-511a90e864be", "comment": "Malware payload (Mirai)", "value": "e02ecd2d236148483e7b715fae55cfa06b794e3bf7287d9df3ea2d2c08614b57", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762668463, "uuid": "3ea6ca3e-ded7-45fb-ad9c-5b0583be0ce5", "comment": "Malware payload (Mirai)", "value": "f0a057bb7fb439aa63de731916017de2e13e2570", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762668463, "uuid": "075aac26-7cce-461c-8c50-e79230cdd86b", "comment": "Malware payload (Mirai)", "value": "a12294d3f7bb51ee333245ef36538a99657df9eb2b78bdcad488950d0797796188b2f20066dfa5ae292c8cd911eb2452", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762668463, "uuid": "91119456-4045-4514-80c0-d2aea9ffc56b", "value": "T1C704392F248191F0F6411B74ABCBD3D76D290BBF519990DF6B416329B6E0B77A02C487", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762668463, "uuid": "aeb1f255-80e8-4467-bb4b-45becc852a1a", "value": "3072:vnlHhZ6ZuTgQ8VhwhlUQLBEldVQqzOQJSvrnF6P2OaN5B9yNkNxn+u55G8/9UX5:PrgS8k+tLSQdBMBqkL+u58Jp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762668463, "uuid": "ec5d3989-29f0-4bfe-b29c-8c3ff51e5374", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762668463, "uuid": "30c8a7a7-7c1d-4fd2-9a9b-4fd5f21599be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762668463, "uuid": "37559de0-13be-4eed-8ffe-95c8c5fe5a3d", "value": "xnxnxnxnxnxnxnxnor1kxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "180400c1-bd6f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762694529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762694529, "uuid": "a6b726df-9e4b-454d-94a7-cdbf7171c3a1", "comment": "Malware payload (Mirai)", "value": "509e964733f095729bf5e6b7c18b9783", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762694529, "uuid": "7f68a561-300f-4e10-9677-f265d8ca259a", "comment": "Malware payload (Mirai)", "value": "e045ce0aff11270885fefcaab341a7bf67b27f998292a923609cec9573644833", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762694529, "uuid": "539cb6e9-7127-40b0-8960-7d727d48c89f", "comment": "Malware payload (Mirai)", "value": "67dd426410add0182b3dae6e0222d916e3f8f3a4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762694529, "uuid": "e7d952d3-47be-4fc9-aea7-cc7f98e7a374", "comment": "Malware payload (Mirai)", "value": "a90f4f320c92de9f1e0dcd52cc80a6bd04bd39dc0a3141c2f4ff99e412856850939b3d3611d4b6bdca2fa11c36a7a2e2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762694529, "uuid": "b5428183-1c17-4749-9c4c-684430e78137", "value": "T1F1535BDAA400CE3CFD4EA57BCC1A4B19B52573415A930F27A76AFCA35D320A49D1BD81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762694529, "uuid": "fbdbccaf-fbd2-4e9d-a302-e3bc39a29c91", "value": "1536:iLoNuWvlKKWV/ev3Peeeee0n+3CY2j+DTVd47E8lH7aTP5F:i8xvlKXevfeeeee0+yYNTj47HQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762694529, "uuid": "d5efc480-aae1-4ce4-8d5a-818d2a9dd9a0", "value": 61776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762694529, "uuid": "e27fc51b-f521-4b17-b533-dbaf12191412", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762694529, "uuid": "d7464d30-e539-44bf-ae4b-42a70073e4d7", "value": "m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9494311b-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677128, "uuid": "95a9b1c9-c294-426b-ba30-bebe14d8f2c2", "comment": "Malware payload (Mirai)", "value": "c9e04332d17856be7efab005c5dee873", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false }, { "name": "x86_64", "colour": "#DD69A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677128, "uuid": "788e4199-2aff-4685-961a-bb645a3a62be", "comment": "Malware payload (Mirai)", "value": "e0a3c9b38d2d1c0fd90fee34986c07d2c2ae613d06f7ac76acd78fafa89eebef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false }, { "name": "x86_64", "colour": "#DD69A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677128, "uuid": "68121d38-d8f0-42d7-b058-e95f79c6ecad", "comment": "Malware payload (Mirai)", "value": "883f355319a533806c24e71820af90a742a7132f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false }, { "name": "x86_64", "colour": "#DD69A1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677128, "uuid": "decfadc0-eab3-49ab-bfbe-e95ff54e8570", "comment": "Malware payload (Mirai)", "value": "d7783f6e086321b8ab140e5d0205f424993ccd4da27b00b407feee9282af5f7e1ad2fb485705bb00c85702d0061f22e3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false }, { "name": "x86_64", "colour": "#DD69A1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677128, "uuid": "62f84e72-c536-4319-8243-4a9f0b5d419f", "value": "T19AA2D030C7795D5FCACB62B548526A829F171F668B4F0A6B2022C5C815F2878D52CEB7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677128, "uuid": "c6cc177b-3c44-43cc-925d-3d743fbe8650", "value": "384:FWQL/0LEWq53QvnCTDVMGpZXnDxAssi7eVc11FW7FThkpDjcOiFqcJS:FWfLB03+nCnXpty/iKeCTGxns8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677128, "uuid": "bbb56792-b925-4ca2-aba2-1663ffbf08a6", "value": 23380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677128, "uuid": "0b3785b4-d345-4ad2-bd61-1ee001aba489", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677128, "uuid": "de544f8d-982f-44b6-af58-b7b168910d84", "value": "boatnet.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ec926e9-bd45-11f0-a129-42010a9c0007", "comment": "Malware payload (GoToResolve)", "timestamp": 1762676501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762676501, "uuid": "0cfce6fd-936e-495c-9f05-4a0d2a3f1bd8", "comment": "Malware payload (GoToResolve)", "value": "21c7d66c0b06a29f264b0ad804d25af6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#D940D9", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762676501, "uuid": "f63820e5-2d07-439d-853e-bca16e36182a", "comment": "Malware payload (GoToResolve)", "value": "e0ca1796fcdcc56c30c4ecfb79fbabe4767ce5d2ccc7c6148510d86237f07bd0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#D940D9", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762676501, "uuid": "3f1a9034-0247-48ab-ae7e-40e47dddbdca", "comment": "Malware payload (GoToResolve)", "value": "14eba693deff0889550dd061d6340ef318b6ccc5", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#D940D9", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762676501, "uuid": "dd3edc51-a653-4046-9c72-5fe3422cb568", "comment": "Malware payload (GoToResolve)", "value": "d6565d9e73abade3c7f7d09137f31fd13288e6f7759479a498cc3eefcf62534f61ad0e84f7bc3e2b1a31aec3cb604389", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GoToResolve", "colour": "#D940D9", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762676501, "uuid": "592cad29-ec51-4d09-8347-d5104f6e6020", "value": "T1423733313156C031D54202F2AD69AFBAD3ADAD35477A44CB73E86F2AC7314C27A31A5B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762676501, "uuid": "7c17ac71-1367-4ed4-af7f-5498a02a5128", "value": "5077e3f17a4376dcf6421ee6917bf4aa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762676501, "uuid": "599ee4f3-7818-4990-b271-ccbfc1798c8a", "value": "393216:HchTd2JfbpEMIXXQEft9EDd8gEgSPjeh+DA9eyOhHy1ibWMxXsU1+RB0KzY:2TkyRXX5Cd8cThp2y1ibDszRB0h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762676501, "uuid": "39d4cee3-dc17-49d2-87a1-a4efd05217ca", "value": 24479256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762676501, "uuid": "e51e8469-52a8-493f-8be7-8b40360e3caf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762676501, "uuid": "e5df7e3e-6302-44c0-9053-b3cc4df0bc14", "value": "ZoomWorkspaceInstaller.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cbe5572-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677115, "uuid": "ee11f964-0ea7-4ab1-b8fe-c9368f6f9571", "comment": "Malware payload (Mirai)", "value": "d22f6514d82619a34a524258ec51e84e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677115, "uuid": "22d5aa19-56b2-4538-809f-cb1ee96ed31e", "comment": "Malware payload (Mirai)", "value": "e15bf8de480256278572093cd57df3a490ecb743a5acbe78a0a8648f4dcdb388", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677115, "uuid": "8cbb8f5d-9e0d-46ff-b51e-943f0ae75266", "comment": "Malware payload (Mirai)", "value": "a30c721ebdc4cb2832e13eee3f5083ec0fd63a89", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677115, "uuid": "52137516-009b-43ca-808d-e8615bdaaa24", "comment": "Malware payload (Mirai)", "value": "579eefc818cfe39e5e54453c5410fbd72b430581f0dd1302681a4df28d7a9a79069ab57894e41ff721d904581a089412", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677115, "uuid": "9485cd62-6945-4086-bdea-07b49d51ab7d", "value": "T149B2C03A2601586ADC53C23A1AF517822DB00F95BCD3E81A665EF9D34F471C4EC67BC2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677115, "uuid": "0b4049ab-ba2b-4cc5-a041-7e60522632cf", "value": "384:BeD8XeJRjhaYb5KgJ4BYXxudJhxnWaVfsfFAHH8YOJbdayxHLoEJgGlzDpH7uNjH:BeD8uJ3B3udJPnWapsfFQ6XBEEJgGlzs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677115, "uuid": "7bd050bf-a8c7-414e-a2c5-df1a871d68b9", "value": 23824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677115, "uuid": "9404d0b1-1703-4074-8e92-29009b2f56ef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677115, "uuid": "4b40faf4-1b8a-43bf-a01c-8eaf09ea4932", "value": "boatnet.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de20c473-bd06-11f0-a129-42010a9c0007", "comment": "Malware payload (BlankGrabber)", "timestamp": 1762649764, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649764, "uuid": "baa2531c-f3ee-4d91-b52e-455e213efcba", "comment": "Malware payload (BlankGrabber)", "value": "b0ef18fb1aae70acada318f48d1916db", "object_relation": "md5", "Tag": [ { "name": "BlankGrabber", "colour": "#21B759", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649764, "uuid": "07b91951-a032-4537-b758-b7a433d02184", "comment": "Malware payload (BlankGrabber)", "value": "e17d4b959a5acce0fe07b3ad31158842e7c19fcaafd6c9aa37f5f161e914b4ea", "object_relation": "sha256", "Tag": [ { "name": "BlankGrabber", "colour": "#21B759", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649764, "uuid": "1b188d88-544f-48ea-83a0-115f7ffb9671", "comment": "Malware payload (BlankGrabber)", "value": "44291afecf04b86572c2ab8420982771bf3383a9", "object_relation": "sha1", "Tag": [ { "name": "BlankGrabber", "colour": "#21B759", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649764, "uuid": "b8919f07-0141-4d43-8b5b-54fe8a666e0c", "comment": "Malware payload (BlankGrabber)", "value": "abf07a55396f29692562289fc53e08524aedd0a60ef195259a485fde032b5a83c48a2ae703118a24ac40803c152606bf", "object_relation": "sha3-384", "Tag": [ { "name": "BlankGrabber", "colour": "#21B759", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649764, "uuid": "15f51838-910f-443d-a2ed-0ecfc22ddd66", "value": "T1FEB633086BDA21FAF5E3893D9D12C83BE771BD621F64C2DF026912691E139D1097B372", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649764, "uuid": "d6283673-d66d-46ea-a34f-5145ba0fbc83", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649764, "uuid": "e57e0c86-c10b-4553-9869-c7267efef203", "value": "196608:LpNcvGgOj9fZwQRCgjmpXHIEGn7jpfPjRMsqezL2bMyAnDky0:Lp/gSw8ERIEwfPjSDJbSky0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762649764, "uuid": "cf9d3d71-2ef6-47fa-9a4b-4cdf5adc51a8", "value": 10632580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762649764, "uuid": "bee77ca8-b9bf-4a84-b46d-ecbe9d92f2c7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649764, "uuid": "c4f842b4-8899-48ec-825b-d5a3e31e3125", "value": "Roblox.Clip144.Medal.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0daed8a7-bd47-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677331, "uuid": "b0a85657-fdcf-42f9-9213-551d33b3c79f", "comment": "Malware payload (Mirai)", "value": "8512c6943760d3024173b7dff90634ae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677331, "uuid": "9814a25b-7867-4062-a29c-07a4c9e6f1a1", "comment": "Malware payload (Mirai)", "value": "e1c052a37136988da69abda566f288b15484adb58e12a0cd1dcd318d51660eeb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677331, "uuid": "cc60a1c5-af56-45f3-b18b-fb138d19bc87", "comment": "Malware payload (Mirai)", "value": "4fc6e224402f18ce2c137af34e00c8fedcc61dcd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677331, "uuid": "15cbe24b-0877-4da0-a6b4-c207e5777cfe", "comment": "Malware payload (Mirai)", "value": "27229cb77944e0331943001e028810883b9056850f4b28869fd457a726892c3dc1f3d6cb9815408632daffecb407f47f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677331, "uuid": "900fc77b-9013-4cf9-ac52-393774f425b1", "value": "T13F144C46EA418A13C4D7177ABA9F424A333397A4D3DB730689286FB43B8775F0E63505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677331, "uuid": "091069af-9ec8-440d-9c69-b9e977785642", "value": "3072:5v89h6iNeSBCPnKhIABa2bRblc2xQsVVtC9/twBjoaOg3RmZM/9DmU:5vUwiNzBC/MDBa2bRblcSQsZCZtcjoaL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677331, "uuid": "49e0fe99-b68a-411f-baa2-74fcdad79652", "value": 196338, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677331, "uuid": "87feb75f-a090-4760-8e8b-2b04b1cccbcf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677331, "uuid": "776a6619-71f0-4826-aa82-685eacd5524c", "value": "morte.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e46d53e2-bd99-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762712910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762712910, "uuid": "6eb92657-9f64-4577-97a4-f41283fdad48", "comment": "Malware payload (Mirai)", "value": "085af696ba331310e587e330c14932a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762712910, "uuid": "2970d991-c3ae-4a6b-9ca4-84ff25ab43e3", "comment": "Malware payload (Mirai)", "value": "e2c421ca15d2d5102effd268f3b00331d64ef5fad99cdd7d33adc9f0f56cafb3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762712910, "uuid": "1808d72e-c646-4d42-8346-b0166c56e40c", "comment": "Malware payload (Mirai)", "value": "f7f86547600b81ebae507e151d77dffadcb3efdd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762712910, "uuid": "ca226017-cea7-4e69-8531-d787f4eb8850", "comment": "Malware payload (Mirai)", "value": "c7078e8f66dbba2cb928c377d904bed2031d98652e490c5a73223fe9dcce9550746374aa74841e5ed637542e44b8743f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762712910, "uuid": "3a37166c-331a-4a47-a676-0791f033ea8d", "value": "T135D36CC2F801DE7EF80ED7F6846B090A7471A741BA931626BB97BD97BC360D04C26D49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762712910, "uuid": "4e369510-4cc3-4992-9d8b-37ef1f1b06aa", "value": "3072:6+MAe2zcneEL8u/K3s3NhMw3f4GTWgplgBfrVZby3F8b:6xv2z5ELT/K8XhAeWmlMXby36b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762712910, "uuid": "59aa3271-6a66-4661-9e1c-efb83f109448", "value": 134916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762712910, "uuid": "eb0c31de-a70f-4e65-963a-f249006fc85a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762712910, "uuid": "351aacf4-7558-4837-a47b-4b7c71f0a591", "value": "morte.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11a9371c-bda0-11f0-a129-42010a9c0007", "comment": "Malware payload (QuasarRAT)", "timestamp": 1762715563, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762715563, "uuid": "0212403b-1b1e-4bcd-8b8a-97e9edd283de", "comment": "Malware payload (QuasarRAT)", "value": "4dfdb9c6f45172fc5a37fcb5e8645ac1", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762715563, "uuid": "99e95479-c9d6-4343-84d2-f10a4efd6dc7", "comment": "Malware payload (QuasarRAT)", "value": "e33d99b098ab4024c433cb374c2b28ebd40b2fac1d74541516958dc7ce354d07", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762715563, "uuid": "29cc00c4-cca0-498e-962f-f72679e5cb06", "comment": "Malware payload (QuasarRAT)", "value": "c89fa01816fed45068cd21b4257ff414a2038a81", "object_relation": "sha1", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762715563, "uuid": "c351fc40-69d5-4279-8221-aab28f53b96b", "comment": "Malware payload (QuasarRAT)", "value": "39f74219b0f4f98014a2beb31ee4f1a4cb65bc0dba7cf7101692e566ce553a6b7b90ec6172981be512ef67cc7d5ec297", "object_relation": "sha3-384", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#359B0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762715563, "uuid": "49805caa-3587-4712-b965-3ea9f6c81e26", "value": "T1F9514F18AEE20216E6B7EB34BCF96213A47A7E46FA394E4D01C147841572019F0BDF2E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762715563, "uuid": "102f0ff8-b9a5-41b5-b5f9-05fa67cdbb29", "value": "48:8x5aOc4cBWaGyA30dA/HQdDvB68DvBqab4w:8x5HqzGh3zHcvBvvBql", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762715563, "uuid": "c376f6a3-736a-4387-ac1d-94da58c4a4ff", "value": 2814, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762715563, "uuid": "41352fd3-618f-4578-bc5f-2eb7507505f8", "value": "application/x-ms-shortcut", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762715563, "uuid": "84abaec9-26d4-45f3-9c80-be49a0175a7d", "value": "William_Shakespeare_-_Henry_IV_Parts_One_and_Two_-_(tr)_SparkNotes_(retail)_(epub).lnk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a93c9f0e-bd77-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762698208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762698208, "uuid": "e174c46d-64d5-4bfa-abc8-0dfae86d5a78", "comment": "Malware payload (Mirai)", "value": "54dd188566dae9d9333a0a6eb4b9c7d6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762698208, "uuid": "9d4802b3-43ae-4c58-9a5f-2c5584facb17", "comment": "Malware payload (Mirai)", "value": "e34453b8565cdffa587d391138cc6ae320d25e7fc89d5b0c41f6783fd5a96381", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762698208, "uuid": "2fae78bb-0894-47e1-8340-5642be3a515a", "comment": "Malware payload (Mirai)", "value": "893db1e408c1e61b72a5043da146608d9be05d55", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762698208, "uuid": "a94b63cd-ffdb-4a54-88fd-9c0bd983b4d1", "comment": "Malware payload (Mirai)", "value": "bdb05508a35468227e9a8cef59fd351a34b017fe48509ace0497a78aa1ee67d00e93a6e8961ab8808875ecb46e6ad71f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762698208, "uuid": "48ae6882-114d-4241-aaf2-5801b0da09fa", "value": "T1AD03F681AC92856689D813BEFD3D41CE3312B3B9D2DF7152CD015F18B6CA94F0DA7A92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762698208, "uuid": "ca757fc2-e112-42c8-818c-85c9b278a34b", "value": "768:CMn1EjZA//+1vTRfRiOC7wYqT4JqsWA3B5d7I9ybMioW+j/LsYtXO0CL:CMn12A//SrRftY97WARbIcbboW+zLsYS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762698208, "uuid": "9ffce2cf-569a-433c-9ff2-49c1b091dd77", "value": 40320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762698208, "uuid": "dfd55fac-ced0-4627-bb15-829d93c66a6f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762698208, "uuid": "bedc6925-841b-4cc6-9e7f-2839444fe841", "value": "SecuriteInfo.com.Linux.Mirai.4873.23378.8742", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe14b15c-bda5-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1762718107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762718107, "uuid": "0d9f574e-894d-486c-b404-347909aab1f5", "comment": "Malware payload (AsyncRAT)", "value": "041c20eaeb35525c82db21bbb3781ca4", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762718107, "uuid": "e9cdd086-03a6-4b2a-b5f3-3cb77bbf7b9d", "comment": "Malware payload (AsyncRAT)", "value": "e480735dfd68da18ac627d599b7680973bb4962efb1ade850bd149d6239e98fa", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762718107, "uuid": "b295b2c2-2e57-4d80-8b5d-605b606511da", "comment": "Malware payload (AsyncRAT)", "value": "dcdd05650cf0f1dfbc126613809c382fed898da6", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762718107, "uuid": "bd251ed5-0358-43f4-a83b-c927b6ab2a44", "comment": "Malware payload (AsyncRAT)", "value": "9f770460434f9fad9cb0a6ac6716d7ee4933e8ed695fac0d2a6ad02a18214abebdcfc78669d47e5bbc8a10a10ea6972c", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762718107, "uuid": "2200dfd2-69da-4631-80ae-f56cee249e7e", "value": "T1D853F8013BE88029F3BE8F746DF7658546F9F4AF2D12D95D1C8910CE0532B869A41BBB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762718107, "uuid": "0f185eb3-6d23-4801-8ac8-428181bc75d0", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762718107, "uuid": "ce115d5a-9271-4bd0-9eff-2e76647a8a93", "value": "1536:+2vm/XySksw4KufUYFNcU/By5bYAPYmOzrmTGAx:+2+/XySkYKufUYF2My5bY4OEzx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762718107, "uuid": "486456fb-413b-41de-a981-6106ad07853f", "value": 64512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762718107, "uuid": "8ca03083-f35c-4e79-9029-aaa9d0e9635c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762718107, "uuid": "a6cc8f1d-f096-42d7-a28b-7970bd445aa8", "value": "e480735dfd68da18ac627d599b7680973bb4962efb1ad.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8c8585a-bd0c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762652278, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652278, "uuid": "aa536443-a6a2-4672-8c56-afedd277cd3f", "comment": "Malware payload (Mirai)", "value": "8a64b21a8d335aeefae77477b46abc91", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652278, "uuid": "8b361ef4-dc56-4145-bf45-2f56134f6e58", "comment": "Malware payload (Mirai)", "value": "e4c104d5118d215f01a97767753d97f7ce5e5a87b879fd8cc6f4d848bf578fb6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652278, "uuid": "430b9059-055e-4cca-a65f-840b9e500c8b", "comment": "Malware payload (Mirai)", "value": "319f3b634a392d63be98ad08b248ace5227d916d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762652278, "uuid": "a89f293c-968b-48ed-b912-bf6846814b31", "comment": "Malware payload (Mirai)", "value": "d81fae41da07ea1f7c13316b74ff7bfbfd91decf1df0a5b7dd6627674166bc83a7046559d670e0863447e7cdb07da34d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652278, "uuid": "aa63de8c-dfc5-4802-adb1-de0c9ef142ef", "value": "T1D3A32956F8818B11D9C025BAFE1E5189732307BCE3EEB3529E249B71638B56B0E7F405", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652278, "uuid": "1cb055f8-7544-40d8-a978-2412f11fe120", "value": "1536:xYnjnPNrIzlA+KXXiMl5f7yNaSTzO4Dkdqifewe0lwA7Zv5qYrNJema:SMlADXtl7yNaS8ewe0lwAFv09", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762652278, "uuid": "9b7c74c7-8bc2-4411-8286-56f293def9dc", "value": 99716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762652278, "uuid": "ec2198b1-477e-4136-945a-07ca822c32fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762652278, "uuid": "b7d4e899-f592-4f21-8b8c-76485d1ce33c", "value": "arm6.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0bfb357e-bdb7-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762725432, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762725432, "uuid": "fea2bb8b-a35c-456e-9db1-a354d7f4b817", "comment": "Malware payload", "value": "f8674f5c7350f80376a06440b694c1ea", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762725432, "uuid": "f041ba57-b5c8-470e-ad72-866654562ef2", "comment": "Malware payload", "value": "e4e31b07b240c202b2912730a926b494a5984f3ba6c706ffc80015262c158f04", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762725432, "uuid": "fe04a913-f5a1-448a-beba-7777b309d448", "comment": "Malware payload", "value": "bfe5b5cb453b087f8c7a54ed6ae6a57c192ccf7d", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762725432, "uuid": "fc07f788-f9a9-4843-bd7b-2d854c198d45", "comment": "Malware payload", "value": "ad858128768e108843b32a39e68c76f477306171d19d7b520f18d93a1f1efdd16d8084355fd114106a703fbfbd04d4af", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762725432, "uuid": "bee07a96-103a-4076-8d26-03852c0056fe", "value": "T1B2461204F7A5061DF466FAF62D21711146B3BE479815C649E3B33088EA76E43CE6C2EE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762725432, "uuid": "4a561058-6e51-4731-ace1-08df5c90e8da", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762725432, "uuid": "7ccd61fb-76fc-48bf-a0d7-62d27e798913", "value": "98304:2h/evJLeTmDDi9UeK7kqXf0FGxLCbD3ha5Uc6v6O3xUM3/L9LI/cbt7/Cp/z2OIU:2h/ev5eTeW90kSIbDoUcfOhzT9cEt72L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762725432, "uuid": "6df03e6a-7c76-4951-b22d-441525289f30", "value": 5858848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762725432, "uuid": "a4bbf7b8-c20d-44bd-8033-6cfec5b87db7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762725432, "uuid": "d197c18d-db76-4f86-9fd6-11b02eb53a01", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6c88201-bd54-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762683225, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683225, "uuid": "edf7d7de-8854-466d-ad07-41a9cd510788", "comment": "Malware payload (Mirai)", "value": "f92f0218776523b2c738f7e07b52ceea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683225, "uuid": "62ca793b-5764-4dbf-89de-ba2488873fd5", "comment": "Malware payload (Mirai)", "value": "e53db4b13ee7c2553fab624257e579295d1e155f23984cea31acde01b0e1b115", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683225, "uuid": "16468d2a-d7a5-4096-abc3-7f2d80fde10a", "comment": "Malware payload (Mirai)", "value": "dadd88e417e3e4296e40e85ac470a7a8ccad91cd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762683225, "uuid": "132a719a-c409-4bb2-aa72-643744aaa43b", "comment": "Malware payload (Mirai)", "value": "22941d16e12bcbb85b26958333c805ea97a72e5bc2c407c1ad0ab00ec8546571f0922e4fd89af21a8269b65660e67867", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762683225, "uuid": "354051dd-af84-481a-b494-2a48a04f9ccd", "value": "T147338D76C42EAD94C50822B4A9368A756B53E104D7833FFB5E85C5A58047DECFA0D3F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762683225, "uuid": "fa5997ed-c86f-4761-b01d-0108ad085130", "value": "1536:UaPwt7s+Z4IqfX9IrcdfZ54oJCI8uybVR:UAz+K/vdb4oJiuy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762683225, "uuid": "df43a360-3b98-403b-b8c1-30212afcf478", "value": 54960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762683225, "uuid": "778ad837-6091-4bdc-94d6-bd915c0f4e38", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762683225, "uuid": "ac9b4864-7dbf-479d-83dd-1d61e3034f9d", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f5b9e7b-bd03-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648263, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648263, "uuid": "96f4203f-42c4-40f4-a8cf-5ebf3c464e86", "comment": "Malware payload (Mirai)", "value": "a256801022b8c5924341d04c2a7de918", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648263, "uuid": "1a98dc60-6855-467f-b33d-56748d0f6a95", "comment": "Malware payload (Mirai)", "value": "e6e3364a88e98338c580dc85a37db686be24adb5ed7ee0352735586a74976e1c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648263, "uuid": "778c4ee3-a823-414c-9d57-c31e77f45b81", "comment": "Malware payload (Mirai)", "value": "5454d37e55e2ec8744844bf470452a9180d38329", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648263, "uuid": "15926a41-4bc3-43b4-9dfd-fb3133c95690", "comment": "Malware payload (Mirai)", "value": "1dd28ed2e7221302e3f705515b52256f6839b590ed234f30a5a8cac80d7325df842a2fb159d1a61e0ddca1286ea27208", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648263, "uuid": "01667f1c-654f-4452-8e6c-a7a462b69c1e", "value": "T1E304881D6E228F7EF668873147B74E25976C23DA27E1D640D2ACC1106E6029E641FFEC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648263, "uuid": "160a07d7-b0f7-43a7-90dc-25558e6234e8", "value": "3072:jg57RO7LHZwbq1YSBan1yvbysxr1uGSVI:jglRO7LHZ0Bqyy1BSVI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648263, "uuid": "3555053a-d30b-4784-9610-dfafa9dcdb05", "value": 173888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648263, "uuid": "74f82bfe-b559-4c14-a571-3fe1b45a7828", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648263, "uuid": "57eaf0ef-075e-4c5a-bace-feb97b96a9f6", "value": "main_mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "592ef9f9-bd03-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648252, "uuid": "74b71ab8-d803-41bf-be7e-f1f0adc4d90a", "comment": "Malware payload (Mirai)", "value": "b90b63667f65c0845c85b2e707015d6a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648252, "uuid": "13b0164b-2c48-4592-b871-49435750dd64", "comment": "Malware payload (Mirai)", "value": "e8c3ab3c9a7bb276172046d846d59b01d810a825c1048d3910912f18c75621da", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648252, "uuid": "67394aec-eb6a-4b39-90df-4d9291c0bfcb", "comment": "Malware payload (Mirai)", "value": "1ce8357522326feef607099b6ca3f1920185bef5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648252, "uuid": "8a8176cd-292e-4715-b193-790ced11885c", "comment": "Malware payload (Mirai)", "value": "ac4186a772857f7987b5f8fed642ff12278f17105dcd2c7cfe3d916f967b6808a9169b6ccf452340f31a73bf2e1d5580", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648252, "uuid": "fd0f6a1c-6829-471a-9ded-cdcbd605a598", "value": "T12A937CC0F683C4F2E84705B1507BE7379B32F1B9101AFA43D3699A72DC91951EA1AB9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648252, "uuid": "fd6e06e8-5c22-42f1-9037-6a18a8eecf3e", "value": "1536:W/QCZaxGdvts3i5JPhoIsxPu++4HRsUIKqI4FrS4LSG:WYCZa8dvm3oJPhhsxP5lR+KfUmDG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648252, "uuid": "cd5b9a62-c397-4fc4-97a6-a5a2283764b0", "value": 89992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648252, "uuid": "55593e00-9a3b-47cf-860d-9b76727bb286", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648252, "uuid": "08ce3846-4d6d-412f-9549-ea03ac2bc72b", "value": "main_x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd357e36-bd09-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762651051, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651051, "uuid": "3b10a364-b9c9-4b76-a982-0d5cb0757b83", "comment": "Malware payload (Mirai)", "value": "4dfae9a297c62e5153441545c6883e6e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651051, "uuid": "cd4eeb37-e3f2-4bff-abf9-a4f0f8fcebe1", "comment": "Malware payload (Mirai)", "value": "e8c91638409b76b7f41744c1737964cd35075f9bab37f0cde9937de154fd7b2c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651051, "uuid": "ae93a571-5158-437c-8faa-977ba448e324", "comment": "Malware payload (Mirai)", "value": "5d0563665187151484820f9c3fddc9d858c5520e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651051, "uuid": "590ce801-aea2-4643-b3ee-7f613e75f315", "comment": "Malware payload (Mirai)", "value": "e2913b582609c30d66893aa7804ca05a903789f74a0d2e396c2b44d67ab37acb2e87fef9fd85e9d0803cc503fa1e7609", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762651051, "uuid": "82b50e64-fea6-46e9-87ca-f794b14a20b6", "value": "T1B973AE63C4269E64C4455874B472CEB51793788882672EB74E6AC1FA908FDFCF2193F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762651051, "uuid": "a69eb253-9810-4f48-88c4-06758643ae19", "value": "1536:xlcEQX9mksoCmY3B2MYYp1o4NKt5gdp5ZCb309cUAYU:ncHtm1jboLtQ5Zyuv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762651051, "uuid": "f5778e1f-e879-412b-8ef7-8edd45973bc8", "value": 74944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762651051, "uuid": "ad3a9ae1-aec2-45ef-967f-645909ac5873", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762651051, "uuid": "9609244b-285e-4fce-b66c-6b7008da6967", "value": "sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb291958-bd1f-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762660523, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762660523, "uuid": "c7393850-a18b-4e9d-8e69-f0af02909333", "comment": "Malware payload (Mirai)", "value": "2a49ec5f995e0a6db2bab969b873357c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762660523, "uuid": "2bd952ac-2dec-4d67-9911-7769c296d94b", "comment": "Malware payload (Mirai)", "value": "e9139339a4538b4944d6fecfaf50cff3fd9b25085b099e8dc1f80e0cd878ccaa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762660523, "uuid": "f2955838-b931-41c7-b49a-cc7ade3b0bc6", "comment": "Malware payload (Mirai)", "value": "bf000ce4cc2341764fbb8f1a87850e0b7e80bdc4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762660523, "uuid": "9dfef743-846f-4e8e-a607-de821236515d", "comment": "Malware payload (Mirai)", "value": "1f1531e84cc21b67f053d6a317d8238e6927fa896795ba1d70c2af6edf7992b7ca36405003ba3c62de37f1af41fc2e93", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762660523, "uuid": "8bdd45d6-a8ed-4058-a0f7-a31123f11d91", "value": "T147B33C46B9918A11C5D322BAFB5E518D33136FB8E3EE7202CD24AFB123865DB0D77512", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762660523, "uuid": "07dd0348-08b9-4181-9066-15918d8d0865", "value": "3072:rpcJlSyMQRswvWpT9a6tW6jTMfnjOfq2y:rptaD+phar6UfnSq2y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762660523, "uuid": "1c1a471e-64f1-4679-8d17-17025586a175", "value": 112012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762660523, "uuid": "409398ef-695a-42a1-81ae-5d5147c54b24", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762660523, "uuid": "4fcc9474-8834-4939-a7b1-9544c39f42c1", "value": "morte.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae90f5b1-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677172, "uuid": "b3c569e7-7728-457f-8c56-c3f039c89497", "comment": "Malware payload (Mirai)", "value": "575a8edf985ec4e7a67e3ef880ca744c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677172, "uuid": "d60d64ce-9a7b-437a-a87b-a602a661dd58", "comment": "Malware payload (Mirai)", "value": "e9fb0d51750891aa5234bc7bfd3fdfb9e2192631b6609d32284c721f9dfe8d19", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677172, "uuid": "5ee7f4d6-3eb2-43ee-a7fb-45c6a489ba05", "comment": "Malware payload (Mirai)", "value": "66fa1242c3495f83bd512f4974b0f482d7e86891", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677172, "uuid": "6dcb159a-e480-4131-b21b-0d4acc038923", "comment": "Malware payload (Mirai)", "value": "3e4a15fef35641ea2073369a8ded6851621c1fec5963cf8284b1819af0f71253f4167dc544f3fb23b9c6992dcedd93f5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677172, "uuid": "e52a294d-c99f-4f3f-bb34-bdbbffa6763a", "value": "T1552319C4F443DDF9EC5A09702036FB269BB3F6BB2229DA43D7F595226C41702E8059AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677172, "uuid": "822172e0-13c9-42fb-8b6b-2a04b011e406", "value": "1536:Ufndw1GYx7ktO68NcP16tveXAGAqOuffwXOP2o0:8+1GYx7ktO68NctM8zbOAfweuo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677172, "uuid": "6f7f2f48-c1bc-4769-b51e-444a3ffe588b", "value": 49936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677172, "uuid": "753255ea-dfda-4279-9e5e-fda91623fdb2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677172, "uuid": "c4fe8052-538c-4c72-bf5a-9a35b329e5fa", "value": "boatnet.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "828bcc71-bd74-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762696855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762696855, "uuid": "2fb6bd6c-0ab6-400a-af7e-ad0dd0ccad34", "comment": "Malware payload (Mirai)", "value": "539910945611b6e9211fe03e06f11251", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762696855, "uuid": "3de3c793-6e09-4027-855c-0781c96bb386", "comment": "Malware payload (Mirai)", "value": "ea186a7cc4bfc15538a2ce77b40dc728a3e2c39b28a7264fb12cc37d1a4bcd48", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762696855, "uuid": "5f1e537f-695d-4db2-b1ea-a641681c66d1", "comment": "Malware payload (Mirai)", "value": "4d57da067a1b9a3b34e507170a9ecedad290bf0c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762696855, "uuid": "90f020c0-2982-4250-af55-9bdbe598485d", "comment": "Malware payload (Mirai)", "value": "438be2f6e414c5c609b260d5cf6bf83f0d7a93bb4593defc4415ce9fc240211171552510539465d16c0dccbfe8d1116b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762696855, "uuid": "275b7b44-68ec-4eef-9fbc-1d7af9548806", "value": "T10BD33C4AE9D28F12C5C612FABA6E914A33125B78D3DF3203CD10AFA467C74960F7B516", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762696855, "uuid": "f4523693-175c-47da-8be1-fe9e0ba0a0cf", "value": "3072:LjZ63XU+p8FGRQ5M8aZuCkxptJs4hnLfP7:LjZQty5FaPMtqWLfP7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762696855, "uuid": "385bb9da-e30a-427e-9cfb-cb4ba803b7d6", "value": 140668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762696855, "uuid": "f6d4f1c0-90b5-4849-92cb-bcfa7932364e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762696855, "uuid": "cb504236-730f-4892-8159-cb9a1d5bc4fd", "value": "morte.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9522722e-bda1-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762716213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716213, "uuid": "05a1dc79-03da-4a91-b4d9-bafa73c58480", "comment": "Malware payload (Mirai)", "value": "17bcee688701404df30f049e37db49c9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716213, "uuid": "d36c4f0c-d8ca-48e8-a711-caae507847c6", "comment": "Malware payload (Mirai)", "value": "eb1bcf278c9045bc2e298ce7dabf246bfe87e81892f0bf24ea4ddc9cf22b7283", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716213, "uuid": "173ecb26-334a-4019-ac8b-cee4a08a7851", "comment": "Malware payload (Mirai)", "value": "d89968fac1248933b17e4057c81ac916c12495ff", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762716213, "uuid": "5bb53ec1-6a27-45d3-93c2-f94100a4d079", "comment": "Malware payload (Mirai)", "value": "4ec80b2423f627ea17a8734b072968220d6ff8ca8687dd028e8bf8003d137507e8ac499f8ca90cb2d8fb35e81202d529", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716213, "uuid": "45d84124-ad65-4cf8-ad79-9c3560d965ee", "value": "T1B303E19BE47273FB66315DBBE42DC5E5A0B98F58D86C74332924D3D2AAC24D943AD003", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716213, "uuid": "f4e6d74e-0e2e-4b9e-b955-a23661af01de", "value": "768:bLpdYR6v6FgGZaDnnc9vYTif8ZPhlUUccam5ogZKrT/bIgc6mq3UYXR:bLpdYR6vV+aDnc9gTUC/FhwP/bIg9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762716213, "uuid": "579e51e0-b6d8-4883-8b46-c1e3af42852a", "value": 40948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762716213, "uuid": "7786a17b-f8ce-476c-86a8-2e0e6c138b64", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762716213, "uuid": "ee894461-84dc-416f-9ae5-17a7b6c057d8", "value": "armv6l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42d4acf8-bd52-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762682145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682145, "uuid": "aa7ab27d-7ae5-4174-8355-1c65d7c5247f", "comment": "Malware payload (Mirai)", "value": "60a87b1dadd5a03da0744a90ddd04403", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682145, "uuid": "0136ad15-cf00-4632-a150-776c845f201b", "comment": "Malware payload (Mirai)", "value": "ebdd4e67b4714b5cb1819fbfcdbd9011050cedf261eafb256d7164ed97cd5a23", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682145, "uuid": "f564f424-1565-4d25-88c6-bf4a669a5318", "comment": "Malware payload (Mirai)", "value": "b102e82ad7af2574ce15b4fde4de9556ceccfc9c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762682145, "uuid": "270f1532-e0a6-4d4f-aebb-038276c0e756", "comment": "Malware payload (Mirai)", "value": "96fa58fbb12a625abd9e8f341f31d76c364e9ed3800902fd378bae5aec125fd0f825ba7c0a1e01948371dd67a2994b65", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762682145, "uuid": "e7cf448d-8e5b-4c8d-ae43-0923d085dd95", "value": "T10823F10580B794A5C6A9523BB5DF7D012922D13E9F8408A38F8EB1BE4A0777EAD5C482", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762682145, "uuid": "c1cd28da-1262-4825-8fdf-d49345939c21", "value": "768:RTzKqT/Ry4hAtK0iJxgyrtoiu6NXRCXi9qbJtI0nLtW5V7yl5YYTrTyV5vnbcuyV:RTzT5Y0uyrGiB0UctqIJTYnouy8HyT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762682145, "uuid": "42c43824-5f34-4628-8eb0-4d9bf37e7620", "value": 45840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762682145, "uuid": "5c230ad7-3a51-4812-8763-b1e43e65d5fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762682145, "uuid": "68e626f1-e926-48ad-b69f-0c8d40bbe327", "value": "morte.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45fcb49b-bd0a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762651226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651226, "uuid": "03de8288-cc83-495c-9fd4-35b89d941801", "comment": "Malware payload (Mirai)", "value": "27d92568c7ad14e8117a6a48fa217355", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651226, "uuid": "88e4f69b-f0e3-4119-9123-307711de82b5", "comment": "Malware payload (Mirai)", "value": "ec6765ae17eb185a21f91bb599e89220b1219ab598ee33d7f726a084a28001ae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651226, "uuid": "f46de793-b305-4852-bb33-8c986af9cdb5", "comment": "Malware payload (Mirai)", "value": "c95eda11c43d797faaaae7547880b88fadc2c0d6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651226, "uuid": "c32be12f-6afc-45ae-be5c-86204faf7d68", "comment": "Malware payload (Mirai)", "value": "1cd9a60e6a8a22176700313aab2dc6cf06f7b8899e80c9d34b5e1eb135cd7f89978fc567d87a344ad76b3ecea6f53871", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762651226, "uuid": "c70fa148-67ff-4161-80c8-d39dd653dda0", "value": "T18FD3BE97B70B24A1C85247F803CB8F8E2A6362119E6F98E76C1E367B19790CE59173D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762651226, "uuid": "2a31a8c8-3791-4458-b795-53693e71cf89", "value": "3072:BCmMZtWRZf3L6sKeufMVoQ5rKJ/u0g7q:BwtIf3epQoeaWq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762651226, "uuid": "2a69be81-4853-43d4-908c-48782b72c634", "value": 132556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762651226, "uuid": "42355efe-ec9a-4c43-8215-a5d611528434", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762651226, "uuid": "9312a306-9028-4bf7-9548-13adab74b9ba", "value": "morte.arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebe71a4a-bd05-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762649357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649357, "uuid": "9f6e0a76-aa32-47a6-9bc6-ae890ba8c376", "comment": "Malware payload (Mirai)", "value": "a3571c07638491fd9cdefb4ef8c4993c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649357, "uuid": "44ec1923-0561-4d56-a062-797c26eb0c7c", "comment": "Malware payload (Mirai)", "value": "ee88d4a3b4194773221755550f7200391f1aabee2b70ef180fd5142a1ef9a7d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649357, "uuid": "7b95b318-6932-4329-bfc0-84e590b04e9f", "comment": "Malware payload (Mirai)", "value": "92222bbb4be71b00c94ca6e8afc304bf493f83d5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649357, "uuid": "20ea01ed-9a42-4945-b988-ec0cddf0fc39", "comment": "Malware payload (Mirai)", "value": "5a314f104351bf79632a36d876982e8a3d1cb81be6f85a3515417e4b8d3d572dd8c5f94d561310474503dfa9f2436a92", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649357, "uuid": "09427f98-f036-43c5-aa9b-4df490afcf60", "value": "T1C1932956B8818B11C5C4237AFA2E128D3313277CD2DFB3269D219F2477C696B0DBB946", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649357, "uuid": "e770b776-f8d1-4568-b00c-f8fea6f15c76", "value": "1536:YZnimYkHa5ylY3YQhZJAocZsUpA6cfTQ9o5R+1a234gWz7L8iBSXR2Ke/n7VLuYN:zW4gmXT4oj+1afT4R2Ke/npLuU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762649357, "uuid": "dd9abf0e-b32c-445e-b8d1-57f01effa3cf", "value": 95364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762649357, "uuid": "b21c2dde-67fa-43e1-b9dd-0216021e897d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649357, "uuid": "4ac49825-0b15-4563-ba83-2ec8c4f297c2", "value": "armv6l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c62e47d-bd47-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762677463, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677463, "uuid": "57a58406-b09b-4729-aef3-cfb7887b903d", "comment": "Malware payload", "value": "39d58d2c3b1cb7cd4efbd0baa1011a1c", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677463, "uuid": "0649eff9-375c-4831-ba54-df6047dbb3cf", "comment": "Malware payload", "value": "eee3e8409d2136cc2ea8ab6be4befb5fbc4239635b542f687f53db481d50e4f6", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677463, "uuid": "32dd9984-53c2-491a-9104-e455a140f04d", "comment": "Malware payload", "value": "f2190691e93a74481e039d7c6f6642fc2977c277", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677463, "uuid": "6446d4ce-4736-4c57-83b9-a28aafbb469c", "comment": "Malware payload", "value": "77c3c2868e816fe8afa376f20a38b73f516267ac47f7cf54ae02b07adf3ae6429c6356399d55125556167a758b3cc2be", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677463, "uuid": "c8e9c8a7-f6b3-42a2-b1ee-208044436968", "value": "T1A8A612DAF7E85E2FC8770072886966B1265B4C128F839F876548371C78B76D80F59BC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677463, "uuid": "01cdbc36-ce6b-4978-ba14-942f620ac335", "value": "196608:sYdnPMGLj9eXcvGVSIP/dDI/G5qsdYQt8K52GCB0VNfDx2P:smMcj9PO0IHd+lu15SBAfS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677463, "uuid": "5858a55e-9895-49d7-948d-c46bcebb17e6", "value": 9565119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677463, "uuid": "d4a324e0-159f-4387-80f4-7d24cf7636e0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677463, "uuid": "2bc149b8-784a-489b-b11e-aad43763206e", "value": "GizboCasino.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ccf7529-bd06-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762649600, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649600, "uuid": "7b81525b-993f-4c3e-958a-337afa402d19", "comment": "Malware payload (Mirai)", "value": "1b64433041b7c82379cd60195ceac5cf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649600, "uuid": "10917574-dcb1-4385-978a-b19e7eaf5104", "comment": "Malware payload (Mirai)", "value": "ef4bc158ee4ab711726363a1200b0f925d711975b3e06ace131531a93f85937c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649600, "uuid": "a505c44f-b38a-4ce7-be85-fbfdf2fb12d5", "comment": "Malware payload (Mirai)", "value": "ecadd27af39f7a0bda2edffb75c6e8bbc3c6e793", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762649600, "uuid": "5bc45d41-f0de-420d-92f7-486cb7869c8e", "comment": "Malware payload (Mirai)", "value": "1f46c9114989e26549064e6492a4e6b28cd324a6718a3318ba4a30fdef0689d182b02aff14277e5cba43ab0df0f2f9f7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649600, "uuid": "f7148b44-1394-4822-b410-8e538d36c222", "value": "T142736BC6E643D8B9FC624234523BA7B74632F6352125EE4BCB69BD36AC17502B31631C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649600, "uuid": "7993826b-624c-4dfc-9580-3edf5b786be2", "value": "1536:BQ1X/XXGBS26ei+c/VSIgFLpXlIUNAM9GSx8it1uiwBRwSy/S65SJ:BE12w1VMFHxNx8Sx8Iwi5dAJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762649600, "uuid": "e1e4c61e-3e69-4c07-9c3e-633347e8ef36", "value": 79028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762649600, "uuid": "eebd8826-eb9f-4c85-8ebd-58afb1bac3bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762649600, "uuid": "df98d09e-6a61-429e-b847-57d96c581d3f", "value": "x86_32.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f73d1179-bd0a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762651524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651524, "uuid": "d70e9683-0ec7-4241-a1c5-faabfb0bc23f", "comment": "Malware payload (Mirai)", "value": "9672dc10e64ba459c402e5be4fa6e56f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651524, "uuid": "b3cddaf3-7224-4292-8890-3557d054fb6d", "comment": "Malware payload (Mirai)", "value": "ef5ed60f6e568fdda76172d60c67e3a44b32d511582e1d35b58615ce12ed848a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651524, "uuid": "111f1b44-3e93-4cbc-b46c-495e0721ec9c", "comment": "Malware payload (Mirai)", "value": "a10d664cbda1364adf00d20f12f0df23173e986f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762651524, "uuid": "153d9f49-b816-4cbe-9d09-f722d43eafbf", "comment": "Malware payload (Mirai)", "value": "f1db5ee9ad5db20320c5b649d1bb9d80319c6bf059f7613199a2e079af5dbcc36c6a6d11b14e0d36f517f07814590d18", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762651524, "uuid": "103a3e41-cfde-41b2-b1f6-c8d0deb56417", "value": "T1F91301C2CEFB9255CEB6923129CEDF4EA3506957C2C682A37A81733E5478B352C35394", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762651524, "uuid": "4fcedeaa-91ec-4972-9d78-787dd92227e3", "value": "768:UN4rn3/DX81kxC7Y7DtGvS1gZgzsvmqu7yP6unbcuyD7UHQRjj:+4rn4WU87DGSAgzsvVuWP6unouy8Hyn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762651524, "uuid": "46669574-2907-4180-ace7-c9d15433cc97", "value": 45120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762651524, "uuid": "3ea45f4e-85e0-417b-a99d-ff9e01a1784e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762651524, "uuid": "b4d80e5a-fc6c-4b70-b297-6261da135092", "value": "debug", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7de4c4f-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677268, "uuid": "6cd3187f-f2d7-49a9-9f36-f75b22ac6472", "comment": "Malware payload (Mirai)", "value": "c1ea535704c0bd35a71d94fb87cdff56", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677268, "uuid": "afbfedb2-78de-47bc-ac5d-98d4386a386e", "comment": "Malware payload (Mirai)", "value": "ef6056b0b004239b32a5fa25f5bb3fb597a0d122f94c64aca3fcbccdb5cfdeab", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677268, "uuid": "9218c4ae-8606-456f-8993-01ddb405148d", "comment": "Malware payload (Mirai)", "value": "b575a545489211b8330dc57a2fc2f4ebd0a67c11", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677268, "uuid": "3e1a09b4-0429-4548-b157-f70d9eb3df30", "comment": "Malware payload (Mirai)", "value": "50c69cf0aba8c9feaf565798e207e025312a87977edcfb5994d77c208ca03561494f2289f287b0245c53c9331ff5a14c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677268, "uuid": "e65b16eb-a2e5-4a0e-9ee6-fd3fd2ad3337", "value": "T1C963023467BB58C3DD672B3ADE9411C9A655D7F072F73D873AC4AF1A29804320B42983", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677268, "uuid": "b6d451ee-33a9-4969-8085-c0412d44d697", "value": "1536:F7LoHthzhX0IrJL9fOeHzKJwLGK+sAQVMAi26qQ:doHnDJBKWLjqQgT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677268, "uuid": "38fff735-b63c-49b8-ae24-c55e8ca9c7fa", "value": 72072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677268, "uuid": "479f4522-7191-4ebe-a443-bb9294c377a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677268, "uuid": "6156b4d8-965e-4dd8-906b-63fbbd08cefc", "value": "morte.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "549345f9-bd4d-11f0-a129-42010a9c0007", "comment": "Malware payload (Stealc)", "timestamp": 1762680027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762680027, "uuid": "83de3181-cf28-4058-a737-651a5ec881c3", "comment": "Malware payload (Stealc)", "value": "916707b161ced4001a205a8a5ee3f013", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762680027, "uuid": "5d9dcca1-7a29-46d0-939d-c2e6c25ce4db", "comment": "Malware payload (Stealc)", "value": "ef693db14b46f21e32367aa46869676418a8826e9dc49b3c2453705498823659", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762680027, "uuid": "20d58b91-9368-4919-a895-c9aed196ab3e", "comment": "Malware payload (Stealc)", "value": "c0bc37f05ca85840c6d83871f6c4120bf263f79e", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762680027, "uuid": "357d7d16-ab0f-465a-a94e-e8b67868abf8", "comment": "Malware payload (Stealc)", "value": "219ee419eafc420391a8e463a433e1e7c084fefc75c7f8bf651947544e8c91c8d39db9168dbe827d7dcb25e8d2c71143", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762680027, "uuid": "b57c23bc-ab11-4f4e-9e41-a489f7f3cf93", "value": "T164E523916E8123A3C0154BF4FD8202D2AEBEED792FA195EF3502F1680B79798844F57D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762680027, "uuid": "e7676e5a-6cd4-473d-b053-e17b8da6b33e", "value": "a56f115ee5ef2625bd949acaeec66b76", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762680027, "uuid": "7e1197e4-3712-4ac4-a4d8-0759ecb8430f", "value": "49152:CKIiPdNRgp8wbNHL2l7yIyC+jNwchbSEBmatleYm0timkGsXjcHaz27u6M:C/uRpwbNrpIyCJZEUatlxiZGPaj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762680027, "uuid": "0d434f8e-8e29-4395-959b-fab2d6444e12", "value": 3136576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762680027, "uuid": "93f054f2-ada2-438c-bedc-2c225a6eb92e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762680027, "uuid": "566e7c85-9b42-4033-8cd5-9b07d8130b3f", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d38bce42-bd03-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648458, "uuid": "743f9558-2f17-446b-90f8-34391c485ace", "comment": "Malware payload (Mirai)", "value": "b890d95827d1eb5f409178324a3c5ad0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648458, "uuid": "b772ee85-a100-4f17-91c1-eaedadf44398", "comment": "Malware payload (Mirai)", "value": "eff88795956ba70bdcea773d7fceb29aa4b597d9b7370d43e5096406f59367b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648458, "uuid": "34e4e63d-6d4e-4763-955a-4f0d248601f6", "comment": "Malware payload (Mirai)", "value": "9f21c52cf0e7f953ff10e38aebcacc090302819f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648458, "uuid": "3ff0fc05-de11-41b9-8981-8c8483bac71f", "comment": "Malware payload (Mirai)", "value": "50cdfd8bed93f1ff84b0541120326f8040a5c09baad8340a461206496c7996ddd1cef0522ac2d0a1a8504e211d188d22", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648458, "uuid": "0242f106-ed2e-4ff3-a989-a96661885b4b", "value": "T141431891BC819A23C5D4137AF56E56CD372433E8E2CF72179E214F613AC682F0C6AE95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648458, "uuid": "0fedb017-83ea-48e7-912f-95602dae2138", "value": "768:raehM993TLSmRTIrL8Fvvhp9H0HrZQ8yoWXagcLVPWtuQ/C71mA2EDEy0eYjW9TF:/M99jmL8BZp9IFUoWKdYuvQ5KIqkypZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648458, "uuid": "4478ff4e-5cc1-48a0-88ab-55398920ac67", "value": 56160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648458, "uuid": "e2f079af-f931-4e48-a4d2-bb6f4c1a9785", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648458, "uuid": "e7cc88ca-8b26-4bd4-99d2-247f9ace95e4", "value": "boatnet.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13763f4e-bd83-11f0-a129-42010a9c0007", "comment": "Malware payload (ValleyRAT)", "timestamp": 1762703111, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762703111, "uuid": "25575c6f-b8d1-4111-8386-74feee3013f4", "comment": "Malware payload (ValleyRAT)", "value": "db7ad262813eb2eaa0e6501d9a410d63", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762703111, "uuid": "fc12e2d5-48ca-4c11-9852-59c2376a59a3", "comment": "Malware payload (ValleyRAT)", "value": "f108e12631d04083c2753ea7391193f5b36a76a104067bd71ae5be65d67afff8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762703111, "uuid": "d6a08e54-6a3c-4851-b137-a81885a6edfd", "comment": "Malware payload (ValleyRAT)", "value": "512060ea909a55c176fca99bb8bb3492297ff286", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762703111, "uuid": "9cc95ff1-d331-4f31-9edc-df21e44e38e8", "comment": "Malware payload (ValleyRAT)", "value": "7c5793ce5f06f30fdcdf907638c68904340b2832917786d133cd0bbaa9de04b3820be0f8c49864811c686d6e2aa06b88", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "ValleyRAT", "colour": "#BF1728", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762703111, "uuid": "ac8965dd-ee79-4415-899a-6a4f65da0719", "value": "T101A37D2175D0C132C09221328CB5EBB25E7EF87217B845CBB7A81A794F602D26F79797", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762703111, "uuid": "ab0b7d48-a78d-4931-8a50-268e4e24a9b3", "value": "30a32f147e7a4fb09eb9f144aa0f5a78", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762703111, "uuid": "611cea9c-9078-4353-897e-d085207ab96f", "value": "1536:+mAXCAKWHr0PjeMliZzBk3N2PDtprMcgdXjk2nVvURcX0Py9:+yA5HhZzwN2L6BCcX0Py9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762703111, "uuid": "b456ce01-e5c3-4e23-b1da-d81cd480033b", "value": 106496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762703111, "uuid": "6d14ea95-45d0-49c1-8347-3a6bb9682f64", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762703111, "uuid": "735f065c-61ff-4878-8db7-bfa6468f7559", "value": "f108e12631d04083c2753ea7391193f5b36a76a104067.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34d34677-bd3a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762671814, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671814, "uuid": "2439165d-901d-4d72-813d-04b75ef9f585", "comment": "Malware payload (Mirai)", "value": "16e17c6eacd89951a12c2950991b8c0b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671814, "uuid": "d494c08a-09d5-48bd-8b93-aa965c9f83c0", "comment": "Malware payload (Mirai)", "value": "f14ec516ba052b4d639a7d03d0f146954fb5f8f0af84a5927ed068ac2614c7b9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671814, "uuid": "e151abbe-f95d-4d5a-8157-132c5d62223a", "comment": "Malware payload (Mirai)", "value": "233c24055abf49b5ea86c28d59e066de2be19c51", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671814, "uuid": "4556adf3-0f54-4ac8-b894-82e915169f35", "comment": "Malware payload (Mirai)", "value": "8c09d00bdee1af7897a202f7e3980747c4a590331086e8b7a42f7f5abe5086cadc1c0cf0084834f5fa33539d2bb0c6c0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671814, "uuid": "12cb2d19-1a95-4895-a495-a084d4a25fda", "value": "T1F5934B01B30C0A03E1675EB17E3F33D6D79DAAD021F4A685690FB78991B6E325186ECD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671814, "uuid": "2481cdd2-bdb9-4113-8392-c34dc3efbcf6", "value": "1536:nHEKTBfS7mgg4S7wOJYjxI3TdmO3JKEUNcciuqJU5v9CCMem/N:kKdfQ5OiC3sE6ylC2N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762671814, "uuid": "5e767334-95ff-450d-8641-472eeb22a0b4", "value": 91632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762671814, "uuid": "7c5f6fc2-891a-4e0f-a009-3ab49d811d48", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671814, "uuid": "0f19f03c-774e-41b9-9a4e-7e83e85fe5e8", "value": "powerpc.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5dfbd98e-bd03-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762648260, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648260, "uuid": "98d210ba-fadb-4176-8b32-6ff58f0a177d", "comment": "Malware payload (Mirai)", "value": "69bda6d0ff443e8672f5cc3ccd9f068a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648260, "uuid": "29171e9e-515c-4053-a271-ca3e70447cbc", "comment": "Malware payload (Mirai)", "value": "f167f7cab9776399f0de9b652048a877dd893954498adf1fdcb7defe502db00f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648260, "uuid": "c460af96-7e1c-4dbf-a246-aca3bd3908df", "comment": "Malware payload (Mirai)", "value": "b6d54224c13b5398a5c56f840580cb981d7b9fc6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762648260, "uuid": "931a82df-4928-46b3-afd7-64656784cb77", "comment": "Malware payload (Mirai)", "value": "316e491c1692b633e7fca0d3134c9589d08dd2f00b8bee2c808fa8e0ea9ba7c2b6320709aac397a50ef18c0f429dd8a3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648260, "uuid": "fa5a9ee8-8452-4c15-a83b-68f75199af7d", "value": "T1BEE329C7F800DEFAF80AE33748570905B630BBE115921B372257797BED3A1991963E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648260, "uuid": "33eb9980-5db8-4dc0-b12e-aeba4035e1a5", "value": "3072:GmzTDH86JH781q5lZjApqGidS8w9aeVvjbieL/VCyIOH8gn:G2TDH86JPPjApq3du9a4LcyIrgn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762648260, "uuid": "4f81eba3-0032-469e-9265-2e912fdd2217", "value": 150464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762648260, "uuid": "702a09f2-565b-413e-817d-a8ce7d346b47", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762648260, "uuid": "c1a948dc-01f5-4011-9728-1ad27831ed4f", "value": "main_m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d140d4e4-bd90-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762709013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709013, "uuid": "4f9d9790-ea1a-4f3a-ab05-8dbbbf7f2627", "comment": "Malware payload (Mirai)", "value": "402638489debdcbb18264bd5c5cb9be9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709013, "uuid": "44d35108-fdfb-4857-bd64-99b9b3fbbf7c", "comment": "Malware payload (Mirai)", "value": "f3750e822022f8208978f978dfa9d6de8618cfab609e8178306e1e5920c6cfd6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709013, "uuid": "da79833b-54cd-45d4-8e21-2ce61758f749", "comment": "Malware payload (Mirai)", "value": "a5752abd3732e103a6f439138e0050bafdcc0d62", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709013, "uuid": "f7a5e7e5-1d9c-42f6-9f47-79f9dbccf25b", "comment": "Malware payload (Mirai)", "value": "9522b43b13ef61d044cd70974d8c8965d690586ac4dcd735ce65649d6b5ae4e628d86a542e0a72064c232668689b944a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709013, "uuid": "08c1d1c7-d762-4b75-93f5-72c6ddc3f1d5", "value": "T176834B66FD818B11D9C115BAFA1D118E731307BCD3EEB2669E205B30638B66B0E7F506", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709013, "uuid": "16f19a02-92f7-4d49-9740-8e069d4534b5", "value": "1536:uIntM2HPiOPLSp/qDkDMnn7yaZGanQlMHigY+uxgCb7as55Y7l5ema:ZqODSxUnn7yaZ1Y+uxgCbesXN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762709013, "uuid": "9dde5b7e-b0a1-4801-9bf3-7f8088ebdd81", "value": 88648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762709013, "uuid": "805bcee8-e2d1-4b1f-bd80-63bdb8debfeb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709013, "uuid": "8c1e8cf2-fb0d-4845-8d44-8196cca66880", "value": "arm6.uhavenobotsxd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34266e61-bd3a-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762671812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671812, "uuid": "b540d1b1-626e-44ba-895c-625779dfe6dc", "comment": "Malware payload (Mirai)", "value": "7253f7c91df95cad004a5e4386b5c244", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671812, "uuid": "14329808-b8cf-44c8-9cff-73aef7ac5145", "comment": "Malware payload (Mirai)", "value": "f447ff198a6297219493ad2c64777ad8500961414fccac6980a7dcfced98f7e4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671812, "uuid": "4f8b4fb8-084b-4d83-80c9-ff9d8631be2c", "comment": "Malware payload (Mirai)", "value": "1954fedd802e5551e74ba416833156442976bcd6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762671812, "uuid": "85af7989-b1d4-496c-815a-06d58e7a80a2", "comment": "Malware payload (Mirai)", "value": "9fa1a9bb1b6034d9a978e0849f8533944551736e0bfa6344da5260190297a57bf5388fc747159cf2765c70995b87b60b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671812, "uuid": "78c6be3f-8421-48b7-afcd-cfdf6e31367e", "value": "T11303F25DCC12306EDC4FAEBD608E14B268409681A7378B589B669ECD67CAF07B13F41D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671812, "uuid": "44df1af7-9434-427e-88d7-4aed9c016119", "value": "768:OQNTE4MmDSJ1M3dMluF3xBj70mCcHeZeMQCjazGB4O7cpRURkWlOL:5O4fmNgF/wKMCGBR7KORXI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762671812, "uuid": "c3a063aa-f1db-4176-b053-eb1ed513b6bb", "value": 40112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762671812, "uuid": "b658adbf-e78a-4ecf-a8ec-85d51335e8f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762671812, "uuid": "37a11bcf-3d81-4df6-bf55-21ac5c756218", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25ddc20e-bd5d-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762686821, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686821, "uuid": "958516de-ea1d-4be6-ad21-70e6db2917e2", "comment": "Malware payload (Mirai)", "value": "6a68c691d6b3ef920080a51fb213ddcd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686821, "uuid": "e282fd6b-b856-46dd-9df4-31782e4a67c8", "comment": "Malware payload (Mirai)", "value": "f6c5071b6b5a8729d732c7bd4c19387cc9b7a644f73e7c5ddfe56b65fe2e212b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686821, "uuid": "0dcb04a2-857e-4ca4-ac0d-64c15f73e87f", "comment": "Malware payload (Mirai)", "value": "518398053d3264d185cb5bf1b6e18a768b9da69e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686821, "uuid": "3b42179c-02f5-4e06-b000-753b57dd48a7", "comment": "Malware payload (Mirai)", "value": "76720cbce427ee8d5d95223d5d90d1760065fe86c53fef6494fe07546b68276e6212c939956d18d137f79cc2985760fa", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762686821, "uuid": "c8e940d0-198d-4662-9d91-c7d9732d0816", "value": "T17B530985B8918A13C5D4A2BBFA5F42CC332553E8D2DF3213DD116F697B8A82F0D6B641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762686821, "uuid": "4ac12ad7-50dd-42a1-b09e-24eb11dd78da", "value": "1536:YrC4xzOVHmQ1So6QrssvIIyaLdyYmuybVR:YrC4yGCSByIIXL/muy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762686821, "uuid": "8d6765ad-b45d-42e5-80ed-7aff44786cfb", "value": 62316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762686821, "uuid": "e17d75fc-7e37-4b3a-a82e-7a7b2d9de8fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762686821, "uuid": "4c9f86ba-3bf0-4ac9-bb6f-eabf41fee077", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d23a8ca-bd1f-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762660258, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762660258, "uuid": "ef48aed3-11bb-45eb-b29c-69e17742e501", "comment": "Malware payload", "value": "e71198c9d343ad99fce38b58056f3d67", "object_relation": "md5", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762660258, "uuid": "1000fb1c-7c7f-4785-b337-377bbf81f220", "comment": "Malware payload", "value": "f7433ed3022e4e54d0e81e352c18a2f96e3722dddcec3f1971a3f443ca6befd0", "object_relation": "sha256", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762660258, "uuid": "34962322-d37c-4187-88f7-f23d0a85a87f", "comment": "Malware payload", "value": "a50acb34a9ee758de5dfccaa097f3b8a5af7e5ba", "object_relation": "sha1", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762660258, "uuid": "1b76ca9e-7aa2-446c-8df6-d6e04b57b4fd", "comment": "Malware payload", "value": "f84271585cd4bc48121f957fe729ca64feecbb5257f8296f1c3c3734bff4f96a4566e47276bb2de0f6e27826d94a2a93", "object_relation": "sha3-384", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762660258, "uuid": "31a5154d-2ad9-40ee-b616-7a210152ebd8", "value": "T15E663303DFA91DAC4658172CB0BBDF1A2D740F90D44CB2DA16E860C9669A7C25D7FE2C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762660258, "uuid": "3b08a989-71f5-458a-bef2-32cafe3e585f", "value": "49152:+gf49T8MCkXd8OVRSZS0Mo5YVLHb/B3dHybHeOKX6xSnpTlur8ciNO3IOUw+YCUK:A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762660258, "uuid": "0523260b-11ed-42d2-a8ef-d06e51c91eaf", "value": 7040575, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762660258, "uuid": "c684e578-18fc-4591-87e0-097e2e76127c", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762660258, "uuid": "67d61e18-4eb1-44d4-9d46-8aba52be6b18", "value": "upx.bat", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7277d71a-bd41-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762674923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762674923, "uuid": "e807c5f8-9e8c-45cb-990e-958267340e5b", "comment": "Malware payload", "value": "f15faf88614085a10094d05c5ad960be", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762674923, "uuid": "4d4ae273-95d3-44c5-94ce-697d9b0d425d", "comment": "Malware payload", "value": "f7a13e9cc54d72e04aeb7998ebdc36b0244afe4815463019680dade5b56c4eca", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762674923, "uuid": "246e08da-1e8c-4ecc-b395-c3f4ce054fc5", "comment": "Malware payload", "value": "6fc21c356d503a3b6c068cdb2e464213d3f449ee", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762674923, "uuid": "00d454f3-9578-4226-af49-ddea9fd3834c", "comment": "Malware payload", "value": "d382414f9e19769ea276b8e350d0c95ef1bd322de059776c585d0212136471189c68123a97448894c56a0dd309b0531f", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762674923, "uuid": "fbd8ac61-9e1b-4290-9306-53042c47ecae", "value": "T16FD6334CD2B019ABEDF2927D98B2D119D33178EE1B32E54BA7E802632F531E09D35B51", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762674923, "uuid": "2c04a0f9-1a97-454a-995e-092747372212", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762674923, "uuid": "dd46f2b9-ee79-45bb-b164-e1476e0cdb53", "value": "393216:bWSONo/ECz6gXMCHWUjMVg74wFKwjPNBGZ30aRUwEavq:bWSO7gXMb8kDwFKwjPNBGZxUwEavq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762674923, "uuid": "86f2664e-78a6-48ea-b339-370257a7edbf", "value": 13348371, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762674923, "uuid": "225d8a90-1206-49bd-8497-54df5088d078", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762674923, "uuid": "7018df3e-7ed4-4dc1-a667-37332e3eb02f", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6c1dfdd-bd2c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762665992, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665992, "uuid": "e66c33f6-8f68-459d-afc7-fd7c7c67d6e1", "comment": "Malware payload (Mirai)", "value": "b927b925f81d3d112172524d3ea09e38", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665992, "uuid": "eb58bb6d-bded-499e-aafd-e5c2fef46e81", "comment": "Malware payload (Mirai)", "value": "f887fd162d877d85fb975c83af0d1f70aa03a5fae61e08a6f2e0f9ae5c5c273d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665992, "uuid": "317b853f-4a61-4da5-a665-e977b021e82d", "comment": "Malware payload (Mirai)", "value": "fb83b5372f25c8886b8dd83c559017678c2858bb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762665992, "uuid": "9331524e-75e9-4061-8839-99ff5bd42519", "comment": "Malware payload (Mirai)", "value": "b4082db6d98fb8f96a22ed0e39e41d098606aac99aba088009ed51c844e11b863496a24b05119f9270e5b536e90a1064", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762665992, "uuid": "96615e3b-9075-4568-add5-146cb534c0f5", "value": "T17BA2E155BF18818BC832297551D9E9D22253FC71F2EDCC592A40C16FF5A33A92474F8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762665992, "uuid": "8d8aa8c8-5e66-4992-9c77-229730dae65d", "value": "384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAKo:798o08kxofBE+ZkXaqGbp2F2TWul0c5J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762665992, "uuid": "1f13bd31-122d-4116-beee-71f9958f2509", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762665992, "uuid": "a1b7f4bc-def1-47d3-8673-6e4799ac7a07", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762665992, "uuid": "789557a6-815c-493e-8072-2e2b590aef42", "value": "boatnet.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7149229f-bd91-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762709281, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709281, "uuid": "505f9a29-4482-48e8-b7bd-da5a1258bfa2", "comment": "Malware payload (Mirai)", "value": "bc893117264118d26c5c822bdcb5ec7a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709281, "uuid": "051c43ba-de7e-4c60-9cec-9998799d7b6b", "comment": "Malware payload (Mirai)", "value": "f88d86b6a5c2da91b2c2a09ce16516ddec83cdbb7380277016f74e2ba37dbbb5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709281, "uuid": "e68239a6-37cc-45ac-aa16-081110ee477e", "comment": "Malware payload (Mirai)", "value": "e550bc46b632789659757851f1548b03561e7a79", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709281, "uuid": "e0330e85-a503-4131-9dd7-ac471c37d276", "comment": "Malware payload (Mirai)", "value": "e7c5b1eb82788974b236852bd34b03b25b89a900cf4123561c73eeec0f98942502eb6eeeddab70a1bea01f84fb524bc3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709281, "uuid": "3d84ebe5-0a74-4584-b1da-5ac301a6a768", "value": "T11C531986B8918A13C5D4A2BBFA5F42CC332653E8D2DF3213DD116F557B8A82F0D6B641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709281, "uuid": "e47fd510-dfbd-49a3-b9d5-c2ea95eaf1de", "value": "1536:/z15sp58L8B+fMEsQ6AlzICQ++O5BpluybVR:/z15sy/dQfO5/luy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762709281, "uuid": "70345a33-f81a-421f-b4e2-14d787fabf93", "value": 62316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762709281, "uuid": "04bc52b7-49aa-41c8-863b-077d398785c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709281, "uuid": "a17e680a-9019-4424-b45f-dd1d7747ddd6", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb129018-bd5c-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762686642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686642, "uuid": "40b1f6fe-bf55-486c-a6f2-f26cb3d86bf5", "comment": "Malware payload (Mirai)", "value": "b4b0428e85604792f75ad413eb5d43cc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686642, "uuid": "3baf8605-1ee4-4304-bd4b-957e862c1c29", "comment": "Malware payload (Mirai)", "value": "f97a0398c1a6e77bcf2c31cce977294a1a0fcbca011fab5a42501d9d5f564533", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686642, "uuid": "6061bf84-e20d-4b86-873a-3b0f9ca00ff0", "comment": "Malware payload (Mirai)", "value": "d93af51c0f9fab8d0cd9c956376806f296804215", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762686642, "uuid": "9c37335d-2b18-4193-968a-88818e7afbb0", "comment": "Malware payload (Mirai)", "value": "4aa46b69694a5fb5649806c92d8f442bd632748715dd4612af6b11c7f7729528b58a677930630246e9b689f8972ce2c7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762686642, "uuid": "c8ea85b1-a1d7-4467-8583-bf71dd34c492", "value": "T1FC536C4272184917D1AB4570283F17E193BFAA9031F4B386684FAB5A8676F33408BFDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762686642, "uuid": "a3588d55-c39a-45fb-bdbd-1228e96f4793", "value": "768:kZzxQE8/DRMWDGs3KB8H+A3BzGifFpBv9o+okWknFPAuNj/uybVRZ:clQtbWQKo+A3xJpRoVUFP7NbuybVRZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762686642, "uuid": "4959a921-cba4-426c-85f0-b4967f4b35ea", "value": 60704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762686642, "uuid": "e9614a6b-0860-4c9d-9665-7653932718e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762686642, "uuid": "1e4aa131-ed74-45be-8af1-33c6d9e51e2d", "value": "ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "651ac43a-bd30-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762667600, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667600, "uuid": "33a2b8bb-908f-4045-a875-86208c9b15dc", "comment": "Malware payload (Mirai)", "value": "799543716816709f46b9dc4a12cfc268", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667600, "uuid": "ae804b5b-805f-4d45-b25a-9ae77dad6004", "comment": "Malware payload (Mirai)", "value": "f9e26724a13c13893ff2f59489d2ae26e99f539f177a59aff3f6141966e7515a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667600, "uuid": "b7954167-7dff-4cd0-8a21-96b4c97d4c13", "comment": "Malware payload (Mirai)", "value": "cb19ba2059ab80b318b81dc0065c01379e2bf415", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762667600, "uuid": "8e028ad2-d78f-4f6f-8b76-959c13293390", "comment": "Malware payload (Mirai)", "value": "b0ec79835fcb2df64fc3612ee08064dd023289d2d3ecde653f4c66d5c3e96e617740d05da8a6712fe02cae2dacdcc7b5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762667600, "uuid": "ce9981d2-f0c5-43d0-b144-36d3fa1ad487", "value": "T12C935B4776C184FEC859D13467BF6A32C431F4AE0239B29B63D8FE272D0DE601A2A955", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762667600, "uuid": "dbf40143-a99e-45ea-9cad-d21f1401fa35", "value": "1536:qVPBLKF/VnojZLqBLxYlZlQjFIU0G1wN/ZQ7BBVZ5:qVPe/VnIZm/YOjFV1wN/ONbZ5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762667600, "uuid": "79a1a6db-aa0f-4d11-91d2-eeb4d6b1d2e9", "value": 96336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762667600, "uuid": "aa0e99a5-e27b-4bbf-8e24-0ca01bd61cee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762667600, "uuid": "de6ae5dd-d1b3-47ec-8eb1-dfa8e2559302", "value": "morte.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92d76172-bd07-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762650067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650067, "uuid": "b6a91d19-ffd1-4241-8a5d-e212e3dbdaea", "comment": "Malware payload (Mirai)", "value": "146464c1abb239ad394713cad19b1fb7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650067, "uuid": "cd8947a3-5227-47d3-83a7-3abcccc2def0", "comment": "Malware payload (Mirai)", "value": "fa1bd62d45069bfb72f2e13d5d03782726a0d68755752c554426bd618d33d3db", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650067, "uuid": "11842f76-dc76-47e0-be38-600f184fd0c5", "comment": "Malware payload (Mirai)", "value": "8aeb9499c40209733a09a5129d4792be269eae3c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762650067, "uuid": "fcbb4204-4f86-4087-9f19-a5acf02d1620", "comment": "Malware payload (Mirai)", "value": "80e9051c87acea7d0e300d427c47bdaac24afc16e66ceb3834d24a9dc3314814ce3af9fc2f7d09b0f39c3f78acba704c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762650067, "uuid": "babe08a5-3ad0-44de-b573-dcf85c1c02c5", "value": "T19453F2C310D2DDAEDC829A3747DE8F33C1AE11268F0A900A3850E6E9556D97B7D163AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762650067, "uuid": "513d4fee-3251-40d4-9b0d-41739ccd00e4", "value": "1536:Ob551vPiPdrkuq/w+dnj/QE9tf0zz+jz5cHovFTinKdzfdDAQ+:Ob5gdrkz/wA4Ez0Wj0ooKdzfdEQ+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762650067, "uuid": "4f8e686c-1beb-40e6-830e-5fe8b99b9678", "value": 65768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762650067, "uuid": "5b9dca90-33fb-4ce8-8cff-f7fc88b99f04", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762650067, "uuid": "498d290c-7fed-45cc-aea7-957f38fcabcf", "value": "xnxnxnxnxnxnxnxnx86_64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4425c1fa-bd9b-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762713500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713500, "uuid": "492c64d1-0066-41d7-8c8f-52b1f7e43f48", "comment": "Malware payload (Mirai)", "value": "49282f4cd4ddbfad002719a9ea11ae75", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713500, "uuid": "2d85bf4f-c27e-442b-b1fe-f61368ab399b", "comment": "Malware payload (Mirai)", "value": "fbc4daab8696069cfd56d452d99615d8b1f2651bf295a81b9d29402afb437bef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713500, "uuid": "ba39d868-8612-4f8a-bf99-6e3335edb847", "comment": "Malware payload (Mirai)", "value": "4d555bd1c9a7d0e40c87c2860e7c866cb31be41d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762713500, "uuid": "2be8a831-2e83-4f25-b823-8da5109e47d4", "comment": "Malware payload (Mirai)", "value": "9c44de7f5e3b37c8693f0795b490195b2353b11ee2dac5ceb5bdb3749c32b4a93fda23eac58be256750af9db49b0680a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762713500, "uuid": "41fb0116-f524-43af-8466-4b89b212ee0e", "value": "T105C35B56BA8080FEC498E17817FFB537D821F4AD52B9765723C0BE266D8EE500B36352", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762713500, "uuid": "249970fe-399f-4c2c-806f-35147accac63", "value": "1536:dItoEoonkBaZaY9jFfqzChuzjsiXewOUh4DTf0omVFQ13Y+Rmr47:dIIontZaoo8uMiXew4Tf0omPQtX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762713500, "uuid": "00395773-187c-4fe6-8130-3631eca1fd99", "value": 121144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762713500, "uuid": "974f05ce-261d-45b3-95ae-0d00676e9129", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762713500, "uuid": "bd394fc7-227e-4df7-b866-7f6a25150178", "value": "morte.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c43773f-bdba-11f0-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1762726721, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762726721, "uuid": "db4ea93b-abbd-4b12-b63d-823bdf0ed587", "comment": "Malware payload", "value": "542a0d1d564d54164c20a2e508228844", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762726721, "uuid": "de54977f-c83b-4259-a6cb-9809c11fb4d2", "comment": "Malware payload", "value": "fc4534bfe3a1850bc17e64a2214259353e4f640a66bc8c194529dc4f4072106e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762726721, "uuid": "c0ae8bd2-edab-48e4-8b1f-b96ec514d6dc", "comment": "Malware payload", "value": "0ea4746d17cb4cc768e4fbb8d4bdaf79871b3d88", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762726721, "uuid": "7340fbe3-0a15-43ec-b819-e493ecb1ae92", "comment": "Malware payload", "value": "f3b03e7465135b25b2f4bb3f63aaf88eed0d3ff39e77a12288c9c05dcd3853ac9198fbc1b0e2a6e6221b7398d55480dd", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762726721, "uuid": "d86817f4-5a72-48b8-9af3-61bc3d2b47ac", "value": "T18703FA95EB0720F4FE2B09B0106BF77E31366502943A9CE6D7D66E83EEB1D26084875D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762726721, "uuid": "1a47cdb8-7bce-42c8-a1ed-08ccdd3e0574", "value": "768:M7+h8moK1a0ZhZ2zswT6SYYKoMLh1V/OGKaEJTkjT:5Dx+n6BFPT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762726721, "uuid": "45b592e3-bcca-46be-8ec5-2438fe29698f", "value": 39564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762726721, "uuid": "6d6ba9a7-925b-4c0f-b748-249696e3bcd7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762726721, "uuid": "71fa7584-1e8b-4037-a33e-23f520514499", "value": "SecuriteInfo.com.Trojan.DownLoad3.40744.31973.29930", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "823be574-bd92-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762709739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709739, "uuid": "fcd0ffba-5f74-4989-a378-c8ee73cae87e", "comment": "Malware payload (Mirai)", "value": "e3429e177b5baf2b245e073603927c7d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709739, "uuid": "12c5fb27-b736-44e0-9d8f-2c71ed52f2fa", "comment": "Malware payload (Mirai)", "value": "fc5f410ff368910037e8ca73cd9024694eea4083af51990892a44b57938c6bf5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709739, "uuid": "3bd078e4-3e18-46f9-beae-0fdc17f57dff", "comment": "Malware payload (Mirai)", "value": "4690703db8a3be608740e32d8f9b7b3dcd66d7de", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762709739, "uuid": "d6dcd437-3faf-4cd8-97d0-e2eb986176ba", "comment": "Malware payload (Mirai)", "value": "6694574c40b254bf1605c592cbb299e68a8b4641c610db9ecc085c957b8264bcb901d6d9cbc0b5e0188f27257194babe", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709739, "uuid": "6f010342-684b-4a7d-97a1-f132b482e577", "value": "T141832A2279761D2BC4C1A8BB22F34725F2F6538A25F8CA0E7D620D4EBF256503147AF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709739, "uuid": "5464285c-61c9-4367-b5f3-91392f5204a4", "value": "1536:EzNoZzlh6FgCWQtlaXtq1yt5mIoEZfjtc7MGP:o+zfM+Ic/2EQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762709739, "uuid": "32dd21b0-e9e5-4810-a67d-0d9cc70de475", "value": 88732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762709739, "uuid": "60545b15-74a7-4a06-8e1c-50299c11cd0d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762709739, "uuid": "6a23e8c7-0933-47be-b6da-d3aa4ad561d0", "value": "spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e43bb8d-bd4a-11f0-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1762678809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762678809, "uuid": "afa32be9-147d-4a34-88a3-ec052f0929d4", "comment": "Malware payload (AsyncRAT)", "value": "09ebbfc4a7df6062505ad38e11113b20", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762678809, "uuid": "a1a10972-fea2-4a75-84fd-2d716d4a676d", "comment": "Malware payload (AsyncRAT)", "value": "fe4f88f0e8f21d8f48c20d863294b3f360008dfeff3c6aa3e6403aafdcee0fd7", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762678809, "uuid": "6559f636-adc7-4eff-835f-89b6c680216f", "comment": "Malware payload (AsyncRAT)", "value": "aceb491ec66b53099663eb1a3643c2bbb08537cd", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762678809, "uuid": "4c61c63b-8a86-4697-adf3-29faeabac60e", "comment": "Malware payload (AsyncRAT)", "value": "0cf1b481f6808a61a94f9d42d9992dd9ae1e53936dd6bd87c7521c30a5551011b7508031c52e2e7f48fcaf652249829a", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762678809, "uuid": "1ba4bbdf-b252-4d22-8ba4-308d181378a7", "value": "T10A232A0037E8863BF2BE4F78A8F26145867AF2673603D54A1CC451DB5613FC69A426FE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1762678809, "uuid": "00466ab3-95a4-4e21-bcd1-8674c6fc42c2", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762678809, "uuid": "e288aaaf-db51-4d15-b80d-c7b58c279bc4", "value": "768:NuwCfTg46YbWUn9jjmo2qr78V1xpVmcPInzjbAgX3ivDcdUkOBDZOx:NuwCfTgpM2K8Vz7mhn3bnXSvDcKdOx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762678809, "uuid": "4ac34a47-9fd6-4a1b-87d2-d2740a4efee9", "value": 46080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762678809, "uuid": "8b1bff8c-8ceb-4b7c-9a97-1d833bfd8419", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762678809, "uuid": "003bae57-3af2-40a3-911b-297edec258f7", "value": "09ebbfc4a7df6062505ad38e11113b20.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7598fd3-bd46-11f0-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1762677160, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677160, "uuid": "a6bfc495-5e00-4bb9-bffc-ae485f71d79d", "comment": "Malware payload (Mirai)", "value": "bec645e5ed5dcc99fbceb3beb1847291", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677160, "uuid": "c1fce669-8918-401a-99ff-1998e22fdbe1", "comment": "Malware payload (Mirai)", "value": "fec39dc7e424dac4de0daaa2f19dad6bf3d8d37a957b40165086f066ba6d0997", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677160, "uuid": "8a8635ba-e087-4884-9aa2-d2de8d072dca", "comment": "Malware payload (Mirai)", "value": "f2d9c0f5bfe2ba5b762d0d1225dae439f4b6e7ed", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1762677160, "uuid": "71870585-c2c4-4d66-b3eb-d021cd88f8d0", "comment": "Malware payload (Mirai)", "value": "d8c92390101cad18122d77ec719d7ab08d7655998390543da9f528c266320883237804372114861ac8705b861f870d7a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677160, "uuid": "caf353a2-3dc2-4d33-b82d-388429e6e34e", "value": "T165332845E743D9F0D84305B0155AFB3AAD32ACA63330DDF7DBE4F66778B26425402A58", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677160, "uuid": "085d082b-8fe6-49bd-b5a7-e879830d2801", "value": "768:1ZsIQAZITTVyrDLWRTtWD6W7vR0sRlzhJdt9QgcpOQgc8lXvFqyEVnKP3OI1n67Z:1ZFuTV8WDCXxXT9lXvFcKmI167Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1762677160, "uuid": "9e9e4978-0ddd-45ce-b559-c3c3bfabc026", "value": 53848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1762677160, "uuid": "42171c4c-98a8-4cbc-90f1-6ae00536100f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1762677160, "uuid": "e10b3e4d-55e5-41ae-9255-5723f3dde654", "value": "boatnet.i486", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ] } }