{ "Event": { "published": true, "date": "2023-06-03", "threat_level_id": 2, "info": "MalwareBazaar malware samples for 2023-06-03", "timestamp": 1685836981, "analysis": 1, "event_creator_email": "bazaar@abuse.ch", "distribution": 3, "uuid": "a740fadf-608b-424c-b3ec-784aa7f45800", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "437dd84c-01b6-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685759282, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759282, "uuid": "3912cfe8-6dea-4550-af03-78e17fb5ae0f", "comment": "Malware payload", "value": "70c1e6f97fb456c3832d7f105eafc391", "object_relation": "md5", "Tag": [ { "name": "GPT", "colour": "#9FE24F", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759282, "uuid": "80b26b42-7668-4bf9-ab13-96b9898e228f", "comment": "Malware payload", "value": "01750495050a8b17a62a61e607cd3344c771b102f6d46e9e99c313fe266d866e", "object_relation": "sha256", "Tag": [ { "name": "GPT", "colour": "#9FE24F", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759282, "uuid": "a529ad35-f464-4ed7-9435-c716570749fb", "comment": "Malware payload", "value": "467b672e5770c27fcc931e63920d54b339bc59f6", "object_relation": "sha1", "Tag": [ { "name": "GPT", "colour": "#9FE24F", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759282, "uuid": "02bb7a80-8b72-4800-a3f4-8995af43d715", "comment": "Malware payload", "value": "89f7571748dce700150af796086824846ca8111fb6e0dddc029611a04f76fa24c1849ff912357b0f2bca990c667187cd", "object_relation": "sha3-384", "Tag": [ { "name": "GPT", "colour": "#9FE24F", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685759282, "uuid": "5b57557b-a4fd-487a-8a19-17ca57fb4cd6", "value": "T17A9633DA81E20963F24626EF1AB2501E2DD1F94BD476F879401D34BA2E4F7F02DCE952", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685759282, "uuid": "8e932501-c7a6-405e-aaef-ee65d3b1530f", "value": "196608:K9ZODvU+UwqvqkHNru1iU9dwFgHSNZk2mnlNV2MosSHtxFfzBjnf6:5I+fm329yF6SNZkXvgffV6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685759282, "uuid": "eca02eea-f6bf-40a2-9fef-a0e8b87def03", "value": 9096828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685759282, "uuid": "426b2ba2-7e42-4329-9d7d-615a877b52f3", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685759282, "uuid": "c34047ba-f391-4493-8105-d821cb507886", "value": "ChatGPT4.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00ce143a-01bf-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685763035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685763035, "uuid": "4d422744-ebbb-4106-9b10-f450e966acfc", "comment": "Malware payload (Amadey)", "value": "43eefc103385571f005dadd479e505e0", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685763035, "uuid": "dfd688cd-8117-461b-b9f6-76afd51788b1", "comment": "Malware payload (Amadey)", "value": "04de1834bea03e012d55c633fdf581e6bdf673e7e32cea2fa864d6904a083ca3", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685763035, "uuid": "7f171102-f9be-4883-9a13-fe3740bc9cdb", "comment": "Malware payload (Amadey)", "value": "d2978512981412f0c9e4897297c4086209e31098", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685763035, "uuid": "3429228a-e84b-4e1b-934d-9282d6e2d7e8", "comment": "Malware payload (Amadey)", "value": "c9e2744ce3e178ec4467571988c4234940babb1dcb5ba8a0f8d9edfc23a0347be9f816aa8f95110eebafd52841682b37", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685763035, "uuid": "3b067dd9-ec8f-4581-a76c-1def98669b05", "value": "T10735235772C88173D8B5177458F603832D397D908975EA2B2742A9AF0DB22E1FA3136F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685763035, "uuid": "379dfdf8-a574-4f5d-8e60-ae5e2b32f905", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685763035, "uuid": "ccf039cb-b319-481a-b660-c7eeba3d39c0", "value": "24576:yyhCwgQu/Rg+GjLGl1wTC5bE8T+8rPbyeAv:Zlg0lKlWT2NTDrPbPA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685763035, "uuid": "606416f9-5258-4110-ad60-4bc8bfdfa966", "value": 1091584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685763035, "uuid": "cfe25676-9c21-4b45-8777-a08c519d08c3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685763035, "uuid": "25ea32d6-112b-4414-9999-ecbfc50276b6", "value": "43eefc103385571f005dadd479e505e0.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c7daead-01e8-11ee-b3cf-42010a9c0076", "comment": "Malware payload (DCRat)", "timestamp": 1685780745, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685780745, "uuid": "eb771411-8ee6-4c2c-b422-57f4aa0bc1b7", "comment": "Malware payload (DCRat)", "value": "b8cb324149c343db7b97aa57a030ad9b", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685780745, "uuid": "1fe60922-8a71-4640-9cf2-614808ec3291", "comment": "Malware payload (DCRat)", "value": "053c3cf58d6dbbd7d140277db2141a5f5e0ff73d6b00dfa84e965fb5ab425afa", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685780745, "uuid": "a7784601-f8c4-4866-8534-874c40cb0575", "comment": "Malware payload (DCRat)", "value": "f1a8772d3709f8193c58893723f12b14ba0c6217", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685780745, "uuid": "76eda0f4-b2a6-4c99-b45c-55dec230833f", "comment": "Malware payload (DCRat)", "value": "3d148a48ce3a2c4edc2a283a40ff98b426c80df06860c5580a57d2fe715c942718b27d0e4e74f12d324e2ace12f5ed91", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685780745, "uuid": "5ff8aaff-4cb0-4c70-9d55-2572b1fc67ba", "value": "T100646A1837EC4B19F1FEABB5D4B351999774B85AFA3EEB0E1D8150DA1922340CD00BA7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685780745, "uuid": "36d68f0c-4803-4fe3-804b-170c4596507e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685780745, "uuid": "30a697e5-e5ba-4c1e-ab5f-46b51f7d1732", "value": "6144:Peny2oo7LEeU0SHN7rvRaLWI+PpOYx+k1Ul9sq4CydxrbA3r9u:P12N7geuhrvdPp2lqBdxg3Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685780745, "uuid": "f82f2137-ad71-4a15-8464-8c224699f921", "value": 328704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685780745, "uuid": "ac1d3df0-c5d2-493a-9a93-0e7575d82330", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685780745, "uuid": "239a7296-07ff-4254-bfe5-09751cfded5d", "value": "b8cb324149c343db7b97aa57a030ad9b.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84f48832-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685793322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793322, "uuid": "a2eb8e60-b4d8-4619-a47f-357523fff832", "comment": "Malware payload", "value": "f8c0e417e008b5aae811e02f53279a59", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793322, "uuid": "5eaab5cd-242f-40dd-8bc3-1fb89a1a5ecc", "comment": "Malware payload", "value": "05558f2e82972ab0233253814a5625047a410fd801b3603bae91d8cb8f43a5ba", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793322, "uuid": "80f0488a-6615-48b6-adc0-2e3d694d6a3b", "comment": "Malware payload", "value": "7ef201c5a5205cdf19f99897552aa10b72a545e1", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793322, "uuid": "daf73fc5-98f9-41a5-b269-11b5b1dd5fee", "comment": "Malware payload", "value": "1e5f416d264e2689ab60d18376a271bb1900e6a6a6db5f0018f3b23689144bf35903c189b8a68f456d123a28fdcd487d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793322, "uuid": "51ec9e47-a265-47e2-985f-9493bf8c29b2", "value": "T114735C32F975092BC0C0657721FB4B25F2F247CA21A89A0E3E710E9DBF616403657BB9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793322, "uuid": "5d37ac2e-c3a9-4e91-87f1-1572dd9734ad", "value": "1536:Qx4ugSdAfszJGbmBsQ33vt9N5NNm5u/bJgI0Jt9E:04Er3vF5NNOwVSE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793322, "uuid": "d644a205-3237-4d14-b03f-0d73a1d9f867", "value": 79704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793322, "uuid": "9fdf2506-7e65-4f69-814f-e5ee797e9ab6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793322, "uuid": "7573003a-50c5-413c-87a5-afbb3955d8de", "value": "f8c0e417e008b5aae811e02f53279a59", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "828d6901-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685793318, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793318, "uuid": "11989b11-8a1d-45ee-9d26-dce1b0b7d334", "comment": "Malware payload (Mirai)", "value": "0cb160d00a26175225d72f510a869573", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793318, "uuid": "f498b06b-b576-4162-a8bf-f4d54a9ebe2d", "comment": "Malware payload (Mirai)", "value": "0583359d6f32dbe88dfa6d5cfb9a9319374d4b1b3a138595685192e92d195d7d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793318, "uuid": "0035df28-8510-4c96-805c-b1e5873f6159", "comment": "Malware payload (Mirai)", "value": "f8f412d1852f21a7ff6c755a202bc075bdbcb548", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793318, "uuid": "43de9e6a-c0d8-4d22-9b74-37b732c82155", "comment": "Malware payload (Mirai)", "value": "a50d188aedd71ee1d107c1e0167a8f24d93acc563c8155ca85c7ef633517705793e41d1d340d1bc0c16a47f808ec4ef6", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793318, "uuid": "16cb339b-be52-4b4f-bdcf-c749b765fff9", "value": "T1B2031861FC838AA7C6C01336BB6E9B4D372163D9E3CE76179E1417207AC681F4D22E56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793318, "uuid": "8e04b3dd-c4f7-472f-8a20-73d4f5a8af41", "value": "768:h3LZ6NmvmPpA8m8PQG5bQkvx8855ry4QXFAoPG+DXn/N1Z:5MmvIB5oG5bfHPry9XF1X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793318, "uuid": "e9d915dd-f1df-4216-bb34-0ff28c3d3bab", "value": 38484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793318, "uuid": "3e6646b1-8c0e-4127-bb6e-30a188909c5e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793318, "uuid": "f2f84956-8c63-48e4-a5b1-5f0520b8f887", "value": "0cb160d00a26175225d72f510a869573", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5de2c9b0-01dc-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685775647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685775647, "uuid": "2243f488-44fb-4e4f-8520-cbb7cb0ab106", "comment": "Malware payload (RedLineStealer)", "value": "f371a6410d91c6436b96886eca36040b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685775647, "uuid": "aacf84d9-2a49-495d-9f6b-af4af89284b7", "comment": "Malware payload (RedLineStealer)", "value": "06c8c0ee65c80247e4adb9b03dadfbd311de9ea01de5a8a349cc717528b7cd4f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685775647, "uuid": "4deb787f-bbc9-4a09-8a54-cec44200acb9", "comment": "Malware payload (RedLineStealer)", "value": "1ddeaf2b857c11e85a1da0ec52012b07e7897342", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685775647, "uuid": "5e2d1546-fcbf-48ff-84a3-d82ae2c7c71c", "comment": "Malware payload (RedLineStealer)", "value": "c10e26d985c9454fdd6d42ed670e9740da370bb9c8042bf2c0839e1ddc38d219777e063d59ddb7bf53178bb584173995", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685775647, "uuid": "79b6765e-2dae-41c1-b5df-1394aea585d1", "value": "T103352343D3DCD0B2D4F927B059F209C35F363D70553492933A909EA66C72F84A9367A6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685775647, "uuid": "8582db29-46dd-47f0-bf47-dd7a49fefd31", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685775647, "uuid": "e98dcf60-0988-4af2-aa28-06a945b3d426", "value": "24576:iyrSvVoJ3P9BxrU/UBqAxMO/kjtL9LKUTqGCfD:Jev21PxrpULO/kjltKUTuf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685775647, "uuid": "4bfba9c5-0a99-4c34-abc7-0b81134477d5", "value": 1091072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685775647, "uuid": "8d509422-0ce6-43ab-ac1e-545f19e0891a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685775647, "uuid": "f3b69f56-ad44-4e44-a957-fd1b5d43b7cf", "value": "f371a6410d91c6436b96886eca36040b.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b3bbe89-0206-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685793681, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793681, "uuid": "8d471137-e39f-4909-9c31-a2af3ce2b557", "comment": "Malware payload", "value": "eba717664f31376d6fb020805ca75c79", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793681, "uuid": "afd0576a-1104-47cd-b7dc-b7e9e642ffe8", "comment": "Malware payload", "value": "07ad000dbcbede565cb4a6e9bfd169f6fd696b5374ccd0d5b6fd84cbbaed5e4e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793681, "uuid": "346ad99b-cba0-417a-8449-bc94779ad75f", "comment": "Malware payload", "value": "e95e9f9c2dfc8fdc3bfe7dda5310436ce844ca48", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793681, "uuid": "b689fee2-18a5-4d9e-8f2b-ba62b1758cf4", "comment": "Malware payload", "value": "8e250aa0612bb1ccaa42762180330c818fd2aba9cebc964309a9942b6762504c17422ddcbffdf0133aa682cdfcf7e24a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793681, "uuid": "fc8bebb9-1220-424a-b935-1ba078f1dda4", "value": "T13004981E6E228FADF668873547F74A31A75D23D622E1D684D1ACC1106F2039E641FFAC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793681, "uuid": "40bbf9db-df26-4232-bc9e-dd62c2b9d271", "value": "3072:vKqY0lL8THS6f+uyeXeLlUfz4Fts2mXPk:vKqYAqy6rf6tsFXM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793681, "uuid": "c0bd289d-46e4-4949-9fea-dc7dae95bb9b", "value": 173316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793681, "uuid": "f8e31e31-3329-4759-a661-000d91725929", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793681, "uuid": "b73fb3e2-f66d-437f-9fc5-8fa6cf321dae", "value": "eba717664f31376d6fb020805ca75c79", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "22cc4dce-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685778984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778984, "uuid": "17151f82-48e4-48b5-894e-4b41c7ebe170", "comment": "Malware payload (Mirai)", "value": "5d05d3072ec478e0750f2c9579f40cc5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778984, "uuid": "2fd9a755-8f40-4177-861d-df2f1c53c742", "comment": "Malware payload (Mirai)", "value": "0a0b5d4be446b511d71bf32ceff845d1be92ee37267a8358d27922b96cb09f3c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778984, "uuid": "c1b08bbc-acd1-41d4-bc73-95b6edb43096", "comment": "Malware payload (Mirai)", "value": "03012e3b23bf298b68fecf4e9427bca1a21530ce", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778984, "uuid": "22eac123-1b8a-4978-9bd9-a104a46a452e", "comment": "Malware payload (Mirai)", "value": "ac0bd518a3a3428f83897458f71e308fdfdd4f3c337f85c30665971b5cdf0574d9b176b8fbca3332e0f6f41294e31183", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778984, "uuid": "68976a9b-ce06-44fd-888d-065ec9343790", "value": "T1A4E38536B7619E77D81ECE7305A985121C8CD98702D92B6BB2B4E51CEB6BC4F08D3D48", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778984, "uuid": "44422da3-adca-4228-a1cc-bf9548999b0a", "value": "3072:dgZc9h1jlnLA2PiXYeyCcTVNMVGuo9mrThPaLEnvPrNb:dd7lnLA2PiIeyZTVWDo9mrThPaLEnvP5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685778984, "uuid": "c5fd3aa0-46b3-436d-8e50-26af5e5c8f00", "value": 155476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685778984, "uuid": "8fe3f18e-2f5b-4c50-8a8d-b6a6d0b2e179", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778984, "uuid": "7511e90a-2de8-42cd-ad19-a77456f6de89", "value": "5d05d3072ec478e0750f2c9579f40cc5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5af7b45-01d7-11ee-b3cf-42010a9c0076", "comment": "Malware payload (ArkeiStealer)", "timestamp": 1685773727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773727, "uuid": "4d4411b1-bf1b-4e80-87d3-17afaff1580f", "comment": "Malware payload (ArkeiStealer)", "value": "4a0e102cfed705b1c4ed92a20109adc4", "object_relation": "md5", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773727, "uuid": "d4cce445-d4e9-462a-8014-aeea9372eec3", "comment": "Malware payload (ArkeiStealer)", "value": "0a1012e8650f32c22666c203a2541dc5da3e6eaac7960f3b91459c2c94872756", "object_relation": "sha256", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773727, "uuid": "dc972c14-5bd6-4ce1-b44c-ea82aa37c606", "comment": "Malware payload (ArkeiStealer)", "value": "a827ee5bca7a238fa56afb27476daf21b5ebbbb6", "object_relation": "sha1", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773727, "uuid": "5f3613db-b721-45cf-893b-402736a0f070", "comment": "Malware payload (ArkeiStealer)", "value": "402844fab9941a606756c469e19f9d5fd9603e5ec55d90b551fea00ad51a14984da93165289c918f143d97e4ff528f33", "object_relation": "sha3-384", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773727, "uuid": "49366faa-a9aa-45f8-93f3-28fd1a399394", "value": "T1E9849E0373E17C64E5264B328E2ED6F8661EFD918F5577EB2655AE2F08B01A1C332706", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773727, "uuid": "b5a444e3-d99c-46ba-b9fe-34571f05ae01", "value": "a52b903201b2b26f84fa5c505e01f1fe", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773727, "uuid": "93c8f60e-9c25-488d-a1a0-f761f4344616", "value": "6144:5ILeFcNUSSb+9aku0YWFuNDGlJtkLceUl/gI1za4iNo88v1:5u0c23a/uQuBGHtkLIgI1za451", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685773727, "uuid": "fe3a07ef-f2f2-49a6-b2dd-1fbafaa4c77c", "value": 382976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685773727, "uuid": "9319b1d3-86f1-4068-a0d3-0201370bfe94", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773727, "uuid": "a999aa15-61c4-4d68-b135-b905e28dd276", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bdec78c-01ec-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782435, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782435, "uuid": "1f8ef431-8ce7-498d-a857-10f792837666", "comment": "Malware payload (Mirai)", "value": "4744732e620ff70fd756c39b2643b4b3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782435, "uuid": "59d45323-0c76-47fe-9c1d-48fea5112bb1", "comment": "Malware payload (Mirai)", "value": "0a3cc1c7d81fd0bc63101d121c0518d32a42253453985565525a4896b8e8d144", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782435, "uuid": "f58b4932-fc6f-4f51-bb8c-e91fda397e66", "comment": "Malware payload (Mirai)", "value": "4cc5b69e5d0182cc922fe3e01158bb3754eb4fdc", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782435, "uuid": "9c819ef5-f611-4c05-af06-280f344b4f3b", "comment": "Malware payload (Mirai)", "value": "cb1aa9038cc4e6e422ed2f541af0b0564131bc85e146432210da8f38e52f914883d696a3d658b7fee6781ebad31383b0", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782435, "uuid": "e156c7a8-2997-4cd7-a536-6da6ceb426e6", "value": "T10C53F1874E480AB3C32438B1442FAA536CEDD47CF29764A7614C45C17EF60B25AAFAE5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782435, "uuid": "6bb9f809-5429-481d-9fe7-172065a80bcd", "value": "1536:bJ5iXW5B0w9p2uwhnPd/VEeTcFZWU+Mj7AdTiPYst:9YG81Pdt7oZWU+cMTwf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782435, "uuid": "e25c59d4-9b01-429b-81dd-aa0237908585", "value": 60920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782435, "uuid": "62441360-e404-42ae-8f17-b13cd7d1eed5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782435, "uuid": "a6d54f16-5732-4157-891d-030ae1b7ef44", "value": "4744732e620ff70fd756c39b2643b4b3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa903bd8-0206-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685793949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793949, "uuid": "604e7c52-8a2a-45b6-9772-6852f83bfe88", "comment": "Malware payload (Amadey)", "value": "990a918a2d0448d42408d7854a3f8863", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793949, "uuid": "fd72415a-1470-479b-ac81-6ec1fc574378", "comment": "Malware payload (Amadey)", "value": "0a4ad7cd8cb518a13ed1e231cd49bd94289dadd4b294c4efc52c0fd8920a39dc", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793949, "uuid": "52be2173-1ab8-4f6c-a8e9-48950a9487dc", "comment": "Malware payload (Amadey)", "value": "dabaa9d880adc05581665244e85a6eece161f2dc", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793949, "uuid": "a5476191-57bb-4280-a341-699ba7a132b0", "comment": "Malware payload (Amadey)", "value": "eb71c65d1c5c704001ede524c85b8c961bd846b5ab8d97d5d64c2a454986ef7d3991a6e08613c310a64d305895487523", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793949, "uuid": "86b542d9-0394-42d2-8b4d-7640fb81aa9d", "value": "T146052396E7E84471E87127B04CF602C30B3EBDE299798B6F2B955D1A0CB3284947572F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793949, "uuid": "2110cbe9-4d7f-4af6-a6ca-12dc5f259076", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793949, "uuid": "c2ad92ca-9bb6-4478-a4d1-a94699582d56", "value": "12288:OMrXy90u6HCiq2sEj4pjAorHJuF8oCHR1nzgi6fNNDHA0krhEt:ZyKix1zJ0ARiisfc0wEt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793949, "uuid": "e56127e0-5071-4053-8ed6-08094881aad1", "value": 798208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793949, "uuid": "2177ae62-f399-47cd-a0c8-1d1e5822e557", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793949, "uuid": "1d10af6f-e70c-45e9-9750-513ccf678b2d", "value": "990a918a2d0448d42408d7854a3f8863.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ead38a0b-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802512, "uuid": "0bf66603-a173-48a1-9ae2-c2260e7e043c", "comment": "Malware payload", "value": "b108e0189f5a1aee8054de174d602d41", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802512, "uuid": "b887e5b1-6f6a-49ce-982c-e6537c4b8f9e", "comment": "Malware payload", "value": "0a71d8b442259242d3f37bbe3469af81378f306c17f14cd976800adf2bcb227d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802512, "uuid": "b23b651e-4167-40af-8b8e-73650ff16771", "comment": "Malware payload", "value": "48664993df80ec72605ff3d919a839677ce62152", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802512, "uuid": "9c6be745-d0bb-453a-a8b0-51f8197beca0", "comment": "Malware payload", "value": "7bb4a0490720055fe00523d0f997af11a8ebdce5e3d1fbabcab0309073818b30333e0963716cf35cc3ae7d7bf40b2b50", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802512, "uuid": "19148738-fdb0-4c1d-a7ba-a832849cb6d6", "value": "T1AB74231F8E994C36D01A4AB89837F9668F11FF6634BFA57D55E03942273EEE038C9409", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802512, "uuid": "c49e0de5-e73d-4525-b545-57ea5e8e14d8", "value": "f4d3177afa9641de5e9a1e394b14bee3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802512, "uuid": "c584e2f7-bad1-4f30-bf3b-24bfbaa561b5", "value": "6144:xnNC0DF2idZecnl20lHRxp3gXRNGnZyF3HmSvupGtDPPQTK4+XIV07gd2:lhF3Z4mxxWT4ZgmwupuDPoTK4lCg8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802512, "uuid": "9d9f52f2-302f-440b-90a1-3e474b0b929d", "value": 348160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802512, "uuid": "e1e19f4e-d70e-4de4-9d3a-854763561863", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802512, "uuid": "ab7b77cf-3c2b-4ce3-b5a6-632f52ab4356", "value": "SecuriteInfo.com.Trojan.Heur2.GZ.vOWabW7wbtab.10231.21342", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37839237-01b5-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685758832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685758832, "uuid": "3b83e6d5-6f7b-4c36-b76f-62f460625263", "comment": "Malware payload (RedLineStealer)", "value": "c3feb2c33f65658a70399dafc3610d66", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685758832, "uuid": "db2314cb-79d8-4500-8882-f08fd7f52e34", "comment": "Malware payload (RedLineStealer)", "value": "0d530be82e0c8293ffd0e053dc2700c4f630e01ef45c1f2100201f6209016c10", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685758832, "uuid": "251595b4-fb73-4f9c-8096-4d441aac24c2", "comment": "Malware payload (RedLineStealer)", "value": "ddb54250ae38e195e7938c0d0d4b61d1f2e3031b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685758832, "uuid": "860d43eb-c8f2-4fff-b904-61d22012ec58", "comment": "Malware payload (RedLineStealer)", "value": "54e049666f22464a7dedc7909d02cbfd39c2582fa878bae65056df9870cd7d9dca4b16340fe958ac51d9565fe2a4cea0", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685758832, "uuid": "1f434057-b5cb-4f3a-ac46-ac54fe1db84f", "value": "T1CA052257F2E85123C8B82BB019F216830F3ABDA05D74975B27446CAB6C72640F972777", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685758832, "uuid": "41ab03f8-4486-4598-9e15-d8faea4156ec", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685758832, "uuid": "97f767c5-d2d4-474b-9562-6762cf666e65", "value": "24576:9y62BoqGYvqYDWGruFhb8H1Lm1kZV4WJ:Y62BoqGY/DWoNVLdb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685758832, "uuid": "3b0418fb-bb58-4504-b9ec-25671563c6c7", "value": 812544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685758832, "uuid": "6af84daf-3a17-4940-8bad-1c26453d22b7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685758832, "uuid": "eb0874d3-f78e-4415-aa77-808af2799c44", "value": "c3feb2c33f65658a70399dafc3610d66.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9e40f4e-021d-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685803772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803772, "uuid": "420bc9a1-0b93-4035-b8de-c0d67b4750f9", "comment": "Malware payload (RedLineStealer)", "value": "88fc1e995fb2503d0a0ddda049b0970b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803772, "uuid": "3532d343-2765-46ed-b168-7e7b8cd0c539", "comment": "Malware payload (RedLineStealer)", "value": "0f144bc50f549e9386be26f5245d1e69658775cdb5a1e61be4fbb341e5f96fc2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803772, "uuid": "173b5077-dc31-4b60-99a7-4558fe8c70ed", "comment": "Malware payload (RedLineStealer)", "value": "f0f9f2015673477cb7c0b47768d73d7277e715f3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803772, "uuid": "672dca53-f055-4b11-b3fb-0a7db98bb3fa", "comment": "Malware payload (RedLineStealer)", "value": "fc541948bdb7ff5d5f0e6395e77704a378c10881eee4b465a73f3c3b57764fd8fd82264227c7e1c6cb4383fb466e352b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803772, "uuid": "d8832026-92fd-4780-812f-ab6a890ac388", "value": "T1C0052353A7D88476E97117B02CF506C31B3ABCB19DB887563789AD1B0C72AD0A57233B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803772, "uuid": "b0671b41-5cd7-4402-8cdc-12e339e50528", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803772, "uuid": "55330863-6667-41df-96a0-7cc6fd449a7c", "value": "12288:BMr/y90qDA2nAG8a9h/rTWnOs9q4ftNmAIB/04aTTVt+PmqTJeDcAX60V+lDZ+2:6yI2nA7aDrTZs97egVC3IZXT+dg2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685803772, "uuid": "0c3a2de9-f692-4ce0-9711-fa42868176ee", "value": 796160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685803772, "uuid": "ace42269-7712-441f-acbd-66e90b65feed", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803772, "uuid": "b3c8cc50-e4ae-4013-9385-9712694ff154", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d5aa115-0219-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685801765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685801765, "uuid": "8cc9d7d9-656d-497c-8bbf-1ad0060da8cc", "comment": "Malware payload", "value": "928b75a9921d7de11fbf727939f92ad1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685801765, "uuid": "948c9902-f2b1-4027-bb3f-4e969513c946", "comment": "Malware payload", "value": "0fa27742d3f365306d06df1fc239c603e9dfd6200f9847803e01ae1811baab72", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685801765, "uuid": "429a0ed8-219a-4436-9feb-d3da1fbe9bd7", "comment": "Malware payload", "value": "5569b17803fd6050bc23f90b2410eb50d72cc95a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685801765, "uuid": "ad40794d-208a-46c8-bd5c-d9e18c7bf7f5", "comment": "Malware payload", "value": "fc527d0f12c1cad74e36e231bde4ffe5b0ccc849150f868c22ed52e628c2c1d57c182b3ebfbcbd2fd83beb4f2cf1c492", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685801765, "uuid": "e9ad02d7-c7c9-4a2b-a26d-e426721171c7", "value": "T148163B0696E90191DF76B038756D3295F832F4E44F288AE76FF0958603DBAE16BF9304", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685801765, "uuid": "08b4d9be-2cb4-4c25-a621-ed9541d15f0d", "value": "332230d18d82754c8bc49966666f5875", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685801765, "uuid": "d024a8d7-2b9f-4ded-81ae-a8b5df06662c", "value": "49152:AAJvRGXaDiX/BSPsCfBJRbqqX6GyimrvnrpIvY5bIXfWU/AcHa:1JOEPBb1tqrvOYZIX1/LHa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685801765, "uuid": "55f12528-f263-402d-8445-2d42a861ec4a", "value": 4390400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685801765, "uuid": "68cba68f-cdea-444a-888f-dd777990b770", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685801765, "uuid": "b1a583c8-398c-4b20-8d3a-c0a00b1dc913", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79d2f770-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782136, "uuid": "f480e39c-5566-4626-87ad-b244ffd0929c", "comment": "Malware payload (Mirai)", "value": "ae8842669f31f184f1292c2fbdc9893f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782136, "uuid": "a79cc5c0-8d0d-41dc-9142-0082d4b97091", "comment": "Malware payload (Mirai)", "value": "102122858dbc35a8e0f20081748fbdc1482ce371797bcd0200ff33a7a1b0f2ab", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782136, "uuid": "207d1769-a6c2-44f6-bcf5-994c654a6794", "comment": "Malware payload (Mirai)", "value": "0a427ed81208c7d77b4ba41c1fd7b2d72c8de9c8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782136, "uuid": "8945bfa6-d6a0-4577-99a9-bd8aa36c35e8", "comment": "Malware payload (Mirai)", "value": "b7c3ce208a79724c6e2ed3db30d986169f1c30ffe7cc27e5026ef479654bf7c6e175f84262f9a3408295acd01f1f2417", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782136, "uuid": "7b6cbd35-106c-4361-ad58-2707800185b9", "value": "T1AB63B416BF650FB7ECAFCD3749A91B05248C650A22A93B767D34C818F64B24F49E3874", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782136, "uuid": "e81e90f3-d173-4316-9cbe-029562a29d02", "value": "1536:0mxC6/sp15FY5qd0ILILvTwxP7ZwjU4lg:0GC6/sp15u5qxP7w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782136, "uuid": "03d2b107-5804-4a70-bcc4-6abb3cd2bf91", "value": 72344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782136, "uuid": "9c1692f5-745a-4be9-834b-b3a361804bf5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782136, "uuid": "594c2c1d-2016-496e-93c2-dbcff98d2049", "value": "ae8842669f31f184f1292c2fbdc9893f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48b440ef-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782054, "uuid": "dbd0649e-049f-4702-8942-160eb5e28300", "comment": "Malware payload (Mirai)", "value": "989f7e8ae3951d6ebbc62a2ed0a6d655", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782054, "uuid": "58e78751-fcc0-4c2b-a3c2-027e9317829b", "comment": "Malware payload (Mirai)", "value": "115034b5bba46286dab4b1d701e4e9bb7a8b5f2bf964d107861b32ecee54660d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782054, "uuid": "9862cded-8dbd-42e0-8bf0-ad78448c95b9", "comment": "Malware payload (Mirai)", "value": "8bced491b966e7c26d354b9b1f1d5ae9f6753809", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782054, "uuid": "48713f3a-327a-4a31-8308-1d442f22cf00", "comment": "Malware payload (Mirai)", "value": "d87921fb4f74e11988e27e1e0c1fcbe73d8e933790173354b211a83474fa30c9d43ef6741b29dfbde86176fff83b3a73", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782054, "uuid": "ed769e7f-5494-4ef1-b81d-3f4101d69686", "value": "T105331A58D68BD5F0DD0309B0106FFB7A5B32AC362230DDABDB88F963AD72652805725D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782054, "uuid": "f348c58e-c63a-4375-b1e9-8384179ab502", "value": "768:G3e+Sl82fTgLhDQLlAKXRaeqqD2uYRSsxACDexV1sk7L9K:W2fTihDQLlAA7QRSDlskH8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782054, "uuid": "6d25e5d5-1ef2-483e-aa0d-1b9d571218e8", "value": 54532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782054, "uuid": "1aa00176-b3fe-4719-8ddd-aa0ce46d4ea1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782054, "uuid": "863b057c-7465-4707-8897-987725327bd0", "value": "989f7e8ae3951d6ebbc62a2ed0a6d655", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1e6e354-021c-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Zyklon)", "timestamp": 1685803276, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803276, "uuid": "10269969-35a2-44d0-89f1-f967e9cd9313", "comment": "Malware payload (Zyklon)", "value": "cd06f038c573a70b0fc9cf5a2d25a7bc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Zyklon", "colour": "#67ECE0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803276, "uuid": "32251fa6-5c59-4571-9d61-9d92da108df4", "comment": "Malware payload (Zyklon)", "value": "11c9b04bef671d198bcb896e611082eaec0b25a983ed22afe6d375b0f0791435", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Zyklon", "colour": "#67ECE0", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803276, "uuid": "cc029d26-66bf-49ae-bcdd-7a8817684c03", "comment": "Malware payload (Zyklon)", "value": "8de7b5d891fc3d08b66360a9d02ff518fb054c57", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Zyklon", "colour": "#67ECE0", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803276, "uuid": "a8697a6b-1f0b-47aa-858b-23508af16294", "comment": "Malware payload (Zyklon)", "value": "e392ccd4487d523ac5c7e4b20e5f95ebbda901ea4a4c7ca688251ac5aff9ea26a91f472b6e1524cf7941ce90ec34b020", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Zyklon", "colour": "#67ECE0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803276, "uuid": "6ec56415-0beb-48f9-b5cf-a9f126c93db1", "value": "T1CAE5B525B5970C94F96227B2D4F197608B15B7264E33803F358362E9C7AA1CF56B833E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803276, "uuid": "5fe045fb-f8a7-4df9-a2da-a89db6d3f55d", "value": "24576:6+moMPl5/ieYzkuHb9emim2qaEaEaEaEa1+9z1A3+C:oYIGb0XhXXXX1MRA3+C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685803276, "uuid": "3394c2c5-259d-4df1-bc4d-13f2f295b059", "value": 3165184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685803276, "uuid": "09a5cdbb-8e93-4dc6-9380-7f2fa10023cc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803276, "uuid": "29eeb970-bb20-487a-a9e1-2b1766cd50f1", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90d9c0e4-01b5-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685758982, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685758982, "uuid": "fb46f4d2-e68e-4f0b-b809-71feb98aa065", "comment": "Malware payload", "value": "4845f874a2652afeca7760e33561ae72", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "stalkerware", "colour": "#D7AE0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685758982, "uuid": "0efa3736-29d8-4da7-9c84-cb0623172009", "comment": "Malware payload", "value": "11d5f61a4248e2bd1a413582fc7022d88d2158a5861eb69973be03a67c372188", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "stalkerware", "colour": "#D7AE0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685758982, "uuid": "9e73e10a-2f30-470b-b06f-83904898608a", "comment": "Malware payload", "value": "2f38174477557e8b65b5c650f3b14c58071eae8c", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "stalkerware", "colour": "#D7AE0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685758982, "uuid": "5d479f0a-7ff4-4082-9cc3-d3c2696bb057", "comment": "Malware payload", "value": "b09c6f73e57d0972254d4fa869ddeaef1cdc13e46ed343c274cf89e623fd27b9cba104cd9caf9245498b820e254b94c4", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "stalkerware", "colour": "#D7AE0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685758982, "uuid": "f1ffc6ed-3811-4a36-b567-57a2f97f08a6", "value": "T136F612C3B7D85829C07641B28C4D36A566AB4D25AB43AEC7390C3BEC29F36E45F05BD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685758982, "uuid": "4521e7d5-57f5-49e7-b58b-7cf68dbf34f7", "value": "393216:IpWKNmHLRV1ajmRho6ol7VsAIc4hDCcf+0100XYe:U1NmNV1aaaVl7VNKfj10ir", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685758982, "uuid": "1c82b011-2bc0-4cb6-a198-809882c9d5c0", "value": 16114711, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685758982, "uuid": "de6b53c9-0c91-406b-b267-95b0a5593104", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685758982, "uuid": "dd20c0ce-0c10-4169-866d-25403b034af8", "value": "tv-latest.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "704c362d-01f8-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685787704, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787704, "uuid": "ecd9916a-202a-4237-a624-2d24f670e99a", "comment": "Malware payload (Mirai)", "value": "ea2c625024dfd1b7b11a372bb952c348", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787704, "uuid": "0166ba68-d0f0-4980-b486-18ca4b4231b0", "comment": "Malware payload (Mirai)", "value": "11f2418830fd4a813b1eae1d01b4c3799532d7ef0553a3a00da1525dcd422d89", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787704, "uuid": "21559e29-8279-4b65-8464-9439eb542262", "comment": "Malware payload (Mirai)", "value": "4f73c72fe593005211f1fd4f399b71927cc4370f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787704, "uuid": "d67f4fc0-fc25-43c1-b5ae-5ea6438a334c", "comment": "Malware payload (Mirai)", "value": "bedd45e9cb526f85b72ff383c2df7cce66f14e20b74933b8686aa43d77c5ed13d6954bbb7c7fecd1fd76d3177110ed4b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787704, "uuid": "ce5821e3-3549-4ee8-b758-50500531793b", "value": "T143B31901F9404767C2D21BBAB78F474D3B3257B957DB3311AA386DB02BC17991E3A9A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787704, "uuid": "8d6f5b55-99c7-47f2-a10c-808c4e566a28", "value": "1536:Ui0YKdAPuNIFuB08xe7BASLgyh2q/EOAjTv+aHT6NlMhRfzmGxmqTQQxZWvZXUkN:GARX8EQqqvHTLlNmqTQQxZKZXUyj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685787704, "uuid": "8975e3a7-68ac-48c6-aa06-bd13d5972b7c", "value": 117954, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685787704, "uuid": "fff7fcc0-a949-40ec-a0c3-419f16c2141d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787704, "uuid": "5861644a-9c66-44e2-8ae3-e02bf5cbe473", "value": "ea2c625024dfd1b7b11a372bb952c348", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcb25a92-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802489, "uuid": "db18062c-135e-440a-a451-6d19160339a0", "comment": "Malware payload", "value": "7fdf1f38d11172e4d6909dc24e755f30", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802489, "uuid": "425adbbc-4753-4969-8198-3043527cdb01", "comment": "Malware payload", "value": "120127833daa5801d8cab7ce972850991054bcb890803647a6787736b21b1d2b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802489, "uuid": "b1c92e37-7f10-4e2a-aef2-44f63996a5dd", "comment": "Malware payload", "value": "d86b1741ca62a60b7f43c5196df4678ed1ac1b41", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802489, "uuid": "8c17e01a-02e4-41f3-bb00-c82137616435", "comment": "Malware payload", "value": "2a8cee3200429292d8c1edeff296df8bd71c6602e9ebcb6ee92006247cd8d696bf4901a8e7c09a2225fa64aa7cfe8255", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802489, "uuid": "d3d079fb-d782-4474-971e-7ef9827bca69", "value": "T18035AE22E290C233E5E604744A7193FD6E3D7E326D65F40BA3C8FE4F1A75584962932B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802489, "uuid": "7ed65cbb-ad34-4e8a-90bc-80e67c77114c", "value": "9339595d0c765c7f0c11680ac479a248", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802489, "uuid": "dac588a9-f819-4962-b76f-e2fd75c05015", "value": "24576:i4HgcRLmsS1T10URGZKwjo3MmgHuiXZjsy:F/L/6lGZKLc3uuoy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802489, "uuid": "b35c8230-72c8-4ffe-b78f-c51d57232526", "value": 1110016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802489, "uuid": "792b5da7-01e8-4ba2-96b0-30e6c0b114ad", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802489, "uuid": "e058c3e3-1a74-4a40-a9ba-344645351712", "value": "SecuriteInfo.com.Heur.1432.15078", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "876298b6-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685793326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793326, "uuid": "0a18ab75-0aad-4bc8-b8a3-9b175879ef19", "comment": "Malware payload (Mirai)", "value": "83470e98bba68a21f06e8061582acb7f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793326, "uuid": "c075ca4e-1bf2-42d3-9913-69052641f5f6", "comment": "Malware payload (Mirai)", "value": "14adaed5848ce64bf0af5626c2b5ad1431dca3815eff344b94b002dfa68b48ea", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793326, "uuid": "67fd1469-c397-4faa-9f4d-fd29fe416166", "comment": "Malware payload (Mirai)", "value": "86f34dd2be0370a8b8022fed4ceabfa0272eea1e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793326, "uuid": "1ee89d10-d195-401c-8670-d23b165697b5", "comment": "Malware payload (Mirai)", "value": "9f4b1c0a30199bc55b7a45baac239c010512f0011721c3802d46ee4fc6818f696033232afc7a723f17b885f2faab8591", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793326, "uuid": "e1bee074-397f-4554-b66a-005f7061c903", "value": "T1E3A4427E17948DF1F4E6AE3192459BC43C3D845B748D25F2773C5932F52308A28EAAE2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793326, "uuid": "3740e497-b0c4-4132-83cb-79f2b5c10194", "value": "6144:W6ONZ+j6wgzcB4zkbo/l1fBTtVj7As0qfr/:W6ONZvzSSWoffBxVjD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793326, "uuid": "cb1997d3-ef88-4716-a14d-1650914c57f4", "value": 473240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793326, "uuid": "f8f92ed4-c337-4fa7-a2a0-281593b0529d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793326, "uuid": "6d74885c-0fac-45ab-8caa-9a53685e8042", "value": "83470e98bba68a21f06e8061582acb7f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbcd23e1-0254-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685827344, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685827344, "uuid": "5f80492e-7d36-4c9c-963e-14c59cd60b35", "comment": "Malware payload (Mirai)", "value": "aed49bccdeca28913942f2362217d11c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685827344, "uuid": "c8a59343-4988-4d38-a4bb-4f737ac32398", "comment": "Malware payload (Mirai)", "value": "15749284972ee3fc0e8534905f666b27722020b49090ea08a04ea2eb46628ebb", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685827344, "uuid": "924df6f3-adcb-4312-b5d6-964072410d86", "comment": "Malware payload (Mirai)", "value": "7b01805655ee5ec0379b2d3251b325675d72561d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685827344, "uuid": "8da060c4-954a-4d8b-b7bf-73e893dbf641", "comment": "Malware payload (Mirai)", "value": "22dec7afc37c06297853fbdf9e3825bb959f83ecf2481114309b014d5f304c51c08f01a163e0998f327a47cc80079b4d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685827344, "uuid": "16d6b544-ecd8-41f0-b91d-7cc8f12e674a", "value": "T1F723F16169806A20E3A60A31EC2C9747E7C997DCF2B974E137D85D2C5A835D20EE7CC3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685827344, "uuid": "c0d59e9f-a691-4f3e-bbc7-23e37188ba69", "value": "768:JW2myW5zrY3m+KDOtELVpuyUEQNIM4ZktwkVlXFbkdzxll9q3UELMIk9r/e/lQMv:A7d5zrY3mVqtSEyUE0IM4Fk7Fbkdzv4x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685827344, "uuid": "afddb1d6-45bb-40b2-a923-202591a8cc06", "value": 46648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685827344, "uuid": "70b4d6f0-4e8f-4bbd-a55d-5cb455a12283", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685827344, "uuid": "7aa513e4-d433-4143-9a13-8545c217cded", "value": "aed49bccdeca28913942f2362217d11c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e801a201-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685779315, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779315, "uuid": "f9a4d193-0073-444b-bd92-f1dba32929e4", "comment": "Malware payload (Mirai)", "value": "b27a022ba7b0454864f318a9f4f84519", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779315, "uuid": "66b6d975-ad51-454b-93b5-19385186ae14", "comment": "Malware payload (Mirai)", "value": "171c7dd7883ba8fe53b32c9b8ce826d5cb851e7a09b06b664f06cb286e9fdff6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779315, "uuid": "65f6b703-6729-4447-a51c-06db43b47118", "comment": "Malware payload (Mirai)", "value": "feb7c5f3beb361d740afb14bb498a76eece65e9e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779315, "uuid": "76349f0f-451a-450e-b3ce-113693519a9a", "comment": "Malware payload (Mirai)", "value": "7aa7d226db610c4419ca146f04cefbab0173d484a317740c9d9b79aef1cf3d60f5f83487ef8f525990dfc2c692a61549", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779315, "uuid": "cdf0b325-9c1d-4a44-b100-430f7e6a8a8e", "value": "T111330238EF6319B2CC3828B6C1545EC77B7A5F7EC0633653A6E805A4968604832E7C4F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779315, "uuid": "13d57fa9-c045-4bf2-92ba-d3548966984d", "value": "768:Y8koxBeDI8DosjvMifAw90DDrrpS64nxC8QLni49q3UEL7AE7cBWJ3h556VlVJPN:Y8bwfDZMRw9oDUhFAnwLEE7kEAVlVp64", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685779315, "uuid": "ff0d1390-c8a8-4501-a97b-148f633ba2d5", "value": 51300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685779315, "uuid": "2f48980f-177e-44ed-bfd1-9d634c122a00", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779315, "uuid": "88fe3d19-9ddb-43ef-8a76-8f050b96ad0d", "value": "b27a022ba7b0454864f318a9f4f84519", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9957e1f6-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685793356, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793356, "uuid": "ce3b8de4-aa44-4337-b07f-6321549facec", "comment": "Malware payload (Mirai)", "value": "ab2c26ab46aab5a1a1d2a0cab559d3a6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793356, "uuid": "54b779fc-ca77-4b6b-b749-d094fb0f4748", "comment": "Malware payload (Mirai)", "value": "182a7d6d029b40c22abe92f8967b2b0f2794428ba4d36e5b7e12346e1cb7b67e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793356, "uuid": "3bd792cf-1228-4125-bf2d-26f902582016", "comment": "Malware payload (Mirai)", "value": "865cc0a21dbad28d09acb0276b1dd9f2c42bd6c3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793356, "uuid": "d99bc57a-6b60-4d90-99be-5df3ef17912c", "comment": "Malware payload (Mirai)", "value": "e0ade92fca71f83e53584974d117d0ad582625b431c470739d452133c1a13561d2bcce82eba409ee235f9db6469d1ce2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793356, "uuid": "497c7073-5ecc-412f-a41e-16ed60b70d62", "value": "T198C3F845FC515B53C6C612BBFB5E428D7B2A1768D3EE72039A256F20378B85B0E3B142", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793356, "uuid": "93be4f96-ab7f-41e4-9de1-f0861bebc905", "value": "3072:XBc/DFIy4C6D6VC0iLJKatvvIlNV4uJo:XBcLGy4Cw6VC0iLJHNIlNV4uJo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793356, "uuid": "179ec3f5-1685-4b68-ad2e-bbe4a5977234", "value": 129420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793356, "uuid": "c67c65f3-64f7-4046-90c0-44fc8994b46a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793356, "uuid": "046304d4-feb0-477a-94c6-aba0d3f042ba", "value": "ab2c26ab46aab5a1a1d2a0cab559d3a6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6a8c6b4-01c3-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685765139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685765139, "uuid": "677a713f-26db-4fe6-a65e-ea3ba20a4930", "comment": "Malware payload (Amadey)", "value": "1b2862ef4664b775ece53b87d4fb02c4", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685765139, "uuid": "4614c3a3-6913-4deb-a573-18931bc99a51", "comment": "Malware payload (Amadey)", "value": "1949b2e09874391a661958fe62e67c232482544b8bd38d0f5545bfe4bfcce3da", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685765139, "uuid": "d25b6bc5-77f1-43ba-b3cc-bfa803a79696", "comment": "Malware payload (Amadey)", "value": "57ff8856127eecc323adea447a409263b29e031a", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685765139, "uuid": "05b44613-c4d8-4fd7-af09-df6a448e4472", "comment": "Malware payload (Amadey)", "value": "c574aa0dc7a3796634208f5922b464bd07dbf7b0a0b1a4d81a569fa73dfe5a94ae1a03f590e43293219b13fa703c2098", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685765139, "uuid": "734e1441-5619-4271-a624-7a7deaeaaea6", "value": "T1A6052262AAE4C462E5F92BB02CF783C30F3A7D719C78865B4B45695D0DB26C4EC70369", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685765139, "uuid": "e7acd9d0-9d61-45b4-95cb-e098f5e7fb36", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685765139, "uuid": "c9665cd8-5a65-4601-8efb-8e65af306fc5", "value": "12288:MMrOy90ltloWiXa1w/2M5S5CP4FZWgMl4sNvXhWEDcQqNn:CyutlMXaX0S5a4F8gSXhWnNn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685765139, "uuid": "e6c51881-4df3-4043-a98a-ffe9974a0eb9", "value": 812544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685765139, "uuid": "5f7cfcd1-c997-452f-a55b-3913464edaa1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685765139, "uuid": "cde05504-0eab-4a94-a443-1951f44811b6", "value": "1949b2e09874391a661958fe62e67c232482544b8bd38.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e5a2564-024e-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685824691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685824691, "uuid": "f8b983cf-0f61-48dc-922d-c2845e862c5d", "comment": "Malware payload (Mirai)", "value": "e10e4a68cfdeeb57362dd0d27e5c1f4c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685824691, "uuid": "b0649fca-4ffb-490c-bf55-03404eb826bc", "comment": "Malware payload (Mirai)", "value": "196ea38e2496b7ac4f5398b6d94fab6fd5b1e4bac88bb605a45ffbe533397999", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685824691, "uuid": "170b48fb-1889-4b67-8fa1-ace5714254bf", "comment": "Malware payload (Mirai)", "value": "3753f219d6c849790616c91bf66b631291c66e3f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685824691, "uuid": "cd278d7c-13fb-423c-9a06-8e146269936d", "comment": "Malware payload (Mirai)", "value": "c15c6325bd1383990052e93eab19ba6d65830de6ed9ceac29cbc2a9399c82e0fb5110143fbf439654ac2167934037f93", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685824691, "uuid": "48d592cb-b95d-4330-bd1c-cdb00ae32983", "value": "T15E732A83A8A19FB7C095A9B139BB4AA4075BB8125F4F0B95712CDAF4034F5CEB84F354", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685824691, "uuid": "af985516-3493-4c51-81a7-207769323ff1", "value": "1536:Bgc+XISBZXTuKqv3HNsxSGeGCto9LIz1NHe07f:cXIWXTBq1sxMGDoNHD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685824691, "uuid": "f4b4d512-8d23-4e45-833c-038e05311d04", "value": 74312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685824691, "uuid": "24a9647d-2be4-40a2-a113-7ef6265ede7b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685824691, "uuid": "49f2521a-9aa6-417e-b3a6-cd09c767da6d", "value": "e10e4a68cfdeeb57362dd0d27e5c1f4c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dca7af91-01d8-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685774142, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685774142, "uuid": "dfe3d50f-4e87-49e1-abed-b06c71bfdb26", "comment": "Malware payload (RedLineStealer)", "value": "6eef7f5f54d1093cf317f1d42a794d01", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685774142, "uuid": "353d9b02-f726-472a-82b4-dfe3d3239b5a", "comment": "Malware payload (RedLineStealer)", "value": "19c2391800ad2eebcf2d04f271e6e331d88c9f1bcaff62f5b02f1cccf9c4a7ff", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685774142, "uuid": "a0b1445d-21fc-4d39-98e2-382a6c8a97b2", "comment": "Malware payload (RedLineStealer)", "value": "e7f701c4dfaf7b2010a16354646162eb37e1ef65", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685774142, "uuid": "e62309e3-71b3-4643-8857-57326a35f3b8", "comment": "Malware payload (RedLineStealer)", "value": "1fdaa8f1a8af622f0199deb0db65b30145dc6cb77868df9388d890a834cba22be86b933f6701d3ba75c90a872deffeed", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685774142, "uuid": "62bf65e6-7439-48bb-90fc-e26af9715596", "value": "T113051253E6F88432ECB9277018F766A30E3ABC61E83597673355681D0C72AD0B9743A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685774142, "uuid": "1e93522c-c1d6-487a-8150-9ee3f7996007", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685774142, "uuid": "711aa644-a64b-4a67-a7c0-a7ada87970e6", "value": "24576:+ydDFS7V0g76dIYNDe6vjlqWLgJ1ossr:NHShynBlZLgJOs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685774142, "uuid": "a68c67cc-e27b-4751-92df-c05f88853ca6", "value": 813056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685774142, "uuid": "95f3b317-1986-4a06-b53a-eaefa1adb3d1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685774142, "uuid": "bdfafeea-9285-4b9c-a8d3-94df7103ee7b", "value": "6eef7f5f54d1093cf317f1d42a794d01.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72881489-01fe-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685790284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685790284, "uuid": "8bdcb5c0-1172-48d1-bbfd-7f60050d7522", "comment": "Malware payload", "value": "a678667c4e6c8759c9fabe6da45fa95f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685790284, "uuid": "a571b42a-e4ce-4734-89a2-457980bdb0bb", "comment": "Malware payload", "value": "19c967c5b48d814667110b338c50e39abbcf839e5feff17f259c8dab6358e330", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685790284, "uuid": "fc5a5c4f-e264-47f5-a0fd-281f886aa040", "comment": "Malware payload", "value": "2076f29551c91c00fc75609406e73198263abf8c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685790284, "uuid": "a98190d8-f01a-406c-baa5-64714bb05cb4", "comment": "Malware payload", "value": "53678f10d817697031a3ef1ffb21ed1e31900621e315fe30af41f5d1cde3c66796d796d0183f7940885eeb45b66e1983", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685790284, "uuid": "c9ebb2c0-5883-47a2-809f-bfd925090637", "value": "T16D936AC5BA83D4F1ED5704B55137A7379733E439602AEB42C329AD36ECA3900DA1A76C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685790284, "uuid": "b38aeeca-23f0-4bf2-8eda-c19be2511f20", "value": "1536:uDYL14Pf+yYxC3cPyu9A3uicThx7N1mOA/SwKzG:WYLAf+yYYs6u9A3u7TbRm6zG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685790284, "uuid": "ee5f26da-c2dd-44f7-9a91-94f09f582806", "value": 92108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685790284, "uuid": "fd1b3009-ae82-421c-a4e1-fc30b8339a28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685790284, "uuid": "312918cf-057a-4908-b3c1-b6333ce67638", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "632c4313-0201-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685791547, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791547, "uuid": "b6aedc43-8662-4c80-833f-9305852e3595", "comment": "Malware payload (RedLineStealer)", "value": "10df09208bda38de919b190082003f35", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791547, "uuid": "cfa0c6eb-39d6-4ec9-ac75-464a5d036a73", "comment": "Malware payload (RedLineStealer)", "value": "1ac9a4c7e4f6008f099af1dc88b00df6304fdae5f27e8aade1d757b0a20eb31d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791547, "uuid": "9ce05e9b-7b1b-4e05-b410-2ef6fae42d6a", "comment": "Malware payload (RedLineStealer)", "value": "cf85ba7e76ea6237702f7ddc9764419032834534", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791547, "uuid": "53a32d15-4de9-410d-9fa7-765f0b1c9f8d", "comment": "Malware payload (RedLineStealer)", "value": "6ac8259043d9e612ed1884bad25a324df5b52a1f8a10ce5cfc1832192d8e98d63ba90fcf1a45f0230eda6f337b16d33c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685791547, "uuid": "cf5e5165-9771-45c6-9187-928f0549e30d", "value": "T124052356A3E95476D87653F198F607D3093BBCE25A78D36B2241686E1873380B83337B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685791547, "uuid": "318cfc2f-18ed-4dca-ac47-4758b831dcdc", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685791547, "uuid": "310b2a97-55d2-424c-98de-e0651b6b8788", "value": "12288:mMrAy903iUM+7cpOn4Jg/9VSp+L4SSYp+Cy/qdyxkzh5N6y87YDBAk6VpP/B:yysiIIw9VT7Jpk/qdEkn4y4Ymko", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685791547, "uuid": "908950e9-d8a9-4481-939b-fd5d6a5d8d87", "value": 796672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685791547, "uuid": "7ca77e45-119c-4b4b-a89c-3a3461cd534c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685791547, "uuid": "5e25c854-02e4-4ac6-9e63-1e4a8e6abb69", "value": "10df09208bda38de919b190082003f35.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42b2e229-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782044, "uuid": "442a80f4-a16b-48a7-b2ae-deb4e278fae2", "comment": "Malware payload (Mirai)", "value": "c331d66944b5abd479b93d4b84c58271", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782044, "uuid": "b9b52c5e-cba5-46e7-b3df-4037bd3b4cd8", "comment": "Malware payload (Mirai)", "value": "1bfd3ac20208992bb9e3f1d300a111a828201d382d4c8dff3d1779710fa78e32", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782044, "uuid": "bf014573-5489-4b29-b7f3-ecf471eac33c", "comment": "Malware payload (Mirai)", "value": "2581c242bbfe75ae5002f5472c67acd15726f49e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782044, "uuid": "fa1080a7-915c-49a4-88f3-743f8edaa2c1", "comment": "Malware payload (Mirai)", "value": "a906615af18fd6aacfd811237552c0a99769bdf1e472c88b85dcf648ab909d030784efc4aff4222b525e8b5c053cf6f9", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782044, "uuid": "b63c50e1-18c9-42d7-980e-2f319c70bdb4", "value": "T11F13E170F0CE5852C2F039BAECC4D241DB285EB1F47672E966952A868CE10DB963C5DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782044, "uuid": "e95a220e-3f01-482d-b20a-ee71c675d2ca", "value": "768:Nh010Cys8jd/+h3rRPVtxayiHpq3UIAA3GE25oCSoyYqhJ:NhS068deNPPxoHGBtCSwqhJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782044, "uuid": "47eaceb7-8caa-457b-a823-d058906fba44", "value": 41468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782044, "uuid": "fa28fc9e-e030-4598-abf5-e00ee54ae04d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782044, "uuid": "4c0a4d1b-bc09-4da3-800e-9f3f5c8d5770", "value": "c331d66944b5abd479b93d4b84c58271", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28efa251-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782001, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782001, "uuid": "d1d118cf-5e6d-413a-8bb7-a2a43ea23338", "comment": "Malware payload (Mirai)", "value": "26cb9e0fb5d74267659190b0b6a21752", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782001, "uuid": "9b03686e-7e1d-419b-95ff-c5a68008b442", "comment": "Malware payload (Mirai)", "value": "1c4430cd2a71fa734ccac4eef5958ad2cf027da19fdfbae0d20a9dc658fcd985", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782001, "uuid": "1fff27f9-1a1c-4d53-9e7d-bdd9cc91aed2", "comment": "Malware payload (Mirai)", "value": "10423ab6b59ce48e0193341f8c0b4d2080f729d6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782001, "uuid": "d0f16eea-04b1-4bcf-98c8-c4a8b402f269", "comment": "Malware payload (Mirai)", "value": "e85738a728b22d212d2818426669286ec5e23606a85aeb5cbc62ba77957f73e31ca127ed70f606aa9cdeaceea63712a3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782001, "uuid": "725ccf84-4106-4d1e-a936-f0f92fb83a6e", "value": "T1B803F13A4ED59614A9A01977D6BD84C3BB264EFDD4C3333A325015E83DD2A0273F86D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782001, "uuid": "3ee9b8c3-e584-45cd-88cb-19dd57823d23", "value": "768:FBqXQPOICC0yXVtubj3Q6JP83yuNFBexfMf5oc20SR5U3lABfiq3UirRO:TqAP1CCJ+bj4rNFBZKcnSRW3l1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782001, "uuid": "cb3b3ce6-f054-4f92-b623-50d3936d88a2", "value": 39596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782001, "uuid": "b8189075-b316-40b2-bc62-2256af144b6f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782001, "uuid": "df70986a-0ed3-46f4-8259-902630fddc4c", "value": "26cb9e0fb5d74267659190b0b6a21752", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "358913e4-01bc-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685761835, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685761835, "uuid": "3f66fbba-bbf9-457d-acef-470054589de4", "comment": "Malware payload (Amadey)", "value": "b1b628c52addba7acf7ed8d166b84335", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685761835, "uuid": "1a99a7cf-3d0a-4bd2-84e9-904cdd770397", "comment": "Malware payload (Amadey)", "value": "1cb72edc0f1a84fb53e7a921c94bc95648ac55675d149a961cbcbffe44e1c304", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685761835, "uuid": "bf5129a8-ece1-46b2-aea4-c7284cfaab67", "comment": "Malware payload (Amadey)", "value": "30a3a4254b771ef07ad5aab398ce28cab829fe65", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685761835, "uuid": "6e0bb027-3752-41a4-b560-e74a50057766", "comment": "Malware payload (Amadey)", "value": "2bc4026d5faabdd4ea820c83a9b1fc0a80fd0befc9d3d82589080a77be9118f8bc9406efc17c400db5d7ed7765ef0d2f", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685761835, "uuid": "78a1473c-0bc7-48a4-bff4-fee3601cf3e9", "value": "T113051241B2D95072C8B93BB06DF607830F3A7CA18E79935B2341A95E19B6AD0E5307F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685761835, "uuid": "307447ee-6091-4abc-8a52-2cdd11b4d150", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685761835, "uuid": "37644339-1e83-4fc3-9220-fad85af4de5a", "value": "12288:AMrey90ukLnPjsCDdnWZ/1WtAJ273jovdkBFWHNJeERuihh0WEDbgUS8:Oyqj5+W7PBgPdhmWkt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685761835, "uuid": "4f4bac41-2e26-4c7c-be98-93cc865c1a39", "value": 812544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685761835, "uuid": "84034dd7-95b9-4eb0-a93d-7e739b96fef2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685761835, "uuid": "b6bac976-b9ca-471a-841e-4ff05ff69704", "value": "b1b628c52addba7acf7ed8d166b84335.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c6a4cfa-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685779000, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779000, "uuid": "4e4a0889-2943-4843-bbdc-51f0d2a9079d", "comment": "Malware payload (Mirai)", "value": "484c0ab4bcf704b00c9b35e6a62bfb01", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779000, "uuid": "6fe91f27-5077-4d74-bbe5-f82ba7b7cf69", "comment": "Malware payload (Mirai)", "value": "1dce64619b71db8fa911b6c11873d437e61b5e3953d8af9838b6e18d892cf257", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779000, "uuid": "1cd80e2d-6e37-48a6-ac39-bf0ef3b4e462", "comment": "Malware payload (Mirai)", "value": "43bc4bb1e20bcf449e0b747b3f9663951167c798", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779000, "uuid": "9f3db233-0e43-4df3-ad6c-eb783636f8c2", "comment": "Malware payload (Mirai)", "value": "8142c27c3008108e07e457cbda86aca38122ed74e2971d7b894e20c145a467ce8d9a391e97d0966dfc5570073b8b8716", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779000, "uuid": "c0c20960-6672-49c0-a62d-3dea6f3e0caa", "value": "T158B31977A4654F73C045A5F125BA9A310F12AD931B1F1A88763CB6B04A3B4CEB84EF58", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779000, "uuid": "b63a2d3c-6cb4-4f7f-804c-a7e7eb1c1cb5", "value": "3072:MDVLSItJP+Xsp4JlN3HFjmH1cuEgvniuN/:MDV+ItJH2l3HFjmH1cuEgvniuN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685779000, "uuid": "4295ee95-7ea3-4aff-a199-39e4b7d4e525", "value": 112633, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685779000, "uuid": "97233445-5491-4eab-b4c1-12d179e040b3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779000, "uuid": "3b2fcb3a-6170-4b8b-90ec-41098cd65901", "value": "484c0ab4bcf704b00c9b35e6a62bfb01", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a30e88d7-024a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (DanaBot)", "timestamp": 1685823008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685823008, "uuid": "1c5722cc-ed06-433c-9cfb-57c47cc22248", "comment": "Malware payload (DanaBot)", "value": "134ba0a636c16478f5af66d7b00882eb", "object_relation": "md5", "Tag": [ { "name": "DanaBot", "colour": "#B9DC92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685823008, "uuid": "0bc1c347-ad37-4406-8582-30c491cc86b2", "comment": "Malware payload (DanaBot)", "value": "1de272d1038a4da0e2d177520ae647d33a44333e95be0033f7935c2f545d90dc", "object_relation": "sha256", "Tag": [ { "name": "DanaBot", "colour": "#B9DC92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685823008, "uuid": "cd0122aa-b5b9-4470-a96b-d755d528c0f6", "comment": "Malware payload (DanaBot)", "value": "abb04b8b4ff9fb80bab48a9a91add7d51bdaf9bd", "object_relation": "sha1", "Tag": [ { "name": "DanaBot", "colour": "#B9DC92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685823008, "uuid": "59215d16-d17c-49af-b8cc-2e8b8e2ed85a", "comment": "Malware payload (DanaBot)", "value": "89d5a5990ee2e2ff9fc6bab53d170c54e16e3cdfc7fb61d3f00ad8edde1edd8f22fa4d5b94aa24f19f6bcda1fd557c3c", "object_relation": "sha3-384", "Tag": [ { "name": "DanaBot", "colour": "#B9DC92", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685823008, "uuid": "b97d15a7-09dd-4946-8b10-b75f548984a7", "value": "T1563523123291C472D6521E703027CBE4C77DF8E257AD1D4B77686F2E2E707D08A7A296", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685823008, "uuid": "5f376de0-fec7-4070-9e3c-e91a7646fb7f", "value": "4b2f006e9c8103411c7e9e0d41005636", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685823008, "uuid": "f7681bf2-75f0-47ba-917d-47c08017ce45", "value": "24576:ej0xZaRe2QNI5yotLfdzXmYA/9HgdNl9vaSz6iMpYh4/y0LK5K65:ej4aAK8Kfdz7dXzjCYm60LKn5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685823008, "uuid": "52006d11-bd03-485a-bc24-4b5315481866", "value": 1159168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685823008, "uuid": "d43c7a6c-05c7-4653-8fc7-d5ad99fbb183", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685823008, "uuid": "2a303e29-1080-4dee-a484-33b0e75a8a41", "value": "HEUR-Trojan.Win32.Zenpak.gen-1de272d1038a4da0.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "840d4f1b-025b-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685830257, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685830257, "uuid": "986114ab-3b2d-4c51-a026-123bf3655906", "comment": "Malware payload (Amadey)", "value": "87ac5579e89825723012dc3d8460cdb3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685830257, "uuid": "39192850-b194-4505-ba75-933971403087", "comment": "Malware payload (Amadey)", "value": "1ec5ecec7452379c2d19c80bb25effff79414ab2faf5c32d0dada42e1935be50", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685830257, "uuid": "15fccaa5-9d74-40f7-a23b-a67c3237c4cb", "comment": "Malware payload (Amadey)", "value": "e815ebca53a363f6d810ece7028b6adcc720d711", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685830257, "uuid": "f9e00d96-5bc2-4693-ba54-787a8facf6a7", "comment": "Malware payload (Amadey)", "value": "f2c592901dc5479da526eed2114a9e44fcf41fd1bd4fb2ff4dacdefd2c79df1dd877986b6b6b616749d690f3ce850f8f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685830257, "uuid": "588fc0d2-d55d-408e-9722-d03433f21564", "value": "T1D2051286F3E54032E8B513B12CF151870B39BCB29DB88B2B3791556A1DB3788687572F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685830257, "uuid": "3511884c-f527-449d-afd2-a82b85b41476", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685830257, "uuid": "0ffa0427-7806-4eef-8c35-efe377adf2be", "value": "12288:qMr5y90S1QGSxgv0pDkvH/ET1qhKh5V6KeB05zDIA/AJYYNxhD4:vyXQG4dpDPT1qhKh76KtV/ZYNT0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685830257, "uuid": "adaee37f-2d09-4704-a5ad-c9cfadb6930c", "value": 797184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685830257, "uuid": "ab864e72-9494-4745-bab0-e040cc762f90", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685830257, "uuid": "68a60a42-513c-4464-87f0-bc6763e4180f", "value": "87ac5579e89825723012dc3d8460cdb3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd1d9de2-01cc-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685769042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685769042, "uuid": "329fc7eb-3aed-4a0f-a51d-08574d5633d7", "comment": "Malware payload (Amadey)", "value": "07b9be42339819584e17046eb782e0bb", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685769042, "uuid": "8fa593e5-6ad7-46f4-a77f-b9b16e795e12", "comment": "Malware payload (Amadey)", "value": "20dd76c168fa09b0716fe03ff9fba04b0cc50299599901cc05ce120e61bcd0e1", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685769042, "uuid": "e430604c-6ab2-4541-99c2-8e9f77e0533b", "comment": "Malware payload (Amadey)", "value": "602561801c6fe6f2c457a34fa86f1b23ba477ca3", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685769042, "uuid": "df677c94-6eb0-4465-a9d7-d47f83b12848", "comment": "Malware payload (Amadey)", "value": "9dd5ffe41ef3891664c24d7788b77259c1ba50b133d7eb89e43eed01647821639d0477bde4bb5241baa570d5df69ed60", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685769042, "uuid": "f042454a-c4b0-4486-b9c2-14b3170e3eb7", "value": "T195352343B5E18563ECB5277058F606C32F32BD956A38526B3B916C1E18F2BD0A83177B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685769042, "uuid": "721576f0-156b-456a-a284-24e529264516", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685769042, "uuid": "6b364011-2a00-48d5-be35-2e5bb59f1aec", "value": "24576:Wyx9B+Ykx7Qy3jpt/ViCKOKmeIujmijrUJLAlVB2:lxlnSjpt/s5Oy/b0JAlV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685769042, "uuid": "07b5fc65-2a98-45ad-b22f-c317e7d00668", "value": 1091072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685769042, "uuid": "477ced10-275b-4541-bf6a-38723a855b98", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685769042, "uuid": "3f0aa744-e95f-4d44-afbd-0b7dcc500712", "value": "07b9be42339819584e17046eb782e0bb.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77710712-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782132, "uuid": "8429afca-b14c-41f1-86cc-f07bfcf82596", "comment": "Malware payload (Mirai)", "value": "0de5de2863cf8c3e06d2374fa599dc6a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782132, "uuid": "f765a64c-59a2-489b-b4ad-9fd8b546a047", "comment": "Malware payload (Mirai)", "value": "2119cd1a7e104143ea628e9997bfbdf7225cee42716d57584c8bc4fea1285f2d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782132, "uuid": "02077822-cfec-4d77-841a-0b459e6473bf", "comment": "Malware payload (Mirai)", "value": "8bfaa687cea86ce38911fd5371887c163f0b8a6a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782132, "uuid": "b6510b20-f305-4f74-a23b-d46f2a40ca98", "comment": "Malware payload (Mirai)", "value": "1bc16c1fe0fde25cec34bb1382e7f1da8de31b01bc85de1c288fba15cb235aa587f8a82bc67ed1fb0b4110b182205501", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782132, "uuid": "2d05d197-a015-4be5-a58c-b78e5a4c9d2c", "value": "T1B6F2E152CA17474299B0153C70A9A4C3AF5FDD7CD3EE65EAA6006D902AD6C003BFDA87", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782132, "uuid": "43b54c31-456f-4b00-a105-010e3109e116", "value": "768:XR51ivYBzFIGxS7+2zA6tpvvgxwlU2+TVqflCYw3UK:XR2v7GxyTwo+TVClCYw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782132, "uuid": "914ab7dd-6c0a-4c1a-acf1-dc9c089bedae", "value": 35364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782132, "uuid": "159340c6-183e-4e0e-a19e-42ba1147990a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782132, "uuid": "dfb4d3fa-ea75-4dd3-bbd4-ade027073384", "value": "0de5de2863cf8c3e06d2374fa599dc6a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0cdc600a-020c-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Loki)", "timestamp": 1685796127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685796127, "uuid": "6fea7eea-5412-4e70-9a7a-3692a3e36eaa", "comment": "Malware payload (Loki)", "value": "e5cd98442cbc3af8dbc877ecd99a58d2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685796127, "uuid": "9675caae-28fa-40bf-9d9b-e71a061c47d8", "comment": "Malware payload (Loki)", "value": "2226d226f5fa9254e215ccb373c6cd203ad2ad325a074d6232afb595cb07c455", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685796127, "uuid": "e0463c16-0688-4b82-a39d-36a10b28a6a7", "comment": "Malware payload (Loki)", "value": "f42fc0b5a42682e933b17d9655ef57e3fbea820f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685796127, "uuid": "9e5e5e90-84f8-42fb-82ff-6ccd013a8c69", "comment": "Malware payload (Loki)", "value": "319f29efb519c660c9d33049a82436ca85bf7f8df32ccf7f67cc4c09c4ce333bd3b8853921b857b8907e47bc671f1358", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685796127, "uuid": "04d30c23-2e3a-4790-a4ec-ebd1ba7e3087", "value": "T1F9344B0363E16C6CE6268A728F2EC6E8661EF5505F553BBB32149A2F04711F2C672FD1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685796127, "uuid": "0169b4e2-2c94-46dc-8fa2-4a292455c4b7", "value": "a9d8c64cc03cfb0c533c4c52d44e0ec0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685796127, "uuid": "5c75f35e-ca8e-4730-a052-6875478bd775", "value": "3072:plYBD304bU+eRGsWzw8xY2rqqyKcCmBLSzNc4EzxuRZylRmcBvgNCI8MuBKy4:TY+4bUSjwYYTqJcC6Xk6mcBvaCNG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685796127, "uuid": "8031c14f-ad6c-4185-ab74-61306a07a177", "value": 245248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685796127, "uuid": "f32242ba-c4e1-47cb-8b44-00ceef0aa665", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685796127, "uuid": "854d11e9-8b81-42b2-8d23-9728a3f3a0b3", "value": "e5cd98442cbc3af8dbc877ecd99a58d2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "187392d5-01c8-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685766941, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685766941, "uuid": "3334b960-88a2-4d9b-8e40-e635da89f099", "comment": "Malware payload (RedLineStealer)", "value": "dd7f296ba51d2a4f8d4115f21b489f0e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685766941, "uuid": "1210352f-17b4-45d5-a9d9-6829030ee4eb", "comment": "Malware payload (RedLineStealer)", "value": "224149c603d516eee4075282c5325d20c2e07176265a78557cefa65db6e90e9a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685766941, "uuid": "a27aedf1-d0c6-46a1-940f-916a9a5d53d8", "comment": "Malware payload (RedLineStealer)", "value": "22ab137528c0beb399e6a9f2fda922ef76dece87", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685766941, "uuid": "d98e7d60-eca5-4433-bb4b-d038b7f7d98b", "comment": "Malware payload (RedLineStealer)", "value": "a156e03339ff1fe8f0359d6794cc555ff835b6b26c72884a35462847d84f5375c0ef243824d09c7517922ada0ae596fa", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685766941, "uuid": "993d560f-0229-4976-b173-eac4e5c25785", "value": "T1D2051216BAE48572D9B4477064F713871E30BC628A78435F63926C6D5CB3A807836BBF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685766941, "uuid": "af56dfac-76a0-4cfc-a88a-2cd64b0a5a33", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685766941, "uuid": "b4073175-02c6-4218-8a25-6fd3a2831ca9", "value": "12288:EMr0y90M+dtXEy9yeAoxW+8N9hNNLQpp3IXGkQRJNcT2l2TSPl7lpbhWEDp8hbqD:Ayf+fgNL4p3OGTRl2TSPzpbhWdqD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685766941, "uuid": "ff8ced90-aa29-4713-9a43-fbb2774b9d0a", "value": 812032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685766941, "uuid": "d4f566fa-b872-4dff-8f21-98d502111d6e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685766941, "uuid": "9788e624-4f3b-418a-851b-2b3f421822b4", "value": "dd7f296ba51d2a4f8d4115f21b489f0e.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62b7f46b-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782098, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782098, "uuid": "efe59ceb-3055-42f0-87b6-6217889856f8", "comment": "Malware payload (Mirai)", "value": "749b0c9cc974fe2d73ff30997bbcd7c5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782098, "uuid": "e6398691-070f-4df5-830f-07054d6a486f", "comment": "Malware payload (Mirai)", "value": "228f4ec9222fe0bc4471644e24c469012cf80792601dc5987fce28c8523e1c80", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782098, "uuid": "4e8635da-ad4f-4e69-9922-b110bc3fbe4e", "comment": "Malware payload (Mirai)", "value": "d233aca9af1eca0236e91f8e5c4a123c33331628", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782098, "uuid": "29df7c73-1abc-4e8c-ac70-6901f84603bf", "comment": "Malware payload (Mirai)", "value": "2928a07fa1f3fa9be2d272c71beb30a9db0bbe6f10579dccd890acf5383c380cae55eabae07727b53486beff67920b55", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782098, "uuid": "a5e72625-a440-4cb4-820a-01c56af1b4c4", "value": "T16863B51E2E258FBCFB5C873447B78E20A648339A26E1D185E15CE9016E7034E745FFA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782098, "uuid": "03fee3ae-1908-4cd7-8e3b-2d1c49cc030d", "value": "1536:Q4K7bUf6ZOyq9h+TX0enKIgn2MJij9WV914ebrNOL1lHY4n:E7bDZOyq9oTX0enKIPUSeb5aH7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782098, "uuid": "65d97a75-b9df-413e-a104-617fc0b99275", "value": 71912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782098, "uuid": "4c0d3ad3-0ee5-49aa-9537-9868fa5df090", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782098, "uuid": "4ac3eab5-3c6a-4444-8bf3-ed71f79b10b5", "value": "749b0c9cc974fe2d73ff30997bbcd7c5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eab9fbd7-0247-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685821839, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821839, "uuid": "d4bd3c60-ff84-4503-850c-631ae38e06cf", "comment": "Malware payload (Mirai)", "value": "23d5dee68671bcbb92978a84dc089da1", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821839, "uuid": "1fe7ca2f-ed3f-4aa1-b917-884a3d8c3ce5", "comment": "Malware payload (Mirai)", "value": "22c50299692e7fa9c8a7d83b0d500dd08a274e16e837e698b33281559169ea7a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821839, "uuid": "d7f5c562-0330-4be7-b4d7-9246f3c9335a", "comment": "Malware payload (Mirai)", "value": "bd417e2d3536ffb9a1943a0779d3d898dd218ea9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821839, "uuid": "ae45b69e-8ce4-41e9-a988-70902a234f11", "comment": "Malware payload (Mirai)", "value": "9a02ac971309f79a502c683730a0529acded7cdbda9fc40a0b68f2af02d5e946bc294c209d53b07c763b8f676b572933", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821839, "uuid": "42e52399-5f2b-4866-9176-cb7658ac2526", "value": "T18163F8957CC19A12C6E423BBFA6E018D332163A8D2DF32179D216F6477CA81F0E77691", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821839, "uuid": "b042070e-16d6-4f4e-8cfc-c9ebe72d1570", "value": "1536:UQ9VE2AdKVCfeSeblP6sLgax5QT7Pa0ZahW5jve60fR5SMtH35nbf:UQ9PLNjQva0EhWrURV31", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685821839, "uuid": "8ab19c04-8db2-439d-b1f7-7a4e94efca6a", "value": 70652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685821839, "uuid": "624dee5c-f332-4572-8280-298cc56ea2c4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821839, "uuid": "4875bc6d-3e56-4c25-994b-17414de06fed", "value": "23d5dee68671bcbb92978a84dc089da1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "439db8eb-021e-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685803950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803950, "uuid": "74bdf9a8-83b4-4819-9a28-5ada9c98c362", "comment": "Malware payload (Amadey)", "value": "7de1f31308f843ed40aeec0f082e4102", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803950, "uuid": "727b8d6e-db4c-4e2b-b61a-7f3307ab7aba", "comment": "Malware payload (Amadey)", "value": "23f7ae433fae6a7d0d2b68e07d911483ad46bc4219f82507b6c10502ef807165", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803950, "uuid": "6d0351af-56a2-425a-a1f4-b92051070b7f", "comment": "Malware payload (Amadey)", "value": "0411523e493c2a7fb84579c40c92267f70626657", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803950, "uuid": "9dcd9108-aca1-418f-aa21-3538a31289b0", "comment": "Malware payload (Amadey)", "value": "dba554d140c81b070fa4ef833172229efa349805a2b5d668cfdd6c03f27c421c31d5b6dfdce7b8cb5dc0da758e93648a", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803950, "uuid": "e21335cf-518e-4124-827b-50ef05364df8", "value": "T1D4051263FBE44832DDB5177008F742470F36BC6199B8827F2A895E5E1CB2684993537B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803950, "uuid": "2ebcc416-00be-435a-ba6e-d7a05c73d7ff", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803950, "uuid": "e4ce6c9e-5b3a-48f6-a2d2-2258f05cc211", "value": "12288:4Mrgy90k0RYR59wFfT3YW+DjcU2ElVaxvsvYgvBrUG5Y/6/Ggook6kswBbgOT:Iy9Br9wF73YRDoTeVCkvYSoZ6/7RkWu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685803950, "uuid": "43809a83-77b2-49f1-8c9b-2c28bc99bcfc", "value": 797184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685803950, "uuid": "23102a39-8d8d-4a69-beaf-95bedeb00760", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803950, "uuid": "81eb4d25-6615-4d1c-bdb9-9387919c8610", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09fd0b12-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685778942, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778942, "uuid": "344db641-d5fc-4189-a08b-063060d97e6d", "comment": "Malware payload (Amadey)", "value": "9fa388310821956d25ec7ba238633d2e", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778942, "uuid": "d85e7d5a-3f65-4d4a-a5d5-3bd160ef7542", "comment": "Malware payload (Amadey)", "value": "271699f0070b10b026f765d266c8777820829aca292e74d71753d1759b8fdf6e", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778942, "uuid": "bfb436fe-98b7-4cf6-8f89-45dff872b0a6", "comment": "Malware payload (Amadey)", "value": "9b22499775eb6b7229929e3551487549d41a4236", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778942, "uuid": "a83d7c42-9e00-4840-8eef-f188e5366dea", "comment": "Malware payload (Amadey)", "value": "85d1ea085a7e7126b6dfb453f51728f4995fec21240b9ca8c445ac7a38e345ace1f9f7acb909c7dac318c7d42b63920f", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778942, "uuid": "dc19ee31-e8fd-43f9-8cfc-3c17f57c9c73", "value": "T17A352383AAD98013ECB9177014F613630F3ABDC44A7857A33665685F0DB2ED1AAB4377", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778942, "uuid": "0a0ce1ee-298b-4f31-9ae9-913f8e8acb78", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778942, "uuid": "565af906-d4b8-491c-bcff-b80d7f75d3bd", "value": "24576:4y3XNt4AoR40y2TN1OEgZvKK5fQ5JweKh0kZ0WNd0uzflmIp5:/3di5NkEYSKpQseKDZ0W0uzfl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685778942, "uuid": "7e353155-4f4c-4234-9d51-430375fec051", "value": 1091584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685778942, "uuid": "aa7e9335-a727-4289-a0b3-355e5790d33b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778942, "uuid": "81fca826-2133-4bfe-b30d-5eabf5ecdf8c", "value": "9fa388310821956d25ec7ba238633d2e.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36907c6c-01bc-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685761837, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685761837, "uuid": "7d12db2d-4e97-4135-9b6e-6319e5240afa", "comment": "Malware payload (RedLineStealer)", "value": "f8d7f9b99dec93179ff56badea3dbfe2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685761837, "uuid": "fbf9b240-de6b-47e1-82dc-47e1e8e1a01d", "comment": "Malware payload (RedLineStealer)", "value": "28d3372cf460ea1a1ff3543e88ecc88aa8723e1249641b6e28da8187d18964d4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685761837, "uuid": "9d61d892-c604-4092-9f33-60b7c4c570ad", "comment": "Malware payload (RedLineStealer)", "value": "826ce1eaf258b2fea763403e9d9d2e9f80dd718a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685761837, "uuid": "256533d9-9b02-4844-8e14-0e015cde7a8f", "comment": "Malware payload (RedLineStealer)", "value": "4ee56f7bf4bf82ea5835eef8c369d1849d305e0f9dd741084999f63dd728d600f4976061ac581b0456aab57595b654bf", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685761837, "uuid": "bc1e5d9e-04bd-4a75-8e59-589871950813", "value": "T1BF051257D7E94176C8B41BB01CF703A30E3ABCA6693C83673681641F1DB26A4A873767", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685761837, "uuid": "846cbac5-0903-4fea-9891-00f7c6cb7d9d", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685761837, "uuid": "c1ac03a6-4faf-464b-b06d-caedcc27a626", "value": "12288:gMrUy90nbRiKIYe+7K/MGwzGg2Lr3Cs2iSMOt5HD/56RQLyWwddZrmWEDzfubqA:kyCb9IXOK/PfhvyHlrHzwsWG6N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685761837, "uuid": "8d2046ad-91b6-454b-af91-e42d66fc7fc0", "value": 812544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685761837, "uuid": "5b1fe644-e826-4741-8655-a910c567acfc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685761837, "uuid": "edf6a7f4-64d4-46e7-98c6-bac55203ff2a", "value": "f8d7f9b99dec93179ff56badea3dbfe2.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c9885bf-0204-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685792905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792905, "uuid": "a5196b58-9422-4a8d-961f-e4e483c1c14b", "comment": "Malware payload", "value": "0f7181b6645b169829ff4e5d0874f52d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792905, "uuid": "c7641f9c-6fab-4274-8cf6-40d57b0ba817", "comment": "Malware payload", "value": "29653a76f882b0a1acaeca5b301f4df849c153a53f3926bf2506a801663c2768", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792905, "uuid": "1dae2e4e-f600-42ce-8916-1e7ab035fb90", "comment": "Malware payload", "value": "5d581bd25c94702f201a1cbcff41b5bc3ec3cb9b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792905, "uuid": "18e7c614-77e6-4d94-940b-8efd9a8868b0", "comment": "Malware payload", "value": "ce8a49963aed2295e22ce3c43d6559a81a3cfd501d8a21c8cb2bacb3c453b6cd0a354464ef7dc3ace2b3c31914e3b1ac", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685792905, "uuid": "75bc4098-db25-47e0-b611-478b8917d292", "value": "T1B817334559711898E3A7E23A90108E778170FC570B60DE4B1EB5216B0FB7AF6EE36F90", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685792905, "uuid": "a353fa66-d053-4c17-aeed-1ecaa4bfe35f", "value": "0b5552dccd9d0a834cea55c0c8fc05be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685792905, "uuid": "4c893be9-81e7-4734-bbe0-2140aa609996", "value": "393216:YAhCEDLQHKRW3I1Kpn5HBl8pj0xrYvHxRmhxI+LTYfc71OfW:Y6CEDLQHKRWPppj8F0xajmPDXYj+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685792905, "uuid": "ce598c08-7d9c-4216-aa04-37ada94a9c38", "value": 20133713, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685792905, "uuid": "a5121d2b-157f-487e-911e-0cda88b88d2d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685792905, "uuid": "39deba8d-4990-4075-8d98-7b38f769f07e", "value": "CrashHandler2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9831cf3-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802510, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802510, "uuid": "28293ced-d5d4-419d-8cc7-08f36e085da5", "comment": "Malware payload", "value": "bf91f64860e8d3e314c42a802a55383f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802510, "uuid": "4271ba61-1c3f-405f-be04-17f6f637c3be", "comment": "Malware payload", "value": "2ac805623d0d239b3cafba12e7c7392b03e589d6abb8205a0ca310ddf3767427", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802510, "uuid": "06c74821-8953-42b0-aba4-c4b52969a71a", "comment": "Malware payload", "value": "a6a237d4b97ca483a3a0f252b834dce2f81cebac", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802510, "uuid": "df0f9796-7005-4de4-8c3b-1ade1b72f041", "comment": "Malware payload", "value": "a310a4b0f49fd2b8bd9edbadabc0395a8823b28e470dca32e3ae11f9bdf7d27a6677d1242c430ade37d7ea7e4ade9e16", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802510, "uuid": "f9e2b112-1efe-419b-86dd-8d0477ee56da", "value": "T1D553F707F955812FEA94C7F1183985683927BF390AE19E97328AB9542975A43FCF030F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802510, "uuid": "fe190ec9-9cb2-4976-9372-5a56bb39778c", "value": "768:JywH+Siav6vtNE6nNSue+AVisxDTMqhAbabX5lvGP2EPGlIGAHt4eFk2D/Y0FTow:zFkwva2eBt41Q/YqTzccN0e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802510, "uuid": "9cb64ee7-45c0-4759-bb90-ee241ee3bdbf", "value": 66048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802510, "uuid": "fc527c14-3da9-412e-9b5b-8d1560a32a4f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802510, "uuid": "1eaca671-fd23-485e-b916-50ec00c9f8e7", "value": "SecuriteInfo.com.W32.S-909ca299.Eldorado.5386.12728", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e71e8faf-01c2-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Loki)", "timestamp": 1685764710, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764710, "uuid": "81c423cc-b6fa-48c8-ba15-7c87a70a00c2", "comment": "Malware payload (Loki)", "value": "616f84ed1a058d9b51efa2eb6007dd4e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764710, "uuid": "c44d593a-ee4b-4f85-9234-6a5861daa6a3", "comment": "Malware payload (Loki)", "value": "2bdc7a2527b841fa13d5513e75347d8e822b00b2dcc968d106cc5a863b29ee89", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764710, "uuid": "e78b00aa-febc-415e-a33f-2f7ca2c055d8", "comment": "Malware payload (Loki)", "value": "88bad7db66cbccccc3737d4d66c85d0f1b9df31c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764710, "uuid": "532935be-a1ec-4c1e-95a9-a1090d57f86b", "comment": "Malware payload (Loki)", "value": "54fbec9f18921e9c019c5ef6bcf0518684a52a19070722a8445f9effa5a20f2626ab13da6ab3439eb06596181d1b46c3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685764710, "uuid": "ba8bc490-acc9-4ed9-bd69-fb36ecb3f641", "value": "T1E644DF2176E2C071E6B749737430DBA42A7BB8725B70858B33681E6E5E306D3DA76313", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685764710, "uuid": "6d5f9ac5-a498-483a-a632-4bc1ccef646e", "value": "8f27cfef510114068cda84f548448738", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685764710, "uuid": "97171369-0878-4e93-86a4-a13985a2bfe8", "value": "3072:EX1WCtbXb0iGhSHVbPmuvBrLzTf16kI06p5m:ATG8HVbPvJnzTf16F2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685764710, "uuid": "b2327476-60ba-4743-8507-b29d93004b02", "value": 254976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685764710, "uuid": "2f607d8a-9991-4493-9fdd-e4a84dbc3adc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685764710, "uuid": "938a138a-7f40-442d-b400-0a1a88f25f92", "value": "616f84ed1a058d9b51efa2eb6007dd4e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "309eba58-01ec-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782443, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782443, "uuid": "d0b44ec9-2402-45d3-97c6-2cd8e643e2ae", "comment": "Malware payload (Mirai)", "value": "3380b390490fcebeafd8637bc680ecb7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782443, "uuid": "99494087-ed5f-4723-836e-8c7d402735a0", "comment": "Malware payload (Mirai)", "value": "2bddf1cbee3cecdfca7bdeb8dfb8e881806928350c6fc2819251aaca3904b69c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782443, "uuid": "396f2f75-6362-4ab3-9ed5-52c56cda4159", "comment": "Malware payload (Mirai)", "value": "d532c8ea40e21dfe244eeba767ef7effa7e0265e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782443, "uuid": "a51affdb-c692-4269-afaf-7aa158a78b6b", "comment": "Malware payload (Mirai)", "value": "4485f6ea65bf8f4ce5b9774497b7553b81aebcb952e484188b2981ea8372f36c9f547e33ab301ff88a492d8277685b6a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782443, "uuid": "15065043-1f9c-4162-98ec-359fbda2d8de", "value": "T183D24AB6E46B0E68C29A427474289E342F2399D0A3C36DF6167586B4D453C8DF909FF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782443, "uuid": "c6745098-0dfe-4996-957e-1669b4bde614", "value": "384:baC6bfrKOUctmyJWAELlBLNffPlytUfAXp+dCSw77YuOOhirB19WoPDN/5qB/CVg:baFLrKhyJzEBffP8U+8CF6WoZ5GCuF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782443, "uuid": "77eec686-b528-4ada-a407-912df3be7bb1", "value": 29888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782443, "uuid": "e3a53e5c-3aa8-43fb-bc94-b224b1ab7085", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782443, "uuid": "eeb6259d-cb1b-4e80-8b52-50cae5e528f6", "value": "3380b390490fcebeafd8637bc680ecb7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed3e308c-024d-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685824421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685824421, "uuid": "18c0747b-4b39-4776-9757-bcb96fb082d6", "comment": "Malware payload (Mirai)", "value": "6ac34d6e5bcc162be81cbd3bca973d89", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685824421, "uuid": "7828b08f-e23c-4444-b447-a5c3bf434e32", "comment": "Malware payload (Mirai)", "value": "2bf70fd619d738af63d5f0bc6d907ad7747f5eb5c8ec90dfb1e69b3871287592", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685824421, "uuid": "ed7c2f1e-486e-4fe1-8a27-230032d48ae8", "comment": "Malware payload (Mirai)", "value": "ad4443ab33b976fd6d9d9baf013b82ee4f136603", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685824421, "uuid": "670c7a54-bd24-48d0-bd61-49711b45d5b6", "comment": "Malware payload (Mirai)", "value": "9479bd84c909221c780f0675f2287202670ec8ffa1c519af6cc11a9da54b485b8b986adb1b1dd54a2802601956ee4b4a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685824421, "uuid": "c4f0fa26-5753-4364-8f0c-e5b909ac2f1f", "value": "T1FCB31905D5109727C2D227BEFB9F825E33332B68A7DB33155A247AB42BC279D1E39121", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685824421, "uuid": "a2a3cc87-924b-418e-bf80-3c1a59bdf6a0", "value": "1536:XMniocsH3Wwvvbpt3uE3JaUAIKMYitEbi8Mr3yBY5WYYo9fJL37YlUA2mmFgwqd4:sm8Jaeyi8Mr3yBYMQJL3E2mBwO4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685824421, "uuid": "47878772-10cf-4024-a690-ccc3bbf2da94", "value": 109536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685824421, "uuid": "b6522629-6d9e-4d83-9d26-40cd410f2bbc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685824421, "uuid": "a28b3cb5-655d-49eb-be82-2b49b82caad2", "value": "6ac34d6e5bcc162be81cbd3bca973d89", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d403ba35-0203-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685792596, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792596, "uuid": "1ad3d117-be37-4abc-80df-147b474dd716", "comment": "Malware payload", "value": "cf8d7adbab1ac9baf4273777ec64186c", "object_relation": "md5", "Tag": [ { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "lockbit", "colour": "#8CA32F", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792596, "uuid": "91696435-9d79-4ed0-b068-a75dfed3ecf9", "comment": "Malware payload", "value": "2cee882bd0dc4267bacf099ac4571c319ac547be12b955f7ccb2f0144ae40876", "object_relation": "sha256", "Tag": [ { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "lockbit", "colour": "#8CA32F", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792596, "uuid": "9548b16b-c7a8-4426-aa11-8b38de5296c3", "comment": "Malware payload", "value": "85b4c3c60a34deb79ed3b081dff094aa88ac395b", "object_relation": "sha1", "Tag": [ { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "lockbit", "colour": "#8CA32F", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792596, "uuid": "c43e8e3b-264f-4fed-bff3-8f22f3fd5d78", "comment": "Malware payload", "value": "876bd657d1d1cbc973d28c05ac16b3577a25735f9961805787221543866cda7460c51499821d57a3c64c06f9f8177d49", "object_relation": "sha3-384", "Tag": [ { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "lockbit", "colour": "#8CA32F", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685792596, "uuid": "fda02b6c-815b-4992-a064-c5ee92841a28", "value": "T1F58302B89F5E104BB456821FF820FA4EA5FFAF8718AB85121B7960ED9D7E030E574031", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685792596, "uuid": "5d9e1f5f-4b21-4c05-930d-1d7bc7042aff", "value": "1536:g27MOCfgb1J9KIemMvjDZci5bHe2WcXXA38J5rioF+AFfgd0:57MXW1itmMvjDZvJe21GO5riCFIS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685792596, "uuid": "6a00720f-8bb6-4e8e-8af3-b4af5f237d9b", "value": 84114, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685792596, "uuid": "e37516c7-c02e-4c0d-8e5e-abfd6e225412", "value": "application/x-7z-compressed", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685792596, "uuid": "d92cd05f-fff4-427f-8692-7b7b3fe5730c", "value": "LB3.7z", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c28810a-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782140, "uuid": "efb7933c-0710-4757-8dad-264d63e2cca7", "comment": "Malware payload (Mirai)", "value": "37313ca4a2a07f4ec75b2dc88c150ffe", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782140, "uuid": "cd784c88-8ffd-4f53-a253-422445dc80d5", "comment": "Malware payload (Mirai)", "value": "2d78858394ac7f2bbf80e53f6985cc71dd9abd6c8a4ac785d8626cfcbeb25b94", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782140, "uuid": "0b2394be-a404-4811-ab84-8a7b5e0488bb", "comment": "Malware payload (Mirai)", "value": "7d61ee7a139e4b6233f4be195165b2a0968a6164", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782140, "uuid": "ad85db16-e841-4bc9-9600-38e66c97f27d", "comment": "Malware payload (Mirai)", "value": "b8a189f37df889d49df4d95b7b6985ec6fb2a8e69cefccb5be0f2ae7540e955214de7d9e688e10ae31effbb18db3ba04", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782140, "uuid": "58f863af-4050-4e45-a6b3-e0debd96045f", "value": "T13F52D1D0F2B23057D85A9C7E24255ADF301269AE94BE6B171B05A7D718FB04389B73CC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782140, "uuid": "497e767e-635f-4c8b-88db-c276cfdd4b2a", "value": "384:aTqbnqxBy003neTlxw/Jz3iYPG02+4Jft1Ejs1o:3n+Q9u5q/Jz3k0f4zCsm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782140, "uuid": "96dd915e-6860-4466-8a93-4024f8579d2b", "value": 14496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782140, "uuid": "ba65ef5e-9645-436f-9ca5-20a5fd17d43c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782140, "uuid": "96a09157-6425-43e3-bfda-596ffbf40706", "value": "37313ca4a2a07f4ec75b2dc88c150ffe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e3228cb-01ec-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782439, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782439, "uuid": "8c9a5ced-ba8c-465c-895d-7333e16ee164", "comment": "Malware payload (Mirai)", "value": "4cea4ae61a08676c5ea7dfda09809db6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782439, "uuid": "291da778-6d97-4d99-a0e5-29f8df992079", "comment": "Malware payload (Mirai)", "value": "2e11561905d801573f279d5629c9dce889d2a28706b6b08c4c9d9732bd15e416", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782439, "uuid": "200322fc-c6d9-4504-b034-71b244f476f6", "comment": "Malware payload (Mirai)", "value": "384ec5ed4e207461b419d3877191fac3192bb50a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782439, "uuid": "6d96856a-5d33-44f5-88e9-33cfcc9d5cd6", "comment": "Malware payload (Mirai)", "value": "2603a77febc09f183f29b823a36a99ae871992e06fa730aa9175c20d2f00e3ce2a0a2a9ed0dd78413b000face641273a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782439, "uuid": "ae225d13-9be4-4af6-8198-170cb4229824", "value": "T129A2D029D345AEF4DFAF9D9092C2D2C276E543C6278AC8E340EE6F013506056BB89D59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782439, "uuid": "7394cce0-85db-4e68-b66b-94bd1d5b2991", "value": "384:9/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5V66M4uVcqgw05VxJ0:9RxsSVsMD6xiJJE5zRWNP6B4uVcqgw0U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782439, "uuid": "db3bebe0-22ff-4ead-a4e7-0e4ea5077d87", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782439, "uuid": "4f0f9f44-b18a-4d83-8b52-5f74caf6ce77", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782439, "uuid": "17e657c6-471b-493e-a2cf-2de89276e78b", "value": "4cea4ae61a08676c5ea7dfda09809db6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03eb2991-01b8-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685760034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685760034, "uuid": "2fa9b754-a178-423f-a936-ae9eeaa6db46", "comment": "Malware payload (Amadey)", "value": "cfdfe98ea0059a2944a87a1d104cde1b", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685760034, "uuid": "a6419bfa-1c27-40cb-899e-1c6786aef1d2", "comment": "Malware payload (Amadey)", "value": "2e7bbc0fd717a4f9e31985dede8bfc127a8a21c9656f9b8dc8be02ed93eab93c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685760034, "uuid": "b3d57769-846b-4bf6-afc2-81b043e441e9", "comment": "Malware payload (Amadey)", "value": "98643262bba6780ad6cbb3c480422d926848599b", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685760034, "uuid": "9ecde800-a456-4b80-a8b3-57a7839da77d", "comment": "Malware payload (Amadey)", "value": "3598c7fd9af2cf328dd27a5d0813d76e7c3296450d374eb319715127430dd1e28c6e8b8dc0f25f4515b5af8aa92c2e63", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685760034, "uuid": "c1aae206-ca1a-4050-ab72-de60a8b82bd1", "value": "T1813523C3B1E85072DAB5277058F3038B1E3A7DA39D78826B2791E81D0C692D476367B3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685760034, "uuid": "98335b7f-3909-43e0-8458-e96c1bd565d8", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685760034, "uuid": "174d181d-a27c-4d85-9ac6-1645ab74fb8f", "value": "24576:fyOGD/QglyJ7TsCXaxpkgA53bWmCaL/x2Ugvb4Vns:qtZlasDpUhWmJ/xQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685760034, "uuid": "fa9d8962-fc96-46cc-82cb-3375d916348c", "value": 1091584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685760034, "uuid": "a7862555-3489-48b2-9aa4-83c4733144e4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685760034, "uuid": "e41cfe42-50ee-487d-af3c-4f344331855d", "value": "cfdfe98ea0059a2944a87a1d104cde1b.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc2def2c-0247-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685821815, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821815, "uuid": "b0fa8e84-b458-4aee-aa2f-824a43218a8d", "comment": "Malware payload (Mirai)", "value": "fe1250cf6c8796c40bd3acc12de2d109", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821815, "uuid": "2f1a14b7-3e30-45f1-ad4a-2e43401322ec", "comment": "Malware payload (Mirai)", "value": "2f6f076e70ce2c7cd54d5dbd2d98265d0ba15a966fa34973e9354d81984e8ce0", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821815, "uuid": "179743c9-822a-4479-ba6f-91671cef5691", "comment": "Malware payload (Mirai)", "value": "54c7d00d33bf360cae407c6536c503968c2f5d28", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821815, "uuid": "afd5e6c8-82e1-43f0-9c92-6fe971f9ca2d", "comment": "Malware payload (Mirai)", "value": "d901baec58611969ff1701590c70c09ab88d14e8460f6f303e59d1df06f9aac631caf3510eb4c69e8e5f3b28fececd45", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821815, "uuid": "c46bd82f-089b-4511-bb11-4d0a0d726cc5", "value": "T1AF534C0271280E47E5A249B4253F1BE083BFEE9035F4B688A94FDB168635E771186FDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821815, "uuid": "96308630-7809-4e01-bc2b-5bf4330a3721", "value": "1536:0JMCbD1QG+JPDpwKi6bcLhwZ0pIGm6z2L:KN+Z4jE0pIGm6K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685821815, "uuid": "59630ef8-8ba3-44d5-bcfb-43e3f230758f", "value": 66656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685821815, "uuid": "9a1025c1-4ba2-4a0d-91e9-f73f97ed15e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821815, "uuid": "1bafb04a-6e1e-4ace-b224-4461366e6bc9", "value": "fe1250cf6c8796c40bd3acc12de2d109", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a9f0849-01b6-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685759321, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759321, "uuid": "4d63e7d2-d923-4a78-b852-2fe6e11db28f", "comment": "Malware payload", "value": "2cefa380de4493783aba97a50fee9a7f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GPT", "colour": "#9FE24F", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759321, "uuid": "4f338347-0aa3-4f1e-8fd1-23372a6268af", "comment": "Malware payload", "value": "2fc949e23c1f908288f59ee5f760cb3d7634bb1cb473072916eb770c69c553d5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GPT", "colour": "#9FE24F", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759321, "uuid": "df86570f-04eb-44bf-aa4d-bbc25671886e", "comment": "Malware payload", "value": "8a70e11e29739079e4f3425ef4f3692801e92033", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GPT", "colour": "#9FE24F", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759321, "uuid": "58aacf68-aee6-4380-9a12-ef643958ed04", "comment": "Malware payload", "value": "015247b5f70289691d629d8c978de9d9ed742568b3320fb0e81aad3260b33bde8683eb8a0ffe448a2893b1e7717b0a57", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GPT", "colour": "#9FE24F", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685759321, "uuid": "001ba5fe-d665-4933-be11-4c5cff1f364c", "value": "T1ABB6F131764AC42BC66305F0192CAADF5528BF661BB654C7B3CC2E6E0BB45C31636E27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685759321, "uuid": "56ba0417-88bf-44c1-b8e5-12eecd6c19d1", "value": "4fda732de1b2293b2442d2996c840875", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685759321, "uuid": "00262d71-1587-4b03-a93e-1f1512343dec", "value": "196608:WoTlRxfE99KNqO2pb8KNkr26Wt2EpfbV0tO1Z0JEFVpOiG5pAt6mF:HTXm99KNqOgFNkr2d4EpfbqtO7t7ljtd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685759321, "uuid": "02636a5f-b70a-4196-abb1-e206655ac799", "value": 11450304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685759321, "uuid": "b3c24b04-a7a5-4b13-951b-9bde716459be", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685759321, "uuid": "73e78d6d-580a-498f-880a-9fed2faffac1", "value": "ChatGPT4.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67582ced-021e-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685804010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685804010, "uuid": "b3cf2fd8-da23-4d2f-b81a-88e58cd6c806", "comment": "Malware payload (RedLineStealer)", "value": "e6cc6e6fd11cb86c8d1ce6471688b596", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685804010, "uuid": "f239c00b-d49b-4760-a539-09f3720a0b61", "comment": "Malware payload (RedLineStealer)", "value": "33cb98a8ac1563b26ba8ff842135d488fa2d3cdbdb7de0f05ca4fcac63155ff7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685804010, "uuid": "815ca66a-71ad-4ef5-af9a-a747cbc16605", "comment": "Malware payload (RedLineStealer)", "value": "90ac37601232050e5b2e3da63ec41ad43475ebfc", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685804010, "uuid": "2a053080-19cf-4c1a-98e3-d38a99c06c1d", "comment": "Malware payload (RedLineStealer)", "value": "2ae381bc0e609c12a6525104d767ae36a9d127962a790f5ec0c273ecb0826749d2835d3638a6dbef545d2d9e43bb4c16", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685804010, "uuid": "76acd776-7eb9-4e06-bd6e-c482b489461b", "value": "T18E051293EBD94863D9B827B114FA02570A36BC718D74C7A723861D4B1872ED17A3633B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685804010, "uuid": "0b88a85c-63f6-4167-a230-a99dd770e969", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685804010, "uuid": "4dbf85dd-c09b-45bd-8cf1-d3e388abf8bf", "value": "12288:6Mrxy90MhxVbk7HnvFz6EuGbVGgTd9oku3Cc5NQ/k0XLoEM71dObXGebXvYV/KWL:7yLGz6EuWVGg7ok4GMm071dObXGaC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685804010, "uuid": "d25ef5f5-283e-4285-8b12-f904aeb532a9", "value": 798208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685804010, "uuid": "34429dac-d557-42bd-8a7f-ecc900cec9fe", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685804010, "uuid": "8c925776-fa9c-4a4b-8fd0-e2ae49ae6a0c", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9d371b8-01f7-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685787424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787424, "uuid": "3935bec3-2805-4ed8-9557-ea9de928fe1d", "comment": "Malware payload (Mirai)", "value": "814c1ca6cd26296a0559384c4ede5a6b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787424, "uuid": "1cd525f4-105f-407d-ab61-e6bf00c781e3", "comment": "Malware payload (Mirai)", "value": "349d9986faa32bb18471543464ca8c8a434de3c05233089334c850d7834339c4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787424, "uuid": "dc4c1129-b4f2-4c94-9a24-8d939afa9528", "comment": "Malware payload (Mirai)", "value": "fc82adadc45d3c442330e0f0c2d629e5069fdf89", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787424, "uuid": "f929389f-1c17-4ead-b186-3ed8f82fe54a", "comment": "Malware payload (Mirai)", "value": "589b7083e5489c9dbc49e87e8c1e9d4250200881fee9777b12b8787b9e07f5f4ca5ddac8cc34b321bf18a325ecbb8013", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787424, "uuid": "86e2677d-0813-4bad-afb8-b9886849634e", "value": "T1D7D3E72ABE11ABBFE16C823107FB6F60C39531E32E919381E16CD6581E7125D1D5FBA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787424, "uuid": "b72c96fb-5c11-41f6-821b-b2ee0769d91d", "value": "3072:8IONq88xeZnPAJY44Zr9Ns34fKNOhm6RLh7+F1HHC0t2Gobmhmvjeq+TstG2j:8vMnd2bbmhmvjeq+TstG2j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685787424, "uuid": "7e85ba18-cbc1-492b-8519-a0d88307a701", "value": 139317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685787424, "uuid": "3b1d975a-841a-4e4a-9320-ebc32c27924e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787424, "uuid": "daf15e12-aea1-4cb9-b3cb-1e6d3c1cd0ed", "value": "814c1ca6cd26296a0559384c4ede5a6b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ccbc63c-01dc-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685775645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685775645, "uuid": "b26b2d30-b600-4d96-a7d2-9cba4fe341d2", "comment": "Malware payload (RedLineStealer)", "value": "5625cd8be5749135a541a1afc1d209ea", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685775645, "uuid": "caf6330c-b82d-4b6e-a1ea-cbe56f0c5834", "comment": "Malware payload (RedLineStealer)", "value": "34d838928220b6ebb3783f0c9bdb7bee4c958dbfee5faabb1b71e7f0a40f3548", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685775645, "uuid": "72236081-0e41-4738-924f-c0c7b2ced10f", "comment": "Malware payload (RedLineStealer)", "value": "4987ed7b548c581f6f172f197a5bdd626532c30c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685775645, "uuid": "5baa3353-39d2-4d9e-bab2-f831ffbb0aee", "comment": "Malware payload (RedLineStealer)", "value": "8d3c02fd60de5302fe6c16a5743e57faae9fc38e280db99e2894c0d3d4ad25a26c9be03160003f26db1ccd3371cfbcdc", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685775645, "uuid": "2cd13563-1c28-47bb-b1bd-e00cac335a2a", "value": "T160052346B3D4D0B6E8B4277528FB02C30F3ABCB19974826B2694696E5CB23D1F471357", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685775645, "uuid": "f98e0b80-7ee2-428e-b460-d489b90e5df4", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685775645, "uuid": "fe7377c0-bbd6-408c-9560-278d53b439cc", "value": "24576:7yktKTgQC/uNZ/6ErqrgG+OokUqR4bWBuPPm9b:uGKTEW/yErW+kBu3m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685775645, "uuid": "638c2d05-2e25-47a5-81d5-7f59082a0807", "value": 812544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685775645, "uuid": "74c00045-03b6-440e-8fcd-9bc2e0e5cfb5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685775645, "uuid": "8418a320-d5fc-48c0-80ae-9ec01f7a77ef", "value": "5625cd8be5749135a541a1afc1d209ea.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a539ded8-021d-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685803684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803684, "uuid": "16565afe-9350-470a-aa7d-facc57ceba71", "comment": "Malware payload (RedLineStealer)", "value": "ae8b8d660c644d102ce9953ac5f6f814", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803684, "uuid": "2aa3fd0c-4c27-46be-add6-b44f5a35ebc3", "comment": "Malware payload (RedLineStealer)", "value": "35435042e13530006897a5a339b99c2004b443b2d2ac81f2f04b39ed65e64aad", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803684, "uuid": "5e06bf0f-8859-4740-81bd-a4ed42422537", "comment": "Malware payload (RedLineStealer)", "value": "95cad78a95ffe14fa9744af7d61ddee2e3619a23", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803684, "uuid": "9438ac0f-67c1-40f3-9e2d-3c35b5689409", "comment": "Malware payload (RedLineStealer)", "value": "88bb6209da5f63fbc8cd493a3b668a10b6a0ea4d0b87bc0e916942f6c7b5c76303f8c6122e7158a933212f51bd9a5f21", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803684, "uuid": "0b834a37-f3af-406a-961e-186cd90776cb", "value": "T15E051252E3D45039CCB617B89CF602531E39BD724470ABAB2B96986F1CB2340E57237B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803684, "uuid": "77a50889-67ed-4ba4-8594-3fce656579de", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803684, "uuid": "04edbe23-304d-4307-9019-c5c2e8a69214", "value": "12288:vMrUy903xerZOtMSiXlniONAHDHJDLRkYxr2H2gR7Ax+X4XZVB3DaAuebPl:rycxOOtHiXxTAzJDLrOFcVb3fuQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685803684, "uuid": "4913006b-d2a0-4e62-9aa9-610b0bcc5b1d", "value": 797184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685803684, "uuid": "8d246aa5-51c2-4cff-86b1-98c4c6319bd1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803684, "uuid": "f8038e76-89d7-4e07-82af-04d35413f23e", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee06c6ae-01ae-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685756132, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685756132, "uuid": "f7380de7-ff12-4729-8b6d-f5d3fbee0644", "comment": "Malware payload (RedLineStealer)", "value": "6ad7273dedb6e837a28e32553e5b1527", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685756132, "uuid": "795087ad-00bd-4f2b-811e-9d29cd086d96", "comment": "Malware payload (RedLineStealer)", "value": "356c8eec94dfc07826fc8b00af5cc7754f3758b2b8d52844ad249a3022b09860", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685756132, "uuid": "e3a58320-2d5b-4958-ae8f-ae553cf3121e", "comment": "Malware payload (RedLineStealer)", "value": "b4dc7996773c27c4d01fc36407aaa42757d1de22", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685756132, "uuid": "db47c11b-a567-4bee-ab85-4a56a5f9dcf7", "comment": "Malware payload (RedLineStealer)", "value": "0e04352a3065ecb2ae857c2f2b9c61cb7557ab29db7ed01f4b5dd6edadf74afe7967777eee155342c11c9f36abd85e30", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685756132, "uuid": "4625b677-4218-4fa2-a3c8-942cb628c57f", "value": "T1C0352202E3D480E2D8B91B7019F607531E7BBDB69A39437B2791DC941DB3A40E8727A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685756132, "uuid": "4ed38cf9-9005-43e0-b361-a2b05f44348d", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685756132, "uuid": "852c79ea-dd55-4f44-bb2f-b3ed70833c13", "value": "24576:fyPCAt2wSDuoSngYCBWP75Ioc42fjEGd7je:qPKwevSnVCBWdyT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685756132, "uuid": "ccdcb633-ee4f-49dd-9e1e-986d41582a5c", "value": 1093120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685756132, "uuid": "def5747b-4ffa-4510-a6f7-21db897e24cc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685756132, "uuid": "58385863-df04-4e09-8ce1-d5ad0b1223f7", "value": "6ad7273dedb6e837a28e32553e5b1527.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86d3157b-025b-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685830262, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685830262, "uuid": "6dd4d646-0b55-4e61-aa7c-a1de33432e25", "comment": "Malware payload (RedLineStealer)", "value": "3be6be65f8685715130d5be7ba9d2f50", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685830262, "uuid": "c10176cb-53d0-4c72-95a0-69a77eeed8e2", "comment": "Malware payload (RedLineStealer)", "value": "36a9de67a79e5248cdf618351d46933184537a1b0bb117f7fc76046b9f89eab5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685830262, "uuid": "79f1c391-68ed-4675-818a-348598f4c0eb", "comment": "Malware payload (RedLineStealer)", "value": "f52b63cc40dcadde5e026ca73d120a21196ebb0f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685830262, "uuid": "dfbae44c-5d86-4d26-b6dc-e2e7a1d24758", "comment": "Malware payload (RedLineStealer)", "value": "d45e59f324c554288b6e0397c4948b41de13cf028fe773ca364e2f6abd13753a3b4c1989462538bc9bc5739800e74b3a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685830262, "uuid": "7f980af9-4385-49d7-8d1d-2a3a3a16ada7", "value": "T1B984AE0363D17C6CE6268B728F1EC6E8661EF5519F5937AB32548A2F04702B2C672FC5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685830262, "uuid": "f8e43962-c97b-4ab8-b435-8fdf669a2867", "value": "a9d8c64cc03cfb0c533c4c52d44e0ec0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685830262, "uuid": "a13a764f-6d44-437a-a03b-6dc5ce068bb7", "value": "6144:Pcu6maE4YCKnle7zFHMCurk4RqRDQ8yiLUIJoisacKdGVC3:P36maEtne1MCGhqRSkJois1KdP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685830262, "uuid": "55aa8c88-725f-4f42-a8c8-4391edf0b166", "value": 389200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685830262, "uuid": "53834c43-6c79-44e3-a9ce-22902103e302", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685830262, "uuid": "8476d4da-2341-4d37-a45e-755f91b6848b", "value": "3be6be65f8685715130d5be7ba9d2f50", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c200b3c-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685793334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793334, "uuid": "118c7659-017f-4fff-bd45-14d0236be25f", "comment": "Malware payload", "value": "c960cacca74bfaf29deaa13dcdb3f42d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793334, "uuid": "c194c9f2-341e-4a36-a5d7-bf317ceca1d6", "comment": "Malware payload", "value": "36d066a68c97e2bec948576a83a7b2dfb29a943f5d107303ee454b07c099aff5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793334, "uuid": "a590e869-b6df-40ba-8d2b-27c9863a2753", "comment": "Malware payload", "value": "bb53beb7a7beefd85e73524dd46100ee0aa431c8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793334, "uuid": "62fe89e8-d46f-4cb8-ad76-6261ffdba6c6", "comment": "Malware payload", "value": "f82a3537a718f225aafa2376e4bf8ffa7b25af83d5022ef02452e04c59506947684801a734b38d345a9d016ac8032229", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793334, "uuid": "8843b570-71be-4771-935a-459d17ec291a", "value": "T115D3F856F8819B11D5C111BAFE1E128E37231B7CE2DE72029D246B747B8B8BB0E3B515", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793334, "uuid": "2c33cd9d-14c7-45f1-8630-c79fd1b2f82e", "value": "3072:OiqPkUSmy0oXeg5Or6Ca8EXUoT0G2vfWCV5FyVF:Oi9dyoX/5cJakrG2WA5FyVF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793334, "uuid": "3c6aa1e2-14b1-40e5-a20e-19754b0b905e", "value": 141776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793334, "uuid": "7f2a2af1-84c5-464f-89cd-e5325841c237", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793334, "uuid": "0146aaff-18e9-484f-b36a-ae98abf95d3b", "value": "c960cacca74bfaf29deaa13dcdb3f42d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1bde88a-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685779304, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779304, "uuid": "17dfb5f2-31e1-4879-824e-e24fcf7347de", "comment": "Malware payload (Mirai)", "value": "2601b938ab1168dbf8b355f898109516", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779304, "uuid": "88c393e7-9c54-4ec8-b712-7b7ac90b3b05", "comment": "Malware payload (Mirai)", "value": "383c7023aaa492322aaa953b850afc60b6f7752375fb9161fdc67457b470e2c7", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779304, "uuid": "c8e8af66-34f2-4e3e-b27b-77d22b8b0c09", "comment": "Malware payload (Mirai)", "value": "6336497633a17f876abb48c6016d2ed29b676d7c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779304, "uuid": "582e6124-aaae-409a-8b91-7bc427b9b3da", "comment": "Malware payload (Mirai)", "value": "f9a9b4a219cd8e03e9d53d161aa6b75235df48dbd0cfcc211ecaa3474b71f60eb46fe39ef3e863bcb52ecefba343201b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779304, "uuid": "8bd8af62-a99b-4123-8c12-91bf76736d08", "value": "T166C3E730E8044B1BC2D223F6E75A869E3F351E9797A733155B3879B02FF27991E29520", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779304, "uuid": "dfb9d4c3-1469-48f6-beee-677e737aa6fe", "value": "3072:4jDy/+mh1vtbPIKa7bpcUPium7/L7QsvmGfIiNb:mOJ1vxfa7bywm7/L7QsvmGfIiNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685779304, "uuid": "c4b4a00e-3734-43d3-9887-2b07a667f2a5", "value": 125008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685779304, "uuid": "a27b1aea-03e2-46be-a4fc-b6fbe9cad980", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779304, "uuid": "59178179-52c6-4db4-aa18-edaba65864db", "value": "2601b938ab1168dbf8b355f898109516", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "558dfcef-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782075, "uuid": "d213847c-a3a2-4dca-9239-fa12980ef228", "comment": "Malware payload (Mirai)", "value": "ba905f1f91738761d7b870e19326e3e5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782075, "uuid": "a20084cb-2d1e-470c-b88a-1f73bcdf3fa8", "comment": "Malware payload (Mirai)", "value": "38f8ba346268870fa6936a0b34d3363eda7398de105f600258418d48f5c32d2d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782075, "uuid": "e2eb37a3-d3b9-4864-9a28-9039aa1390d8", "comment": "Malware payload (Mirai)", "value": "e44050c104bdbc0d0bb3f4157532f4d2fde84f42", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782075, "uuid": "edb5d847-0e1f-46c8-90f6-6abe82bf5ea2", "comment": "Malware payload (Mirai)", "value": "a9d6a102c582d179c877745c54c68f6d7b2e34603757d21073dbe57c0f4d6e73cea14c3523baea21ca3b9284144d383a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782075, "uuid": "90bb68e7-b77d-4771-a70a-febd501c87c4", "value": "T1C433F8C0F98F80F5D447893060A7F23FCB32D9394171D6AEEF5AAF25EA676054207249", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782075, "uuid": "ec43ad1c-a67f-4112-a5fc-c6664e864303", "value": "768:gmlTQXnybyIvcSFVr2uZ1ImSB8yd00jVg7hiz2pPp8iVM4o:HRKFIvcSFYuZ1I9KBoz2Z6iVTo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782075, "uuid": "3b51035f-3e7b-4149-ab1f-34d2b62a0588", "value": 54288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782075, "uuid": "dd42ba7d-6c35-4791-bfac-9907185d5e4e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782075, "uuid": "69a1dbb1-fd88-404d-b6ea-6264a21ca92e", "value": "ba905f1f91738761d7b870e19326e3e5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "495e5a4a-01ff-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685790645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685790645, "uuid": "7ef4992c-c6c6-43c3-8052-7881ffa9b59d", "comment": "Malware payload (RedLineStealer)", "value": "1ae14beaddc674a3067f36c167852383", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685790645, "uuid": "d26a5ce3-1090-4143-a410-03652f4efcfa", "comment": "Malware payload (RedLineStealer)", "value": "3967e778fc3657fd98c092ce1368dd9ec5c9fc75ab0b03253ec63503cf466060", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685790645, "uuid": "01d8d08c-c706-4a4a-a7ef-ad7bb95212e5", "comment": "Malware payload (RedLineStealer)", "value": "6fc62d0199d73739948bc65a7e1f1117fa47a0b3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685790645, "uuid": "3fa0894c-8624-434f-a4ab-05654032617e", "comment": "Malware payload (RedLineStealer)", "value": "e17ad2716e9d9c0a76a032f5b427049488bae28535cf15709790000186504c0d1eec62be2dd31b1061105ad0b7ae2eca", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685790645, "uuid": "74fc3208-2515-4e3f-9f23-9930e7104a5d", "value": "T1D5051213B3E85072ECB517709CF606831A367CB0AAB597AF3395590B0CB2A84257977B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685790645, "uuid": "041d3151-e97f-4d9c-8c47-897025c0effa", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685790645, "uuid": "a5491112-4cb2-4f27-8f5c-03e77191130f", "value": "12288:QMryy90FCY35bid+A7oQcbHZ2sF/+PJG0BfByQDOArA6FYJ:yyc5b1A7oQqZ2sZ+PJG0xrrvYJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685790645, "uuid": "0308021c-9d5d-4025-85ac-38f7688bc844", "value": 797184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685790645, "uuid": "047f9dad-2200-4041-b2d4-73e0369d6a79", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685790645, "uuid": "2750a49f-8bc0-4fab-a0e9-6a84c6cefa59", "value": "1ae14beaddc674a3067f36c167852383.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30c7956b-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782014, "uuid": "efa8cee5-5788-4d8e-9cbf-e7cafaed0adc", "comment": "Malware payload (Mirai)", "value": "93011c8e718de1b8ed338a2da12c104a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782014, "uuid": "13cdd8d7-e72c-4907-8b0b-5430626116f6", "comment": "Malware payload (Mirai)", "value": "3aa644af37fd3e8d1c132b411280bee0a50e09d1248c0afa30241c9333be5332", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782014, "uuid": "0416bb66-58d6-4393-9ffb-7f77ccfae850", "comment": "Malware payload (Mirai)", "value": "e5a841b944c4a86dad1eff3dd76a3b5462bfa6cd", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782014, "uuid": "a09ae288-05eb-4883-a34a-09fc8d128638", "comment": "Malware payload (Mirai)", "value": "c046d41ed2eb1b7799ebad5d8e17188032a340e2188f42c59f11927ee1c20abf6751643260e25a34ac382900073e05ba", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782014, "uuid": "528d115f-ee6e-4b35-9543-b3e4d2a03609", "value": "T176330A8EB8029D3CF91BE6BE54164E0DB93177C152830B2767BBFDA36C721945E02E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782014, "uuid": "b9671593-fa4c-4f59-ab77-6371d9b0aa3c", "value": "768:gduPBFnHooqR8qOCKq2cH4Kg9e+TK806MMUVjzkfQXObHud2oG8:r/hqaJMDg9eqK806MHdkfQX6HuC8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782014, "uuid": "d697e411-1cb1-4db5-b0b0-885060c16587", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782014, "uuid": "7d81b35a-c6fd-489c-b5fe-c80dfa37a3cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782014, "uuid": "1652426c-1979-424a-bf91-302b25b598d5", "value": "93011c8e718de1b8ed338a2da12c104a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79af1a5a-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685793303, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793303, "uuid": "3e267eca-b80b-48cb-bf6d-d0f649428a67", "comment": "Malware payload", "value": "df2e0d2eb240306e62bfc4575c2e4ffb", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793303, "uuid": "dc145994-8e1d-454f-9f1c-c1425bc0c55d", "comment": "Malware payload", "value": "3bcad99981f686b0ed6ddd5c7b5186976c20c8e919940ba40184d2160f3c0137", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793303, "uuid": "fc7aa4dc-b586-4394-99c3-e858cc69f0dd", "comment": "Malware payload", "value": "7ba9c4924f83e3aa92f5fcd9824953a260b1c0d5", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793303, "uuid": "55620bbc-eb37-4feb-b151-22e9fadfb4d1", "comment": "Malware payload", "value": "6e1470440596540702972d280356c9e843ed54ffeb9a3ff70140ed8cf15cbb0d8bb857b618d6f83dc9a00fb2ecf63a2f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793303, "uuid": "dbf95c55-2410-4499-b390-1e444d8c5642", "value": "T17793CA1E6E218FBDF769823047B74E21A79933D537E1D681E2ACD6012E6034E245FF98", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793303, "uuid": "1f02e78f-0635-4425-b73b-52e705f0afd7", "value": "1536:cfmdKqtiCm9A+9IMlCswlxSL7VLez4suDxNE:dUqtiCm+3MlCJlxSXVrDxNE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793303, "uuid": "8133db1a-0535-412f-ae22-24dc412b6680", "value": 97264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793303, "uuid": "c7f889f0-125c-41c6-80a9-4f950a5d54ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793303, "uuid": "ca8a1935-4889-4242-9a4f-7cd403f7af4e", "value": "df2e0d2eb240306e62bfc4575c2e4ffb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "775d8811-01f8-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685787716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787716, "uuid": "f221c889-a109-4cd9-9f7a-35d0744ef861", "comment": "Malware payload (Mirai)", "value": "b731092c2641088133bed359881de8f6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787716, "uuid": "9767f309-2653-4b62-b8ef-e36361577c9f", "comment": "Malware payload (Mirai)", "value": "3c8d0d940d57baa2494b3ce0ef50f64a9e5379a15241c89a4d2836b1a2213002", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787716, "uuid": "bdbb4ce0-d629-4650-98fa-ab77516926f3", "comment": "Malware payload (Mirai)", "value": "1a260f1423658acf2b14be5bdbc3aabffd04c638", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787716, "uuid": "30f38279-4c10-41dd-bfd7-66e34120716e", "comment": "Malware payload (Mirai)", "value": "425d31946e67c2711c3927ed99147da3503c4373e0a567d209ba17b27f3f38c67affbcec498fe7ab952140fbb0cab665", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787716, "uuid": "dfbc48bf-7804-4daf-a951-9b09d3da6791", "value": "T1AAF34B05EA404757C1D32776B68F424933239BB5A7DB33059938ABF43FC27AA0E36951", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787716, "uuid": "ef9687e8-8381-41a7-812e-bb24c770e4a6", "value": "3072:mdNyDta0KU326XpJg0Z2rY2PB1/r5PM/9eSZmJwwFlQS48:uNGta0KU32MpJUrY2J1/r9M/9nmJwwFv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685787716, "uuid": "03f36cca-3d9f-4b3f-a801-b997140d9892", "value": 171665, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685787716, "uuid": "e3a0156c-86db-4214-91ad-27daeffe5d85", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787716, "uuid": "43570a82-44d4-4888-8985-8e9a37ee542e", "value": "b731092c2641088133bed359881de8f6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4640f8c-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685779335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779335, "uuid": "e0204006-3f91-4738-b16d-19f259a895b1", "comment": "Malware payload (Mirai)", "value": "9018113e6a0713a0bfed13e4ddd28ddf", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779335, "uuid": "285e49b6-957d-4a66-af3f-8a050f026917", "comment": "Malware payload (Mirai)", "value": "3d4a124f8380d34cdc8ace8e2a2499b12b82b54ee7c5099135f5f81ba36aa4f8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779335, "uuid": "f7c5c9c3-6dc5-401f-aa68-cf5e516aa4ab", "comment": "Malware payload (Mirai)", "value": "f6074edb5e8ed1f85c2452c48925b2abdfaf06b8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779335, "uuid": "9f0bc574-7c23-45ae-a072-82d5c7f7b3a3", "comment": "Malware payload (Mirai)", "value": "6f415c5f27b3f1f8c3e51921f7b3a5bbeda68fde3c80b5fa38f7fbb60e179d8593d5c7d85c6f9fbd9441f750686da28f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779335, "uuid": "0d5ba310-b747-4fb1-b835-a2c6d749056a", "value": "T143E32A30D4504B17C2D213FAA79E825E3F221F9793DB33115B38BAB41FE279A1D69924", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779335, "uuid": "ce1120bf-274c-4018-941e-7800b55c4698", "value": "3072:Cv/WwsLgaq353qHiCOvhOpRqkDQHbeskmhxQwoVSUNu:KPLaq351hOpRqkLskmhxQwoVSUNu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685779335, "uuid": "a3d655e4-8111-49ce-83fb-ceb9882dd7ec", "value": 143019, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685779335, "uuid": "e232e018-68b8-4482-860e-12a6bff8a60a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779335, "uuid": "501e6e74-1842-42b0-99c1-21a09be8d36e", "value": "9018113e6a0713a0bfed13e4ddd28ddf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3e7b8ec-01d6-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685773241, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773241, "uuid": "cea744de-b520-4192-9258-cdc5ee953274", "comment": "Malware payload (Amadey)", "value": "92aef680cc569dd8af4acd92c652c608", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773241, "uuid": "7f5e953e-7a82-41b4-afe8-c5367b6401a7", "comment": "Malware payload (Amadey)", "value": "3dc5ebb1ba15a6f5093a44519a54c7ee9c2eecff58967adf6528b0dd57ce786a", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773241, "uuid": "f86f84bb-91ef-4321-a028-ecc5fac21875", "comment": "Malware payload (Amadey)", "value": "c65cc59dd7260da340edfa7ff3779316b6d83e2c", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773241, "uuid": "d124586c-8de5-4475-a059-bd2a594f1e08", "comment": "Malware payload (Amadey)", "value": "3fe36c3c20f0c78a35ff3033e1587f8fc4e26e016b78a861ad27b795d325c119441914c108c664d201b2e603225076d8", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773241, "uuid": "80f35261-0f48-4829-857e-c7be4bf4dbd9", "value": "T16B051246BBE48863DCB817B018FB03471F36BC659EB4412F6345AA5A19F2AD1AC31737", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773241, "uuid": "41c407bc-7068-4d19-acb8-f65601849c90", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773241, "uuid": "bef3c144-7844-41f3-8c42-e9cf53e43f0d", "value": "24576:zyrV+n8avKPuPTFEQMTAdhTrO7sELWJzOy/:GrV+hvSuxa7fqJzOy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685773241, "uuid": "c9e04f10-4251-41b4-b409-455f52d93796", "value": 812032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685773241, "uuid": "11b163ca-5fed-453b-94d4-2886bda8f8fa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773241, "uuid": "3dd4429d-c71e-459f-b438-76a020f3db39", "value": "92aef680cc569dd8af4acd92c652c608.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a11c1164-01d7-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685773612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773612, "uuid": "42ba0388-514e-4a47-8eed-cf792e9a16e7", "comment": "Malware payload", "value": "d91a67560501864d4b0f294d21c60df2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773612, "uuid": "b8f3639b-ea7b-4db8-869e-17fa6915ff23", "comment": "Malware payload", "value": "3f335de385d176c91b1238d6c06fe95a5d4db0078e0f917f09fa0322b19a75ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773612, "uuid": "4ff7c47a-992d-44e7-82b5-296885eef09f", "comment": "Malware payload", "value": "93556aac082f098a8ca850004e1e09e86bde7cae", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773612, "uuid": "02a6d5af-09e1-4931-94e7-c286d1a05cf6", "comment": "Malware payload", "value": "62f91507b048f020a574e0eacffb6334576a90da66b54289ecd12f21ab13cec8eac58799369ed208f57cea4d7b6d90a6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773612, "uuid": "f3b6e932-13fe-48e9-b06f-503ff0ec6607", "value": "T1A2F1AE9F66240D53C7BE667B4D838B033B7A6A9363391D8407DC4FA0E29F94571F8200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773612, "uuid": "c2f26342-0947-46e7-bba3-fab8463e2a29", "value": "192:cfbn9n2PIH0Jm93pxu5nMLtnVf6WOAtqLRn/FS1:cTdUOpxu5Wgg2V/FC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685773612, "uuid": "e47adf5a-3167-4d27-8bf9-efb92c3e8734", "value": 8088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685773612, "uuid": "7513b9c7-bf54-4146-8f58-0f36982820b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773612, "uuid": "92466211-c0fc-454f-aa81-0b554ee335dc", "value": "SecuriteInfo.com.Heur.20230603053142987496282", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21a734c7-01ed-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685782847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782847, "uuid": "0a13d0a1-d8be-44b1-8ab5-fe33b950ca53", "comment": "Malware payload (Amadey)", "value": "6589463412403bb9e54cd58a048b47e0", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782847, "uuid": "93602bab-7ef1-451a-9a97-612f222ce9b2", "comment": "Malware payload (Amadey)", "value": "4122c81e4a420f347ee98b869af987969bd0ecfbe6e89faa5fccffdfd6e4753c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782847, "uuid": "3d29af2a-c3b7-4f50-aa67-1282486a6888", "comment": "Malware payload (Amadey)", "value": "558d1cdcffe87246fa4bfe666f3fcb23e49a4764", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782847, "uuid": "a7fa5693-4cd9-4fd3-9a83-4f92793217fa", "comment": "Malware payload (Amadey)", "value": "ac90199a83db5b647de126e03c054e392df5f348f15babe0b5d658bb6915c463251ddf2611d61bc8aeff88c67bfa2445", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782847, "uuid": "2f6739f3-8b98-41d6-94d3-c0616691d7c6", "value": "T109051262BAE88567DD75333458F603D70B36BEA09D34476B7780A46D0CB3780A9713AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782847, "uuid": "9f1e7abb-3654-49d0-8498-35d13bb275b2", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782847, "uuid": "519e0779-67dd-4193-9f04-1599e4f3750d", "value": "12288:WMr2y90m4KJsn+RUOFRYgGu1sFtsPsBOjG79u80sD2lZqKlRH035P5h91Ma:oyr4Ke6WgP1479u/hl235Pf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782847, "uuid": "4a006be9-4c9f-412a-9448-b7e6fcaf9bcf", "value": 797184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782847, "uuid": "0a2c0019-6fae-4441-98a0-8f1be4b4f670", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782847, "uuid": "7cc2c302-8195-4689-aa2e-7f42880d1e2e", "value": "6589463412403bb9e54cd58a048b47e0.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a11bd913-01af-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685756432, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685756432, "uuid": "169a204b-d0d6-4d40-8bd6-900c15bf7a69", "comment": "Malware payload (RedLineStealer)", "value": "1ab3b044490acbeeff22d8bef41895b3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685756432, "uuid": "2be4c826-bcdd-4c4d-b181-859b1eac5a61", "comment": "Malware payload (RedLineStealer)", "value": "41f45dcf9c7701e0d4326d0c019e524ba1c03337ede22ae4f4c5c0af020195fa", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685756432, "uuid": "14dc7225-b3be-4b44-8b85-dae819881f59", "comment": "Malware payload (RedLineStealer)", "value": "190cbc8c827b65c274f3022c016af35386b08fc3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685756432, "uuid": "2df750d7-8b95-4b42-b2d2-db975fcdefdb", "comment": "Malware payload (RedLineStealer)", "value": "346bae5d13a84609cc7ae2153187fabc08227d417a010af1bcb0fdf65c0562e7c6624a68d2d28afae7c1deb9fc4bf08d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685756432, "uuid": "e4f02f38-e9dc-4a42-85c8-34f262f51a29", "value": "T1D2051203F3E540B2D9B42B70A9F903D31F367DA66D7883276352692A4CB2284D979377", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685756432, "uuid": "d03b976e-c34d-459e-ab81-e20b415f8800", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685756432, "uuid": "07853798-a83c-4943-80a1-6294e4d8f859", "value": "24576:RyemGiWXvpgJJEFfP4/eIn4pbG/QWpB3:EemVavpsJU4/eInE6fb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685756432, "uuid": "1d901509-8112-4225-8769-10553cc11837", "value": 812032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685756432, "uuid": "890992cb-702a-44ea-872d-a1fbc93f966f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685756432, "uuid": "eacd2842-6376-4243-85d8-28e21e1bf0be", "value": "1ab3b044490acbeeff22d8bef41895b3.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66d14c7d-0204-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685792842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792842, "uuid": "026db0dc-d268-42b9-b77d-5734d2389556", "comment": "Malware payload", "value": "2148de8d70e5da3b6e406005fee229d6", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792842, "uuid": "76b90741-bb18-429b-b252-7f13caedbaf3", "comment": "Malware payload", "value": "420ea16e66efff9d734a454567302aa19f37d2b4bcb60ed0caef27f23d5eed8b", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792842, "uuid": "840e782c-faa1-4675-b177-1e01be3735d9", "comment": "Malware payload", "value": "551a1f3317de3945852c212d80a109d20a063a78", "object_relation": "sha1", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792842, "uuid": "12f9d423-8bef-4584-82db-766caa82e5fc", "comment": "Malware payload", "value": "8349480eddddf0a2d6f8241a4b4e1cbd5d3fb453b64724a71291501be9f276f42c646840de0267c74d92a18c2a4a5d2d", "object_relation": "sha3-384", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685792842, "uuid": "e5b598b7-c277-4ae8-9cee-42dfd57501a0", "value": "T1CF1733009C70251CD38BE32721206FF61450ADE75FA06D613D15B0A79BABBEADD79EE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685792842, "uuid": "feb23fa0-3c8c-4b3b-832b-25afd8d13265", "value": "393216:9BMpxBNus+F0eIPgEBozI0TdcgQMuKf5WFl9qSZ3dIo+inAJYNE3MjJA:9By7W3IPgEBodhX6FdTbnAt8jJA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685792842, "uuid": "b53a6b3f-dd61-48eb-99ac-e41ecb9d0820", "value": 19896197, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685792842, "uuid": "81e49a47-3b10-4ec3-ab91-3b429dc80f05", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685792842, "uuid": "1cb4900b-868e-46d3-b46e-d8ba1700d8d6", "value": "CrashHandler2.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76ef7ef8-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685793298, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793298, "uuid": "e7e5a683-6001-4dd3-8f6a-a01091dbad6b", "comment": "Malware payload (Mirai)", "value": "5292caa24f4d8fcbe589f6a1a2eae42f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793298, "uuid": "1f31d90e-2ef7-48e1-be0e-e535384708d5", "comment": "Malware payload (Mirai)", "value": "446e1965ac5c1dfd68c3e542030a9020f19e5b9cb67d106486dbed92a656a077", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793298, "uuid": "27fdd8f7-c2ce-4ce3-8bc4-595a21fe60a4", "comment": "Malware payload (Mirai)", "value": "8f17eb570b13eabe6f4322add704f9d0e4e90c4d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793298, "uuid": "6a3654c1-ce9b-463d-8b81-f0f7bfb1d6b9", "comment": "Malware payload (Mirai)", "value": "f4cbf4363802a2541811197744f13b23173d9d4952104dff270fe8a80b3bb349cc93e2ed063ac5f1ee33557ea708cad5", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793298, "uuid": "473fa566-2855-4002-a731-0648e90647f3", "value": "T1BD74C5A06D2700FCFD65A936DC971239B8165B37D7E17B67BA9F0B108E313628A8341D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793298, "uuid": "c9bcb3cd-cdbc-4610-83bb-d74148170b16", "value": "6144:MplHkt3lRt8SajYc37JM1MGXapBrvuyBRolwU3AmR:MjS3lT8iw7ayGqpBrvueRcwj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793298, "uuid": "6dc01c7b-7bf4-4124-9684-2c4ff636cc3b", "value": 357136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793298, "uuid": "969df2d6-65e9-41e8-9950-3ff55a606052", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793298, "uuid": "a6131876-fe75-4942-bda6-4d858ff46206", "value": "5292caa24f4d8fcbe589f6a1a2eae42f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9df7e571-01b6-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685759434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759434, "uuid": "63ac586b-d1f1-43fb-bae4-f5d53a01d516", "comment": "Malware payload (RedLineStealer)", "value": "f019eb0e67a23ddbe36de57a83e0c54e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759434, "uuid": "36160e0f-37a9-4661-bda9-c61047703948", "comment": "Malware payload (RedLineStealer)", "value": "44f317a7eb9eb0e0d42f8e4772acc7887281578444890704299922692c9f5ea5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759434, "uuid": "e2142435-e4b2-4b82-8862-916c74274bea", "comment": "Malware payload (RedLineStealer)", "value": "c9a44a4e5f85c4c60e1517a61db497ea8589d19f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759434, "uuid": "d9024c73-b2f4-4dcf-baac-ff7f31ee8d73", "comment": "Malware payload (RedLineStealer)", "value": "3a2e3942cc8017a895f0309e3e0879b06d38df40778872bdd52e227a81c016e6c38ad15afd255d49e7dd375c1edcb411", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685759434, "uuid": "813bd75a-5f17-4090-9748-5cab2a082775", "value": "T15C052303BAE44473D9B53BB02CF302831E36BD936D7583A72615584A1DF3A84AE717A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685759434, "uuid": "6787199a-279d-4998-850e-ded78c8e77a1", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685759434, "uuid": "5c90c206-a441-4694-8e33-fae1fa503441", "value": "12288:DMr6y90bXpp8J9L3VC0RRhXL3HUI3UaCf90Fx1Z9OhFbFmOfpHeEO3TvkWep+Wz5:tyAaL38C/DUgUj4Z9cFb0uxeEOYX+WF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685759434, "uuid": "5fdc026d-2c5c-41d0-ab7b-e3b9131851f7", "value": 812544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685759434, "uuid": "2a933360-c1e3-4094-b053-698edfcb83b5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685759434, "uuid": "27bf6943-95f9-41c2-89d4-39a086d4836e", "value": "f019eb0e67a23ddbe36de57a83e0c54e.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "559eb32b-0206-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685793672, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793672, "uuid": "ea1c3a7a-2c10-4321-af49-e917541acf1a", "comment": "Malware payload", "value": "2e5dcf512f3842430df6e08351e4f871", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793672, "uuid": "29f3ab90-9be0-4d79-96bd-5c3422ceaec4", "comment": "Malware payload", "value": "468ca2e6c0b30f1a7d394574124b61e0cd17ed211ce9e85504c2759563015c8b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793672, "uuid": "b78afb49-ce25-4759-872c-bcb0e8f715d4", "comment": "Malware payload", "value": "33f277cfd41e75328462859d67d6fa6ff2141ff8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793672, "uuid": "e99bec15-2702-4e67-bb1b-c7f0a7aea961", "comment": "Malware payload", "value": "b7fc15f73383fa880059567e8db6240e96459ac1c7528abba71baee883ce6cabe49b6a2aed54e671f2b4a109c6bf331c", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793672, "uuid": "f1c85d5b-9a31-4fe6-ae06-eb8f8e5473b9", "value": "T190639D73D8565F14C0A941B074289E799F33B1C4A2875EBA1AA5C3799093ECCFA05BF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793672, "uuid": "5f1fe312-a0fa-4a2f-990c-2668fb3c768a", "value": "1536:kavx/D+rU0OpKaM7wrm1Kv0HI7s/okUCG56Vjt2w:kM7OdParrvvjmokU3YUw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793672, "uuid": "5a573ab6-4583-4197-a975-5328b2019c68", "value": 66940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793672, "uuid": "34431f32-f7d4-40b1-82eb-f7d0581146ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793672, "uuid": "d8d5ccb0-d258-4f3f-baf3-73dce4ff8427", "value": "2e5dcf512f3842430df6e08351e4f871", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "384af6f6-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782026, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782026, "uuid": "a5a4ef76-795c-4add-8eed-608ade203d69", "comment": "Malware payload (Mirai)", "value": "734caa9f7036887cbf97e475d8ee4d4e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782026, "uuid": "f3c0aa8b-0b29-4d54-91e0-1535f800f2b6", "comment": "Malware payload (Mirai)", "value": "48637e361a8219d8e9324598643f0cbea49d8efa91c97b99e69d0dedd2322f02", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782026, "uuid": "8ccde777-14aa-4198-bd82-61361c2231e6", "comment": "Malware payload (Mirai)", "value": "5252d8c4d9024d5b929bf467e90a78f5963112bb", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782026, "uuid": "145bb293-aafb-4b96-951e-4f1c0787b8c5", "comment": "Malware payload (Mirai)", "value": "58ee687db24a1fe9ac98d3c0b94a71f9b285ca81cee03959f87000c9312c7af94c765983cee6603d14b0d82e770a5507", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782026, "uuid": "c6481900-b54c-454f-9313-91fe0c5944ce", "value": "T112432921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943DB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782026, "uuid": "ebc7bdbc-0514-4ddd-9bad-479b3f367c51", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAwM:RqtmZPuutfbltZFBSJsBcfDSTFI+BEM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782026, "uuid": "49554710-e4db-42a0-a46d-05ce42dad588", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782026, "uuid": "d230ef34-33b6-48cd-9d06-ed35d68797a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782026, "uuid": "94ec19a1-3dbd-439d-a9e0-69240c1629fd", "value": "734caa9f7036887cbf97e475d8ee4d4e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc7cc430-01a5-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685752237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685752237, "uuid": "e5a01160-bc28-412c-be88-46a47da6f1ca", "comment": "Malware payload (RedLineStealer)", "value": "711bf62980d05d84c15ec12f7713719c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685752237, "uuid": "8c3ed7ee-514c-47d8-b71b-8d05381dd38d", "comment": "Malware payload (RedLineStealer)", "value": "495191154a4b24a59d2043ea3014095a78e40b99c519c165ada4527ea20ec508", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685752237, "uuid": "952212d7-6e18-4c03-bc07-9a1258d5e6ab", "comment": "Malware payload (RedLineStealer)", "value": "f530393481ca19febc6cbaccab956a8ec25c91f4", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685752237, "uuid": "fe859d0b-9dec-4318-8540-414de2678194", "comment": "Malware payload (RedLineStealer)", "value": "84aee8de457192da7c14e829d786cc29e499d991942804311299e8a22030d240561d0a98dda6c1f6120c6ffd56d27219", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685752237, "uuid": "70074031-e1b4-4f50-80eb-ea671aac088e", "value": "T1E9052202E7D494B3DDB523705DF783870F35BDB25AB89357174AA82A28B27D0A432727", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685752237, "uuid": "1596a373-beb5-4f06-b32c-210c4ad3f930", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685752237, "uuid": "b01cc587-d5d1-4091-ad96-b9174b1ac194", "value": "12288:OMr9y90FiirbvjOogU7yqWMXiSwEQKLE6/6hGvVAskKERWEDoOSaj:jy8/vjxmSwbKY6/4KERWLOSaj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685752237, "uuid": "2bea6121-2901-4046-8db4-f7142b13e919", "value": 811520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685752237, "uuid": "030d91e1-b356-4c6d-b3ea-10b0939ce3e2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685752237, "uuid": "422c3ffd-9570-4089-beee-827b7740d47e", "value": "711bf62980d05d84c15ec12f7713719c.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e27ac9de-0247-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685821826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821826, "uuid": "b429895b-9264-4a73-9d9f-65c48405f2cb", "comment": "Malware payload (Mirai)", "value": "0fe987663dd6bd38972fcb8ddd7c1d0b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821826, "uuid": "155d7452-cf81-4d37-8ebc-e7437499c9c7", "comment": "Malware payload (Mirai)", "value": "4ab455416e814e855bb7240d56791e0b182e595cd3aad9456fd42f8b6afc2259", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821826, "uuid": "dff4e57e-aa8c-4731-b735-89cbab8e88ee", "comment": "Malware payload (Mirai)", "value": "24467e2ca5bd3a9314f6bf38d6f93803ae1bd634", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821826, "uuid": "152363fc-dfc7-4343-9c01-70c9c54c78df", "comment": "Malware payload (Mirai)", "value": "53b7fd093525bb74b34a7d77a4b04d9dfd7706476c67e3267cd1ef12e919c285c0e4d589c19f8aad07f412e5f5324371", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821826, "uuid": "88ccc363-aa33-44cf-82eb-3dd2d68b7f46", "value": "T1F6539E7ED41A9DE4C14447B4A02ACA780B23F104966B2EF6DE8A85A5540BDFCF2193FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821826, "uuid": "ba0cbd4a-d7b6-4648-a95d-1b854dd46c20", "value": "1536:5aozg0LySiwt+icwhJLeSF/NnU/kxz8/gDwusOC0l:5Dzg0LylQJimxg/gDwusO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685821826, "uuid": "df4483b7-8b6c-4106-95e3-3d0c0fca7679", "value": 62812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685821826, "uuid": "41a1d91d-4b5e-4f73-9d61-7046aa1e28a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821826, "uuid": "e678cd1f-ae2f-4e20-9bb2-b3e0fa01a725", "value": "0fe987663dd6bd38972fcb8ddd7c1d0b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc4e3532-01f7-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685787429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787429, "uuid": "9216aead-8aee-4d5d-ad68-709a58b34b64", "comment": "Malware payload (Mirai)", "value": "2badd46fb91a59cc8e93f94388e971dc", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787429, "uuid": "f67bfe16-5338-457b-a118-72aa27231d04", "comment": "Malware payload (Mirai)", "value": "4abdf1c067ab1781438b2b22fb1d40aeae6039087f8ae7cf4a556250789ac90c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787429, "uuid": "a6c4a2ce-b0e3-4677-84c0-41de5e72e80b", "comment": "Malware payload (Mirai)", "value": "00dc96e3c0096fa6b07fc38b740ae4680e655246", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787429, "uuid": "857c2b40-b6ab-4b00-aa28-dbef22b676f3", "comment": "Malware payload (Mirai)", "value": "ff1ed60e212f645094d011970496e7d607a2009ded8b9ac55ce4a20645ece99d07ce8db1421e7605704d664324ff9c7d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787429, "uuid": "8a136119-d51f-46e5-91e5-3a3078b32fc4", "value": "T1CAD3C717BB618EB7C84FCE33059A4601249DE19646D97FABB2B4C96CE70794F08E3D84", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787429, "uuid": "50c15204-a2fb-4ce8-bfe6-4ea04df10c13", "value": "1536:v8jeT2cR1xFnEblMkZzeQpNSYjR4AwPzlGqCA1P24phmvjeq+TCftG2j:v8bcal3IORFjbF4phmvjeq+TstG2j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685787429, "uuid": "3c9f8917-d8a7-4e6c-9fb8-17aedeb92252", "value": 139317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685787429, "uuid": "e89fb4fb-996a-4d3e-8450-1c47d5ad73a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787429, "uuid": "720601f5-07d4-4614-80c4-06722ed1da21", "value": "2badd46fb91a59cc8e93f94388e971dc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf38237b-0254-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685827350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685827350, "uuid": "944a0c07-ee2a-43bb-bb3f-8ac67b097be0", "comment": "Malware payload (Mirai)", "value": "9afc554b43a843116e83adbaf7f49606", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685827350, "uuid": "2de6d01a-15df-4232-ab4d-9ee804b8766d", "comment": "Malware payload (Mirai)", "value": "4b491bdefb728da6e2b789d10414f2e03b0a12777d4b629f61679690eaa38fef", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685827350, "uuid": "ab5dd0d9-06f8-470a-9785-1aa938c49660", "comment": "Malware payload (Mirai)", "value": "4d82fd4d652f4062161815f9f5693ece90a29a23", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685827350, "uuid": "34806e37-eb1c-47ba-868b-455390e5b996", "comment": "Malware payload (Mirai)", "value": "4a66f9a0c99ea2e4efa24eeec91de12a4015da5342d64a07d4a18429f03cabad59d38dab53213c7dd49d53400e70d7d8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685827350, "uuid": "eb425343-9345-4f2e-b6e5-9a4ceadcac11", "value": "T14AB39DDBF24701A0C8624AF007CB4BED3E2723815F27C5E76C6A657968791CF8906F96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685827350, "uuid": "1d84bdc4-f348-418e-8fa7-82ba7a72c4fc", "value": "1536:xu27gBY25SSpHP9pEFwiLShWnwg1r/LWK:Y9zSyv9HiLShWwg1rq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685827350, "uuid": "1de80b66-56e6-4a33-83ff-66e29b407c07", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685827350, "uuid": "a44c0b8b-9754-4def-aad8-7da94cb19115", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685827350, "uuid": "524abca3-decf-4d01-88b4-48bf7ca19c53", "value": "9afc554b43a843116e83adbaf7f49606", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96b00074-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685793352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793352, "uuid": "72d732fb-e927-46d0-bd06-e0fe5f1dcadc", "comment": "Malware payload", "value": "4f3252c6f6d40cb6b7cea5c4947d5255", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793352, "uuid": "40176825-3097-4d7f-864a-4a8ceb7f3dc3", "comment": "Malware payload", "value": "4b554c6d41177ff21f6fc128dd45104d623f0b47545ec7147049fd8c047076d6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793352, "uuid": "709c3b9a-c9fc-432c-931c-faa15e06eadb", "comment": "Malware payload", "value": "714b8234bbda69f147a2cfdb614aa1bfe65eb196", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793352, "uuid": "a199bf81-869d-4a7b-91df-4429b4576438", "comment": "Malware payload", "value": "345c906e291df7acabf9526179ac9e6a98521c45916e4286a73d8eeba87c03d1de9c30ad875ba1fe21b6b5d7c6a9df57", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793352, "uuid": "886d0f85-9e51-47ff-924d-81538c737131", "value": "T16D733B02B70C0E43C1A31DF0363F6BD2D7AEA9D022E4F685255ED79691B2A33554AECC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793352, "uuid": "794c3fd8-8518-416b-b4f2-f97edb7b4dcd", "value": "1536:SDx16qlrjvtUnK2LUPq9ls+a0rQ7uYCGm8GbD0HR:Kx16KL5ElvrQCYztR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793352, "uuid": "d5910da1-f382-48eb-aed0-a5cfc51faec7", "value": 75172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793352, "uuid": "27a1de7a-4274-4402-9c16-a0c3fdb5fa2f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793352, "uuid": "cd586a97-027a-434a-bf88-032cffbb1a59", "value": "4f3252c6f6d40cb6b7cea5c4947d5255", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d1a5cbd-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782115, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782115, "uuid": "3041ee53-54e2-4838-ae5d-8310de21a3e2", "comment": "Malware payload (Mirai)", "value": "ba4d0a2c8c0a347aec03c3aa87f47ebc", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782115, "uuid": "4aa5fb8e-6606-48c5-8165-9eeeffa7ca2f", "comment": "Malware payload (Mirai)", "value": "4bcc83fcdababe87926527f3fd6253ba33ba97070e59aa921061f88112d119b1", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782115, "uuid": "ef58a746-de22-43dc-b243-8a2ce40f341b", "comment": "Malware payload (Mirai)", "value": "b58bed02dc16a247659a55e8168e294ae3f262bf", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782115, "uuid": "73623619-6b4d-4e2a-9bd8-2e4af9c6a8cc", "comment": "Malware payload (Mirai)", "value": "76632bb6a494a7fafb553a4612bd7d5973af6553f7eaf754f0fb3acf4e8f299207168b12649f6a553347150ac80e42ae", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782115, "uuid": "5f08f778-4c23-4179-86d2-6f40bac9ce92", "value": "T175B39CDBF24701A0C8624AF007CB4BED3E2723815F27C5E72C6A657969791CF8906F96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782115, "uuid": "fa963a3e-f637-446f-864f-1e9c8f93f5c3", "value": "1536:Fu27gBY9FSSpj3z5Qxw6YaWWgg1n/LWy:c9sSyzz36YaWWgg1nq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782115, "uuid": "6ecd02c3-6c41-4f85-9b39-d8702afbc420", "value": 107800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782115, "uuid": "4be77d8d-90af-4424-93b9-d63bf3f630c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782115, "uuid": "ef677500-8198-4f71-88f8-01d51d8db990", "value": "ba4d0a2c8c0a347aec03c3aa87f47ebc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12e8859e-0244-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685820189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685820189, "uuid": "a9075d42-4d55-48fa-8a2a-9a224a869730", "comment": "Malware payload (Mirai)", "value": "fe0be4f5494acda3d0491dd04ed34654", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685820189, "uuid": "b97d6c8b-5f87-446a-8ada-cbf9a09943eb", "comment": "Malware payload (Mirai)", "value": "4d9e192bcedae508a16c416f19e002fb9f1492899e0627a7297ca9f76557fafc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685820189, "uuid": "fa5085d2-374e-4688-bea7-59fbb597c087", "comment": "Malware payload (Mirai)", "value": "6392299d895ce4c161ffdcba32a996dc200a25f3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685820189, "uuid": "a701ee59-9fc2-4627-b1bf-457bd41b2166", "comment": "Malware payload (Mirai)", "value": "308e340b2aca44d01a2c278b02e2f1355ac9e0333fd626d01f3a1b41077eeceb2a698df0f28bc7a0ba012eb42f938159", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685820189, "uuid": "960abd75-27cf-4142-b76f-fda44303a14a", "value": "T117534AC0A693D9F2DC050AB93177EB368636F03BA12AE9D7D7D5A963B841E00D5032DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685820189, "uuid": "512eed6f-13cb-4ac2-83e8-0d94794f3e3b", "value": "1536:ZvrVGovjtclh9LnXEFh25gPgzcFWQF6aqhQPH3ke8p5etae9znY:ZvrVGovjtcv9b2hfgzcFW1aqhsUTpaFi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685820189, "uuid": "70380e03-71d5-486b-964a-22e85b2838a6", "value": 62224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685820189, "uuid": "7da1269f-7c75-4591-ba04-5b6a2d0ecaae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685820189, "uuid": "efebe3c5-1783-425a-bb87-735d1091ed5d", "value": "100UP.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45f7ec25-01d3-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685771741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685771741, "uuid": "0c5c6a3d-8391-4c0b-bfe5-a9928da97d99", "comment": "Malware payload (RedLineStealer)", "value": "8f87a97f627a0fe4386c1d8e9dc519ae", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685771741, "uuid": "bdda0a96-5e12-4ab0-86e4-ae16fbdeaa6c", "comment": "Malware payload (RedLineStealer)", "value": "4de9a7d82d101f8facfc4a8f96a9508c57040767ac329c17a5e79b5d929a5635", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685771741, "uuid": "bb3c49ed-2e12-41a8-8234-ee69466ca29f", "comment": "Malware payload (RedLineStealer)", "value": "064b51f3a4e3768ed759bf53058ad1386c746ccd", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685771741, "uuid": "b38dde03-8c22-44b5-9a6e-9d096b3da965", "comment": "Malware payload (RedLineStealer)", "value": "ea97a89ea175cf56a8061e0bdd3105638577cab382de7e70c7e3d7dde5391db0997f513b8ee2b024cbdb2870051bcef3", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685771741, "uuid": "dd82ae50-8f69-43bf-a399-20e46f2037a3", "value": "T150051356EBE44463E8B827B45CFB03C71B397DB18A38837B1741582E0D726D0A9B17A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685771741, "uuid": "0389232a-03f9-4246-bf46-f4b784e71869", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685771741, "uuid": "c88a8314-debe-4bbd-9ce6-f2a8dd6d67a6", "value": "12288:xMrWy90ioqm24Y6+dESF2wACsFw7oL/9UdmaaeDL5YJrrVEiWEDmyFQ5LQw:7yZ4ITzA1m7e41MrSiWZY2H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685771741, "uuid": "7a9bea02-3e9e-4c0d-a64f-e845c0304346", "value": 812032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685771741, "uuid": "a8ba20d6-2352-4d11-acfe-c38a3f94aa4a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685771741, "uuid": "deab886e-4e2a-4b2e-b3c9-a186142bf952", "value": "8f87a97f627a0fe4386c1d8e9dc519ae.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e07996c1-01c2-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685764699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764699, "uuid": "b40a17cd-8b48-412f-9538-62df16839276", "comment": "Malware payload", "value": "ff889dabeb89be61eb1ece635fb12ec2", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false }, { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764699, "uuid": "60fc5ca5-503d-4e4e-94a0-e9737a007327", "comment": "Malware payload", "value": "4e22abff39b796b7262d7b9873041310b499b287a42b6253aa9576b6ec8587bf", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false }, { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764699, "uuid": "a4301fdd-3eb8-4426-b3b3-60c5f8e21fdf", "comment": "Malware payload", "value": "74b300165f094df3903bbf34cd09a3cbd5bc9328", "object_relation": "sha1", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false }, { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764699, "uuid": "300437c3-b31f-4c4b-8072-b621b7a87402", "comment": "Malware payload", "value": "c0616b30115053da43e566ece6a82470c3adbc6b795af4a98a06b4182cde0d155d2a848b503586d9810f1a2fdcc7c9fe", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false }, { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685764699, "uuid": "e6991d52-0ed4-4abd-aa50-eaef5f38bedb", "value": "T1A9B2BE555B8C4C62F26AF87B824EE00E48BCF63630C205C4BD9DE2757B7D54E0B6A1B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685764699, "uuid": "4f4ec771-331e-4e9e-ac62-ba2f2f6574ad", "value": "768:OhTfLvex7WocH2f4Mvt6c0KYSYWt4bOizsVjbtC30v:OhrLyTcH2f4MlbQnqSz63oI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685764699, "uuid": "763457ce-771c-4668-8e63-58e9e2196ece", "value": 25141, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685764699, "uuid": "73d4dfa6-0d08-4ca0-960a-cb901b18091f", "value": "text/rtf", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685764699, "uuid": "274a7542-6544-475a-abb0-6eea5eb8ef45", "value": "ff889dabeb89be61eb1ece635fb12ec2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dade9b9-025b-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685830246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685830246, "uuid": "0b1f1dcd-9059-43ab-86c6-c0de60bb33ce", "comment": "Malware payload (Amadey)", "value": "63d1d0f974d187e4f464a314bda3f99d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685830246, "uuid": "5917b138-1e2d-4c5d-a083-bad852783bca", "comment": "Malware payload (Amadey)", "value": "5330f5956dda9f4531291237e81b4ed6d9a7321a936eecda109c3bede5e89140", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685830246, "uuid": "878ce8e1-5f7e-4e48-a341-eed8a60d12ad", "comment": "Malware payload (Amadey)", "value": "df3e83942d17bc8d14d584e931589319c1d1b6d6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685830246, "uuid": "0767cd33-975c-4801-b9b8-e22de4e2670c", "comment": "Malware payload (Amadey)", "value": "b8338b1fcd83af427f45571c9441ab8adc2e76427ec528e5d75898aefd8544ce2c12ed8d22199b33193f65ad2e693904", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685830246, "uuid": "747b53a0-1ead-4182-8d80-9dd1121814f4", "value": "T1B80512A3A6D41537ECB527B06CF643C31B327DA25C78866B3792AC5A1C72284683537F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685830246, "uuid": "61fe9bb7-39fd-4676-8f40-8fb6d1aef6ed", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685830246, "uuid": "e94a1882-fd32-4732-96b6-d00f855989fb", "value": "12288:UMrTy908M7X+xtbk/0Q0Pj2Kw2VdRTxD27//1E+mZwfDKAV6lPLSWs:HyhptQ10q0HTxD27VjvVJWs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685830246, "uuid": "ac6d0999-edfd-41e6-9e1c-d200c4af9d06", "value": 796672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685830246, "uuid": "37b82bb3-477f-47c2-a9f3-7266df2b961a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685830246, "uuid": "832dd69a-b7cd-480a-a57e-29e1ab0418ef", "value": "63d1d0f974d187e4f464a314bda3f99d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eff84357-0247-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685821848, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821848, "uuid": "1c32f788-a90f-4caa-b705-8a38a2382ef4", "comment": "Malware payload (Mirai)", "value": "e978333b3f46de27a1d8e6054fac81d3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821848, "uuid": "a3f2065c-6c29-4ca0-8bb1-9a7d61b812c7", "comment": "Malware payload (Mirai)", "value": "5350b4f85870ab49977b965f13af831b80c189ad864b761c3eb606e83ddeb9c8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821848, "uuid": "ac45eb0f-8b77-4214-aa11-c659da3800fb", "comment": "Malware payload (Mirai)", "value": "5fa00bb89c83f91baa1f81da9ff5c7e2e8729bea", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821848, "uuid": "64891879-b464-4181-bb40-bb7f517c4202", "comment": "Malware payload (Mirai)", "value": "208bd1e0f74d22ab8b05f9ddf4c2cf80442844a2b67d27c35a7b2c9b8a9061b06bf6c5a9afb30b8a37dc3a4df61608f3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821848, "uuid": "50604844-2add-477c-b982-048f0b289171", "value": "T1A3635B3669792A17C1C0A53E12F74754F2F15B8E3AE8CA1E7C720E0EFF54A9060176B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821848, "uuid": "9141e03d-f375-410b-a3a8-7281dc0d946d", "value": "768:UqotSlC2vdy4lODAlZZq9gLsJGsF46dnWNiuUi99Oa36VPpSG+O+NWAAUkB:UqKaC2ly4lODAnZSosJGsiYxuIGSUkB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685821848, "uuid": "fcccfad9-e8fd-4c48-bbd6-6da39a3976be", "value": 71472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685821848, "uuid": "63731f00-b03d-4ffe-8150-47451c798055", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821848, "uuid": "4b51e6c8-ee3a-4a12-8f36-f53b5698eeaa", "value": "e978333b3f46de27a1d8e6054fac81d3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd5964d5-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802490, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802490, "uuid": "c8799596-9c3d-4198-88f0-c8d8bbab62ba", "comment": "Malware payload", "value": "c1b6ea3c193b47ed32a9211bfd60b206", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802490, "uuid": "2e91f590-1b27-499b-81e5-08692c04186f", "comment": "Malware payload", "value": "5353c8dff72d898cdf73852b1138be31c4d7309ef7f32c31e5bcbbddcba6c31a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802490, "uuid": "6ab5a7a4-5b16-4c34-80c0-b6ac0bd7cdf5", "comment": "Malware payload", "value": "b8f30d11fbfa5807c42e9bb34f624ae3f752c024", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802490, "uuid": "3245ee08-4cc3-4fff-b994-5c31ce290167", "comment": "Malware payload", "value": "e01bb105b34c5717a1429521fcfa99b4c4732a8668e5a399ecb83d0e09f190a48aaad50facd2986c5e7533c903c6ca22", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802490, "uuid": "c8184ceb-283b-4e09-9bac-961485f21fc1", "value": "T178641233FE95CC6ED0881432488F8DB61560B826D02EBB361BD1497D9E27D93DD6A31B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802490, "uuid": "fd18eeae-64e9-4b08-83a1-6b6657b678e1", "value": "a6403fc63b5b33b7d7212fa731547aae", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802490, "uuid": "7f8caeda-2fea-4865-bc2d-c5721642032e", "value": "6144:0OMWZ52IrHuh/nCou/s5z7xCNYcFAf2L5MJbSFEk0l/qej2FbeAn1Ye4PJbG:8WZvHuh/nRKe4NYZfeMpSAAFSEa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802490, "uuid": "6470e93b-4656-400b-b05c-84375704484e", "value": 328192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802490, "uuid": "6f71ae46-930b-4226-90a9-2596fd90cc47", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802490, "uuid": "edf9052f-9e2c-4528-9dd3-bef501c604c8", "value": "SecuriteInfo.com.BScope.Trojan.Packed.24604.3626", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbc7181a-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685779294, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779294, "uuid": "af07b249-7550-48ae-bf3b-09d5ae112293", "comment": "Malware payload (Mirai)", "value": "1971b12d1a5b0143ac120c15ab6236e6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779294, "uuid": "751ed4ff-c8eb-4fb8-adb9-5ae85d4e0604", "comment": "Malware payload (Mirai)", "value": "5383283197addd5fe67058210004f7c3a453fc595be329d323d6731196868142", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779294, "uuid": "78c9fe5e-cf76-492e-8639-6cf50fe43695", "comment": "Malware payload (Mirai)", "value": "499dbd043b36c5435c64c63b7e861084c031e00e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779294, "uuid": "a32ef5a1-55b2-462b-b53d-3f9b4c12213f", "comment": "Malware payload (Mirai)", "value": "7636c39b378f870b128998c738662bf480969bb1cb745f65241a6a95f59be54c21e376d98f21ee0f21b9ae9fe5217783", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779294, "uuid": "cf6045d5-de7a-4be2-a1f0-38a249053ccf", "value": "T19DC2E011B3486EF1CB3074390CEE899763599F3C96BE6236970C4AB1D35820FA8BC5C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779294, "uuid": "e2eb6794-ec50-486b-b726-7e65372e588d", "value": "768:/0duC2NC5ROQMFdEgph5O7nhONFUoqs3Uoza:xC2qROQMFdEgp0UQCza", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685779294, "uuid": "58d75cd4-a8be-4989-a98d-f51517972f4d", "value": 26964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685779294, "uuid": "7b72d39c-cd64-4320-9bd9-e552e8239bfb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779294, "uuid": "b67f634d-1fb6-4b8f-a20a-680b02ac19e8", "value": "1971b12d1a5b0143ac120c15ab6236e6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce00a51c-01e2-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685778412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778412, "uuid": "c883ebcf-623b-4aac-a755-ac190b368a62", "comment": "Malware payload (Mirai)", "value": "f6a9b9bf10c28df11e02f6ad34c3110f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778412, "uuid": "86450791-62fa-4c0d-918a-cea12b10cf5e", "comment": "Malware payload (Mirai)", "value": "540996bde25f4fb43dbbae152d934f4e4af737dad8ed6cecbcd8ba2af6647705", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778412, "uuid": "a19c62d9-5dd7-427e-9c8a-65bea5e7a718", "comment": "Malware payload (Mirai)", "value": "77b1437e7412062da384ec0d3fb9892acd6747bc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778412, "uuid": "58dc4f79-7ef9-42cf-9a89-b171cf2f7a34", "comment": "Malware payload (Mirai)", "value": "f33b63885a121de20a53ad5c83cd647fc87772f0f2ad389f59cfc4f3b6a0f1e9ef013bd5fad94288cd4ec35914ab8f35", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778412, "uuid": "59cb34d4-7f3f-42f4-8bd1-2ebb59badf05", "value": "T167C2E115EE1E4EE7DD215373866F5CDAA1602ED02EAE5181ABCF096674831FC3138835", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778412, "uuid": "48bdfde1-ed37-481c-bb0a-b1b2239cd328", "value": "384:Ms1q6NqkNnh2x10ysW2Qs+vq2EhXGlX1GBXAQxcgSTvl2T0/s++fRkfz8rCfYeSr:gIesGKh2GdAQxwJ2T0320NSDh9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685778412, "uuid": "1275fa52-d780-42f9-937d-fc87053c3f25", "value": 26476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685778412, "uuid": "606a750b-87d0-4775-84f9-cf6f37353af9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778412, "uuid": "5e5e5058-1ff3-40f7-9d87-1121048dea67", "value": "vcimanagement.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb9b57da-01b5-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685759134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759134, "uuid": "bff3dcc2-e5a3-4fa1-a76f-3cef873fce12", "comment": "Malware payload (Amadey)", "value": "794de9deeb8ce2c26654cb2205b77c65", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759134, "uuid": "a1101781-422f-4ea0-9083-583196ee4903", "comment": "Malware payload (Amadey)", "value": "55bd5a41d2a5b394197c4664bf4df5f6972d9a1c40aa69867f0d4504f4864691", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759134, "uuid": "845b64c4-df8e-4a43-8dda-59e527766ab6", "comment": "Malware payload (Amadey)", "value": "81ba6670a2dc03322dc3c57477e2602480e23028", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759134, "uuid": "ccd52612-5a82-4ae7-b875-e8132f7943bc", "comment": "Malware payload (Amadey)", "value": "c3a37a2f9f1e5e96a46b17908636abad212c37212755ad331ac356c4d98bc2c79a1d72795465b36bdda6c4b07f508da7", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685759134, "uuid": "009d0bf2-e3f0-4626-96cf-ce2c073be8c8", "value": "T175052353BBD81463D8B5277464F302831B3EBD76A979865B2F80681E0CA26D0BC753B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685759134, "uuid": "8867da74-1791-4862-848b-78c3bb5eb76d", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685759134, "uuid": "0d6ea5ac-530a-4191-abc5-ab9ff1f83bd4", "value": "24576:BygI6ecbNcel3Apeu3kvckDMlpvOoxNeWx1UZ7G:0Mcel3A4KYwJTnxq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685759134, "uuid": "9ff100c1-33d9-401e-b187-8001e7214abf", "value": 812544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685759134, "uuid": "fa3ebc99-bacd-43f4-bb81-a49ea534802a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685759134, "uuid": "bf68c933-dc95-491b-89f3-073ce1d164dd", "value": "794de9deeb8ce2c26654cb2205b77c65.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9aacf47d-01bd-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685762435, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685762435, "uuid": "0af73e38-183a-4d71-8158-75f2ea1d1d29", "comment": "Malware payload (Amadey)", "value": "decf67354d6ba11c30eecd1b57d553c6", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685762435, "uuid": "79a22277-a728-42c7-9bf6-b2485006d0df", "comment": "Malware payload (Amadey)", "value": "56e8ad2b26b6a68006f90a3a41e44f46a0f8e5f97965bb1a0d98c8274ecc8d0c", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685762435, "uuid": "ec9f865c-abe1-4379-8bab-920a209b290a", "comment": "Malware payload (Amadey)", "value": "cc952db4bc35bb2138b5cdeb0ae8a6dab43c5894", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685762435, "uuid": "49ce0be3-4475-491c-a524-13c20028f247", "comment": "Malware payload (Amadey)", "value": "e81bccad6ccdea8b241a0e7fd529693a04e8d245722c06ef6fc1f3e7c7f7c6b02e616a9f86dec0fdac997e836d392c08", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685762435, "uuid": "4c15fb13-5f61-4e83-bc87-854efbd66fc5", "value": "T16705230597D444B3C4F62B742CF642D31E36BCA19D7896AA2346B86E4C737D0A5307AF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685762435, "uuid": "9e8d7a7c-ba69-4788-a437-9fbfc58ef0c0", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685762435, "uuid": "e4ec4654-e9fd-44a4-927b-0424a18636d7", "value": "12288:2Mr9y90cnjlkiVR1oky33Uzb1Jm2mhKLaEO04jSPp9qBQIbWED+xLNplN4:LyVHyky33UVJmvhc14jSTSbWt7D4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685762435, "uuid": "c636d565-f5d0-4705-8090-91b0be0d02fd", "value": 812032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685762435, "uuid": "e61f55b3-a397-4c70-bc1f-c2968ca4b0a2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685762435, "uuid": "5a03c342-5cb1-448c-a2fb-afac71cb7d52", "value": "decf67354d6ba11c30eecd1b57d553c6.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b802c139-0254-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685827338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685827338, "uuid": "2847979e-a9c5-4028-9e56-86f0a249261a", "comment": "Malware payload (Mirai)", "value": "a79468f0a428271359625b9360d319ad", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685827338, "uuid": "9b0880d6-acfc-44ba-8d62-cc2d494c48dd", "comment": "Malware payload (Mirai)", "value": "56f386b78cadd6f9ea658ef5ddbef06c2ade3f43559ef64f2ac7857fff749693", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685827338, "uuid": "f4c32b92-23ef-4054-a4ee-39a75d69f86b", "comment": "Malware payload (Mirai)", "value": "638b337e7b1985fc7aa65ce8fe48ebe7d0290601", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685827338, "uuid": "70d57889-5ece-4bdc-a718-9cbaca176e5f", "comment": "Malware payload (Mirai)", "value": "6563eed8b1f731cec2a22dde71230411493a505b8ab9efab90742e2bf57391eb70cef1afc28c8f7797f3124e8bf30ce8", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685827338, "uuid": "781018c4-5feb-40e4-a1a4-3ddf6205a4df", "value": "T10CA2E069FFA28089D0C9453C29E36DAB766BEDE39398025B6D55D4C616D38CC804FC71", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685827338, "uuid": "df246f7b-c61f-4f19-b03f-1474b53aaf24", "value": "384:jDYC95A2rM7RjFrvX2V6H2XJ8LaHYsbX1chQO1Hfmmcb4/N7KbxTKqB+cuiFqcJU:jDZ5Dw7RjFjcU+O24sDO1uE/Nmbx+qBq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685827338, "uuid": "db135eb8-d020-4f45-b305-2d38e77630ca", "value": 23252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685827338, "uuid": "923ca62f-ba9c-4b0c-b55c-4c3847d1542f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685827338, "uuid": "fb658516-3f02-4154-b51f-3baa71eb09b8", "value": "a79468f0a428271359625b9360d319ad", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f71c1f8-0206-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685793715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793715, "uuid": "355374a7-7614-41da-b341-921a712c2edf", "comment": "Malware payload", "value": "3909bf9e3bceda00347cf7bea34145e2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793715, "uuid": "8b9d8a65-2256-41fb-81af-c99cb3c83be7", "comment": "Malware payload", "value": "5775a0ac3de7cee8dcbc9e2883720f47ffa2416e44cb79ca659065468b59651a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793715, "uuid": "f84411d7-5c5f-480e-906a-5eaf640e5424", "comment": "Malware payload", "value": "31e01ab762741ffcdba28ff97a9d92e081d5ac56", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793715, "uuid": "9f92b167-f537-48d6-b86a-9ec5ea8a0fc0", "comment": "Malware payload", "value": "0e7b800c59f653067ed9727ab56a9a5917f015462c57c926a4d2171de44d8262f9838fe44d1106e63feb121293d0626f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793715, "uuid": "fe4e354a-6193-4a7f-8bdf-00faaf852c7b", "value": "T1487406A323184596DCB8ADB1E09522897F4878E77F8350F35C2BDE781623871B58E71B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793715, "uuid": "efc07899-0f25-4cb5-bded-54af9e562924", "value": "3072:M48oYniHS6k8VShXeSgvIlCz+bx8ip2+UlXPgf9oeOuzfewtP6rp5C0qmi91/n:MPoYniy6kJhXeW1QgloeF7As0qfr/n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793715, "uuid": "35d7aee5-2cae-4923-bb5b-abd098cf949a", "value": 369760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793715, "uuid": "3aa5101f-2652-41ae-b2e5-4e9f2be2d894", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793715, "uuid": "f5dff726-f39f-4ce7-9fb5-1c1d7679ff33", "value": "3909bf9e3bceda00347cf7bea34145e2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e612848-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782010, "uuid": "96c4c175-444f-47ce-91bc-cf5c0608422c", "comment": "Malware payload (Mirai)", "value": "874f5ef7de54a063319b8a45d0aa7ac7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782010, "uuid": "bb12bfd9-0e9e-473b-a2e7-2ea33e1b39c4", "comment": "Malware payload (Mirai)", "value": "58669b30be5125144842a42c91337c0f871561bd3c80cbf53dcab73ff2afba34", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782010, "uuid": "cd35591d-3706-49e6-a723-74c8d45bbd32", "comment": "Malware payload (Mirai)", "value": "7a30a9b143ebde11cad207c8c87aeedec38d08a1", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782010, "uuid": "cec34d9d-fb96-4504-a6bd-168fa2b3becb", "comment": "Malware payload (Mirai)", "value": "40905c992759c86d1f9bcead30957512b6870a55e304288388ab82623df4dcd25c04a7f0926db2f0c8cfa72c54dc415e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782010, "uuid": "8ce2bc06-70b1-4502-981f-39c965720748", "value": "T152C2D1E07726FA31C420AC3DE52B4D8A3A51067C91FE383654259C398FC1A5A62F88F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782010, "uuid": "f2a24cd5-dc92-444d-99e9-0c87857e3d1a", "value": "768:eMKyhegCCMqfizjoNpd2vJdX6vwrCU9q3UELu2:NKy4qfqoeJdXWgC9LP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782010, "uuid": "3163f37b-00a6-4413-acfd-27d5fa650508", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782010, "uuid": "394eed11-9f2e-4100-aa74-7ff73465c453", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782010, "uuid": "ae7d4c57-3f38-4d73-9dfd-08c3900302ec", "value": "874f5ef7de54a063319b8a45d0aa7ac7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98ceb840-01c4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685765438, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685765438, "uuid": "d6575e8e-8240-49d7-825d-fc9d6ee69f53", "comment": "Malware payload (Amadey)", "value": "90118c9fe81e15e149fd3c80f30e3b4b", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685765438, "uuid": "747b0e78-0f53-4e2b-b19b-182c95f2a847", "comment": "Malware payload (Amadey)", "value": "59808576771e48d1a31b076748d691ae039a856dc43765c73ec362fa754e6415", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685765438, "uuid": "c1cb9cf3-58de-42a7-8662-6b4b076f8a03", "comment": "Malware payload (Amadey)", "value": "481ca042771e7fcdb45eb778f12c73a8b5f57a0f", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685765438, "uuid": "dd375ff3-6b00-4ee2-9ec4-7631d6988782", "comment": "Malware payload (Amadey)", "value": "c4bf4e43929503f3ac8747503337b1153bf97505e5fa94a1b36240980605e5df2dd741af0f5943fa33670f996792c275", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685765438, "uuid": "b6d8bb30-a124-46c7-8ab8-7bfa89c4273c", "value": "T1CD052312F2D445A3DA742B3028F643D31B3A7C616974836763415EAE0D727E0B9B27BB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685765438, "uuid": "0039193b-c71e-41f2-ba35-b8f462a5d98f", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685765438, "uuid": "34afb193-f291-4961-8a0f-b5c954217405", "value": "24576:lyCtz63up9nFr24PFf4naKCLR4CrIWFiQO:ACtzsupd/N4CToQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685765438, "uuid": "ee4ba9bb-5d48-4d10-89ff-100879604599", "value": 813568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685765438, "uuid": "fbd4a616-5484-424f-aa13-84a0af18b279", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685765438, "uuid": "cde24ddf-1638-45d3-936c-087d1dc406b1", "value": "90118c9fe81e15e149fd3c80f30e3b4b.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8e3f8be-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802509, "uuid": "a39cc802-c2a8-4d05-800a-f2b9d848b5db", "comment": "Malware payload", "value": "8cf90eeaee7af302134f82c56b13e96a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802509, "uuid": "993f360d-1ade-4b66-be94-8f2860e85350", "comment": "Malware payload", "value": "5a5f710b2351475623b98cb7216bad30998bcb9ac54aa3b46253b1fe039205c2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802509, "uuid": "06b2ebb6-4e3c-4733-8aab-a1aa0f83d9ee", "comment": "Malware payload", "value": "f96e02bc38c57df0471ba95e4624782343bfc3ba", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802509, "uuid": "c3fad25c-e2c9-4ba3-b980-c4480cc8ad9e", "comment": "Malware payload", "value": "3b2ad646353c9c609052bf2884c9cfcd3d6336286f2ad8c934ba5ae7e53dd0d81b4a235c30b28c9f4628b24817fde77c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802509, "uuid": "8141cdc0-ccb0-473d-a7a8-8fbeadb7fd2d", "value": "T135814BC7BE38C333D362017443C63EA12AB958307F5EE907AE9494A368703541D18AEC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802509, "uuid": "b9fe980e-1f01-4817-90ea-c7f4600893af", "value": "48150c09e4e291e147a416f3401fdc4c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802509, "uuid": "4ec3c425-e4b7-4146-8794-3149918f36b5", "value": "48:6gz+hgg/b0dtSuKlc2oKfqWITrBoV33ogIuAIpRIlyMOUzSeJY8JTaEKBhY:x+Kg/odtSsLYeTFoVfIuA2RIgN6KHY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802509, "uuid": "aff0f021-73d0-46b4-9cb6-f86a8d6f4045", "value": 4128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802509, "uuid": "bf655469-52a2-444e-aa1f-b4a7d5e0aea7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802509, "uuid": "4f75fc20-4821-41d4-981f-97b988d0793c", "value": "SecuriteInfo.com.FileRepMalware.19531.19957", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7216bca9-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782123, "uuid": "c8b25619-ab0d-4cf6-a9a5-d4f78a4ccb02", "comment": "Malware payload (Mirai)", "value": "a533da26e17616ae5093543768541347", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782123, "uuid": "31d2f536-23d4-4199-93f3-1050d506fd6f", "comment": "Malware payload (Mirai)", "value": "5aca577e206698c951750da7304958545cc6df756bac7f2869d7c1eee303be72", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782123, "uuid": "6f652a3e-9554-4945-b899-e2830d71844f", "comment": "Malware payload (Mirai)", "value": "5568c182e978cb28d85c46ccf7074a69d1ac320e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782123, "uuid": "e40d1338-208b-4ab0-ac51-4e3c6ffab48b", "comment": "Malware payload (Mirai)", "value": "1fa3ce6fa440d5fd3327ba7b5ef6bba967f680d067936a7f934c1745b0a8968e882b4a5fea15fb9478c7ac9086de7014", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782123, "uuid": "b7af09c5-3e4d-4f35-ac87-f4fb06eeb1d3", "value": "T11333AF72C47AEDA4C14487B4F4208DB82B63B446C5A32EF68B49C6669057DACF61B3F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782123, "uuid": "55ede06e-54b6-4895-9db1-e8735758ba05", "value": "768:QaSwtNcxlpF0eqU0u6zmoLwaoUyLrv5ynGkaCJXoo68R4CQC:QaSwtNhrTzzXLELRkahoL4CQC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782123, "uuid": "0a805163-f038-4777-9a66-5f20e99b217c", "value": 50240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782123, "uuid": "d64be601-1567-41fb-a3ff-336bbd44d4c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782123, "uuid": "7380adc4-036b-43c6-9eca-28fc1e67e22a", "value": "a533da26e17616ae5093543768541347", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea325b25-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Riskware.Generic)", "timestamp": 1685802511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802511, "uuid": "87e6047b-ac8e-4b1b-957f-07931757dbdd", "comment": "Malware payload (Riskware.Generic)", "value": "20a6f307d7d7f91c37247469a6d44ed7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Riskware.Generic", "colour": "#081407", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802511, "uuid": "8a86e0a0-7cc6-4f5a-b670-1fbb7b89bf8f", "comment": "Malware payload (Riskware.Generic)", "value": "5b310caed1c721232bc90a49f2d636e51bfc3e79da356d0038269981a13153ad", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Riskware.Generic", "colour": "#081407", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802511, "uuid": "84c91dee-a3e1-4501-a980-53db9ec966da", "comment": "Malware payload (Riskware.Generic)", "value": "3d01439aaee75a96a5c52b90dbfce1a75a8dd64d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Riskware.Generic", "colour": "#081407", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802511, "uuid": "849f286b-ee4c-4a81-b89e-2f509f6d349f", "comment": "Malware payload (Riskware.Generic)", "value": "c70ce653f0b737ae533bf00f1e24cb44ac168746d7c2ea030b6fb79b09b6ef0054d2b4013ee4734b23a2fb1f7d09b940", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Riskware.Generic", "colour": "#081407", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802511, "uuid": "75bef3db-153f-43e6-befe-924b671be081", "value": "T116052371875DE419DC137A76FC1A91F68B98D91B24930F0F37CE78CA3E18E122918679", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802511, "uuid": "d5a2cc50-ce1c-4a3c-a804-b3da38832bfe", "value": "2718325c1262ee5c75b2881ea45a8b83", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802511, "uuid": "e54ca15b-6917-407d-84ec-723602e7e9d0", "value": "12288:EYp79pguOIGOged3C1BMlCkgmCiQmj0X2Bc+dZIcY68aLyBHcLNLBDKlNOUF+SoS:E3uOvxM8kg6Q54u5cuqUY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802511, "uuid": "11e1969c-c5d3-4912-973e-3d03f1fdcb5f", "value": 823808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802511, "uuid": "4337f014-6031-4a13-a654-1f55f90309c1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802511, "uuid": "2b64a874-5803-4029-ad49-b033bd7e7f59", "value": "SecuriteInfo.com.Trojan.DownLoader7.597.4273.6002", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26d84f33-01df-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685776843, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685776843, "uuid": "cbfe385f-e17d-4085-9829-3fc59142367a", "comment": "Malware payload (Amadey)", "value": "537bcf5f47db87e01f1aeb8206c051d1", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685776843, "uuid": "f3255314-17ee-4dc7-a9b8-591ae622dc3a", "comment": "Malware payload (Amadey)", "value": "5b51435712860f5caa83f158bc9f68fa499e88586bed20e36cbbc8fa39e6f74e", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685776843, "uuid": "bd5821ec-0656-45ba-a947-5bce356b7c4d", "comment": "Malware payload (Amadey)", "value": "6e7c801b82257d6a3109a6ff22233215f0359c7d", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685776843, "uuid": "c32d9af8-d289-4e6c-8ffa-2a91fffa93b1", "comment": "Malware payload (Amadey)", "value": "078096b89473d7db35de063b393ff9b410445291ec55211ded0661bcd62d4c22e6ccda472b85e99bc4174002496cc227", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685776843, "uuid": "96f81830-1866-4cbd-a9c3-fa3f1e713f8f", "value": "T118052317F6F800A3E8F12B746CFB07930F35BDA19979866A2B54955E1C723C0A4353A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685776843, "uuid": "cb456c95-61e1-464f-9a8f-d858958679b5", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685776843, "uuid": "a5397490-2691-4ad0-8c08-70fbeba3c932", "value": "12288:3MrFy90ZDYu4gJFjnrIQcdx8+Lbmg3GOP5WIQ1QpGzG/vsW5aUd3WEDz1LXE:6yPpgJRnxcdxdSEP5W8M4vsw3W0NE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685776843, "uuid": "6c844f65-91a6-49dd-a7d9-e15cf0658b68", "value": 812032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685776843, "uuid": "bb87fb59-2a69-4068-9a10-0f29cfc39905", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685776843, "uuid": "bbc2217a-b052-482d-906e-7a6c0a169329", "value": "537bcf5f47db87e01f1aeb8206c051d1.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a8d9af0-01e3-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685778514, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778514, "uuid": "dbad7e55-2627-4105-ae36-3575f52ce255", "comment": "Malware payload (Mirai)", "value": "55524a31f4b8578d191745c9c02de032", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778514, "uuid": "75fdca86-c113-473c-a2e5-1353d6cda72b", "comment": "Malware payload (Mirai)", "value": "5c1d895d8000e34a3061b1968a900dbf7f207205eabc155d21503c7a1cecbab6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778514, "uuid": "511eccce-7e31-4827-ba06-72db344d8e33", "comment": "Malware payload (Mirai)", "value": "59309bf53af4a2f8d6985fdea65cfe7123d636cd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778514, "uuid": "79c030fd-07eb-4377-95bf-18920d0b2f5b", "comment": "Malware payload (Mirai)", "value": "5ca773f523935b413d3fa252995bbad248e943897f9b2ba4bb6a0132be3493440c86e87ae7099a37657d34f413ec1961", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778514, "uuid": "5168e391-0c7a-450d-924c-ff78a37b0d2e", "value": "T1F9235AC49587EDF8DC1106702077EB325BB7F07A516AEAD7E3989533EC41B12A60B29C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778514, "uuid": "3ecc44c1-2c46-4d81-9ba1-1b2306163d53", "value": "768:Jlhb8+2kuzeiUtT60+sDGeWaYRUr1w0JLXZh5KSgWyz3f:Jlhb8+2kuzeZe9sDGe0X0xZrKS5yz3f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685778514, "uuid": "22e22a90-80d7-47cc-9cc9-f8eaf784b654", "value": 50032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685778514, "uuid": "f76d606f-385b-43b8-8ef2-70052e6fc4c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778514, "uuid": "52ba17a6-771d-4ee6-94ed-8e3ab420d6c2", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2546e452-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685778988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778988, "uuid": "76e984aa-6da7-4727-9427-5af1b46f97ce", "comment": "Malware payload (Mirai)", "value": "60aa402ff435c8723e80d556e7b5478e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778988, "uuid": "04694986-304d-49b9-9a04-56ed1dfc3c60", "comment": "Malware payload (Mirai)", "value": "5cacaf6e88f43f922bfe3f4e51e65ffd294f4a10801a31a3e8f64608212a95d9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778988, "uuid": "c43d4ccd-3720-4fc5-a4e6-361f7bb3a2eb", "comment": "Malware payload (Mirai)", "value": "3876c2c83051fd9122b0552796c94dcfe3c8d392", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778988, "uuid": "cf709513-25b3-42e3-92c3-af8e2124e6b2", "comment": "Malware payload (Mirai)", "value": "00fb5b89bc9929d1e6f8ff93ce5f164bb92422211e2fa7156f3ef9fd348e830b8cbb90eeabf958f3f4288462f01eec4c", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778988, "uuid": "72ac2c15-0332-42e3-9c0d-29af9eea88f9", "value": "T117D2D09E81236996CE5E8CF650EC63748BB97D41B22D8B4E53140CD9D3268EFB45E078", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778988, "uuid": "7d3eb789-da04-44fe-9150-63d3a624760f", "value": "768:iFk3EOh0uRwfeetrJtKRBBae/qR8WRhXWi:13TOfPuj5/2RhP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685778988, "uuid": "18445cd0-cb31-4a23-9bbd-6e6460d1f0f3", "value": 29748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685778988, "uuid": "f2eead40-b4d3-4ea8-b020-36bb3f5dcd38", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778988, "uuid": "b5322821-6ce5-43fb-bb23-016c5b6e98e0", "value": "60aa402ff435c8723e80d556e7b5478e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50600486-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782067, "uuid": "ddff59c2-f867-4da5-998b-6a5f9efdaaa9", "comment": "Malware payload (Mirai)", "value": "84ccf6960d79d8da279672a3770503a7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782067, "uuid": "3d36ad14-ab44-4570-90dc-56fa807daf40", "comment": "Malware payload (Mirai)", "value": "5d4eb592127bdfa2a0ea262f1da47a4f13976d0bcdf3eda8bd523bec54999b9c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782067, "uuid": "bf8f28e1-cb35-4393-afc9-1c5bfbf336f7", "comment": "Malware payload (Mirai)", "value": "03ca7687a71cab8ae099ef63d6007e4cb816596d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782067, "uuid": "9c425d45-6a6c-444b-b0d8-b6352f4cea71", "comment": "Malware payload (Mirai)", "value": "530e121cbce04739df80ec64cb55ebdf41015ae57d3c8742c5889b62147fc70c5facf234045e74e4200f524b5bd3cdd3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782067, "uuid": "3a107241-8cb6-41e2-bfab-d7b476a7ccde", "value": "T1AEE2E12542598879DFF71138E0AE8B8733CE0A7CFBD3618B6305C2619AC45A94F7F255", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782067, "uuid": "d6152fcb-a2e4-4e32-b60a-edb5345bacf9", "value": "768:4KlWVRGuRSj8N6oV2JqlUze/LT2GnOm3Uy:4KlWVRvpRlUU5nD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782067, "uuid": "91b64469-ca31-4c61-b57f-3dd3f49f866a", "value": 33876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782067, "uuid": "f0e394d4-14ea-4884-92b2-d1229df82e20", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782067, "uuid": "b56f6bd7-8ea1-4377-80c2-0958c08e91c3", "value": "84ccf6960d79d8da279672a3770503a7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3502fb5-01a3-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685751336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685751336, "uuid": "02a3163b-6f45-4ea3-9515-e6b9073dbad0", "comment": "Malware payload (RedLineStealer)", "value": "ccb335356643403fe2e007e0e8e7ecd1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685751336, "uuid": "db3b1903-3dc5-4f96-939a-d058260c3dc2", "comment": "Malware payload (RedLineStealer)", "value": "5d805379d8c091cc9aabb17156df24becf5b1e3f15c2bcf5a55c7ef93f8d20e3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685751336, "uuid": "5a07a2ec-34a1-49bd-a6b2-ab41f559a7dc", "comment": "Malware payload (RedLineStealer)", "value": "fc85ef01540e29a937f492c5486f0e0e8b8106fb", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685751336, "uuid": "cd8a8a58-6b7a-4ec7-b3ea-45029fe740cc", "comment": "Malware payload (RedLineStealer)", "value": "5c8fb581e5c7576d9179cab9feb1dcc662927432269ade15e9589a1bea9a92d18eb0ad73d7bd4d93155680f41773d57a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685751336, "uuid": "87613c47-487d-454a-b374-0ef545d8ad2e", "value": "T13235234357FC5023E9F473B029FB0643057ABD709AB45657138899AA1EB2B41B8B0BB7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685751336, "uuid": "968af741-3f72-44c7-99c0-06c3ef8844aa", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685751336, "uuid": "8cc0766d-ea33-4997-817d-f2ecf98992a0", "value": "24576:hyt9B7RPtv8yMebzCGxeu+kGOMQv9LflbQGug3Kly:U97RPtYmb+POMMBQDgal", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685751336, "uuid": "374db1b1-e45b-4947-8845-06a859f11f82", "value": 1093120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685751336, "uuid": "cd48009e-b432-4877-bef1-3645abb33ecd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685751336, "uuid": "81fb8f52-cd24-425c-a593-ab4a536699be", "value": "ccb335356643403fe2e007e0e8e7ecd1.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fafa20b-01c2-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685764537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764537, "uuid": "d85739ab-94e4-4116-988e-12ff6ebc8d0a", "comment": "Malware payload (Amadey)", "value": "522554bb3394f7a0bae6470995df8dd7", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764537, "uuid": "cca1447d-1f39-44c3-abdf-d5c331a3029e", "comment": "Malware payload (Amadey)", "value": "5df03282fbccb19804cc9ec5bd7b1259a1f915afff09a4887c9cbad640a32396", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764537, "uuid": "ec44ee14-50db-48c1-8455-de47075253d0", "comment": "Malware payload (Amadey)", "value": "cff48e2af92e358daec4a6c64528f3af079f5574", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764537, "uuid": "e6cbc143-30ea-4968-be4f-c0fed4bddd23", "comment": "Malware payload (Amadey)", "value": "519fef22a814e6862669da9617290aa2dee7996c8a765f71ea6e293e344194eef9bf5d6d55f54fd565ecc1836d908acc", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685764537, "uuid": "4746f182-e5b9-4833-bf35-5cf88a90f962", "value": "T145052252AAE48477D8B037B05CF227870B35BDB14E789B1B1B8579AD0CB22C1AD31767", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685764537, "uuid": "404c9488-8421-4beb-bfa8-58a9d82e51cb", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685764537, "uuid": "06638f7f-b115-45aa-9fb1-3dc1fd62189a", "value": "24576:pyXp/iSIbbqLAzT+/UkMoIdUqV6mUbIWAZ1Dj2x:c5/iSIwqTH2DAZJj2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685764537, "uuid": "2aaf0fdb-3720-4faf-b2bd-790cc14778b2", "value": 813568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685764537, "uuid": "d52b9d3c-71bd-499e-83b1-cab935bd305a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685764537, "uuid": "0bba7f8f-5e46-44e2-9c0e-017a44d81e4d", "value": "522554bb3394f7a0bae6470995df8dd7.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11ed034d-01d6-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685772943, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685772943, "uuid": "90696481-2263-4618-a5bd-00ab7755efaf", "comment": "Malware payload (RedLineStealer)", "value": "f1463b8a22b4486d9f9b296ea9e4c83d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685772943, "uuid": "b0e6cc90-78db-48a3-9dd8-7021a52bb431", "comment": "Malware payload (RedLineStealer)", "value": "5ec65d7b41b61a95b71aa3e26c7708a6328709bf14b3e688bdb5b603d0d1dd88", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685772943, "uuid": "e7abbd35-63ca-4338-92bb-f198dc9699d4", "comment": "Malware payload (RedLineStealer)", "value": "971fc5bd75b42989c165b5f824025a08231fddb7", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685772943, "uuid": "b9bf9efe-4d65-47a9-8545-b802d53b2be1", "comment": "Malware payload (RedLineStealer)", "value": "0407554654df1306a5c86819b6b6f9141afa36b401fdbb4926a870b87ff421a3edaf23ea59d413c3fd86454bd9c9b289", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685772943, "uuid": "66e3f701-af64-41ae-83ea-af3039c7c20e", "value": "T157052303EAD48072D8B927702CFB17C71A367CA48A7443AB3741A95F1C73A94A93577B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685772943, "uuid": "724e7ac1-1df1-49cb-bcd3-a326104bf2b0", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685772943, "uuid": "e61f47b0-8f4b-472b-8269-d9cf860fc23a", "value": "12288:aMryy90h3Z4KG0fceyzlHljWPJYsyLlqXpqzmJjmbTD21eUTnWzDRTEuR:8yCylZkLyYXyYmCYSnWDR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685772943, "uuid": "30f132c6-9d4e-4c92-a031-31ed619b151f", "value": 812032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685772943, "uuid": "6cb87d62-048d-4d38-87b3-496303523bb2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685772943, "uuid": "d3ddcb8c-cbcd-4605-8b09-196150b3a688", "value": "f1463b8a22b4486d9f9b296ea9e4c83d.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79ad04ff-0247-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685821650, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821650, "uuid": "a5b580e6-842f-42f4-afd9-abc1f549824f", "comment": "Malware payload (Mirai)", "value": "270d4c77115ce12ebfbfcb74b7a06014", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821650, "uuid": "25183ee9-2196-41c2-b10b-b0c0ba07d788", "comment": "Malware payload (Mirai)", "value": "5fbeff2d3ecbfe852edc4544d968716830a6e3bb42a1e9995b59ae5456117e9c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821650, "uuid": "51b01b01-f578-4e02-af6f-1cda05271c33", "comment": "Malware payload (Mirai)", "value": "8ae2af3db30c52133f6019256b2fb19832dab5d7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821650, "uuid": "5255e4de-7302-4ea3-9cca-9bda453ac5d8", "comment": "Malware payload (Mirai)", "value": "a7af005ea6af927966d7404262e80b631b5586584a822aa182132fe162f357e72993d217e48924a9986e148790b9c837", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821650, "uuid": "17333ca6-aadf-45ec-a49a-60f8e7a30543", "value": "T153733A132692C57FC09357F91ADBAA659423B83D1B335242B3D8BD6D2F36DC81D2A306", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821650, "uuid": "5695a76d-a720-4c62-bead-a364c7853e0c", "value": "1536:ca8a5n/8b0Pa1ldGYlcevdL/QQ9SKXQZLHbsp:cw5ntalGvcdL/yZM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685821650, "uuid": "7d7825ef-58e9-45be-a2fa-54646c6dc192", "value": 76057, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685821650, "uuid": "4ececcde-f272-4085-ac10-7407df43ca81", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821650, "uuid": "419b8201-fbfd-471b-8505-bc0253f8a1e6", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47d9aa2f-0206-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685793649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793649, "uuid": "84ab0a62-a46b-4401-a0a6-ef83ddf3f306", "comment": "Malware payload (RedLineStealer)", "value": "4f3fdd2410a5dc23bcdb4bdac45e0173", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793649, "uuid": "3b74001e-36c0-4152-b869-bf38b3aad568", "comment": "Malware payload (RedLineStealer)", "value": "60c410e59852be7e8b91f73a67b1f70f1059a827921df73d3f4b0e062ec5cc2c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793649, "uuid": "b808dfd7-29e1-4b1a-bbea-76e3e5fb3587", "comment": "Malware payload (RedLineStealer)", "value": "09de0cf161798e5a723aae3a7e6d725fa8b4a86c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793649, "uuid": "bc7bf53d-8a66-4675-8ef4-fbd9ed8c3ef5", "comment": "Malware payload (RedLineStealer)", "value": "2a946c9988cd0df915e0bb78d0835a32feaca1bdc5fad8fca80f5a09988da44bd1d5055f6ecfd7712479d3dbf22e667b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793649, "uuid": "1a6e1390-9bb6-4210-8cf3-b702fc4f1ef7", "value": "T1B105236256ED8137E6B463B058F202E70A36FDB26D394B6F1385995E0CB27C0A432777", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793649, "uuid": "7d198ec9-02ad-46fe-b36c-af7e0881b19f", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793649, "uuid": "3a6a33fe-ca21-4995-b069-1a1c896b4e63", "value": "24576:7yJd1/fiu7/b62f+544FepzUf1i1uUAB9:uJd1XU22u4FWz719AB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793649, "uuid": "61c8926c-cc58-4d46-8641-f8c9ad186c03", "value": 796672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793649, "uuid": "80db1215-0456-4b7a-9d90-7b9103de1e86", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793649, "uuid": "93ab42fc-f8e9-492b-bd43-cd5cdc87abe0", "value": "4f3fdd2410a5dc23bcdb4bdac45e0173.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "704f8bc9-021d-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685803595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803595, "uuid": "4f114d97-7b2a-453f-aef8-1874d6c4f8cc", "comment": "Malware payload (Amadey)", "value": "82413b372b113386d9471f80f7f71aa4", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803595, "uuid": "9fce86b7-d7cf-4229-873f-305da6f10ec9", "comment": "Malware payload (Amadey)", "value": "63267a1f4446c486988b2535576ebf11758eca1d32053badf94353bdf2ac292f", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803595, "uuid": "8c20223c-c3b1-42e9-aa79-78f5bb6ffc98", "comment": "Malware payload (Amadey)", "value": "ae8479be577e15676696c01456c9c886b5c3c1e0", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803595, "uuid": "a8579783-bb40-4e50-8ca2-d564637de95e", "comment": "Malware payload (Amadey)", "value": "b23f0d7ad5d1ad716536aaf843f647f9a75bb02f860230f75e1dd9cda07afafcc731b98326ecd0c5221e986b085dd597", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803595, "uuid": "55199b7a-09ff-428b-8d39-e5f37ebf1581", "value": "T13205125367D41032E8F553F01DF213830B3ABD72A978532B2B96984A1CB27D859B637B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803595, "uuid": "4a094341-2dff-48e8-b21c-c3d9553bccec", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803595, "uuid": "6775b5ad-5479-455a-9052-ae2559c1435e", "value": "12288:2Mrpy90Jb/iiXXtsbua7sALAYy9/PFmwP5HzkdEgD8AIeJDh63:vy89X9sbj7Vsb9XnhTkdRJISh63", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685803595, "uuid": "0058951b-3a03-44c3-ba63-267a889e8ec7", "value": 797696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685803595, "uuid": "ee09419f-05fb-41d2-837b-6205c397b8cc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803595, "uuid": "e9c264be-6408-4cc2-9c6b-c87db18341fa", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8172605c-025b-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685830253, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685830253, "uuid": "df408aaa-9f19-458a-89b9-c61721077007", "comment": "Malware payload", "value": "c4b9d83a65b7a0b05d7d24d4abcb29ae", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685830253, "uuid": "376c7b4a-f77c-4bf2-802e-96a163bfb202", "comment": "Malware payload", "value": "6333176aeff8e8bcf4afa893729e2264bd29ed4db5d0b8211eb92a4844b4002e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685830253, "uuid": "0c898f54-57e0-4756-aa8f-432741ba9708", "comment": "Malware payload", "value": "098dd17322c2d231146b5ea08246ecd6ffedec7d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685830253, "uuid": "5e8b28a2-211c-4464-859b-7a6af4c48aee", "comment": "Malware payload", "value": "f649d7525bd6d52bcec53c28c9beb9509524f09ef2ee642e41742c6c37ed7b42e3c49a9ee1348e62aa02bbe44fa9215b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685830253, "uuid": "6214a20e-9863-4fc2-90a8-c3fe12433b9b", "value": "T10B751242BAD1A8B2D4631C365A666B20AA7C7C300FB48DCF53D07A5DEE315C1E7317A6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685830253, "uuid": "b97ea902-3020-488b-9f89-bf9a9d83cdb0", "value": "12e12319f1029ec4f8fcbed7e82df162", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685830253, "uuid": "d4759184-a467-48e3-a25e-184a5e7f7ecd", "value": "24576:UTbBv5rUe0cjGq9uFHK6c71E0GHSjLXFso0heHhv1ekNr2r0hspaAcKEYMI9IulL:mBJLSfo6i1IHSjrFs+vRngaAcwMItf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685830253, "uuid": "fcbad82f-f708-422c-9af7-d466426665e1", "value": 1672846, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685830253, "uuid": "00fa6212-7f1d-44fd-8791-404f12913126", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685830253, "uuid": "5d7659b2-b5f5-4b68-a38b-1c287ea99cf9", "value": "c4b9d83a65b7a0b05d7d24d4abcb29ae", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3599f859-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782022, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782022, "uuid": "691f18ee-ab3f-4d68-8e84-856f39110942", "comment": "Malware payload (Mirai)", "value": "05cad2379358da3f69687b49bd064f33", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782022, "uuid": "12626649-7cee-42c7-af3d-7dccf3db7486", "comment": "Malware payload (Mirai)", "value": "645b0ff897ac7297dc6978c5357c4f79bf37591a4419dddef341ef7f2b0dc654", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782022, "uuid": "cd9cc59f-0c8b-4d24-8c63-c42e5210bb4b", "comment": "Malware payload (Mirai)", "value": "df05fc25409191e6b05f5e2bf0439ade1b3c9d27", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782022, "uuid": "c25cbd30-9199-44c3-82d6-c449ddd53e6a", "comment": "Malware payload (Mirai)", "value": "ef0c1a7af05b25f8828931bea25b2791b888013e6e25d3959373d9262cd77baef730ab0f54e68fb7dba029a417e9a076", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782022, "uuid": "3f29e202-95b7-4329-b416-a9898142a165", "value": "T19CE2E134F1956B5DFEF379F41F6AE6E02B5A0F8037A2886D1A806E82411867737610DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782022, "uuid": "2cd8c9e0-d8ac-42a0-a7e7-3eee89fc0065", "value": "768:3r163te1PkYAJXfaoJHK39jrrxdvA9ATI0+qpL4uVcqgw0X7JkmWt:4twkYAJXfjo9jrldvqYV4u+qgw098", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782022, "uuid": "5804dd43-9d1f-446f-8916-bcc98d834030", "value": 33648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782022, "uuid": "f3b9d007-34ac-4074-abfd-e3e41206af78", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782022, "uuid": "73d14928-cb5f-4b60-8759-3bca39746324", "value": "05cad2379358da3f69687b49bd064f33", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81df9867-0215-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Fabookie)", "timestamp": 1685800189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685800189, "uuid": "9b6bfce4-b4c5-45b6-815c-1183f793d400", "comment": "Malware payload (Fabookie)", "value": "f1e554860ce8e8085935cc9a01429cdb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Fabookie", "colour": "#289638", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685800189, "uuid": "9b303637-f6cf-4f8b-942c-acdb98b7dee8", "comment": "Malware payload (Fabookie)", "value": "64d45bc38d4a4e60a23bb5fa06a2b99ec40bd86c8f0cdd7c68736ab192569e49", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Fabookie", "colour": "#289638", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685800189, "uuid": "74259fa5-d3df-4ab3-8b90-c02d956bddb5", "comment": "Malware payload (Fabookie)", "value": "c85f8a7e617dee6dd76f6574ebc3652ecc6d956a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Fabookie", "colour": "#289638", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685800189, "uuid": "44d24966-f364-4528-bc7c-b2d2d0f03167", "comment": "Malware payload (Fabookie)", "value": "4ff3c79e339cf0ad42d30a7ade4dae95e280d2a5627739cd9754a4a0ebaaf125268537cce0a07f1b934f6394dda157c3", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Fabookie", "colour": "#289638", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685800189, "uuid": "f48ff3fd-6d2b-4bb6-802e-b0b8f3a768db", "value": "T1B674AE6236D550A5C2A98132C996C3A946F1BC002F255FCF6231F64E3E372F59E3936E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685800189, "uuid": "eba89692-e2c1-4a3a-b21d-21a8d2899919", "value": "f3c11bfd4e970edf440aec1f2cc2b6fd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685800189, "uuid": "cb81f8b3-8f0a-42d5-8e31-8704bee08a40", "value": "6144:P5Ky1YQ7eWdfRqBgsdV9/rpq+tgqa454ecqY/W5R02qO7V6CjhQ:Pcy1YQ7eWdfRJsdLFDtZa0cq33j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685800189, "uuid": "46851971-53e5-4a90-9cf1-4da540f5739d", "value": 348160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685800189, "uuid": "dc2cebfd-3d3f-4058-9054-c7e1dd1f7d11", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685800189, "uuid": "090d7c45-9c8c-422c-adec-c1e18bec423b", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e8b0f89-0218-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685801445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685801445, "uuid": "e1f44dc9-cfaf-4871-b962-abe729fb4f1e", "comment": "Malware payload", "value": "344b0e04a4fb0ae86d3418b2c6c1bb13", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685801445, "uuid": "e33c68eb-2ddc-4fd8-b9fa-9a0df7897f9e", "comment": "Malware payload", "value": "652dec07127437eee192b19182823d64bc6934454e203a46f88f1cc2d2362e57", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685801445, "uuid": "e32bdb59-8cd1-4647-8a05-fe317cb6c200", "comment": "Malware payload", "value": "43284908523d0181f6cc41ba516e598624a3708c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685801445, "uuid": "3e974760-7723-4a29-a093-03e729e49d70", "comment": "Malware payload", "value": "5d22ce6a6abc452154580c0a735014fb6af5f443f21ee45d3f8b4356ec8b68caa119b2a2688805a5996c1a98c8a82c44", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685801445, "uuid": "5188d0cc-626d-411e-a736-7bf1bece3cd0", "value": "T1C8B4B01362D37C64E5154AB28E2EC2E46B1EFB518F5B37EF1218AE1F05761B1C272742", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685801445, "uuid": "5ff4b6d9-cd9c-4914-aa46-3582020dfda4", "value": "9bbc9ec767e0d044dbe137327e0459fd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685801445, "uuid": "69f5461e-f119-4cc6-9c30-ddf9dd6c3fea", "value": "12288:mF5nI344xDDQPXSVmc2nwKsWUVjmQHmK20tyC1s:mF2JDgXSV2nwphoQGK20tr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685801445, "uuid": "d57a32d4-e9ca-4894-b0c4-b0dac63e8440", "value": 494592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685801445, "uuid": "815414e9-b988-45d0-a64a-be9e81f75ad7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685801445, "uuid": "691b59f2-0dfa-488f-b0c8-b1adb821ca0d", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "301c3b10-0204-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685792750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792750, "uuid": "68eeb2a8-5428-4f37-be97-225855c439fe", "comment": "Malware payload (Amadey)", "value": "8dafd3aad28414962fba8d73b771bf15", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792750, "uuid": "245ed931-4fc5-439a-9600-da4694f12ac4", "comment": "Malware payload (Amadey)", "value": "668274010805f861d9497e9bf6356abe0121e40af716ebb0a8864d6af2915823", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792750, "uuid": "f9768075-97b0-4c33-8e4f-a5888c7ea466", "comment": "Malware payload (Amadey)", "value": "56833a6359ae1df91e41288ad5d81c70e9248a97", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792750, "uuid": "20219504-7fb3-48f7-8583-f253fb0f97a7", "comment": "Malware payload (Amadey)", "value": "8986c34c2264dc3a18c87683fadac87662ace3e3caca21bfd9fdaab49deae54e70fa8aa180dc6b5f5992951d5749d24f", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685792750, "uuid": "a20e246c-4d29-4725-bd86-97d5aacb7042", "value": "T1F4352356ABE954B2D4B517B05CF252C30F393CA18C7847AB0B5DBD9A0CB2AB0507276F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685792750, "uuid": "1fefca00-cd6e-4da9-8d8b-22b0a810d7c8", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685792750, "uuid": "1637dce1-41de-408d-918f-544c0a57f864", "value": "24576:PywN7s11fLI/HVhDnK215QutnhXqtjLUv:awZ61f2nKIDthXqtM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685792750, "uuid": "478569c2-6d3e-4755-9f43-e2aa298d4912", "value": 1078272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685792750, "uuid": "bebf0d1c-0558-4e18-9862-ebf9d1159154", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685792750, "uuid": "14c9872c-94de-488f-89a7-90a24bdded96", "value": "8dafd3aad28414962fba8d73b771bf15.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "358d3b66-01f6-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685786746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685786746, "uuid": "2feca930-f725-4970-a9eb-5c11514df4c0", "comment": "Malware payload (Amadey)", "value": "9cb65ea6776b5c0c55dcacda12d2598a", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685786746, "uuid": "5cb530fb-568f-46f9-a52e-9d0f1a681087", "comment": "Malware payload (Amadey)", "value": "678ace6d8456a0b5c3db92e8873dc01858bd98bc7a08f993db5bc754910e4499", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685786746, "uuid": "ec3748ea-cdd1-47a1-afe9-b831c26d4a9b", "comment": "Malware payload (Amadey)", "value": "02faf7499efa0b35e3d1920c2af230935faf9a6a", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685786746, "uuid": "5b42fdc2-5963-408c-a858-a093f0d5a39d", "comment": "Malware payload (Amadey)", "value": "951090686c99ed843ee6f2f67a14a54475bdd80ecdc1fc51f0c9426498b43281f6c9f328173ce8fae32476d950140c69", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685786746, "uuid": "25df1c0f-27b7-4974-b0a9-007d23a528ee", "value": "T191352313BEE96073DCB86B3028FA41930F37BDA19D3CA7672240B91B4C72554A9B4767", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685786746, "uuid": "eb530f96-b02b-4584-9474-9062e3db86a8", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685786746, "uuid": "d0a98c5b-c8b6-4bd6-ac4d-c5ab499e0a93", "value": "24576:syEnGbb5KrtqKqFWKEizaepD2JCwjT//:bEGv5KgKqMKEiOel2JL7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685786746, "uuid": "1b65d554-bafc-4901-99d5-2d45eccdac1e", "value": 1077248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685786746, "uuid": "45354e04-3b43-46fe-9654-149e1d069934", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685786746, "uuid": "677f0b12-816a-45e3-92dc-8bea9930689d", "value": "9cb65ea6776b5c0c55dcacda12d2598a.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfe19674-01ba-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RaccoonStealer)", "timestamp": 1685761262, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685761262, "uuid": "377afdfe-c752-4c2a-a670-15c00337e763", "comment": "Malware payload (RaccoonStealer)", "value": "047d640555ce380f6532d68960afed6f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685761262, "uuid": "5b5ccb37-e55e-4740-90a2-99f8e5c94287", "comment": "Malware payload (RaccoonStealer)", "value": "68393678ccf5bdc8d7075290a5ee4da24c878a6b11f45cf2342c442ca9aa09ca", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685761262, "uuid": "d89cab4a-60dc-449d-bfd2-4740c4184917", "comment": "Malware payload (RaccoonStealer)", "value": "e8f7edd73d5bfb39f9f9576fd9f06bdcc147a086", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685761262, "uuid": "d82ad4cf-06fb-4503-8d3a-f70d1967b541", "comment": "Malware payload (RaccoonStealer)", "value": "88192d2b8f4e628b1e7a093c41cd1df7615f2f563b1dede707a6cf9db1e6db9b4bdf3638b3f6b0745c1826a9267d470b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685761262, "uuid": "5a75b20e-f656-452c-b833-3b7947ee80ac", "value": "T1C0472392B9D192F4E3934B0582C7138A5342B1A7DE66860E17C4EC032971F979F4EE7B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685761262, "uuid": "f297f1f4-08d1-4705-850e-88947a11d67c", "value": "22a71214a0c9214caa6b4dfa0b409cb5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685761262, "uuid": "2cfb7e80-ab4e-4bc7-834a-7c88d920911b", "value": "393216:ean14RbLyxekCfX2XmaxYSFmMF4FxUhIGckCK/COD1NOf8NPqV:eAMVhHI/F44hIbO/CG1NOf8NPqV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685761262, "uuid": "5d17c8ac-21d2-49d4-8f29-bdfe1cb1df3e", "value": 26629040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685761262, "uuid": "4216ebcd-30e8-4f30-bfbe-478a9d92226a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685761262, "uuid": "5f686373-420f-4149-950a-eecd55181406", "value": "Docker-Setup-2.10.18.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9453902-01df-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685777142, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685777142, "uuid": "8b558cdf-ff19-4233-ab9d-165b21511d37", "comment": "Malware payload (RedLineStealer)", "value": "6d138fc50b79791cffd38370016e13ed", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685777142, "uuid": "068c5462-ac9f-4ee9-b7fa-d2947c06b8cc", "comment": "Malware payload (RedLineStealer)", "value": "686b9bb88787a9e7a8bc00c2742713975019277470bee6710ba92f95d8c25498", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685777142, "uuid": "2ade44e7-be53-417d-aa34-8858bffa5582", "comment": "Malware payload (RedLineStealer)", "value": "14f8417a017a8828d8a2086eb73ee1757bd455a1", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685777142, "uuid": "accf1fce-e55b-41ee-a20a-e642e8c8aceb", "comment": "Malware payload (RedLineStealer)", "value": "f8a222b5e26f70c2bd14798414579713df1858bc07380c4f49ecf6d367174aff9cfae16ad8e785cd576635209f5d74f0", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685777142, "uuid": "f95d0857-953c-4a0e-9d5b-6548f73c58ca", "value": "T1510522029BE44066C8B61FF418F7039B0B377DA19AB496532784A81F9CB1AE0F975377", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685777142, "uuid": "f13dfa02-d831-4c2f-8036-2a2631fe6724", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685777142, "uuid": "b36872b6-2b67-48a9-99fe-815d70017eca", "value": "24576:iyGZvx6hoOUQX3M8MF2tdhuOMWjfRZ1N:Jm4hoHQHkCuOTjp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685777142, "uuid": "d16a2ba5-eb8d-464f-9ea3-ee5c9e07f1bd", "value": 813056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685777142, "uuid": "50cf389c-e82a-4e2a-adbe-2dca83cff58d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685777142, "uuid": "e62e63c5-c7fa-4486-9442-1bbce81b8f3a", "value": "6d138fc50b79791cffd38370016e13ed.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8a1a328-01d7-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685773759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773759, "uuid": "9e9d2cfe-e34b-4372-935e-3c0f8c08abe3", "comment": "Malware payload (RedLineStealer)", "value": "92ffea5ce8b84d5691d98f1accb68a1f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773759, "uuid": "ac17f6c1-a632-44a5-982a-abb26e62db57", "comment": "Malware payload (RedLineStealer)", "value": "68b13e3fe083711f824ff4d93a428cfdf99da5be53d83e41aa4c2d8093765c18", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773759, "uuid": "64d550fb-eb10-464f-aa4c-181deab4f4cb", "comment": "Malware payload (RedLineStealer)", "value": "f65589e9a217e84b6154b123eade77b521307968", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773759, "uuid": "1912b433-ee15-4bd0-9e72-8e3393402011", "comment": "Malware payload (RedLineStealer)", "value": "d608c0c35cc73d21c0fd846ab9b358b2d6a979f89552079d1df2c21ed2ce1251655b3b6279292bb658af92dfb27f0c6c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773759, "uuid": "d37822ae-f7fb-4be2-80ef-60d3566f3cb1", "value": "T14B849E0372E07C24E6264B728E2ED6F8661EF9918F5577D726496F2F08B01A2C373706", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773759, "uuid": "7636722f-8d99-40a1-ae72-74c6a2ec4c3d", "value": "a52b903201b2b26f84fa5c505e01f1fe", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773759, "uuid": "651bac28-367b-4b47-8301-dba34056a4ee", "value": "6144:wYLwRcNDPS57v61CFBLsf9cFipooOAOGWXZCYKeq:we0ct2Y1cFipojpCYKeq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685773759, "uuid": "9c1b81b5-8083-484a-8f50-5d659f3e9f97", "value": 374784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685773759, "uuid": "2ef1c6a8-1e40-47d1-a297-576cda44862e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773759, "uuid": "1e9ed5ba-849d-4865-9130-af7830410e6b", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6ae71c6-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685779339, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779339, "uuid": "edbeec1f-3cf7-4911-98f0-ec15ed3638a2", "comment": "Malware payload (Mirai)", "value": "94b41092a25bf9c93ba68b766206f971", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779339, "uuid": "f18d250b-9b1a-40b8-be58-744a58424b05", "comment": "Malware payload (Mirai)", "value": "68c29193ee4cca4690514f693cb6afb67cb2b6318d514a567bf7a526061ba311", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779339, "uuid": "4c52c4cc-b059-4c2f-aa44-e2faaadcc899", "comment": "Malware payload (Mirai)", "value": "d4baa8f7b98485c007324dc3a8409632154d7cc7", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779339, "uuid": "81b6ec78-9559-4a1d-865b-b9d4af24fb1e", "comment": "Malware payload (Mirai)", "value": "59178a23f29fdd3997ca0f57fb833556cf35c603f30be866b8c251c662cd57cf10fd27968d21124c25c4bb54fb060f55", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779339, "uuid": "c6aead59-f7f3-4e16-a673-6d1133d81b1c", "value": "T1E8C3F831E8044B1BC2D223F6E75A469E3F351E9793E733115A3879B06FF27992E29520", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779339, "uuid": "2caa56c8-1b56-4f10-9cf4-f96693708299", "value": "3072:6jVlyaL5JCrIpv04shbttiEiTmP46aQyfPlfKsNb:yoCJCN4shbHemP46aQyfPlfKsNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685779339, "uuid": "e164c1da-c357-4559-a3bc-63f263c21816", "value": 129898, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685779339, "uuid": "5f4ba124-010c-4968-93cb-b77d3e5ae435", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779339, "uuid": "171b65ef-5831-4810-a83d-95fc1600d3fa", "value": "94b41092a25bf9c93ba68b766206f971", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d86af53-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782062, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782062, "uuid": "1ef39e03-053e-46f9-bf46-5987959b2d8e", "comment": "Malware payload (Mirai)", "value": "0e9c26eab7c584a8efc9bef4d20d33f1", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782062, "uuid": "16a904b7-c653-433d-9f1e-faa03f2a8073", "comment": "Malware payload (Mirai)", "value": "6a4b97672a4393aae3218e5c6fa27c53aec8b008def88369d981bb059db0f97a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782062, "uuid": "766c1297-b1d9-4a6f-847c-c8d12a07ce76", "comment": "Malware payload (Mirai)", "value": "65cd6aad4d99c158112b16972a8ba66f968f5b42", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782062, "uuid": "665f2613-7464-4975-a9f1-725648ef7239", "comment": "Malware payload (Mirai)", "value": "fa5172c46f6a2ba68567f129dde073f8769b4ac1f607442235142d81da75ba677709319748b4b0d43e5c79dcbb97d814", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782062, "uuid": "6ba7fc82-3799-434c-8ca9-b24a2641f947", "value": "T125430895B8818A17C6D463BBFA2E51CD332663F8E2DF32179D212F10778A81F0E67651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782062, "uuid": "d5cccd7f-5e84-44b0-9bb5-c25d4ef96181", "value": "768:ArTomjKOpNtGu70DH32bIeLjOJtrCC2BUOX72oBcWTcSPCt5l6/NPYBLybez+:OoaK5H3yLqJtR2BD7YWTcaCt5l6OBHy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782062, "uuid": "8326bf16-7804-401e-b63a-b9158e489813", "value": 55740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782062, "uuid": "e9147721-0277-46be-8dd9-2ab0e36a9170", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782062, "uuid": "6c293305-f158-4eea-82ec-23c053b8e1cd", "value": "0e9c26eab7c584a8efc9bef4d20d33f1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1613f3c-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802496, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802496, "uuid": "8b1730a3-7859-44d3-8cb0-fca47fc9df2c", "comment": "Malware payload", "value": "3d966bd2ce205ef0c186058a96f0213d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802496, "uuid": "fcac22f7-81d8-4ced-b3fd-489d239670ee", "comment": "Malware payload", "value": "6b44f1402f7f95a00d6c6bebc1cf9ee2dc8d2dfab0ee78f683064f2c721c2be8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802496, "uuid": "f893c9e5-5276-40ec-ad76-80a79fbe97bb", "comment": "Malware payload", "value": "46839973fe2c5881d423cc6209b00d3735d6c139", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802496, "uuid": "95f2edc5-ca92-4d82-812c-b830f1136e82", "comment": "Malware payload", "value": "c9e2cfd14e8c9a98f32918f1cc7c0e2fc9f52a7c825870ac4a771ab90e2c95134788b390e01a4bb897cd50f23e4144ce", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802496, "uuid": "8f2553df-c178-406f-9328-f6c9acf69e25", "value": "T1B91512579FF51220E4E32C741E27EE3FA764261063ACC667864BD4BC3C422A5B92B7D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802496, "uuid": "2d0b36b4-d05c-448c-9189-dd1338f57ba5", "value": "12288:HO7vS7dJ/7jzzMVlzTkiYUbsCTZ0ITlr1M4lLp2iBuPQKincyqS89:HO7vGJjX2eUbs4d1n1LKincyB89", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802496, "uuid": "5e163974-b5f1-4fca-bddb-9a0d4bbd6219", "value": 942080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802496, "uuid": "1c838f93-b923-40d6-8408-4ff89a0780c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802496, "uuid": "8d93b850-019f-4df8-9056-a70f0a335bff", "value": "SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.28348.13786", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a884f4e-0206-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685793707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793707, "uuid": "bc870161-6277-4929-8aa5-7184648aba94", "comment": "Malware payload (Mirai)", "value": "0a2dc0715f5aa83f74b9b38a2fbfb6ee", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793707, "uuid": "f8197a06-1f75-4f7b-8b8a-7949b544a94f", "comment": "Malware payload (Mirai)", "value": "6c0685632b05c2c7f1528324a89b7bf3d6b0f1806a39a5d0e2abbb204db5e4d4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793707, "uuid": "8ca77d27-ad39-4050-91f5-f0ac48d45fe4", "comment": "Malware payload (Mirai)", "value": "32b9b0beeb73760d650335e895496378877202d8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793707, "uuid": "02a2245b-1ab9-479c-9d1b-cc694f543d53", "comment": "Malware payload (Mirai)", "value": "989d2bc05819a8c9dbe13ab9184789fd767159f345c1cd4d7529ed3f348a9e60e817ded95e57638547b803f9848f1335", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793707, "uuid": "3bacee47-948c-4f14-8111-d3cc04dff8bc", "value": "T1BC8471A8F8D58D56C4F8A2F5F08A22B90F3C46F6B4976133D8280F74769754A748E336", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793707, "uuid": "4bd1658c-c33f-4d32-8ee1-134956f525db", "value": "6144:FEazPyoXqv+Vjm8a1desrQCQ9O9O6Jjus5ycwI+lDGQs6t2esEhCwBw3utWLaBca:FEaHKyjm8GdDrQj96Oqj753rSNsO2TA9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793707, "uuid": "07613415-ab51-4146-92be-d2a316ef0206", "value": 375756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793707, "uuid": "6d4a7133-e123-4113-a1d0-663e81cdf60e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793707, "uuid": "ab6a4d9a-5746-49bc-b685-6bd427d12df5", "value": "0a2dc0715f5aa83f74b9b38a2fbfb6ee", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33484b41-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782018, "uuid": "3c36e5b2-9bd9-4d3f-99de-f1a471401794", "comment": "Malware payload (Mirai)", "value": "9920c441d0e451d7e412b980aa58c876", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782018, "uuid": "9c4c389f-e5ae-48ea-8f75-7db362d34c4f", "comment": "Malware payload (Mirai)", "value": "6c735bbe1479b81f8062f39f9442aa60a4b6a261f628191569acf08d7dfd6425", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782018, "uuid": "86c6d38e-eb97-4e9d-93da-1d797bf3a65a", "comment": "Malware payload (Mirai)", "value": "5a1406c8e884f86928c6409652d57c563faeb663", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782018, "uuid": "68b439ab-cfb9-431b-828b-92f398c44479", "comment": "Malware payload (Mirai)", "value": "f08f81967f4c818bc51e0701223bf94d2fe5089a5bbd5b111f7bea77265105f86d287b5ecc54076d56efc55671d3cdec", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782018, "uuid": "47755b42-4e79-4f12-a2c6-8ff646e003ef", "value": "T1A4F2F1D6DE3CD752C279D1380B9FBE095F10FA0CDBD59477AEE8A462046AED03A401E0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782018, "uuid": "889831af-35bc-427f-80c2-ad90bea9b822", "value": "768:uuQIO4CmPSVmCkDYozy2rAtZMJrIchdjln6ycVinbcuyD7UV/2g:vq4CoSjKPBsZ4V3jln6yMinouy8og", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782018, "uuid": "d88de3c0-8e38-4fce-8e74-ca63e3c7ad7b", "value": 36168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782018, "uuid": "f2231e76-24d3-4581-8461-edfe2ed7b75e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782018, "uuid": "c14d06bd-3795-46ce-aeb4-0bb6934c8083", "value": "9920c441d0e451d7e412b980aa58c876", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28dc9d7e-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685778994, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778994, "uuid": "b4289775-b137-4131-adf0-10280aad4667", "comment": "Malware payload (Mirai)", "value": "40195c523cbd084e8075e28e607286ad", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778994, "uuid": "8ff44ae5-b514-4249-bf79-dbd11cf85e95", "comment": "Malware payload (Mirai)", "value": "6e396fc2f53db73bfa7c0f574aefe458f3225ecf04162c862076e685122e9e8d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778994, "uuid": "ddb399b7-98a0-4e50-ba7e-04b3852aa782", "comment": "Malware payload (Mirai)", "value": "b4f30b943e302dc030720487e729bb240c121866", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778994, "uuid": "f9e92015-1cb5-4e82-9d80-19af4b2c6a40", "comment": "Malware payload (Mirai)", "value": "f601fa465f2078fae9b6bf43026c762f5faedfd2e03d48812a0ccfb571bef25049be2f1fbbcc5127112710a493f6b530", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778994, "uuid": "f6addbbb-b103-4793-8193-4a07c1d3238c", "value": "T1EDC3C63B67170E23C0CA50B101E34332AE75DF8B34B952D7AAD07D686F36A843856BD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778994, "uuid": "1a4c0683-cc57-46eb-b4b3-a53d0faac89a", "value": "3072:wsrp9xV+GZTZepNPhj+e3fSqP0L7ymm/QMurB1nKGNb:SMQplV0amm/QMurB1nKGNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685778994, "uuid": "188fd95c-8291-4a58-aef8-168fba42aac3", "value": 129856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685778994, "uuid": "ed62884d-6358-47ea-af01-da258e1d9519", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778994, "uuid": "226f3ee5-9ac7-4280-b460-480abc164ae3", "value": "40195c523cbd084e8075e28e607286ad", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "79d60459-01f8-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685787720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787720, "uuid": "b676d803-f5a6-4714-b96b-05232887d8ab", "comment": "Malware payload (Mirai)", "value": "75db284874aa6661545380dd61cc3091", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787720, "uuid": "b20abe39-7803-48d5-bdda-92d2455623bd", "comment": "Malware payload (Mirai)", "value": "70429ad7642129babacae4ade06401970f73bf83774d0b9c26c5cac313212452", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787720, "uuid": "e3977dec-cdaa-4017-b937-82f3fbe1a41a", "comment": "Malware payload (Mirai)", "value": "e8c838f7ccc866d99168165b1242b941b3c7e77b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787720, "uuid": "37d9ac41-cc2e-442e-8301-95e1947ec50c", "comment": "Malware payload (Mirai)", "value": "f4ca4fba8ca579dd9959f6bebaa7c1820855ee6888156c662b7ee8b58be5966135619d029ff04fd19a20ed2c8b6f59d2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787720, "uuid": "7e64b79b-078d-48e4-b999-c069fc7d4a49", "value": "T1E0B33B3BBB130E23C0CA147111E31732BAB6D39634FA1297BDE06EAC6F169843556BD5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787720, "uuid": "2258d5a3-7e23-4ab7-94e7-1d788feef018", "value": "1536:b2E/4+6rWwY33QSZCNM5OutRt6shq1smajEPXju5frokdj:Z2WDnjCN8OyPhwsmajEPXi5f8Cj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685787720, "uuid": "6098c074-0ae1-4c7d-b67a-fa52af315b0b", "value": 117142, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685787720, "uuid": "5e1af7d5-ea22-4422-a1ce-c02c4393447c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787720, "uuid": "70c1ace7-4e3a-4240-a92f-a2382fb94ac8", "value": "75db284874aa6661545380dd61cc3091", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d200008-01bd-11ee-b3cf-42010a9c0076", "comment": "Malware payload (AveMariaRAT)", "timestamp": 1685762439, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685762439, "uuid": "edada251-9f46-4b19-b932-b0bb3ff82f75", "comment": "Malware payload (AveMariaRAT)", "value": "af609570f0904c68731b9e0cd86df519", "object_relation": "md5", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685762439, "uuid": "8c37a976-4d44-413b-b894-0377efaf4ad4", "comment": "Malware payload (AveMariaRAT)", "value": "73fc341bbc5be844d20c51d8ee5356b9d44a628d0aef4e95df08b057ea6cadba", "object_relation": "sha256", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685762439, "uuid": "82610543-7244-47d2-968d-ee2ce6becb7c", "comment": "Malware payload (AveMariaRAT)", "value": "abea0b245f5a15f68a0fba62caaec48ea2ee9387", "object_relation": "sha1", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685762439, "uuid": "cec7425a-cb6e-483c-87f8-e4198692172e", "comment": "Malware payload (AveMariaRAT)", "value": "3b089eced817362c5fda486f1cf8aeec740b1158fcd6ecb05ca8ff67c5e29e81bfee3604df0730c5ee8e90e626de58fc", "object_relation": "sha3-384", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685762439, "uuid": "ca2246b1-52d9-4ae5-8903-13c50835fceb", "value": "T14AD38D13BBE64436E6F202B02DB97E7597BCF9341A25C58BA3945446AC32C44FE36353", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685762439, "uuid": "ba401ee4-45ae-4b2a-8330-2d425ab6f539", "value": "56fc94e02d7bc310030753938e49a91a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685762439, "uuid": "e0dc3800-bd6c-4d43-abab-ea614007c5aa", "value": "3072:K7W9jps0Tx4azG6GweOTir5axbjNCz45LT7a:KwpsERzGKurEXCzeLT7a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685762439, "uuid": "ed2d5c12-61c2-44aa-bf6a-fc8d326616c8", "value": 135168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685762439, "uuid": "828926f4-20d9-4ce2-a8fb-40a333546b08", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685762439, "uuid": "e9048703-7413-4618-993a-ec061361d8be", "value": "af609570f0904c68731b9e0cd86df519.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5856d424-0255-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685827607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685827607, "uuid": "bc8d5b06-6323-42f6-9326-6b8c9e8235d5", "comment": "Malware payload (RedLineStealer)", "value": "0f874cc6be1478f65096b9eba7788a46", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685827607, "uuid": "ba01de4b-defe-49ea-8d51-e18430cbe37b", "comment": "Malware payload (RedLineStealer)", "value": "74b102111f7d344a2c0cb7a77d73c968aff7f6a4b67c3457643d9a61c12d2aef", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685827607, "uuid": "bb5aa959-b329-4c36-bb86-6082922b61c8", "comment": "Malware payload (RedLineStealer)", "value": "41cdb6232ba2030fc1b6adb8d58e30a43a39af99", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685827607, "uuid": "1e8ccb94-f627-411b-892b-a289541ddb38", "comment": "Malware payload (RedLineStealer)", "value": "389ee6260bd34e2f1715140d0d0e12b5bfb9e1e560dfee59433521537383d74166f9b0ac979ff4c15d7b6604ddccac17", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685827607, "uuid": "df9eea7a-dcaf-4d6d-b939-45050554f035", "value": "T1A8052206E3D85036E9B423B29CF206E71A31FD6589788B7737886C6E0C726C499357B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685827607, "uuid": "c399b5bf-fc41-453f-be75-93005f778a95", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685827607, "uuid": "4a320153-047f-4f93-bc7a-24af662c3492", "value": "24576:oyCxZgnNJXMqGP3AtHblP2TwKQzlzqSG:vCxZg7XfG36blrTpzp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685827607, "uuid": "dab2b791-d8b1-4855-8b3d-8cea2da36fd3", "value": 796160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685827607, "uuid": "95744c0b-909d-4118-843b-7ed177ae5d86", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685827607, "uuid": "2bb041bf-0912-43c2-9493-559a0c52d558", "value": "0f874cc6be1478f65096b9eba7788a46", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15f4d5df-0202-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685791847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791847, "uuid": "926775ff-8a7a-45bf-9a91-72b534387641", "comment": "Malware payload (RedLineStealer)", "value": "175ecc91329c162befdf0fb518a9439a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791847, "uuid": "9525e1b1-adca-4dd7-b03c-ff8a44a9dcbb", "comment": "Malware payload (RedLineStealer)", "value": "776b20cd1748219262234b383869bbbab660dac992bc2aacc21ea86865866087", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791847, "uuid": "615ce35d-f830-4965-9155-31dbe2a8fb6e", "comment": "Malware payload (RedLineStealer)", "value": "e1329d08910d2b121fa6b7a70286ae7be815b0cb", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791847, "uuid": "83d70a31-8989-45e0-81b4-87a0a32a3213", "comment": "Malware payload (RedLineStealer)", "value": "1df9246e8434a07085f1b9d0f0d61272201398ff746db0645d5787fbcc4e148d1b1e326594e7474733708437c67a1675", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685791847, "uuid": "5a100de5-1fab-4a46-ad8d-1ba2a170d71a", "value": "T177052202ABC88132E9B913B058F606D71A397DB6DA78936B36455D1A0C737C8763633F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685791847, "uuid": "7a0bdee5-7cce-4f19-9a98-13d63a7eee6b", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685791847, "uuid": "e7bb2fd7-d1e2-4a3a-8463-5d2b79131df2", "value": "12288:XMrUy90Mn5C/EXIj9Twwy7zEeWUW/14sbgtAAtDm97D4I0xECPp/b0vpMoRDnALp:7yvx4jiPI/zbgt3mDn09teDcLvB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685791847, "uuid": "48d52a6c-9b1b-4f87-a911-8106e7fd6204", "value": 797696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685791847, "uuid": "b9f2ac0e-bd12-4ee3-a2cf-36c1200daa54", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685791847, "uuid": "d34bdb17-a214-4052-bc3f-8c608d466b64", "value": "175ecc91329c162befdf0fb518a9439a.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acd75a3a-01e3-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685778786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778786, "uuid": "5c9b1448-98e0-45e9-9c53-10426d7313fe", "comment": "Malware payload (Mirai)", "value": "e8cfeec55b3b0ebad37b4c90f02fcf47", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778786, "uuid": "4be84c41-eb0d-4349-ac05-a9fdcddfde42", "comment": "Malware payload (Mirai)", "value": "77fef2095480f4b7196d1d7a6f67aa6fd6638df096bad73404858f23912c7d85", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778786, "uuid": "590ce94b-15cd-485a-a9f8-ec17de949e5b", "comment": "Malware payload (Mirai)", "value": "758460207403d1a5efc53017cd68d2c4391f16c3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778786, "uuid": "c83010c9-b10b-4c0f-9407-7684c38be610", "comment": "Malware payload (Mirai)", "value": "72d8009dfaa2a10275adb20f7a6c8363040a59247c1a94ff5fb9ac0d645bf7919caaf83e7fa21034b340c59a8df19264", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778786, "uuid": "03e9811b-9ac4-45da-a684-f5f73e151a0a", "value": "T12BA2D015BF2886CBC832397945D9F6D22392FD61F2DDCC092940D16FB4A33E96870E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778786, "uuid": "2f177911-b7b5-4553-919e-b979d986a6a5", "value": "384:Mg/Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTc:598o08kxofBE+ZkXaITbp2F2TWul0c5w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685778786, "uuid": "0ed60b2c-3bf8-412c-8a40-deb4fb6f3351", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685778786, "uuid": "41db73f6-f014-4624-8d0e-a049bf0d2256", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778786, "uuid": "7f5f3702-6e55-4a5a-b0f5-cd20e52a1376", "value": "boatnet.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3aded81-021c-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Smoke Loader)", "timestamp": 1685803386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803386, "uuid": "c4abee9f-75e5-4692-9b2e-9d431deb324b", "comment": "Malware payload (Smoke Loader)", "value": "0cfe10235bd4527092d78224fc7f67c3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803386, "uuid": "83c04439-b655-4ecc-8273-f5b1f4c21078", "comment": "Malware payload (Smoke Loader)", "value": "794f5d0d65bfbaa9153c17e77da56f70726b4358e695916c5de1db93651de217", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803386, "uuid": "76502bcb-9d5e-43cc-837a-0878b7f14072", "comment": "Malware payload (Smoke Loader)", "value": "b9282edc5134b7456776f869807e6563d7227ba4", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803386, "uuid": "27ba296b-e721-4649-8886-293798703d8e", "comment": "Malware payload (Smoke Loader)", "value": "4d9828b91eed51a29f27714f96ec98e9a548f96c458bf3321c6b03793fcccefe90045a8c47ab049ab2307e470f77d5db", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803386, "uuid": "3b2d2396-c4d0-4d95-992e-769b10ff5d79", "value": "T1E9444B0373E07C64E6264B328E2ED6F8665EF9918F1577E71615AE2F08B01A2C773706", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803386, "uuid": "4452a7f5-e265-40f1-af80-dc316a4fcff4", "value": "a52b903201b2b26f84fa5c505e01f1fe", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803386, "uuid": "aa3a84af-07d9-4bb9-aadc-3f31baf17b09", "value": "3072:ZPB/dGx8Rk3pt/tIvtP0iU8sEqn5vsxFsT86TSFRcJByNDigGiSKQVqW:dvGstc/8SnteO9kcHyrG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685803386, "uuid": "a9d50a54-77e6-4d2c-8d1f-4e1088707ecf", "value": 269824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685803386, "uuid": "58d496f7-3361-459b-8fb8-4e8613399714", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803386, "uuid": "774c13ff-fc2c-48c4-8cf4-b51e00da7574", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edd695ed-01ef-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RecordBreaker)", "timestamp": 1685784049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685784049, "uuid": "fa1a6c67-0644-43b2-a409-caa087612055", "comment": "Malware payload (RecordBreaker)", "value": "85478014f1368c7bbb8d2a0ca6b711c4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "recordbreaker", "colour": "#EFDCC0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685784049, "uuid": "75069a57-2124-4d70-9d37-813aacf85d0b", "comment": "Malware payload (RecordBreaker)", "value": "79564fca4784cf3f6056a6909a630f14c8b7836174fa2032ff60009761f36aee", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "recordbreaker", "colour": "#EFDCC0", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685784049, "uuid": "58872cb7-9069-49cb-8c7c-2951ca2ce415", "comment": "Malware payload (RecordBreaker)", "value": "4911b90ece87ca519200294533963561faeca7c1", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "recordbreaker", "colour": "#EFDCC0", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685784049, "uuid": "b4ba38a2-fdad-40fa-9e7a-7045756ec581", "comment": "Malware payload (RecordBreaker)", "value": "d365ed7cc882b05504b576d2661f2372d649e25bb28cbfc59dcf1cb8a83397329ed701101ca2edccd0afdf3a8ca11043", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "recordbreaker", "colour": "#EFDCC0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685784049, "uuid": "87877ad7-831b-4989-b257-7e64040062bb", "value": "T192445D1363D37C65E5164A728E2EC2E86B1EFB518F5B37DF12146E2F08721A1C272B42", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685784049, "uuid": "ea2e5122-4f8e-4a9c-a01b-72f0b060ce83", "value": "5eda38ec3329e662bd4d2abbcac5fbe5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685784049, "uuid": "067c661b-f9d0-4669-bad4-94e160673c35", "value": "3072:xOd/PtoA1Kw5JkZ4c71Jcajn8VbRHBoj7BxeuXT2hqukD1jxOPii2a:EddoAGZ4K1PwVbRGtPwPy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685784049, "uuid": "447bb0b6-b558-4970-acf4-16a58b09991a", "value": 270336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685784049, "uuid": "ccd914b1-9cbc-4ba6-92b1-354fffa53e43", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685784049, "uuid": "5ac8d2c7-bfa8-47df-b614-bd9061ae3899", "value": "85478014f1368c7bbb8d2a0ca6b711c4.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ef7836c-021d-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685803512, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803512, "uuid": "ae32d02d-77d2-4252-8d4a-d93092c000eb", "comment": "Malware payload", "value": "5884ad68274a2f432452f13156bec5c7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803512, "uuid": "151f992d-73b0-4e85-9fcc-4db37c6cb1ce", "comment": "Malware payload", "value": "79e6a374efe497a5582b4a9b1534773d0e5e6a2c4a236537802e8f6342401901", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803512, "uuid": "5dd15112-2c79-4a9f-a31c-5166ca1380d4", "comment": "Malware payload", "value": "ec564f75de476164c49377e1f095c09ff2d65773", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803512, "uuid": "e608645a-c867-449d-b109-b4402072eb14", "comment": "Malware payload", "value": "045e09f4f95f321c063323e7f4814ac9856e5f68c53de57fa69a9f97706050d450846a6d1ee9ba3fc6ce00b76f30e081", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803512, "uuid": "7fdcfad4-f3a4-473a-8005-b5b80c5dd9c5", "value": "T103444C0373E17C64E6264B328E2ED2F4761EF9918F5977E71A15AE2F09B01A1C372706", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803512, "uuid": "da35d76f-7a46-482d-aba6-46c68eeed9f2", "value": "ff9fc1da93d8806551420a96da91b169", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803512, "uuid": "c76302f2-e2fe-4358-a6b6-63f1f15615a8", "value": "3072:GwGXBE88Rk3Mjc8ljHbLxPqhq2WmqjVRXIn7Po7BWI+ZLs9zapWA6xPy:DkE3jnh52WdDXI7PWBW095A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685803512, "uuid": "e751a7b9-328d-4279-8ae2-12ee1b377262", "value": 268800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685803512, "uuid": "ab2201e5-6803-4e5c-bce0-2939ff65953f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803512, "uuid": "b3a190d6-a7b0-4811-9e45-838d26e9cad7", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58cb3c67-0206-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685793677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793677, "uuid": "ab71185c-7c48-46a0-838b-9fb11b06827e", "comment": "Malware payload (Mirai)", "value": "4624300687f96b54e273f4297b02fdba", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793677, "uuid": "db6f143e-9466-4d2b-88ac-6a0f6008d7cf", "comment": "Malware payload (Mirai)", "value": "79fb456fe69af8027cd81de386935c7439cf99876d2c9ba48f4b90996d43f3ec", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793677, "uuid": "a3997578-1792-4f01-ac30-9992cb82d5df", "comment": "Malware payload (Mirai)", "value": "6a987c3c81b75afe09c975e881a8e3213db85520", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793677, "uuid": "528760c5-42b9-4265-bb99-6f4b84312a92", "comment": "Malware payload (Mirai)", "value": "841e13a0857554ce0da9d2e29fbfde31192445ea983ba78f55bde4f275e2f4d10d458a72e65f1c1b17256ce73bcfa2f8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793677, "uuid": "e3054fe2-dcc3-458e-a365-223a1d6d79e2", "value": "T1EC832896F400DDBDF80BDB3B44574D16B631A3D10A831B366367BAA3FC761950826ECA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793677, "uuid": "ac68f644-b3ec-4c0c-bad3-ea840ec92f35", "value": "1536:qsH0m5MPORopWI/0/gUCv8cK5Gy7nMzTqPjL35lDB6/4fGSdv:qXORopW20/RCOncTIXB6/4fGSt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793677, "uuid": "f232861b-b564-4b02-a806-11770b3a3ee8", "value": 83776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793677, "uuid": "ee475cc0-8d41-4ff8-8501-ac9d8c013046", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793677, "uuid": "f0ef0338-66a1-4ff1-9be8-41883d159f54", "value": "4624300687f96b54e273f4297b02fdba", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e228232d-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802498, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802498, "uuid": "66b1e06e-6d92-4993-81b1-dfca7be725bc", "comment": "Malware payload", "value": "e0deba84ccd4282bbfcc2f0987149a1f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802498, "uuid": "e96e43c9-445d-4d9f-a26b-e72dabffafb5", "comment": "Malware payload", "value": "7a0342dc2c1b97ae34baf873a293edd6d5cf567c7c3a2f7c0fbe86ab74eaa463", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802498, "uuid": "9e2f528f-f28b-4a76-8c80-d5c5703105df", "comment": "Malware payload", "value": "59590460b7234dc014b9281a4b1bb7bc97e0e2ef", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802498, "uuid": "b223e3a9-3e14-473c-9415-8a80d290dd21", "comment": "Malware payload", "value": "6af8d4b2d130e1bd089684b865b39eab8347c8e8619e683b44344cee803025dbded8a59fd1554b905eb6c730b42b0e0e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802498, "uuid": "75f4ebc8-3471-4984-abec-1129760075c2", "value": "T1CF654C27F2B19437C1222639ED1FA6ACEA33BE501E58A9423FE91D4C9F7A78174151C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802498, "uuid": "4c69dd3e-4cce-4fdb-a673-afa8a3c94f1f", "value": "6144:HMXCkem0buP7Y9POy4J1eWA7mxQQi5DYT8B0v9c/E/abrxFSBwyWw7sxpsh:tk10buEPOy4K9pS8B0vA+abmnWdTs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802498, "uuid": "5567ff02-81f3-4829-a7fa-8351c2d82afd", "value": 1546752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802498, "uuid": "f0e3bb60-30e4-4209-8dcb-91c112cb1fed", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802498, "uuid": "3f748fe9-4331-4626-a0ef-724a18e35014", "value": "SecuriteInfo.com.W32.S-909ca299.Eldorado.14074.27111", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ab0b2d0-021e-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685803854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803854, "uuid": "056b312c-1cd4-424a-afc7-d4120fa564f2", "comment": "Malware payload (Amadey)", "value": "94d6ba56cc35ab94a2eb6c2478e70a24", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803854, "uuid": "f30395dd-e673-44e3-823d-3c623e3a22c7", "comment": "Malware payload (Amadey)", "value": "7becbd225d65be7dfda500f924bfb9070d068ecf3a34f6ba490fa0e1ba6497f0", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803854, "uuid": "143f014c-8f05-4476-93e5-f6f783b1f915", "comment": "Malware payload (Amadey)", "value": "2cfaa317238510bc9d957616c0d7ee4562a26523", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803854, "uuid": "3b5252f0-5d60-4a8d-8188-3643ff3fda28", "comment": "Malware payload (Amadey)", "value": "c20fb4b0507aa5176f29a150041f2e9e70ea0f5f62250211f8527dc9310e9e2111fa8f4b55540488684a80d29d670f32", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803854, "uuid": "c8f95abe-24a8-4e3c-a5ca-38e97129f2d3", "value": "T162051263B2D81872D8B227742CF312870F3A7DA199795B2B37566D5B0C72784A83137B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803854, "uuid": "afd7f015-ff34-4151-bfc8-42fb33cd594c", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803854, "uuid": "c8301bd7-9d2b-40fa-9c89-8d888a07eb98", "value": "12288:5Mr9y90D9qyFPXqIK3T7HKDRJ7gbAk09T9jBQcU841kIDKAh6dyBBdq10:Iyi9fXqIl9lgYBRU84yI/hE10", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685803854, "uuid": "cf1cdb88-bbfa-4af4-be5e-b04ce6344ded", "value": 796672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685803854, "uuid": "ce9762b4-accf-483b-b442-f6e99d11c199", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803854, "uuid": "0b3da76f-622f-41ba-b72e-81626a4be963", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef9c64e7-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685779327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779327, "uuid": "c59e76a2-7171-442c-8e28-bef135108f5c", "comment": "Malware payload (Mirai)", "value": "23e4ebfe4dce0d25a98480a221fa4b31", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779327, "uuid": "af95ee78-04a9-41a3-b169-fdd9cce5c603", "comment": "Malware payload (Mirai)", "value": "7c05c86c5604d25e5c6ad885dcc796bf445cf16c84f58c699f48deae673e5f1a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779327, "uuid": "ab46c46a-deb5-46c3-8fd0-06e0d70fed2d", "comment": "Malware payload (Mirai)", "value": "577e546fb45067386914f921bb417041b1ccf9a8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779327, "uuid": "f4907356-30a5-468f-b44b-d745f325ab1d", "comment": "Malware payload (Mirai)", "value": "fb170b4c8b7e6565d68128bf43cceb9fb76de5b1b9a572d67f8d89b43d84f30301225b00df0f438823f715255aa1f4c9", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779327, "uuid": "50ce29dc-62fa-48a3-abce-23f526ccde38", "value": "T157E3A53E7A11AFBEE168827107F29F70CF9529D326A19381E26CF6185E7118D0C9FB54", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779327, "uuid": "f8386c6f-a08b-42a6-bf9a-0d3f36bebd1f", "value": "3072:JW6dm9tS1aRGQdK76t/zC2I5mrThPaLEnvPrNb:c6IG+LC3mrThPaLEnvPrNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685779327, "uuid": "7d17b796-e29b-4ed3-a52e-e4c491975657", "value": 155428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685779327, "uuid": "5c08eaad-d0c3-4752-b7da-bb98db52b218", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779327, "uuid": "bf2017f7-461c-4095-a1b3-c9f25097a086", "value": "23e4ebfe4dce0d25a98480a221fa4b31", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ab84f5e-01ea-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685781735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685781735, "uuid": "ed510fdc-3da0-4b99-8a09-789ad6a03968", "comment": "Malware payload (Mirai)", "value": "10dea478986aae1c5ca52e5d9e6345bd", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685781735, "uuid": "31dc9634-1d72-48d3-9916-5666234e345b", "comment": "Malware payload (Mirai)", "value": "7db4e436786b96ec67b004f2a758e2365dbc1900cd505d1a9aaa23b7e3ebe001", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685781735, "uuid": "9bed1b39-5287-4985-b8f1-81e757ee1966", "comment": "Malware payload (Mirai)", "value": "7b2fd5081048a9e8fc7bfea79560ea707b9fc518", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685781735, "uuid": "45cde768-13b0-43e4-bb3b-13de9a5e5a99", "comment": "Malware payload (Mirai)", "value": "7f638db9520045541a22e2c16c99968a292e299b38433f12cf814b29e9188884095b44f475bdf69ae814c5043cf7168a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685781735, "uuid": "e2fb94d3-3f12-4450-b58d-951f10304fd5", "value": "T11AB2C0CD61543084CA8D7C7C278D4B564F6CA190BADD9B26E350CD98B3BEA8F385D069", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685781735, "uuid": "1a6990f0-6de7-4617-9fef-07df834140f0", "value": "768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpeEZqSWv3:4QlS07FUXqIYSXQKque8q/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685781735, "uuid": "5088d5c4-de10-4118-98be-011dfa38dc66", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685781735, "uuid": "c054f7ad-4f9c-4db6-b38d-dca780dc6ee1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685781735, "uuid": "6866a2c8-a67b-45de-8133-8b230cf7b680", "value": "10dea478986aae1c5ca52e5d9e6345bd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2e0ae9a-01ca-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685768139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685768139, "uuid": "18375b4c-5aa1-4d92-9483-355e3ae61851", "comment": "Malware payload (RedLineStealer)", "value": "9b3d6192f90b0e2e05e07ceaa114f3e2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685768139, "uuid": "8b5e5a98-037e-4122-a1bf-5486054e6bc9", "comment": "Malware payload (RedLineStealer)", "value": "7e74a8ffa1413acf2d1aa8cfea6164c25db2f64b471b38a90e70a28b3e8234f4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685768139, "uuid": "693b679c-2cdd-46dd-8beb-220584b08043", "comment": "Malware payload (RedLineStealer)", "value": "ac52044a1f446acd3ce2f45cf95285f8d3edc6ed", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685768139, "uuid": "5cee875d-d53e-4cff-9b91-38ee9acd2ae7", "comment": "Malware payload (RedLineStealer)", "value": "f72b0bdbf9109833acc6b91c8db721aeb3025778dbcd7ca06045112aa322198559b4861dec276bbc12a0bdef4a85cf64", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685768139, "uuid": "ea1f5f25-85d3-495d-b99c-f04c601bbcb4", "value": "T1B4052313A6E84172ECB437B028F706D30A3A7DA55DBC92AB3799AC4A09725D07C35377", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685768139, "uuid": "788a6c4e-45f7-47c6-9c3b-53b5b5b3e75e", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685768139, "uuid": "d97b513c-0652-463b-b1ce-ea3c2cc712b9", "value": "12288:XMrby901hiw+eAGyvUI+2qFv4vafcgwfE5Pb0fDZN1kAVup5fV8kEW6DEXG:0yfw9Owc4c7fgD07v1AtXEWjG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685768139, "uuid": "d2ead73a-480d-416f-be06-a65bed4e3fd3", "value": 812032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685768139, "uuid": "80df8bf2-e2aa-48f7-8aa2-0c31462d9087", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685768139, "uuid": "207aed3b-b337-4ebf-bfea-e12dacb30ccf", "value": "9b3d6192f90b0e2e05e07ceaa114f3e2.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8aaa0ab-01e2-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685778403, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778403, "uuid": "d92f3489-cf1c-47f1-82c3-739259460950", "comment": "Malware payload", "value": "a85b7fe3e3b93ce79db818d05a5b4f5d", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778403, "uuid": "d20ed8ff-6648-415a-b731-d408877a2a3e", "comment": "Malware payload", "value": "82425559c52e44889c3e5ab5a20a83fb2fb49ede1bdad876e8452e82229fb881", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778403, "uuid": "f4d13265-e54e-45b4-b0c8-de0d781cca42", "comment": "Malware payload", "value": "ee3f36c068759b8e6852d4281329b9f76826b793", "object_relation": "sha1", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778403, "uuid": "6063c2da-7ad7-40d6-bc1a-3c11ad230d68", "comment": "Malware payload", "value": "2e4c375d5a987516c258be3b965daf68e17e97167d546ea716db334d20d1a08521c046800b6ed99109d0f3933d982f5f", "object_relation": "sha3-384", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778403, "uuid": "7bf4185b-7508-4f66-bce9-502f651c369a", "value": "T1915601EC70B5B94AF9D4437BC6852CB6DB2CA240D7A93D9BCE204056BD8310F5F6A871", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778403, "uuid": "d4cf9223-507d-4acc-8ed3-42e112ccb65a", "value": "98304:PtwIu8OZ5MFxhOXN8vV5RqR+e0Yq0neJoWnu5KbwuEIFgb:PnEEm+ePeyWn06gb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685778403, "uuid": "ab78c32a-c3b4-4534-a807-6badc7a1e4b5", "value": 6166682, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685778403, "uuid": "700b2ddd-6865-4cb9-b58b-b6caa7cc7d6a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778403, "uuid": "2da4616f-2109-4503-a9e4-c8ef669f7515", "value": "malware.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3aa60aa7-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782030, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782030, "uuid": "6e87d817-0178-48be-bfc2-a5f3a5c070a3", "comment": "Malware payload (Mirai)", "value": "f264ac226bc5e4f230ae6c99f4f397f3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782030, "uuid": "552a948f-8fc1-4fa4-93b5-01a10df4dd28", "comment": "Malware payload (Mirai)", "value": "8313bbaf96f4f3f7bdf70c00190ea96a5d1a1264ef48b989eb53d1ca947d497b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782030, "uuid": "dfb12475-9822-4324-a8de-7b6b1a98625a", "comment": "Malware payload (Mirai)", "value": "adae7d09d9448cce4ed337ddc9ec1ded0ae4b27a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782030, "uuid": "4e3b5bc8-a9b5-4191-97e0-79d0185463cb", "comment": "Malware payload (Mirai)", "value": "4b8436a5dbdc876d4667ad040c24d55cd026ae9494b03901fb7d6bcc22da8f1448e9001b48c29765617a7dfaf0fd1275", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782030, "uuid": "0c5c85ca-208c-494c-b6cf-03e4027f8b84", "value": "T1AC230231490E9DB125303C76EAC5D7937AE12AB1C6673023D62D0A3C2FB47531E5BE49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782030, "uuid": "af7a5c62-4574-478c-9fc5-56c909ac0fec", "value": "768:g/TYCoIxdEk+AxoTZAZHFeq8b3cA9q3UELbUXfi6nVMQHI4vcGpvv:gECFd+A6YHAxcJLRQZv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782030, "uuid": "d107ba2c-2b05-48f8-8a18-7fad259bdb36", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782030, "uuid": "d8accbdb-8802-4e10-bf58-6568bfb2d290", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782030, "uuid": "91af14a6-0b3b-4922-9cc2-db1d1408bd4e", "value": "f264ac226bc5e4f230ae6c99f4f397f3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1f327c6-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685779331, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779331, "uuid": "0bfcade4-f9ed-4de9-9c34-fd2c0300356d", "comment": "Malware payload (Mirai)", "value": "c9fdfa6b4353a17caf3b6e4ed34fabfd", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779331, "uuid": "0e6ed782-99d7-44e1-bf0b-9959588bb0e3", "comment": "Malware payload (Mirai)", "value": "833d741fef320be01e60a675918fe589129ee58b0f89f8d4a02157c43f809d3a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779331, "uuid": "ffeae6f4-df61-45ea-9c0d-7c511d163f8f", "comment": "Malware payload (Mirai)", "value": "7b31a14217f96afd8d6c9c0d06a0382b99e87c6e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779331, "uuid": "59d564a9-1054-43bf-9f0e-0a461f5a6b75", "comment": "Malware payload (Mirai)", "value": "f7721fb02eb79c94a0daaf2d396ab60180a67f25bdc1df2acd2b8b164b0fe2eccda3a6cadf3b210206c6e5de64ede17b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779331, "uuid": "7ca785e4-55a2-4665-93b1-09f06ab9f5bc", "value": "T15092D1B0A185F8F4C251493EEBB9CD4269995774F1F8E225240D06F4E703886AAF71DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779331, "uuid": "757b38f4-ad69-4ea8-a51c-ee1793a4faaf", "value": "384:LsUCUClPu4CvlBBZpzwAW4yTXhkguQzEzMrywhymdGUop5hIUxH:LslUCgRlBBZpzwbjKTQiMmws3UozaUl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685779331, "uuid": "92b067c9-1106-4a75-9bf0-f8f94a2598c7", "value": 20476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685779331, "uuid": "05102df4-acc6-4ecb-8c9a-b5b8d2ee69be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779331, "uuid": "3ce3c445-ec9c-4b6c-bcd7-08fb07298fbb", "value": "c9fdfa6b4353a17caf3b6e4ed34fabfd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7edc1a1-0210-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Rhadamanthys)", "timestamp": 1685798186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685798186, "uuid": "8adb9cec-f9e4-49c7-9bef-901b963752cb", "comment": "Malware payload (Rhadamanthys)", "value": "d74aae3db38546077de66cc23a15a085", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685798186, "uuid": "27e68947-701a-4982-9500-e36cddd506c1", "comment": "Malware payload (Rhadamanthys)", "value": "83e1bfad796bd74197b6f7274742f0b459d7bc1870b1293b62b0108ab5987da7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685798186, "uuid": "164872fa-d8c8-44d1-8bcb-9d5c2772f8cf", "comment": "Malware payload (Rhadamanthys)", "value": "c0533ca8efe48943e6255051c0a516a20e47c830", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685798186, "uuid": "0113b8f4-b65d-4a67-9731-2070c9a350b0", "comment": "Malware payload (Rhadamanthys)", "value": "efb07b31a856438a2c3abf065f8bba38b83809710d5bb8bff2268948be95857fc1d90d0e90b1cafae4ae635555fed7c3", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Rhadamanthys", "colour": "#3D95F5", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685798186, "uuid": "87c6e23f-11b9-495b-ab44-53b60c26897c", "value": "T147B57D871980CA31E4638CFDCF566E1209966BCC35BAF7AE134F52660D13B687FB2941", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685798186, "uuid": "1783a0ca-0871-4b59-b496-706e26cec0b7", "value": "1760ca228d5e3c2945fdc472a803bed4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685798186, "uuid": "ba17f304-e497-48c5-bb80-79fd91f79cca", "value": "12288:EOWc3b5ROBRgGdIgY6GeIKpSbsDyD7eW5zl5DHueAzALU1Jx5Xlt:137hjZZXF5zl5uJJTX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685798186, "uuid": "4a566cb6-3b3c-412a-8155-045bd648787c", "value": 2489344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685798186, "uuid": "41371d21-90fd-4d39-b557-84bd3f8752ab", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685798186, "uuid": "adbd09fa-4018-43b5-a9a5-6cb7768c2069", "value": "00000000.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df114a21-0247-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685821820, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821820, "uuid": "53b54895-8659-488c-96aa-c5dc49e371db", "comment": "Malware payload (Mirai)", "value": "24cd1411c5fd6cda68c7ef74fce608d9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821820, "uuid": "49447489-4980-400a-8281-bb511f249dc9", "comment": "Malware payload (Mirai)", "value": "84a019f86b22a2b21903bd19dfd3d5f55c4238b617be552c16cd0fb9d5c7c5cf", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821820, "uuid": "7b3747a4-de09-4166-b687-98e611829559", "comment": "Malware payload (Mirai)", "value": "b80fd76b526eef3dab082f3952187813d7bbb8cf", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821820, "uuid": "30713741-3195-4e25-9074-9519bd5652b5", "comment": "Malware payload (Mirai)", "value": "265154f1b1a76c388f236ec5312c1bac676877b786c3cbc5689797d90db9dc86ed3296066c0d1d8c6fc4451d2a8b81d8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821820, "uuid": "2e62e591-c40b-4b1a-9394-50f99bcbf2cf", "value": "T10873E995BC818E11C5D413BBFA2E018D332267A8E2DFB2179D106F147BCA92F0E7B955", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821820, "uuid": "b7626d39-f264-4637-8920-d41c1a57caab", "value": "1536:VqnbZ6LD+byf4gZCboRk1sGT6fgH3ZNAt7TVyp6t1GbSwh95/mI5e6fc5MI3iZc/:U6n+bw48C0Ro3IgXvAt7T4Mt4F3j1cz4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685821820, "uuid": "0b84fa56-f181-49b3-837a-a5e7f49a7b75", "value": 79616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685821820, "uuid": "f511958e-2973-44bd-b9fa-ac2ba390dc3d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821820, "uuid": "5e131f05-cbb2-4738-a985-a4bea0a184e9", "value": "24cd1411c5fd6cda68c7ef74fce608d9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec8b5df0-01a7-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685753123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685753123, "uuid": "f868db97-e968-437c-945a-7adf5f536e7b", "comment": "Malware payload", "value": "bb05581c977504151945ce548b13daf8", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false }, { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685753123, "uuid": "37499f72-b564-43dd-a508-499485e7b3cc", "comment": "Malware payload", "value": "84add5fb1be01e64b6f3b84536d3363d5fc23a3547342e0f33c9646da05e6317", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false }, { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685753123, "uuid": "1e156df4-56ac-47ab-bfc6-646781104965", "comment": "Malware payload", "value": "72a82b87deb13b804b5600f0c0d963d6fce7150a", "object_relation": "sha1", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false }, { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685753123, "uuid": "4438ee6e-da11-4d89-8c9d-a2e22c55407b", "comment": "Malware payload", "value": "d5f887de365c171e1ff8bbaedbb883b12689a662e603e7d3db835fd4bacd9c2f217ce26d488c2bedc0cc18ee369de0c8", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false }, { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685753123, "uuid": "f983054b-b079-4d5f-8b5a-73db25a26b5f", "value": "T143F22B5AE78B02B48F411376172B0E8996BDB23EB35145B1386C833433EDC3A42766BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685753123, "uuid": "7ee3271a-392e-4146-a7f5-685d337671fa", "value": "768:+Fx0XaIsnPRIa4fwJMn7ab3P+7A/uVS8r6r/mdm+vAtLeJUjB3:+f0Xvx3EMmbR4fr6rmdeta+jB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685753123, "uuid": "e138f06a-8eb5-477c-b277-2bb308071af4", "value": 36323, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685753123, "uuid": "27aa4329-5ea6-459b-8779-82bd49c135fe", "value": "text/rtf", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685753123, "uuid": "0bcdec4b-9648-4fc6-87e5-b5de9a413286", "value": "bb05581c977504151945ce548b13daf8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a606faab-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685793377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793377, "uuid": "0014e909-2e8b-466c-a070-a3e1a50917f9", "comment": "Malware payload (Mirai)", "value": "b90c218e6320649e3a9cb2052056c2ee", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793377, "uuid": "1dc653f3-0f8e-4fb3-9911-1fb0c4d9e983", "comment": "Malware payload (Mirai)", "value": "84caf1542689f8960be34c5770695ebbf0a64a88831ef04c4f5546f9d977572a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793377, "uuid": "6ce21e9b-b407-421d-b723-7ade3081b1b7", "comment": "Malware payload (Mirai)", "value": "90a280529bdc1a7447b4dba7b9c186bbca64da62", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793377, "uuid": "c7aa8edc-bb91-4193-b354-24b39a11062b", "comment": "Malware payload (Mirai)", "value": "f5324c78728e724c0569e7652735f25b1cf79081eab9bfe5e60f6ccf0e5d07826075b61dee9de56bbf3578e4c39f0a2f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793377, "uuid": "37362bde-4f06-4cd6-8d92-b151c9682b9e", "value": "T152732955FC815A13C6C25277FA5E428D3B2613E8E2EE72039E256F3137C785B0E2B856", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793377, "uuid": "e8e7a017-c3e2-4067-aa03-36fce9cccbbd", "value": "1536:SXsyg3HURsQRy+9BE8x5gyLQh1e4hXMsdWvO:SXsyg4O+E8xSyLQ6gmO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793377, "uuid": "50c9938b-8c9a-4745-8907-c71918c6fc79", "value": 76584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793377, "uuid": "ada1e01c-fad2-4f19-be46-9f6073e0dfff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793377, "uuid": "86508c21-0574-498f-bdca-14957066fd79", "value": "b90c218e6320649e3a9cb2052056c2ee", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c303703d-021d-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685803734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803734, "uuid": "22c2484f-443c-41c6-a3d8-2905e357932c", "comment": "Malware payload (RedLineStealer)", "value": "a347718be0065695e1078612cc319cfd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803734, "uuid": "a757363d-a76b-44c0-a60c-dfac07b92cda", "comment": "Malware payload (RedLineStealer)", "value": "85655400afd7f45818453b92d14f5bf91e0734abc6cf94de3301bfa08e5c9f72", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803734, "uuid": "ac1f8ebb-04df-4a72-a366-153093413a94", "comment": "Malware payload (RedLineStealer)", "value": "0da9e7154b87c2f4f7b634450a919a49611ff89c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803734, "uuid": "c677af8c-7d06-4ec8-8f93-f62fc5ba4d4b", "comment": "Malware payload (RedLineStealer)", "value": "b696fe60524c3cb5d6c946d7b822b04c9f9aa8c9ab0c9c3e12b904c91082161958fe8e0bfd641b22c5e824abe0d3bfb4", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803734, "uuid": "13252245-1c26-43cf-97a8-356af88c6a5a", "value": "T13505236AAAEC8076D875277409F713D71A3A7CE18CB4C76B3741586A2CB1690B13237F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803734, "uuid": "317be049-da08-4622-93c9-25447e4bfdf3", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803734, "uuid": "ef2e53b8-2b8a-4f16-94e9-39fdea3ac416", "value": "12288:JMrBy90SEfimmiNeC0EYOeNeTaZth3jeYyPgUtJ5XR5ZDRAq66S2jl:4y+UqYPUaZPjLEL5Z2q9l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685803734, "uuid": "5c97ad7b-0e44-4081-a305-0a02834f87ea", "value": 796672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685803734, "uuid": "98bcf05d-9b03-487b-89b1-88cdfd0ec77e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803734, "uuid": "d7c114ce-079a-4f89-b5c7-e08ac6d48493", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ae88376-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782111, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782111, "uuid": "25a647c4-276e-4e7e-944f-dc1cd3c384be", "comment": "Malware payload (Mirai)", "value": "a6bd8a820bbf4670b243ffb8d55bea3a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782111, "uuid": "39e970e9-fbca-43fa-b493-a053442da2cd", "comment": "Malware payload (Mirai)", "value": "866eb7a77d7ad94888a46c85c52479be2c674f079cb84d4491ebd7aa8f917f1e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782111, "uuid": "3182c375-059f-479d-92e5-62ce8194de17", "comment": "Malware payload (Mirai)", "value": "bf977edd70dbd4e46230b4fd054254b29180302c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782111, "uuid": "4f686b59-0a2e-4411-bf59-8c40eecb9e78", "comment": "Malware payload (Mirai)", "value": "2d39af5a3a62c6677b2f41cd88bc421679dca5c69cda1cb4c4dda4ff344757f6738221e60b7ff8def1676d8f7aaa8ca9", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782111, "uuid": "c7776f62-607e-47af-bc87-ee0fe0f0fbf9", "value": "T15C4328B9325AB2ACE9E59078F40320E52D51071C3ADDE1D3B0932076FFB5B0CB56AD66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782111, "uuid": "47c2bdb2-9fbf-41ca-ae70-bc8bd5cc2c43", "value": "768:CzbBs4HVUhMG4Z0kfM3nokykF0xVQE/Ptd+iX:CzbBhbTEoOF0HXV4iX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782111, "uuid": "942742aa-c501-4355-99c3-25e89f65c744", "value": 58828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782111, "uuid": "05d8d1e3-2aa3-4227-8d2e-41cf4e75354b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782111, "uuid": "765a87ac-cee8-49cc-a31e-34d09e696880", "value": "a6bd8a820bbf4670b243ffb8d55bea3a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28ddf992-01ec-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782430, "uuid": "c872857c-12db-485f-b638-93038f0e4e1c", "comment": "Malware payload (Mirai)", "value": "cfc8f00e8f9e71355d7dce658281a5a0", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782430, "uuid": "be489372-5382-4cf7-a852-391ffa1da09e", "comment": "Malware payload (Mirai)", "value": "876309af5ba71b153f864aeae0ea703cce89d483547fa9da2b58a04ba99487e3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782430, "uuid": "74753cb9-6a0c-455e-b4ba-86bd780bea78", "comment": "Malware payload (Mirai)", "value": "b3169bd3915dd72395f59eac42bc127c8fadafa4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782430, "uuid": "f7aab5a3-4f58-4743-a5d5-38fde5251a3e", "comment": "Malware payload (Mirai)", "value": "322997e4a741b731de0706454c193cf28b833c1ca31d2d46d62c6634f327b3966a4dd2598edee3a15f78e2caa8a615eb", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782430, "uuid": "02729672-e370-4c7d-8e79-41f29bef828f", "value": "T152435BD6B401AD3CF95BEA7E94130A49B970775100930B37A3BAFE936D333949D16E82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782430, "uuid": "51c89b79-fe1e-4655-9907-6af9713f499b", "value": "768:rEe/4UH+ZBdNhBbWpIOD7p2x6gvIBuUQM5x5cBw+Fz7G83CxGV:Yu4bX9CyOhgvIQUQg5cBtFza8cW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782430, "uuid": "d228a133-161c-4cf3-8c81-7401275bb763", "value": 55416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782430, "uuid": "d0dff0b7-ee61-4669-97ca-e49898d5b421", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782430, "uuid": "9a03228d-c35d-4109-bdcf-d57e06eaf1d5", "value": "cfc8f00e8f9e71355d7dce658281a5a0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a4bf3ef-021e-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685803907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803907, "uuid": "91d7920e-ee18-4f89-907a-e6db1bd22568", "comment": "Malware payload", "value": "61b90bfcb40b4777e76ca1acea17d9c5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803907, "uuid": "d22b8eec-e3f6-4649-83a8-4f4213b878be", "comment": "Malware payload", "value": "88a49091d19cf2a34ac0937bd36f70cc2f61f3fc9fa1f6834d2e4c81b8f36d50", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803907, "uuid": "75817181-18ae-42e0-81f2-922c972019eb", "comment": "Malware payload", "value": "1ae97ffa09fcd258f58ea7f649ebc1e298ba6125", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803907, "uuid": "e0f68ef7-11f4-407f-8948-a2e336ed1410", "comment": "Malware payload", "value": "b2f166148f9ea5d33a49453e5901d0847bf832528d5e038d3a4b88105f134074d547dcd0550e8edafe3e41b60b207e99", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803907, "uuid": "d61dca79-251d-490c-9793-17edfd869612", "value": "T100352317A3EA4437E9B51B704CFB02830A34FDF19975466B23C15E8A0C73988B97276B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803907, "uuid": "90075f57-029c-408f-bdd1-436fac1287f7", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803907, "uuid": "325aa558-4adb-4264-9fd2-dfe1616ca39b", "value": "24576:dywy8rPL897sq1nl3o+sEGGRoYG9fBRw7:4wjT8tHFl4+dGGRoYaZRw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685803907, "uuid": "f91d6d33-ce56-4937-b24e-0a40112d0823", "value": 1076224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685803907, "uuid": "49326b6b-fece-492d-9b53-927c506bdbf4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803907, "uuid": "89cc3df1-780c-4469-928a-0cae2d73020e", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "213dba5c-021d-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685803463, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803463, "uuid": "5b250f8a-52d6-4316-b5be-a063104df399", "comment": "Malware payload (Amadey)", "value": "4934d94662dde60d8e3dc4403ea0ccc2", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803463, "uuid": "116eed99-be6b-4b47-a239-6172fa7208d9", "comment": "Malware payload (Amadey)", "value": "88ffe23caa37752edb23b1b9013e1aebe93b66980ecf2c55bc6ca6338e6258ab", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803463, "uuid": "f4dd2c95-5141-4f7f-afa0-b1641954dbb9", "comment": "Malware payload (Amadey)", "value": "fd5f475227a11adacdad5123add5b49b5d059b48", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803463, "uuid": "10def113-92a6-4e10-bffb-bc8ace720e4b", "comment": "Malware payload (Amadey)", "value": "28982e9e4d8d2aa09b099b3d9e978467f033145a20412e56e2bc33e51a0924cf36f67d427536e7b82f94180f3d42819c", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803463, "uuid": "870be9dc-9771-4e18-ae1f-6d22222cda9d", "value": "T19B445C0372E07C64E5664B728E2ED2F8661EF9918F1577EB26566E2F08B01B1C733706", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803463, "uuid": "7a5705aa-21bf-474b-abf1-0005898ff77e", "value": "ff9fc1da93d8806551420a96da91b169", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803463, "uuid": "d5b8c23a-5576-4c83-abd2-44bccdaafc9f", "value": "3072:1MQfBK18Rk3rjjFyvijTNCvOhqYfIaCIkQpcBQVnNiXAmPy:+mKAv84vFYgabS6yA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685803463, "uuid": "d58c89c5-4874-4e15-9a32-089d477a7835", "value": 270336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685803463, "uuid": "8a023c60-210d-4b24-8148-9953ed9beb3c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803463, "uuid": "0f04f115-f7b1-4dae-8c56-334dead2fe14", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d4b3d61-021c-11ee-b3cf-42010a9c0076", "comment": "Malware payload (ArkeiStealer)", "timestamp": 1685803214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803214, "uuid": "76cb3e41-7623-4bb6-a746-6f305d5c71a0", "comment": "Malware payload (ArkeiStealer)", "value": "aed7475eff9160574e03f5e3a11eba24", "object_relation": "md5", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803214, "uuid": "862c7bd2-dc5e-4a4d-86ae-2876ba78da6e", "comment": "Malware payload (ArkeiStealer)", "value": "8af7b10184f0205f0d7a00681884df539e18735f7e552574e386f53433aab221", "object_relation": "sha256", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803214, "uuid": "a62ef60c-1773-440d-861a-05a65d9fcaa7", "comment": "Malware payload (ArkeiStealer)", "value": "efe6b817d2566646c7f8a500785f50f62a9cc717", "object_relation": "sha1", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803214, "uuid": "74bd1bcf-4e7c-4ae4-8892-fde6b8d67865", "comment": "Malware payload (ArkeiStealer)", "value": "aad8753a001f23f5e45752ddac373186019a1e10df75633e97c6c50ca73bb61cc0ec6e26cfc6cd28c0cda0931b3cfb1c", "object_relation": "sha3-384", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803214, "uuid": "e18cf786-0eaa-4e1c-b710-6e84e28cb34c", "value": "T1126623A3233401DFE0E2CC3CC927BDB431F61667DB81AC3966D5EED926359A46607A07", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803214, "uuid": "79a6a222-2cb5-4662-b6a0-12fa03c2912e", "value": "934c4b4f6970aa68facb4f3056dbc3d4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803214, "uuid": "5a53094e-c683-4eac-955e-f5fd3c1b9e81", "value": "196608:rbWpbdfWXab5zB7+B2R/qX4JmphW04IyWoHK4zk4iP12:4duXWO2RSX4JTIyWUk5M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685803214, "uuid": "c54fe020-93c7-4d44-83f9-8a34c1a70015", "value": 6871040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685803214, "uuid": "078ae40e-ba06-4f41-aebd-8c00c50b3131", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803214, "uuid": "bcb01950-d8a2-4a62-8b5a-5000e031998f", "value": "LauncherPC.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68335ea3-0206-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685793703, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793703, "uuid": "73116ee3-3edb-4886-a4d1-9bc12c65120d", "comment": "Malware payload (Mirai)", "value": "61100d07dc10b2047ce7e1d1db0f7c7e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793703, "uuid": "cc40c799-2174-4353-abbc-509d8efde785", "comment": "Malware payload (Mirai)", "value": "8e56c542102174aad3b2feed1b781484662866dc71fb63c47e055402a7310289", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793703, "uuid": "2749b3a7-7a7d-4837-91dc-6b4c23259d51", "comment": "Malware payload (Mirai)", "value": "4cefd35a694d6c2ac23f8706014292f7a272e826", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793703, "uuid": "9e67a29e-2977-4f71-9734-4eb588463568", "comment": "Malware payload (Mirai)", "value": "0d034167a478b2e22d414e2241497d0f74cedb4bf9a5050596f62e9ddf6498a0bdfb4272c5e0accbbfdb61dc05f65f91", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793703, "uuid": "194d3ceb-c71f-440a-b159-5828e8c3ea3c", "value": "T15A74E4A46E238CBFD9241B6AD0B72638780A1836F6150B5FB69D5F0C4F7534E89834DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793703, "uuid": "e87a9161-ff97-4a65-a68d-788cb1209157", "value": "3072:aH/MuU3x0/Or+TfEs/mdYTWku9GGngmXgOo9JK3ySwfPFU7gNS7z832mb1ddJ3gs:1x0/OrSbGYTpGgeTiJKdES7dU3AmR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793703, "uuid": "6952dd26-837f-45c5-ad1e-d4e5fb929851", "value": 352856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793703, "uuid": "75be5d6e-22a0-40a0-937c-38fe61335fd6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793703, "uuid": "8f486eec-e108-4dfe-afbc-65cedb461a53", "value": "61100d07dc10b2047ce7e1d1db0f7c7e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "586ca012-0262-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685833190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685833190, "uuid": "9e1de95d-9a40-4741-8164-83dd719d886a", "comment": "Malware payload (RedLineStealer)", "value": "8ecb364f9c54f1ec6283ba6872ac103a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685833190, "uuid": "d83f2296-c512-4c9c-8bf3-f22d2d5cf3af", "comment": "Malware payload (RedLineStealer)", "value": "8ebdfe232d4dc11a79f43b420f9bd26e8d8e6c13dac0ddc1144c432c9e8c2db0", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685833190, "uuid": "dcd79c46-e002-4b60-821b-a77b5df0aef1", "comment": "Malware payload (RedLineStealer)", "value": "83be6859b9560119c7206fbc9f775347576676eb", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685833190, "uuid": "d3f69964-4eab-48c0-8b13-3e69c0c5c6d4", "comment": "Malware payload (RedLineStealer)", "value": "06b647e1c3dbe99dded0b787efd9d6f43b1f89d2a2746dd564048a8a904458126dd75acafaede0b816b29ed61ea094de", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685833190, "uuid": "f0886fe5-819a-41f3-b790-d30e4edaf43b", "value": "T19F051252EAFC4162DCB62BB05CF546D70A36BCB64EB463272641993A0C737849C743BB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685833190, "uuid": "00da888a-6469-442a-a63b-299714ba9be7", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685833190, "uuid": "b4db611f-bef8-479d-b070-9bfd2307ea58", "value": "24576:7yXBup4fnNgiS9OVfpl+p61rP/E5n94C45:uXBup4fnNgiGOVfplG61bs99N4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685833190, "uuid": "3f0f39a6-a89b-4efe-943e-11a00e08489e", "value": 797184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685833190, "uuid": "bebaa1e7-69e7-48a2-b25c-c681d696c719", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685833190, "uuid": "098f44d7-3ab5-490a-b743-10aedb02e41b", "value": "8ecb364f9c54f1ec6283ba6872ac103a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01afef8b-0214-11ee-b3cf-42010a9c0076", "comment": "Malware payload (GCleaner)", "timestamp": 1685799544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685799544, "uuid": "76552e4c-7180-4915-8af9-1b0d5f3fca66", "comment": "Malware payload (GCleaner)", "value": "60491b7d4fdbdf583f0072d60fe073a9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685799544, "uuid": "2efeeb06-c431-42d7-9cf7-cd6438ff542a", "comment": "Malware payload (GCleaner)", "value": "8ed637482a01e981c9cb40a2cfb9e33b46a14339e128191359b2844de410b3d8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685799544, "uuid": "6de608be-c2cb-4f5d-81d1-b91ede507aa4", "comment": "Malware payload (GCleaner)", "value": "7728ecdb27d675b7891c563f29cab11960ba036f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685799544, "uuid": "3355eaca-de1f-46aa-8c4a-bb630b1ee28b", "comment": "Malware payload (GCleaner)", "value": "820ae71696a112d44ee9bc8ca14c798caf1ec7a7830b3489d2ced4e201c04a9fabe9adbc807b9d31bc6aef8243f10a18", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685799544, "uuid": "55f9c95c-1332-47ec-8287-5db4a196fe8c", "value": "T1A08533A3EFC58474D1928B316DAD8EE242173B26267C04693E5CCF981E1FEA9540BB47", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685799544, "uuid": "25c2fc50-4690-49f1-800e-ccbb7c112e97", "value": "e92b45c54aa05ec107d5ef90662e6b33", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685799544, "uuid": "ffca8fda-92bc-4b4e-9d3e-2f9cd9ba45db", "value": "49152:Mim1g9tpSG+7F3mo2VJEaNzSU7yfHPD/rUzR20pkpm:Mim1gjpSJF3x2nreXD4t20pkA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685799544, "uuid": "23741972-2fa2-422f-89d8-ccf1267cd1f7", "value": 1840406, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685799544, "uuid": "75e5b145-31de-445e-96c1-974081521ff5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685799544, "uuid": "9e5bb943-6a69-47e0-9bac-4bbbfa1cdc75", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f04be76-021b-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802600, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802600, "uuid": "c30a3fbc-9816-4510-9279-a6fe0d992927", "comment": "Malware payload", "value": "26c700cfb0e318338fbcdc9065c365a0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802600, "uuid": "e7edb5fe-45ba-447d-9496-092b5f184ca7", "comment": "Malware payload", "value": "8edcdcee6b02285995bce071a8d9201d864e0321133abbdcf2fbc75e1c3132c2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802600, "uuid": "2cc45802-cce9-4a33-a060-ad3e69980fff", "comment": "Malware payload", "value": "cb45471fe7ef111afabad78d74e5860b0d275aed", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802600, "uuid": "7315b792-9a9c-4aba-a37e-dec6c1e29991", "comment": "Malware payload", "value": "dce359193f56bccea04117b2b604eec5c9cecf426db54d47cf7073859fd036b8e0dbc9b8d43b760a64498c7d0aa64675", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802600, "uuid": "87f2909b-9501-4c06-a504-fe32837e7118", "value": "T1F4134B3457B9C69CC6AB123CF82143F821B5C7BE7622E7E41B59D12C3D93B10C529AB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802600, "uuid": "150a255f-a8f8-458c-9ee4-9538af6042df", "value": "768:Er0q7qWUIhfnFjo1M1y6y8Eu259butLwvOCNmQWZEFiR:EAM/F0WEpbutLsZPWZei", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802600, "uuid": "8e7bfc9c-55a1-4096-a3c2-d1652a20fee3", "value": 43904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802600, "uuid": "7b26e03c-d8f3-421a-9c5d-2a27e148dfe2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802600, "uuid": "c3767750-a165-4bbc-a903-a7dee63bdaea", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4613ef82-01fe-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685790210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685790210, "uuid": "8adc9a3d-e9a0-4418-8208-b854fa121598", "comment": "Malware payload", "value": "6d408f7b4024fbc36d46750929dfaa73", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685790210, "uuid": "3612e3cb-8421-43d9-a7c9-e0f04ab71bb9", "comment": "Malware payload", "value": "8f5d60f0e71b599b733a27d5a5ba0ff91206f3e75eba8bd385ab825e714e7958", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685790210, "uuid": "e7b40122-bd56-4752-91f9-25e16c03a26a", "comment": "Malware payload", "value": "deda79e105655a636775baa693b29662c4f013af", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685790210, "uuid": "6f3e7e76-f6a3-4c20-9988-d69b86ebc949", "comment": "Malware payload", "value": "63c2e884993b3ade2dbb91f3ebd74d6afc25437b51a214a60a2f084dcdb610ff20f0d17671531712577c59d642eb6f6d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685790210, "uuid": "d180978b-c3f6-4069-a13f-34ee8513b048", "value": "T1B0537CC9F683D8F1EC431530247BFF375A72D5BA5028DA43D369A532ADA3602E912B5C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685790210, "uuid": "66348266-24aa-44b4-aa05-154cbd2791bd", "value": "1536:dafqyXRXIa1/S663fyQDY8LUFN/s1VFmf2OixBrG:dO1XRXI+P6vyuY8LU7/sRk2+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685790210, "uuid": "22c529a4-7af3-44a5-8c5f-23be24125b39", "value": 64404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685790210, "uuid": "db4722be-fe97-483d-94d7-91b3552ed9a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685790210, "uuid": "e2020c5e-e2c4-48ed-9b24-9ade8b36dbda", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60f30129-0206-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685793691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793691, "uuid": "5601aaea-a500-4c6a-8f4e-94ae97811d4f", "comment": "Malware payload", "value": "23d4e2d242343586ce820e88e93be1f7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793691, "uuid": "8b190b5d-955e-4bef-a27f-1c4b1d1b8f0c", "comment": "Malware payload", "value": "8fea3741c1f62f9c8d3d3d41ea120ba4022168594df032d611283ee40ae01f30", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793691, "uuid": "caecc4bb-7621-4153-af29-7d91e14e7b85", "comment": "Malware payload", "value": "5c97c09e84fea89078d7d45fa38ed3f24cfa1945", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793691, "uuid": "e0ab487f-6d9f-4b3a-8c46-6b0642d758e3", "comment": "Malware payload", "value": "73973a91aca358700b5b773339fe2dbf573187bff315867d1839d13b412bb631324746c5ce41c4393ac6952269b42e1e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793691, "uuid": "cadbb27d-abe7-41fd-a043-851cb584473d", "value": "T126948F941418E67AFCBAA5F6788D22466ECC361E79324C3F5C2BCFA055D7161BC0A43B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793691, "uuid": "9e59286b-5b69-4138-b7be-a3a04f09fcab", "value": "6144:KmRgJBcm5RGYg2Jdm02cykue6jK4MUVTwEKPQ:KgsprPP/0j+8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793691, "uuid": "56f1a62a-2a74-4728-a50d-844ac0f18eb6", "value": 410992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793691, "uuid": "e613d72e-7af7-44b6-b124-d1829a91f29f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793691, "uuid": "18c88502-50b1-4421-9792-e827b2f458fc", "value": "23d4e2d242343586ce820e88e93be1f7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8d591a8-0214-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685799851, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685799851, "uuid": "8f2cb088-6472-43d0-a630-a8c797713733", "comment": "Malware payload (RedLineStealer)", "value": "c7b1f57497473996e40dedbe01ba98a1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685799851, "uuid": "55efb5f8-c476-41db-8279-076fc3fff52b", "comment": "Malware payload (RedLineStealer)", "value": "90d1de78a2a9acc8568f53128e80cc69785bad0c57d015e73064f52ec6d8a5f7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685799851, "uuid": "0c12b733-174d-4b1f-9e16-04e1defe7299", "comment": "Malware payload (RedLineStealer)", "value": "585b6653e9223787443923ef097c8437da541369", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685799851, "uuid": "324d7416-dcfa-49fa-bf01-5c6acd2b1f7c", "comment": "Malware payload (RedLineStealer)", "value": "5510b56071a5df78b1a0e39b771084d74c741826ab007a5f0bb2c8292f9377adf7ca6991a62aabec15c2dec197130d4e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685799851, "uuid": "8bfc4553-49b4-4991-a3ca-722bc4306d89", "value": "T121747E1372937C65E6164AB28E2EC6E86B1EFB518F0777EF22146E1F08711B1C172B52", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685799851, "uuid": "41bf2aa6-d104-447f-a3a4-e66c470f299d", "value": "9bbc9ec767e0d044dbe137327e0459fd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685799851, "uuid": "831a693f-28f5-409e-b914-31c377a29cdb", "value": "6144:J7vr86kkoVc4ENlWjpsrPoqBpoQ5t/ntmf5:Jzr8xza4JsToqhr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685799851, "uuid": "8aa73b93-bbad-41a1-922b-06190f6cc67e", "value": 347648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685799851, "uuid": "6859d1c3-c69b-4fd0-a4f5-b0dabbb4f36d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685799851, "uuid": "c107367c-da48-48e6-aef8-9df0c793329a", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df6c072d-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802493, "uuid": "7fe9a8ae-a690-4c45-9df0-4fbd04790242", "comment": "Malware payload", "value": "41c32d843c65cfed293d377960362934", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802493, "uuid": "0779f39b-aaf8-4655-b795-8fa736e6f275", "comment": "Malware payload", "value": "92b84911b68634d19d56b637cafd47dabacfb54c0d752fdfc8cb3b9f2a4ccc97", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802493, "uuid": "e580ff12-6d22-4d9b-a936-4b9e85a02df8", "comment": "Malware payload", "value": "01227b9a5753ad8160fa26dd174441b2b863a050", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802493, "uuid": "e1ea4f35-fccd-4ff6-8c52-bcb0cee11046", "comment": "Malware payload", "value": "e374ff9d59f0a4f522cb7633004f201d55f02dd58bdcd5304d204c14512ccc46568a2d30814a03fa3035ca4ab3aabf61", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802493, "uuid": "daff1a93-3d6d-4b5e-a559-be8d6c575b03", "value": "T176D38D92F6C0C0B2E6E2153310A76F375F39AD7B052A9BD75394E5B61832381DE1839B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802493, "uuid": "c6d7f252-9e38-45d2-95d5-8909085d0f41", "value": "d0cab25f0e47e169624e2309f6c44d3e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802493, "uuid": "ade2ff72-5212-4dbd-8920-9aa086cef544", "value": "3072:T2yaa3xWhXxOtBY/Nc/Antl5B6YWfVjclVA:T2yayqXUtWwFYCuVA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802493, "uuid": "703a0103-c9af-4e5f-a51f-ca162ac6c01a", "value": 139264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802493, "uuid": "c0a17cf8-c3bd-44e5-aa72-04a81bffc4c8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802493, "uuid": "20be4bc7-db42-408f-b7d7-619498e11e46", "value": "SecuriteInfo.com.not-a-virus.HEUR.Monitor.Win32.WebCamSpy.gen.6319.16360", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d8dc982-01c2-11ee-b3cf-42010a9c0076", "comment": "Malware payload (ArkeiStealer)", "timestamp": 1685764587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764587, "uuid": "39aee6dc-2cdd-40ab-85e2-16d2436eb8e5", "comment": "Malware payload (ArkeiStealer)", "value": "c32fb76555aa77fce7a09a120a872f0d", "object_relation": "md5", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "pw-1234", "colour": "#ADC330", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764587, "uuid": "4ca37c73-a043-48d7-ae71-b569113ac770", "comment": "Malware payload (ArkeiStealer)", "value": "92dc08af96ce3c748fb9494d87c835b39de44eb73a741192c23fdda441f5f041", "object_relation": "sha256", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "pw-1234", "colour": "#ADC330", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764587, "uuid": "5750e723-e0b9-4baf-80f0-bdb8d344e8c4", "comment": "Malware payload (ArkeiStealer)", "value": "22c519b8287cea1b25c933d5323909aca10eebef", "object_relation": "sha1", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "pw-1234", "colour": "#ADC330", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764587, "uuid": "f9602a61-c031-4320-9579-865597c7f726", "comment": "Malware payload (ArkeiStealer)", "value": "436a0ab345568e44060184b5e958af22a6ecb57f639d46e85b91ab54dff76b3e01761ec97cccb5edac1055be62722536", "object_relation": "sha3-384", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "pw-1234", "colour": "#ADC330", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685764587, "uuid": "03993a51-d754-4b51-a1b0-e8d93d495442", "value": "T1356633E237785E5C78F19AE793AB0232B95511A387F4E04C2F0E5F9E55140A72FDAA08", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685764587, "uuid": "caafbc37-481f-4c7c-b633-0b647d303d0d", "value": "196608:CkqKHSLo3oqR1UlawnXHnsZPH0oKqFO9CRhf:q25ZLUlaw3nsJUOFLRhf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685764587, "uuid": "f74939fc-9a5f-4d5e-bdaa-d559572985f8", "value": 6749502, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685764587, "uuid": "eeb33200-8a0d-4a9d-918b-559c18c90967", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685764587, "uuid": "44c27ca1-a7e0-422c-b231-87de9a6535aa", "value": "2O23-F1LES-S0ft.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7f3889a-0247-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685821835, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821835, "uuid": "5c178fbd-526e-4636-b6d5-0f90fb9525e3", "comment": "Malware payload (Mirai)", "value": "27cdba6267942d3af756510af659d847", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821835, "uuid": "e0776ada-cb8b-46b7-8f96-df9a7fe48d88", "comment": "Malware payload (Mirai)", "value": "93992870685a82f51ccbbe87e0f40b19a9ff99988c4162f7e38a9dfdb556d230", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821835, "uuid": "059f7fee-72d2-4de8-a030-14c48d7e6a25", "comment": "Malware payload (Mirai)", "value": "3371cc1045697fdee23366a41468262e89c3240c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821835, "uuid": "8f619f51-1845-48cd-a1c0-8812f5064afe", "comment": "Malware payload (Mirai)", "value": "4a56f8ca47fa6605f3681a1b41f286cb61f288b4424dc7560fa0f83d480845b2ccddfaaf832d500a313523a6c9bafdc8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821835, "uuid": "02896b03-b1ae-4f41-93bc-31763b45b757", "value": "T18B83B51E3E259FBCF79D823547B78E219648378A2AE1C145E15CEA011EB034E741FBAD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821835, "uuid": "e0d1ddd1-d1d3-43e2-aea4-c77bb50e27ab", "value": "1536:bT/YVYqPOiOLYR1uVbRQYJOPN3zVnHfsarnruoUoiuWbzz:3KYq9OLqmbJMN3zVHfpnruoUoTCH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685821835, "uuid": "cb385263-9b19-4c82-a48e-b7296954b151", "value": 88348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685821835, "uuid": "9b588def-7f4b-4849-85c4-43889d7e806c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821835, "uuid": "d9bb68a6-560b-4f5b-930b-87483da631af", "value": "27cdba6267942d3af756510af659d847", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b150cf0-01f7-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685787346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787346, "uuid": "e60a8c9e-098c-4c34-ab56-ca0d80af2c97", "comment": "Malware payload (Amadey)", "value": "9bfd40602a1023c6a48b26bb669b0a6c", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787346, "uuid": "3985b015-59eb-44dc-8f3e-bc6b16044201", "comment": "Malware payload (Amadey)", "value": "94a8206d3c9d14e05831b13bbda45a5cdff9d4a32ba9d4fc17f6a01fd976b12e", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787346, "uuid": "da92436a-9883-4303-b0c6-2974416931f9", "comment": "Malware payload (Amadey)", "value": "dc36226a973738ae623d8e3b54a3889884242a70", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787346, "uuid": "120015e9-66f8-4300-8dc7-3953c4bc94a4", "comment": "Malware payload (Amadey)", "value": "2b18127d29a734af84a6478ff086af584b8c2807e35c83505a6a81fdee8fb080a6dbf849d4d3fc747ad7b175fd34c860", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787346, "uuid": "a83ec021-160f-47e7-bd40-8dee6d172243", "value": "T1DC051206F5D99137C9F527702CF6038B1B32BDA69D78922B2780AC5F1D7278098753AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787346, "uuid": "e07ff945-9862-4d8d-bf50-37edebb03132", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787346, "uuid": "973f0ca4-7c8f-4a8d-b68f-2e03beab527f", "value": "24576:TyRMiddDxKgs7LEJNnDT+TtnsC+0IvxvMv/:my68gs7LEJNUyvCv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685787346, "uuid": "28314c3c-5688-411a-bd05-1bf05d27dc41", "value": 797184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685787346, "uuid": "5be59520-76cd-4761-86df-597678abc996", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787346, "uuid": "0a16de27-5427-4247-93d6-882f7e836228", "value": "9bfd40602a1023c6a48b26bb669b0a6c.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93e534d2-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685793347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793347, "uuid": "85596ede-fc67-4861-ab03-baac5b874824", "comment": "Malware payload (Mirai)", "value": "2464ba335012ddc3e2592eccb863ab9e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793347, "uuid": "d7120b29-dba2-4d9b-ab94-7f1341b55f03", "comment": "Malware payload (Mirai)", "value": "95957ad851be98b30907123eb09f57c393808b084311aed3751b365ddebadb4a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793347, "uuid": "2d835c3b-8b06-4f3b-a814-b5139d0f9d89", "comment": "Malware payload (Mirai)", "value": "c932e0b01e13f0f5b8adc33c9b838dadbf8c4ebe", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793347, "uuid": "bd72b1cf-75dd-440a-b48b-f83327667cc8", "comment": "Malware payload (Mirai)", "value": "563cc86e77e4237601de2bbe91baab7aa145d2aa1cf650d8326054ed80c5275637ddd0b5cc8754bcc978d01b23380dcb", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793347, "uuid": "9953deb9-a080-477c-9a56-71781389c405", "value": "T119A4B4A8F8D18D52C4F966F5F08A22B90F3C4AF6B5976133D8280F74368755A748E336", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793347, "uuid": "ce3f597f-c67c-499e-9671-99add1f81086", "value": "12288:xuwd1LZbotgHgxWV6A+kBxeBUYoYqBb9LgGEzANM5cxsMQ1cu8/kMDiu/W:n3jjDiue", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793347, "uuid": "cd953710-08ab-4a5a-aa26-bb14f7518f05", "value": 450220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793347, "uuid": "ab3db403-f3e8-4c92-a973-b1b7fba312f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793347, "uuid": "01e09e51-5242-4b74-a4ee-ac74b7737ec1", "value": "2464ba335012ddc3e2592eccb863ab9e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e381860c-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802500, "uuid": "ef530332-fd42-4129-8182-1e690bbdc8c9", "comment": "Malware payload", "value": "a3ae3d83620fb77ba2b95cf61fcf4cca", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802500, "uuid": "5b8857d5-69ba-4d4d-8d10-57ce205660a4", "comment": "Malware payload", "value": "9674f466633f260260aaa491078efcfd3c3e6c554cb5047b983dc855f88917ae", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802500, "uuid": "03b0784a-d5a4-4028-af81-7616237b5dea", "comment": "Malware payload", "value": "bab155d630ab7fe1da51965b57d4a38d32ebcb23", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802500, "uuid": "a0e78cf3-c7a1-49a1-a03a-0bba05ccd0eb", "comment": "Malware payload", "value": "8d31244214ecbc788d4019c42c97350894ed0349c78a527b7b38cce153d6a2c6b86ae88852ef29baaaa3431424abd824", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802500, "uuid": "839d764d-d5fd-4e0f-84d5-db6976c52bd6", "value": "T17CD49F32B2E18437C163163C9D5B92BCAC26FE116D286C463BE53E4D5F39781782B297", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802500, "uuid": "04cce0cc-a594-43d6-83db-6260749d5a75", "value": "c44dd2a7f45b7a98f929733287f8eaef", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802500, "uuid": "cdeea5da-a802-48ea-b999-c1f30c49d85a", "value": "12288:82/vKWQ4kK5ihh7a0Vcg1UPW2UU2t2vmVZR2vmVZN:LHO4k+iHL5Uu8WiWz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802500, "uuid": "6fdfb1e3-de6c-4e73-90e9-bde1eefa8c2c", "value": 624640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802500, "uuid": "0269caea-b009-4570-ac50-bc00269fc13e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802500, "uuid": "3abe1449-96cb-4d77-b216-620437383832", "value": "SecuriteInfo.com.TScope.Trojan.Delf.23780.26092", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ec6c9f2-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685793312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793312, "uuid": "8db924a4-1cd8-4fc1-b95f-e5bc9013fbd7", "comment": "Malware payload (Mirai)", "value": "1b5972db6d03e090a1bd9b72199b708e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793312, "uuid": "579d2584-5ff9-4550-9e4b-57990817f470", "comment": "Malware payload (Mirai)", "value": "968a46138fc169b74fb8e49059275ff8e61955e6ac18f95ac16657240f13e7d5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793312, "uuid": "00c7108e-215c-48c1-8db1-917d81815d6b", "comment": "Malware payload (Mirai)", "value": "fa64b636144513162aefe26f5a55fb921b87bfd7", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793312, "uuid": "4777de9c-834b-45a4-9293-15c603477621", "comment": "Malware payload (Mirai)", "value": "97d3e4425131fa8bb8df29d8128814e94a0bef03dbf73a18b87eb9dcbf2ce1fda9e0b6542e1d47e7baa0a49b8f569c34", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793312, "uuid": "285706ad-5769-4324-9f06-8ed1f62bc0b3", "value": "T17BE318C7F800DDFAF80AE33748530906B130BBA249925B376257756FED3A1990577E8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793312, "uuid": "3ba762fe-b3ab-4caa-b50d-3a3bb5306995", "value": "3072:B4CuZC5bdyUR22z8knnuajh1FjVEjbisLjr0ipQIytcjb:KJU02gkH11F0Ljr9yt2b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793312, "uuid": "5e674a39-f3ac-403b-a801-3f29ba530979", "value": 150892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793312, "uuid": "c54dcb57-078e-413c-ba50-0171f5edc1c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793312, "uuid": "becbe945-cdeb-427d-b559-0f89f98655f3", "value": "1b5972db6d03e090a1bd9b72199b708e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de213685-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802491, "uuid": "2179ceff-c7a1-490a-81c3-86aa45f28dd7", "comment": "Malware payload", "value": "f544bea69d46203f7a78fc157623b26a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802491, "uuid": "b6d0af69-3769-4c53-b975-c6fb03c34386", "comment": "Malware payload", "value": "96a2db827a011fa33c529f0ac1b85a0d99ca57fcb29e1dbae75a3c9867b90a10", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802491, "uuid": "df10d1a1-dc84-4f9b-843d-78bfad537316", "comment": "Malware payload", "value": "3eea32fd78ea1efccc56b9fb0e4fb74dfff1193c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802491, "uuid": "5ec05e5a-2c18-4a05-a313-7d253f12f6db", "comment": "Malware payload", "value": "a0555c097e536773516b5e023e7448cad2a7dd4b9345cc2a0c3f429b625a4625e17b2ce976e2e5840794b7064905bf6f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802491, "uuid": "4fc1f95d-cdf2-4e5e-9841-4f1f70f54dc4", "value": "T120A5232EF102987BD0752A38CE96D2F19538B7102D2A689FB4E90F4D6D375E2462D1CB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802491, "uuid": "9ae92446-47e8-48ff-9a8a-033b509978e9", "value": "4afbc3ea79152c3f8469f1157ab7e53a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802491, "uuid": "4b8f8215-fa9b-46bd-b535-9125af55e271", "value": "49152:FljaMm7nCKKjmyDTsjpdxKOwFFc1a217J:FljaMdimTspqO2i1717", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802491, "uuid": "86bceebc-6f8d-4eea-b239-d3cd1328c6c0", "value": 2191568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802491, "uuid": "9ed42567-b40c-4de8-842f-f0f32703a28a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802491, "uuid": "5315dcb4-9290-4a3c-b5c7-a4f21d2ff9eb", "value": "SecuriteInfo.com.Program.Unwanted.1916.19693.16085", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "208b2223-01ed-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685782845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782845, "uuid": "db195cc0-0689-422b-946d-bfc933ed3cce", "comment": "Malware payload (Amadey)", "value": "a8800c83ae3433bf0ed0002969f94648", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782845, "uuid": "2c88157a-d6d4-4c8c-ba90-3344152b7ff7", "comment": "Malware payload (Amadey)", "value": "9816209effe1c3adeda70b2e28cd87f4fd74c61aa9487dcf037f00eeab9f8393", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782845, "uuid": "613949b6-1bab-406f-83bd-f2dc6646fca1", "comment": "Malware payload (Amadey)", "value": "9ff626b45dbbb2a810c719031d61bb91b74e9b03", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782845, "uuid": "bcc2b9a4-14e3-43a1-9ce4-3a121b019170", "comment": "Malware payload (Amadey)", "value": "a75ce4ae189d423be67a7ad3a633eeba193a993e85d211b78a48cee42129bd0862d2a257d711fad17de2fec635cd953c", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782845, "uuid": "99c39ad5-8924-43fb-8e8d-4c6f76b83586", "value": "T1FC051252EAD94573D87133B11CF603C31A37FCA1A87467AB2755AD590CB2B80A93633B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782845, "uuid": "c8eb139a-2f44-4bc3-8dd7-20bca3671742", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782845, "uuid": "e8cb8e63-c0e5-4787-8bc8-02b3c39c6785", "value": "12288:9Mrhy90Oze67pGUbzckepbptsBuxXvJucY5+VpNaFkwe9SfRk0vzPuT0Df:EytC6tckqxJUMikJSfzvz4O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782845, "uuid": "887dfd4d-cb1e-4f4f-9424-26135e54a50b", "value": 796672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782845, "uuid": "a3e321a7-bbb6-413c-bdd2-a521fe627fdd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782845, "uuid": "dd03946e-be93-4049-8e62-7343b9e0494b", "value": "a8800c83ae3433bf0ed0002969f94648.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e9cf266-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685778977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778977, "uuid": "d4e1fbeb-ec7a-4ffb-ac51-3aa54d5ee795", "comment": "Malware payload (Mirai)", "value": "6fc986f3dd8a94fb0cbc929ebc2541b9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778977, "uuid": "5d9f385f-3196-4b3c-b407-e28d6aa6641e", "comment": "Malware payload (Mirai)", "value": "9989ef51e270e551dd96bc0a2ada29260b50e10696931784539c4fd7c63a1461", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778977, "uuid": "e2a4ae2f-f508-4ac7-937f-2ca7fad6bbc2", "comment": "Malware payload (Mirai)", "value": "649dc3585938b4d28ec16dd4bd5fd29d4431cfdf", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778977, "uuid": "820cb6d4-85db-4681-9421-666daff61c8b", "comment": "Malware payload (Mirai)", "value": "e9984477f04aa56abbe171b779ee0aa5b634cf3c88cfde243d60e9ed447f9db66291e92ddc526f9700111987a1cea030", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778977, "uuid": "ac6d75e1-4adb-414a-8c8c-1e117ea89a0c", "value": "T1B3A3F872E643CAB2C4430AF201A7DA6B0D21BE6B0A7A5A85F31C7CB09F334C57655F59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778977, "uuid": "587236e5-3669-420e-b52a-d656cdd72524", "value": "3072:wW8FUmgujld6Mkxm6AJ+4fHHmmFVcqq0GnDZT:wJFv4Lm6AJ+4fHHmmFVcqq0GnDZT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685778977, "uuid": "554a726e-e272-4360-80c1-4af4fdb7e9ae", "value": 104138, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685778977, "uuid": "162529b5-5d3b-4470-8e85-d7132f735ce7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778977, "uuid": "95bd41c3-ee95-42c3-b2d3-5d277d2fad01", "value": "6fc986f3dd8a94fb0cbc929ebc2541b9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc2a4b58-021c-11ee-b3cf-42010a9c0076", "comment": "Malware payload (LummaStealer)", "timestamp": 1685803347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803347, "uuid": "161b124b-c32f-4a6b-ad6a-66620e6672cf", "comment": "Malware payload (LummaStealer)", "value": "b4c088690e9339eac442189b8bfd915c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803347, "uuid": "65e6e5c6-e848-4d6e-ac68-464520e60fc0", "comment": "Malware payload (LummaStealer)", "value": "99cc32805cca71b6d308ad3d4c228bd0a1d8968efbeb05cf8243ec4b767b3ff7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803347, "uuid": "d6e803bf-9806-4088-83ba-d1aee7ff998c", "comment": "Malware payload (LummaStealer)", "value": "9babdb74a746b612e2c6ba1c3c8a3208f2880777", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803347, "uuid": "997a7495-c06c-47b7-a071-bb292302712c", "comment": "Malware payload (LummaStealer)", "value": "49cfb41566b444181a18fc9f6d3a809c344c96cf9b0ab3bb6858d18a5f9f984cc3584ad3e4aa90f8e16a651071f82fc7", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803347, "uuid": "ea099a75-4197-4b54-b86a-537e40b2e66c", "value": "T18E445D1362D37C64E5164A728E2EC6E46B1EFB918F5B37EF12146E2F08721B1C172B52", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803347, "uuid": "c4df8e06-7a7a-423a-b0c7-26dd49fe51f2", "value": "5eda38ec3329e662bd4d2abbcac5fbe5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803347, "uuid": "0d070239-beb1-404d-8719-7933cf9415b6", "value": "3072:o1ndntCq0Q9oTzPFf4ca0SkRtAu1i7VjLBnKSJMNhOUoi/D:8n7CqqzNfi0hRR1ipLBMNhL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685803347, "uuid": "dd46f2ed-67a4-4fe2-afd5-39a1fc944475", "value": 269312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685803347, "uuid": "6eb8be37-a633-4095-90b2-9f67f1041de4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803347, "uuid": "30cfb238-86fc-474e-bddb-0badafe99e57", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0b15d05-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802495, "uuid": "6b974d5a-e198-4bc4-9bbd-63a4f682201c", "comment": "Malware payload", "value": "3a57666d51b478547a0faeefb9a7cdba", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802495, "uuid": "9fea62c7-c6b4-40b5-86fb-626d37997b98", "comment": "Malware payload", "value": "9ad97385de9f24f57df58998b5f1c18d04c8fd376f66cf3ab9d4ec57de909197", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802495, "uuid": "d32cfdb8-638b-4f53-88a9-69e240a8bd5a", "comment": "Malware payload", "value": "be6e8be1dbab6b7fb74760a5d218df53ed19007c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802495, "uuid": "b780836c-c3ca-4282-824c-3f788f59aab5", "comment": "Malware payload", "value": "988551adde381cd581d73ef627fcd403442cdb0929ef6a6a6fa33123cf50f06cd012f94f5fad90c56619013a2a002c4b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802495, "uuid": "956db305-5b52-44c4-b42d-c1a0a90575c6", "value": "T17692737B7BA091B4E5D6D27403E2017139BBA1B1323ED90EE9B617155DE0931BE1CB0A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802495, "uuid": "86c5dde4-3bb1-4205-9a23-8bc7d231f4e8", "value": "48:gxKmaqHH+VyCIr3re/cwcO/PHcRW5EMe75YY0DLDLry/MKfEfeQfoOfrh/GF9hhm:YRA4r3yEY/PHcw5Lm5YfDTlfDrhOFFI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802495, "uuid": "49ad9446-4222-4089-ad85-52ad0843197d", "value": 20480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802495, "uuid": "e497941e-af92-4c7d-80a0-c8391e111bb6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802495, "uuid": "cfb5e0f9-f378-4894-90e1-aa305dbd4fb8", "value": "SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.27226.13164", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "657d3527-01c7-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685766640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685766640, "uuid": "05f7b094-ee60-4d8e-a5ad-c8d76b3cb735", "comment": "Malware payload (RedLineStealer)", "value": "56dbdc851a1a4453b7a99357fbda3559", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685766640, "uuid": "8ab168e5-dcdc-4918-a407-a7b95c552494", "comment": "Malware payload (RedLineStealer)", "value": "9d1554e60f5453b603e10729720b1db10a4e49ff1786c90dd24041114aae9b2b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685766640, "uuid": "dd31ff2d-8e4d-47e8-8df6-13bf5693f007", "comment": "Malware payload (RedLineStealer)", "value": "fe5c33426ad029b8a45b830a6e4e05518aa0a43b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685766640, "uuid": "f10d04f8-22e7-43ab-9f7a-83987f6b53f6", "comment": "Malware payload (RedLineStealer)", "value": "59a6f1dab2c176ad93c73792e5028302dd5b0bac6a2b709bc8d9f1e2c049e2cb5efda48ba4d99e3c356bbd037beafe2f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685766640, "uuid": "c98a45f2-3fe2-4224-b555-309822c1487c", "value": "T126051207EAE88462E8F9233068F702574F3A3D725A3DD3AF27559C990C72658683177B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685766640, "uuid": "a5c3e2f5-d989-4330-bcc5-6eaca114de11", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685766640, "uuid": "10ef22f8-2356-4025-8c1c-a50ff0ab6d54", "value": "12288:QMryy90wvmOWzPTuYD/qWNqczQaoGd1vIUYT2Vbfwzi3QDFuI4Mjp7mNQRtBaiWf:yy0OhYOoldHI2VbF3QBn7qIv7WBfh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685766640, "uuid": "6cead777-52ca-40f5-990e-af2d29c3c253", "value": 812032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685766640, "uuid": "8db8d14d-3383-41bd-92a5-0b88cba3bfcc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685766640, "uuid": "1d36e5a2-9ba5-4c74-8bab-fbc279e24fbc", "value": "56dbdc851a1a4453b7a99357fbda3559.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba560d46-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685782245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782245, "uuid": "59dbc646-c923-41e1-bde6-519999030748", "comment": "Malware payload (Amadey)", "value": "ca3702f1a77b742473a395cd3bbc7858", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782245, "uuid": "60dbdaf1-5278-47ec-8698-7ea1b1fb724b", "comment": "Malware payload (Amadey)", "value": "9e62f416edd15fa68e734e71379188ecb5edc80e8ebd37fb31acd2a58e05e7ac", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782245, "uuid": "28d265cb-ef89-4cb3-b230-116fbabcbff6", "comment": "Malware payload (Amadey)", "value": "dfa881d90d815832bbb15fe79d6110ba3e682450", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782245, "uuid": "0cb95b7b-be4b-42a2-95ff-e5082dd535c4", "comment": "Malware payload (Amadey)", "value": "62f5e753c014d5460d390bfa6f57ab501d951a53f1a1cdff1cda3571c6331df2e976940b55fab6518af298f7fa25b08c", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782245, "uuid": "9d957930-d2c9-45b0-bcfe-36ee2e28bafc", "value": "T111052262EAD94162ECB127706CF613831E36BDA09DB5526F37416D6B9CB27C0A03173B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782245, "uuid": "a150c47f-7b19-4321-9f34-c2fe18c42269", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782245, "uuid": "fb12f848-fcf2-4d91-ac98-6ba66efa6d61", "value": "12288:RMrSy90jCtV7L07jySFFN5YOkDCMpJvroA76VPA7lYJndfR30szPLVLwtlS:vy5rQjNX+lNKElYJndf6szlD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782245, "uuid": "bedcfbe2-8d56-4c44-ad7f-61981b1328f5", "value": 796672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782245, "uuid": "c348fdff-1df2-42ab-973e-fc630ce573e6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782245, "uuid": "070b8798-2681-4c15-bf4e-25e4a5cfb88c", "value": "ca3702f1a77b742473a395cd3bbc7858.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7087762-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802506, "uuid": "3e45c875-a0b2-49ca-9773-3bcecaee9990", "comment": "Malware payload", "value": "bae40c67065667d16d3de7374bf1db68", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802506, "uuid": "31a6e340-26c6-4cd4-8a69-bcad795ce979", "comment": "Malware payload", "value": "a007348207d32af37efd958e94eeeab66ac5860558086dcc37de7ed8e6a84b75", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802506, "uuid": "8cb24cd4-aaa8-494c-96b1-b0b4ccb5fb54", "comment": "Malware payload", "value": "5cf0c027eaa0a7783cd1c7cc099bea49103dc841", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802506, "uuid": "939d5818-1097-4152-a41b-f0ae9d3a27d7", "comment": "Malware payload", "value": "4a9128630561febb7c8999c256fd6ea5f181424350a87deabec8768868a13d20bc8c22189bc964a5894f1679c9e67ef2", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802506, "uuid": "7bc5cf8c-f1f0-490c-9c96-1431fe067248", "value": "T112C37C42F782D4B2D13305B24214ABF5C531D5352212D893F7DCCF26BBB66E5AA6A30D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802506, "uuid": "3aaafcb4-225d-4be1-b9bc-c331273e0bfc", "value": "8598e552fa20801fcb6ff207e9b0899b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802506, "uuid": "14a4bd0e-19e7-4755-8e91-b80c7ed4bb52", "value": "3072:6nCY6PScZPB6xrcRz1y1tj9VEnbGF32M/cNa4SUZ:WEScZ0R+M1iKh2M0kAZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802506, "uuid": "13238484-7461-48c1-809a-3e05473a8923", "value": 123904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802506, "uuid": "863b07da-cb9a-4bc8-87a5-abefd0298f07", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802506, "uuid": "41c99dcc-9457-47f3-9799-4d7b555f8b9a", "value": "SecuriteInfo.com.BScope.Exploit.Aluigi.30985.3834", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9d5c6b7-024d-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685824415, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685824415, "uuid": "979302aa-e4dd-492d-a969-e6d0f2fbaa3e", "comment": "Malware payload (Mirai)", "value": "60d337c0c12168a24d14fe1c9b4100a5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685824415, "uuid": "a52a52a3-52d9-4347-be76-730f5eee2433", "comment": "Malware payload (Mirai)", "value": "a0567fa2964cc8c89600a1f35c69ac975a1d0578ad54200229d3a8c328266e39", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685824415, "uuid": "1088a50c-8f7d-42ca-8302-0d6e7c554a54", "comment": "Malware payload (Mirai)", "value": "cdccac4bcb95076905bce8e71869010faf1f3919", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685824415, "uuid": "83acee8a-b4c8-4e93-8ce5-5933e3c4e303", "comment": "Malware payload (Mirai)", "value": "2d1bbafdcda3fc8abfde74bf2b4dedc3034c07bb02556dfe0e117b0207f9d2aa9dafe09f6ce4c15cfbbd124886765e47", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685824415, "uuid": "a8e7ecc9-8792-4f0b-8a26-acc0fdaf5284", "value": "T16D830944FD05972BC2C277BBEB9F439D37352A54A7DB3311293869B43BC57981E2A210", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685824415, "uuid": "4de51f77-0449-445d-bfdc-a6177c361031", "value": "1536:rv3wH5ysSQ7nvhwYlYcAdXu4LVj7RxVz2o9LOpGK60ezy77J3H:+LiUAdXu2RxbIGJ0ezU3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685824415, "uuid": "154b2501-ca7a-4414-8dff-02be970e3a95", "value": 83224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685824415, "uuid": "ce33f6e1-abee-4ed4-b124-35c2485dddd1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685824415, "uuid": "42e84b72-ef1b-4fc9-b1a0-0edca2ca11dd", "value": "60d337c0c12168a24d14fe1c9b4100a5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68df0a3a-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782108, "uuid": "e8e025d1-547e-41a6-8bf6-1bf8ae35fdca", "comment": "Malware payload (Mirai)", "value": "078f2c29b8cff3698d7877394bf2dbd0", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782108, "uuid": "719147fe-2b04-4ec0-8467-29fe8b7c9cb2", "comment": "Malware payload (Mirai)", "value": "a0d5d24e4957647f5e1f3af9b1df24ee2ad77d27ca6b44a8cafd4d84e7424e9b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782108, "uuid": "e891e02a-61c6-4e5a-897e-0ee8890fadae", "comment": "Malware payload (Mirai)", "value": "10b7026ce7374904591a9148a2ee1b00e69a110b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782108, "uuid": "833ed5d6-e761-4dc2-8f2c-a4b197c40474", "comment": "Malware payload (Mirai)", "value": "9cd08303a9298e2a814dda7ab13c79c6338299cbaeb4d76c807d7beab02ef59f5362d539b2b446522dbf4a3f4ad031b4", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782108, "uuid": "4c89ea58-3ab5-4cbf-80ff-2ad1145d12df", "value": "T18FC34B46EA818F03C4D5177ABAAF42453323E754E3DB330699286FB43F86B6E4E63505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782108, "uuid": "417da705-9f89-4e73-a0fe-d0a95a27a12b", "value": "3072:rj1flhKl11wqrsOuLy3xfvYG7WrNl8zjslM/9pTgpA7:rj1fiJwSluLy3xfQwWp6zjqM/9pOA7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782108, "uuid": "70d6b1a3-9edd-449d-ac8f-825516eeab40", "value": 129418, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782108, "uuid": "6ffb6004-7d25-40dd-b53b-a3f8c7be5fa5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782108, "uuid": "0ba23539-e500-45b0-89d3-f521b459a9a6", "value": "078f2c29b8cff3698d7877394bf2dbd0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f15268c0-01e1-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685778042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778042, "uuid": "df836c5e-5108-4c39-838d-e4cf4a41fb31", "comment": "Malware payload (Amadey)", "value": "be3fed2909d3cde4bd2c5d40262c5a73", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778042, "uuid": "fb294587-e2a3-433f-b25b-627e30c85080", "comment": "Malware payload (Amadey)", "value": "a18642a64af222f47292a5e8363c8ccb2c4ee6ec93586ccce660f484d45dd4a2", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778042, "uuid": "3207db77-def9-408f-92e7-464105586f9f", "comment": "Malware payload (Amadey)", "value": "ebbf96bc4721cccdb2ad52649f93ede0d76c4eb1", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685778042, "uuid": "ba2d2a2d-1365-4f71-9c67-4b1f19a12709", "comment": "Malware payload (Amadey)", "value": "9d4a393a4bc1fe58e5b27387052ea214e44ffc61223e8deca15a945876f138a0a05bb70a67e796b096f3a56ac4354a25", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778042, "uuid": "73be84cd-2cb4-493d-a24e-95a0613fb80e", "value": "T11F0512517BC48423D8B813702CF611830F3ABDA19F7893AB7755A86D1CB2684BD717AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778042, "uuid": "47e248e0-f5c1-44de-8b5d-0c30a014b7d8", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778042, "uuid": "47630d21-7d9c-4253-b7a1-97c5216c5da1", "value": "12288:SMrDy90EYw1XBLWjG9tB25HWesSj8mGdp0J3eOXZDhsayUH4wdHQWEDprql:1y9fByjEyjbImBJ3lJDWV04wyWs2l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685778042, "uuid": "de6e6d0e-0b4a-43fa-8445-d22efb85ec97", "value": 812032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685778042, "uuid": "d64900a3-f195-40a4-9a96-5b99766dccd5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685778042, "uuid": "6faac30e-3de2-4e89-9c83-5ccc5c32010c", "value": "be3fed2909d3cde4bd2c5d40262c5a73.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "175ec989-01c8-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685766939, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685766939, "uuid": "0a789888-0508-4fff-9e7b-6d592d87b2f9", "comment": "Malware payload (RedLineStealer)", "value": "ce2cb84235dfc2f12b8c9e48bdf8332d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685766939, "uuid": "8e0dc118-fb20-459e-bd3a-5c70c42f11f6", "comment": "Malware payload (RedLineStealer)", "value": "a189a05cc5ec7948d9a60ed02c7da69a9848fa1944958e0af68235c69a4b6912", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685766939, "uuid": "5682da71-4a86-445b-b133-55167bb86b0a", "comment": "Malware payload (RedLineStealer)", "value": "0f8b3b47336cb2fd3500f84e97c4c7b1183ddf73", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685766939, "uuid": "825acd28-8ba6-4957-8ebf-5b42946e0bfd", "comment": "Malware payload (RedLineStealer)", "value": "da48cedacca3455da6e0b98caaff5ae51c53f2bd21fca0019a0de5495eec3f04d78b6088ab64133cccc6d5fb1af91187", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685766939, "uuid": "e4a17251-b58f-432b-a118-93670d7a54f2", "value": "T153052222F6D44033E9F9077068FA43831E3BBDB56A3C975B2388696F0CB23859571366", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685766939, "uuid": "24ed0ecd-a00a-49dd-aafa-4db4acd392c7", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685766939, "uuid": "30f4dcdf-c68f-4060-9ea6-e79b7d2ed3ab", "value": "24576:TyMJqBmlPxQc1lRhoXnCl6/RHWtCF+8e:mQqB4xBlroXCyR2tCF+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685766939, "uuid": "24d5171b-fc94-4fa1-9821-05c2e72596ca", "value": 812544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685766939, "uuid": "47f7f32d-a427-4c14-93c3-09117e54e04c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685766939, "uuid": "0f3e53d1-088b-422a-b86f-47564a20a24e", "value": "ce2cb84235dfc2f12b8c9e48bdf8332d.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e59de786-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802503, "uuid": "3e0b1f3c-cafd-4615-8b72-c7af2543a0a0", "comment": "Malware payload", "value": "7e8bea005786b0ffa2cac82f2725e52f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802503, "uuid": "aad7b350-8b02-4edc-a510-150960484fe5", "comment": "Malware payload", "value": "a37797b95ddba40a9451dbc5d92e0e641c7c95cc01e8d0c9adec2d392057a572", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802503, "uuid": "25b5785d-fe65-4b6b-a6ff-b477fd134d0c", "comment": "Malware payload", "value": "f30d4a6d59889264090ea7cb3529f80758f8dfc8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802503, "uuid": "c284ea8e-4fad-4af6-976e-7821134f7910", "comment": "Malware payload", "value": "b088c36d6aa8ec51a77006416c554bb59920463e377e0136a7ac6fb7b6da6aaa97dc521b21da2115a5b9a3518bb30139", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802503, "uuid": "2be02347-4456-462e-88b0-80bf5efa2b71", "value": "T17E8523403B24CC36F0D2A9B89DDBC5D49B37BD6A5B39460B70ADAE1E3FB211459043D6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802503, "uuid": "83086a38-75ab-433d-aeeb-fd28163e7049", "value": "884310b1928934402ea6fec1dbd3cf5e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802503, "uuid": "c9dbb6d7-dfca-426c-952f-1c191adbe6bd", "value": "49152:pachJ1wJ9e1LrWL9sDtnbHCZhQKYswaI3v2mc0tYX:gchJWSFnT+va7/dcVX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802503, "uuid": "d382eb7d-9d4a-4f61-b0a1-4a2ca7b58907", "value": 1741553, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802503, "uuid": "407537b8-dc43-4ec6-bd92-c8d2230db7cd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802503, "uuid": "ede39723-db0e-4955-8e9c-bdb7e8fff9ee", "value": "SecuriteInfo.com.Adware.Relevant.75.10714.811", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d96c74f-0206-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685793685, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793685, "uuid": "40b46873-e9c4-40eb-a43d-28859805ebb0", "comment": "Malware payload", "value": "ee0736e965d7acca4600a2150850f631", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793685, "uuid": "b1710346-694d-4886-af53-78d646f1c227", "comment": "Malware payload", "value": "a3e009b685b5193cc767f77df5caad66f46be181379a34b7738eb7dcd977934f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793685, "uuid": "b2e3d37c-b89f-4ab0-9016-386474dbf459", "comment": "Malware payload", "value": "23c0ec5acc854b83027195d1e50ffa4ca8ccd8a3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793685, "uuid": "23b5fd0f-33ed-4e0f-8b43-1643a01c9af9", "comment": "Malware payload", "value": "3f9bbf34c1046cd17be847c7f050d51c968f39ac9c966192da5ac85f4c35873c76cd35049bddb1674e030dba11f756af", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793685, "uuid": "3bed74e0-6321-40a9-af6e-14c9868dcea5", "value": "T15C74FAE0353983ADD5B875F97B8DE34A0D041926F898A07354252D3CEBAB18FB84FD16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793685, "uuid": "b438b296-99e2-4b69-b2c4-72d02b5c2506", "value": "6144:nygIBYK4TiW0yyAmwx1xso4FQ4k0CW+X6SNk:ny2K4jRmw9sZFnk06", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793685, "uuid": "82c53ebc-a729-48e9-815b-757636b79e7f", "value": 353664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793685, "uuid": "2eacb071-511f-42d8-9aa8-15aa2f68e224", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793685, "uuid": "a9a2a3e3-749e-4ca5-9040-d46799d57dfe", "value": "ee0736e965d7acca4600a2150850f631", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1093b22-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685779196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779196, "uuid": "18e11344-0c9c-4196-89d1-8385ded9f814", "comment": "Malware payload (Mirai)", "value": "e5f9ee335539479315555576ea61ef53", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779196, "uuid": "b4613128-04ae-4214-8085-faf2230f3fe9", "comment": "Malware payload (Mirai)", "value": "a4b7bd3134f753485f38a91f1ee72813a9b6d725b23d754c8ceb6037dab08db7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779196, "uuid": "0b104196-4355-4594-b125-0fc72ddfa7c5", "comment": "Malware payload (Mirai)", "value": "12690fe32975678f1ecf68c20f4149ab05d8caa2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779196, "uuid": "26958d80-c702-428b-9d74-822a70f157d8", "comment": "Malware payload (Mirai)", "value": "955440f6adc8f2c4e26f5952b2aeb9de72708e8e023080cbff117f4f7d436f71f64e706e4ff1716ccceb313bf1918664", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779196, "uuid": "1dfad3e5-cc01-4dfc-b496-6856915fafae", "value": "T1F3F2E11AE768CC34C15AA4735CFF3AAF7F04A40A77C47DD6B70CC8364926F91A618916", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779196, "uuid": "0d0622ac-eb60-41c8-b7be-58d7a34b8f9c", "value": "768:0MFkCsAUD+bO5bhsrKuYlgbfSKFnWCmlqdsq9+nGd0nbcuyD7U4/2c:tkrDV5GKlONhmlcsRnU0nouy8Pc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685779196, "uuid": "274fcb20-4d88-4097-b085-7ef9e05a0f9b", "value": 34492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685779196, "uuid": "de52a405-3edb-4964-b55c-7166cb6fb972", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779196, "uuid": "982bad36-c30f-44a1-9333-049cb43ec4ce", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc01ec3a-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802487, "uuid": "213a8e21-ba54-4d59-bc90-528e64beffcc", "comment": "Malware payload", "value": "6c78144511c89cf7d332e3ad61097d41", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802487, "uuid": "339d1db0-240c-4db8-a971-f9037425b74c", "comment": "Malware payload", "value": "a5045512f86592a65c17caeb1e27ba69571ee9b5ea4c336468918839112947da", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802487, "uuid": "d09353ec-9e21-4515-aadd-f539f29babf8", "comment": "Malware payload", "value": "af2557c9f0918c0d061d91cd4bbb252aa5795066", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802487, "uuid": "023af589-9516-45a8-8919-8b003ffd1cd8", "comment": "Malware payload", "value": "2227c31301a6d31cb0dcc4c064aa76e18b7fc01e9b6f338f1886934257dff226646936f02414d028604090fe59994950", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802487, "uuid": "c8225a32-6af2-4bfe-b3ab-8ab37046e12a", "value": "T179151710F4678CAAD3A5B534CD32F5DC83E26DA9CFB2057FBA14B93424306E15876B1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802487, "uuid": "797f80b6-7dec-4419-896b-832c8f16597a", "value": "24576:gN7DIAvrGH8wA+fWAhelwbY+DZGI9hfl4bxMpUWt4Q52eDwQZA3LvykAdKm1R19M:V4E8wA3DQ52eDwQZA3Lvju", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802487, "uuid": "cfdec9bc-4a4f-4e4f-8a8f-9e79a990249a", "value": 910336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802487, "uuid": "d10386f6-a7c8-40e8-b4a5-c29dce95d0a2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802487, "uuid": "b84f567c-eb5a-421f-8dd4-27ab4c7bd1b7", "value": "SecuriteInfo.com.W32.A-62389890.Eldorado.4703.8029", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4e5e109-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802502, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802502, "uuid": "185f13d0-68b6-46fd-bbd7-73d910b42497", "comment": "Malware payload", "value": "57eeee735edc1af71c72a3915692e524", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802502, "uuid": "3223c2ed-16f2-4887-8dbf-08ecae398cc0", "comment": "Malware payload", "value": "a59b8e83386a7e374822497f655fcb34ddae320d552cce4c052519bbf41807c1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802502, "uuid": "f20b6f0d-6281-43da-90cc-810eeec62365", "comment": "Malware payload", "value": "826100ee3516edef123d6fd6f8084e5a3c08df1b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802502, "uuid": "c6f8715e-6de4-4be6-aa1d-314aeda69edf", "comment": "Malware payload", "value": "44b5816e307ebd7102bdac1a98138e60036709660ff3bcf0a2b8e3275beb1b57b2bf83bd0620e4d74a9409228d3c0c47", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802502, "uuid": "0ef8b6bf-d1a8-461e-af19-e3881b14eed2", "value": "T11ED4230455C8A753E0528734EA7A378CF75301B58B9B862B1965305BB266FCA3E3F3B1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802502, "uuid": "487a3983-ba64-4c51-91b0-77a651aab721", "value": "47c089c66b5605ae8379746751d16b97", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802502, "uuid": "24001e4f-4147-43a2-b8f3-965d59202e08", "value": "12288:RH+wnwR4EKvmWYsZUYmcjlFtXG99zQMYW064J0VdZ36Ugd7PjUQdmux40U2hGA/:YRnKuWYsZUY3j5XGfclfp8l6UgxjUqzr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802502, "uuid": "3c428852-5550-48ab-97d7-3b041b5d3ead", "value": 620332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802502, "uuid": "0a751d54-a1dd-4e98-8d52-b5a6a653a662", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802502, "uuid": "4d464142-99f6-4ef7-9a6e-b6aad7b2b1db", "value": "SecuriteInfo.com.Backdoor.Win32.SpySystem.11744.22443", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "debc3dbc-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685779299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779299, "uuid": "372f190a-3cbd-446e-bc70-7e35e9d6412f", "comment": "Malware payload (Mirai)", "value": "66a16365862196682a6967e428e9d6cb", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779299, "uuid": "14973087-4081-459d-a2a0-f0269d51ea8c", "comment": "Malware payload (Mirai)", "value": "a5aadbfee6985066de8adfec3391eb07d46f600e093c92be34e830084b5a3aaf", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779299, "uuid": "897a39a6-0dd0-43c9-a02e-e4ccbba1cac1", "comment": "Malware payload (Mirai)", "value": "2bc23e41d34dcea44782f57311a9002bf469aca6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779299, "uuid": "e201a420-7a8e-4a58-b085-386ffea13c30", "comment": "Malware payload (Mirai)", "value": "6a4e8b3c634a2c2fdfbf5798d4ec4a92ce9ba7430422c5b5771a9370cfe77544b3c777ce63fd0c274c83225832074039", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779299, "uuid": "ae7b1e83-46c8-4f91-8958-8b4bd6ddee76", "value": "T176E2E13747265EB2FF701D789AD50F0A740513F849DD75F18E489AE8DC92C80A6FE681", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779299, "uuid": "d7deac09-014b-4726-936f-e91dfdf61dfd", "value": "768:YHOYTNpFAPfTPvAG9Ilc8Bdak2s2FwITdzu7C9q3UELaa:uNpFmLilRdatTdze3LJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685779299, "uuid": "9cc0c268-5217-444d-b969-4e1cb2e780fa", "value": 31520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685779299, "uuid": "e11e8050-1997-4c90-a15d-dd4bc08771c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779299, "uuid": "466537b1-6eef-46b7-94e3-d595bfc9149f", "value": "66a16365862196682a6967e428e9d6cb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5daac3ca-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782089, "uuid": "cbc5be44-079b-4464-b3fd-e20fcc0f46bc", "comment": "Malware payload (Mirai)", "value": "dd40728bf14605e296d933bd6a93bf8b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782089, "uuid": "40dcb6e9-eb7d-43e5-bff6-0df56dced5f9", "comment": "Malware payload (Mirai)", "value": "a75a3aa7b658b0e0d3a701d6fc7fd22fe8e0d560e9bb1359386dca1588ba8be1", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782089, "uuid": "55a5c620-d857-4027-b677-1b68c371ed9a", "comment": "Malware payload (Mirai)", "value": "5fcc0cd316390670c9be01db91e0d887ab2ec8da", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782089, "uuid": "78c7c968-bd18-4025-b348-07bcd9b35d5c", "comment": "Malware payload (Mirai)", "value": "ea52c01ce9f5772a892f1332f6b7db12ceaab6f8f2b9b4e2a4e1d53602e04fd90e44a18b67e2628e1bfc1dbfcb095ccf", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782089, "uuid": "014ff0a4-41a5-4d03-8fa0-9b3818968ec3", "value": "T18082CF30619B74E4DBF10431FAAE8EC697160BF9D1FC36A317986B78894250651FC2CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782089, "uuid": "f3f6a66e-c96a-466b-9917-36835ffdb45d", "value": "384:MjWzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMa9AhymdGUop5h5ln:6GV0P6+kom0tVAoNvm+to1as3Uoznln", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782089, "uuid": "9f7e5d26-7088-49f9-8682-8339aeb0fc69", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782089, "uuid": "fc2dec3b-afdd-4e3b-98c6-27ac9fc02f4c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782089, "uuid": "b9276303-2fe9-423e-90b5-e309cfde40de", "value": "dd40728bf14605e296d933bd6a93bf8b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6da07a16-01f8-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685787699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787699, "uuid": "6e061ab1-4f98-4d5a-8f69-40f34dd15d42", "comment": "Malware payload (Mirai)", "value": "e0b17b3cb1c081e53caca1e37ae10408", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787699, "uuid": "3b45be78-cb19-44b6-b0de-322716d05e6d", "comment": "Malware payload (Mirai)", "value": "a7e53911dfa77578b3e0bc1fe811146cfde5ab88ef0b11584ec3144f808592ff", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787699, "uuid": "e9e1fb18-7d91-44e7-846a-75e210ae8a13", "comment": "Malware payload (Mirai)", "value": "f37a7ceb0680e5b05ac8db12316e304e0de2c578", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787699, "uuid": "3995eec9-2578-4718-930f-ba54af18c668", "comment": "Malware payload (Mirai)", "value": "78c2e26e1f91c3e09b8d1f7c95f33a3c2acba773f1095e14e399288f947a32ba57c426f83f98d7ee53a73f03c4059f2f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787699, "uuid": "60ed77e3-f067-4c5a-8f3f-723a1b614fef", "value": "T1F5A33B03771D0F53C89759B029BB37F1879AB6A212E72181A91FAEC05733A782127FD5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787699, "uuid": "c037f849-2dea-4184-8b16-d9b36445af97", "value": "3072:V1W6h6u7BlpvnbzY1bwn1dDmaj0PXxzfsDj:V1JhR7D9nbk1bCdDmaj0PXxzfsDj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685787699, "uuid": "6f8def14-49cd-4cae-8c43-5cfe97da16aa", "value": 106318, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685787699, "uuid": "f8e03e28-6c28-4dc3-aae6-7ece21c7be9f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787699, "uuid": "b12cf36d-ce10-4221-8781-270296553238", "value": "e0b17b3cb1c081e53caca1e37ae10408", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f47c463b-021d-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685803817, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803817, "uuid": "9f3dbc49-a869-46c0-bad4-a3c70f1e6a68", "comment": "Malware payload (Amadey)", "value": "d004ec2648a3a7609e9dafcc7754010f", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803817, "uuid": "2880b25c-a5aa-49de-a7f1-ba9c2a21018b", "comment": "Malware payload (Amadey)", "value": "a98d5b8cb6a8da2dd640138fbbd1221c07181461c41e1d30526efd9d7b84cfdc", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803817, "uuid": "5e8ffac2-cc4a-4837-8660-286abef453fa", "comment": "Malware payload (Amadey)", "value": "2d800dbbac348bae72f6b669a915ea44492c7a5a", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803817, "uuid": "1e6d8279-98a4-4671-a768-0ae2459a7a59", "comment": "Malware payload (Amadey)", "value": "e46c2e58f7e889a6e6bd9df26c5c204e1225a8db35df94a3c703d05016fd39585943770de03d44d3d0cb27e491429879", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803817, "uuid": "7208047d-0ae6-4622-83a6-433e0e4b0772", "value": "T19535232397E99473D53123F128FA07570F35BDE15A708B9B2757AA5A0C326C4283276B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803817, "uuid": "ae860985-3ac1-44f2-8d3c-a71c980c730b", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803817, "uuid": "c5121a25-e20f-445b-bd05-82d7ca6b0116", "value": "24576:lygVxUSwU3g3EdvnV624bn4zlXT8iLDy4WJGzys4jU:A2xrzEEdvV6ToBDu4WJGw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685803817, "uuid": "689b91cb-dd4f-4cae-b370-845a80bcf9ba", "value": 1076224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685803817, "uuid": "ddb2c740-d5f4-420b-a16f-a5e85b4b1831", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803817, "uuid": "ba2d82a4-913a-4448-aec4-ecb5df4f2db4", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "870a399b-021d-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685803633, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803633, "uuid": "0cf31446-9761-4187-ae0c-f42de98d850a", "comment": "Malware payload (Amadey)", "value": "d188c56df04cae6a613edbb473de14e9", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803633, "uuid": "2a9ef9c1-edd4-4da3-89c6-2fec2f5082bf", "comment": "Malware payload (Amadey)", "value": "aa6215e591b97e76a40393ddf3175d1c46dbedab9ab1282b00b0b0d7cd24f71b", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803633, "uuid": "c4eb38e5-de7f-4c24-9242-e55dff89b5cb", "comment": "Malware payload (Amadey)", "value": "f6186fd9af26c34d200571ca0b9f4730c61443f1", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803633, "uuid": "c5568b41-fbb7-41ea-a3bd-4aafa3a93f92", "comment": "Malware payload (Amadey)", "value": "858c3722dad191a4b9f11abe11eaf88e0891855d091426d51708d9a2763afa5584cc9ac721549d8418123d3c12e94211", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803633, "uuid": "6aad7833-018b-4d15-9abd-918fb78aff9e", "value": "T17D051217DBE94476D9BC277018FA06930A39BC65A874432A37C5A55F0C73BC0B2763AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803633, "uuid": "fa692389-9e98-4403-b1aa-1da4fb64ced1", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803633, "uuid": "6fc1acef-bc3e-498d-a1b3-d51a2e861619", "value": "12288:zMrmy905li1jiTmBHTCuP63ZOZJ/8DHVkfPKmw+0VAo7S8Na1AfIF:ZyglYa+TCuPGWNsHXmw+0VZwAfIF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685803633, "uuid": "c4dd410f-acf1-4476-81a3-5a806d5ffecb", "value": 797696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685803633, "uuid": "d2edced3-a5f5-4efa-8942-868bd0397eb8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803633, "uuid": "0e8acab8-e75f-4221-b34b-630dc35fb88e", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d83acbe1-01df-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685777141, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685777141, "uuid": "01242ca0-94f2-47d2-ba1b-a21cb9f141ca", "comment": "Malware payload (RedLineStealer)", "value": "7abc811d4ae1e68a73de1f5588355092", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685777141, "uuid": "8d6fd886-afcd-464a-bfdc-686cb3a6048a", "comment": "Malware payload (RedLineStealer)", "value": "ab34a91d10b1c085454830a71cc37785cc48ef45496e8b4e743f8fecc91f86b1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685777141, "uuid": "63e8234a-2631-48d1-bd46-25b4e8ae2cde", "comment": "Malware payload (RedLineStealer)", "value": "f5042d8cf385df97598970eeae8e8affd55438f4", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685777141, "uuid": "29208580-0a25-441d-97b2-ea34f61d9b11", "comment": "Malware payload (RedLineStealer)", "value": "5c0755ef28846f033003faf1fdc72067ccc210134e17b8f5d75d5ae8647c0002031134dc4947b3d4e98b403fa82f6b9e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685777141, "uuid": "27de9407-b19d-4ea3-855f-991463ba311f", "value": "T1C2052316A6E40072DCF6277058F412C70E36BDA29D3A937B26416C5F99F26C0B53A37B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685777141, "uuid": "ac6dd68d-49cb-4b4e-90e9-8cd97abf5d42", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685777141, "uuid": "f84baf74-1bc8-40b4-b395-e8381c7a9e2f", "value": "24576:QyPlPgw2MA8F/CplkAxc28CNVlYtFW6O/:XtXALphgC3D6O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685777141, "uuid": "75d6cf49-0d61-4bdd-8275-549f10071f00", "value": 811520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685777141, "uuid": "9d255b5d-a769-4c78-9b26-1d7eccce7e2e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685777141, "uuid": "ac328cea-ff20-4f4b-ba3e-cbb6530402ec", "value": "7abc811d4ae1e68a73de1f5588355092.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e00f25e9-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802494, "uuid": "e46bad27-074d-4a4e-85d1-b8ac11f29f44", "comment": "Malware payload", "value": "6d4f6e9108431a0dae71d19c5f4f50f9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802494, "uuid": "131180df-2a9c-43be-8ec7-793844b9d903", "comment": "Malware payload", "value": "acbc21dbe1a090520a6d873d8f849d589605a4b56997a0a20836d2ef7d3a4471", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802494, "uuid": "b8294d5d-8e47-40dd-a007-89b887ea4f28", "comment": "Malware payload", "value": "573f37b19f85496b37098ddb4973f52e9cec5367", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802494, "uuid": "929eaec3-e8d1-4a52-b6f5-cdd0d63c79f4", "comment": "Malware payload", "value": "b5050500cc4df3c129422a31c527cd4b4f4dbf259128480b93582c174112153bac8d60228bbd2ae1bc914e9373b6e0ce", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802494, "uuid": "170c0094-cbab-4c5d-8ea2-732251a15b1c", "value": "T15BF2E172A1EC4936F09726B121FF526DC5B3BC26986A4D93E7D8504BBC35834C910373", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802494, "uuid": "aca4661d-a024-4e63-9142-419cbf034e4e", "value": "339610cab2a93ce92b291810b04eaec5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802494, "uuid": "54694a75-1c5b-4264-aa9d-83dd313cdb9c", "value": "768:8JIHNDNTLIo7xVRE80ceWuCiYUTKY1h9Bw0iPCwASwxOha5O:WID9UCrjeqiYUOY1vRiKwpL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802494, "uuid": "71f4e62e-798f-46f7-a8f6-302fd42d1ef0", "value": 35328, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802494, "uuid": "4a491ca2-b44d-4b2b-b31f-6a7d0441d7de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802494, "uuid": "038b24e4-1bc6-441b-bf38-792881dd4944", "value": "SecuriteInfo.com.Trojan.GenericKD.30830478.29112.15554", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e84cfd18-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802508, "uuid": "1ef759f9-e864-4204-b08f-061036367946", "comment": "Malware payload", "value": "c486c223ebce7065d9c721c1fcbbe728", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802508, "uuid": "73acde71-8920-4a6b-bcff-4bf7067b0c1c", "comment": "Malware payload", "value": "ae525737dd3cc5070c095e192456174933663fb61509820ae824a00de9032886", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802508, "uuid": "3ecf3414-461f-40c0-97c5-88aebb4ccd7c", "comment": "Malware payload", "value": "82b1a8c26e781bdf1c33823c73846381e3e44d5a", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802508, "uuid": "b3f9097a-1255-41fc-b778-2b15ff622c8e", "comment": "Malware payload", "value": "f6749002b14a368f2ae4ecf80fcdbc722be2044f16b946e4ebe3a0184b70820970805e705e868ea882bef0c014be1728", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802508, "uuid": "484e0844-2ba8-49b1-b10f-3fabf6151c7f", "value": "T1F204D0023ADD8184F0B61B30ED738AED0AB4BD61FD75C26FA750761E6CB1B909954B22", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802508, "uuid": "e8b7bd48-3d19-4051-9433-e1d98a98a5c6", "value": "87bed5a7cba00c7e1f4015f1bdae2183", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802508, "uuid": "2d8ca6a1-a2d0-4fed-b4b7-37353552aaa7", "value": "3072:na8YerOYT9VJ7esAHyKI70YFCO6l8BvXJKMIPv2vmwu/8xS/B+08yTGI:hY+FBPeH1QpY8vXJUPvbwXxS/UZc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802508, "uuid": "97726d39-3c63-4e4c-bb9d-c392842bfbd4", "value": 181104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802508, "uuid": "d7ee4fb8-2763-4af9-bb76-6e34bb25c6c2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802508, "uuid": "b6465953-8331-4da4-a35e-db0e23df59ac", "value": "SecuriteInfo.com.HEUR.4199.32732", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "917e922e-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685793343, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793343, "uuid": "6d6ef2cd-42d7-4d89-bc2a-9435be9fb491", "comment": "Malware payload", "value": "b63a34c92a1ce8b47682068d2d36103a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793343, "uuid": "205756f6-6a8d-440b-b6a3-548f3f5975e0", "comment": "Malware payload", "value": "aefdf7c1b39beccceaeac24070081319d1aa0f711e15036214269fa819974115", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793343, "uuid": "9703dff8-d025-460b-a829-d450aea325b1", "comment": "Malware payload", "value": "1ed1bc0dba911a9e6cef7287bd00290fc7b3feb5", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793343, "uuid": "f5a222b8-87fb-493e-8495-029c5232e1ae", "comment": "Malware payload", "value": "adf5bb38685e05d912fe826c0669728b0bc9300080fce41f64bf877d90f161122a9eae6010100f74da85a3d6d8ea6f1f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793343, "uuid": "9208a677-b95f-4a4e-8a10-c928eff9e1d9", "value": "T15A04C80AAF660FBBDCAFDD3706E9070135CCA50722A53B753674D528F54A90B4AE3C68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793343, "uuid": "ccf7fd08-8e00-4353-8b5a-18eca016c9ef", "value": "3072:jy3lvmyOz7HQdFD8bPg/lzb6vsOd+WtJ:jy38yOzAFDG+xeEKnt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793343, "uuid": "307cd470-b0a6-4568-9e7e-4bcb6fd9a981", "value": 173700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793343, "uuid": "c74db9f2-cbd2-43c4-9393-8b21e9584e82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793343, "uuid": "54739ff9-ba33-4dbf-8273-18f28e4e30c5", "value": "b63a34c92a1ce8b47682068d2d36103a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3acfba4-01fb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Fabookie)", "timestamp": 1685789213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685789213, "uuid": "f7fbcfb6-7fed-4598-b5c8-39983488e2a5", "comment": "Malware payload (Fabookie)", "value": "da90bf1d014b135010ecca992c3d8dab", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Fabookie", "colour": "#289638", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685789213, "uuid": "876c4248-577d-43e8-a86c-2f77ed89ab6d", "comment": "Malware payload (Fabookie)", "value": "af14bb31f944012d18860da9f6422864257ebbc0b60c6365f1f0738e313709b9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Fabookie", "colour": "#289638", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685789213, "uuid": "1f52f1fb-ca5e-4660-a1f0-eb6d1a38c35b", "comment": "Malware payload (Fabookie)", "value": "9c29c5fad99064b8320e215b15804f5b33afab24", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Fabookie", "colour": "#289638", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685789213, "uuid": "f6a3420a-835f-477d-8bd5-e4b078d3d100", "comment": "Malware payload (Fabookie)", "value": "f3fcb97ad08cec942157de5ccee510a7a69d88a1b177a3a1a55c81b62f3e5909e9db20b4553c216539afd5fd9191f31c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Fabookie", "colour": "#289638", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685789213, "uuid": "e8e2302c-9e26-4680-9b30-d7454770cec1", "value": "T1B0263370058DBA2BCEE36C372963A80642F7857CEFABF3E6C25E535569025410F6498B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685789213, "uuid": "3b295eb3-c734-4d41-89db-aa4ade08058e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685789213, "uuid": "b6a26d0c-ddf8-4843-b43e-59902a128d84", "value": "98304:QOywvOl6KbZU+ZyMEB5h7NWsr7YFJBCfPnSw8bHRJGydhuqFsHq:Q9wKJncDrWsgTsnKP/dhuMsK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685789213, "uuid": "730f09a6-024c-4bc8-b62b-963dc7a9acdf", "value": 4599296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685789213, "uuid": "d7d177be-e800-45d4-9d21-b9f69e15e5d2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685789213, "uuid": "c74ebf4b-f65b-498b-b643-b758bde11765", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af32561d-0200-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685791245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791245, "uuid": "b617d6cb-b9c9-4399-939c-b8b82770b81a", "comment": "Malware payload (Amadey)", "value": "aa97bf7405e9329b5a71f50aceae2835", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791245, "uuid": "5b2bf495-355f-46e8-b519-6906382f954b", "comment": "Malware payload (Amadey)", "value": "b04584a725ea739df2923195a89ad0207e7d6145214aa0e96de99be39b5d7cc0", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791245, "uuid": "41cf7c2d-321a-4af2-af57-75fd305103bb", "comment": "Malware payload (Amadey)", "value": "42bebd777d262b89a35f008af5615e3ee6c18e26", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791245, "uuid": "36e17a36-baaa-4212-932a-ad252d513ace", "comment": "Malware payload (Amadey)", "value": "c936398c2c9d4cd9dc89baa3c9f50e9b002cb1c3f855c684f13e69594d7ee1819341e558f0b0f478621f58bed99eaa61", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685791245, "uuid": "6d5fe299-6c60-406a-abbd-df415b0df018", "value": "T126052242A7ED0432CDB523700CF1179B0B36BDF1547D672B2A8AA8591CB378928757AF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685791245, "uuid": "a56fc485-59ac-46cd-b599-15b66c23dcf5", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685791245, "uuid": "f62071d1-67f6-4ed2-ad5e-2d00c56ff08f", "value": "12288:JMr7y90Aq+yiFFBdczkvq638ZDeAyRnQtk26vKNDfAW6hfKUEU5I:SylpFnpvq3DeA2aZ6vQUWXhU5I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685791245, "uuid": "e84d863c-859f-445e-a8ea-44f5e10b564a", "value": 796672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685791245, "uuid": "3cfbda41-303b-4f6b-b1b9-cf71a8bd6cc7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685791245, "uuid": "2ec34de1-36e1-4e6f-8bd2-b34f34e18821", "value": "aa97bf7405e9329b5a71f50aceae2835.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07d52ead-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685781945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685781945, "uuid": "454a46e4-944b-481b-ae87-9786e833142c", "comment": "Malware payload (RedLineStealer)", "value": "d1761527193ddb074052aba477c29272", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685781945, "uuid": "e8965168-41f4-4177-ac61-1477c97f660a", "comment": "Malware payload (RedLineStealer)", "value": "b0907592c41daab2935d800607033462c57c51aa3c1cd988aaf9c13c9c2ddc6b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685781945, "uuid": "4451508d-491b-4124-805e-6ae3e41d3e90", "comment": "Malware payload (RedLineStealer)", "value": "1120d0661a32044f4c89663c4f7cde0fee607613", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685781945, "uuid": "95ac33f6-4707-4018-8d37-e4087a7baef4", "comment": "Malware payload (RedLineStealer)", "value": "bca4955ebb72f922037349fe986541b6746bc4c1cbedad1adbddd6d23abaf5d544cd212ade574d31c9481cb3f2854e9d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685781945, "uuid": "c9838a59-46ea-4978-a326-bb9ca16b26da", "value": "T157052242A6C88122D8B5577018FA07930F367C729AB457AB33869C5A0CB27D4F4367BF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685781945, "uuid": "12066f83-6653-4587-891b-370756b186dc", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685781945, "uuid": "62ee43bd-f083-4b39-a068-99200f0a7378", "value": "12288:ZMrOy90uyG1gHehsrDwu4WtckytnjbTYfR20NzPrzAxT:LyvyrehRu4gcPjYfVNzXAxT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685781945, "uuid": "b9b745d3-0018-4700-bef6-4782d2988188", "value": 796672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685781945, "uuid": "568eba5d-a28b-41f7-8e36-74d3b4e01ffd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685781945, "uuid": "75546ed0-94de-435f-a86d-e9a3d2f6f2c7", "value": "d1761527193ddb074052aba477c29272.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e1b95af-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685793364, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793364, "uuid": "75bf98d6-f07a-4406-b574-bf1561496572", "comment": "Malware payload (Mirai)", "value": "83e86f733ad2bf6a0898fb9a7d0c31e8", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793364, "uuid": "25d81571-4792-4810-8765-f580a5c16c1f", "comment": "Malware payload (Mirai)", "value": "b266b1159b04bb98a3eddaf4e2e75c249c0372e60c4b2ab596e33890c6ef5287", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793364, "uuid": "83d90dda-02db-46d8-aca9-79d3c9f3dc53", "comment": "Malware payload (Mirai)", "value": "e50d41a09a1a6a3ad87ec4a8e2f685447910fb39", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793364, "uuid": "1b0a1bec-6ca3-4792-8432-7940e0346161", "comment": "Malware payload (Mirai)", "value": "f133f4cf9b078f755f5dac29c851e90a0d8dba8bd039a55a300ce9c2b67e5e6b39c459b6e0025d4321585508b5c5813a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793364, "uuid": "acd053d1-35f6-48d0-adc3-e5f14c67b410", "value": "T1CF042A46EA404B13C09627BAFA9F42453323DB58D7EB73059528AFB43F8779E4F22506", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793364, "uuid": "152a41a2-c0ba-44f4-a0ab-cf40ddfa4a54", "value": "3072:pfY9wBnwyiKj6Xa1AQimt2NnvmA5gGMC+XPSorM/RLfqpRk:pf/nwB24a1AQimtkOAOGMC+fTrM/RWW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793364, "uuid": "256dc3e0-8ce1-44b0-b8f3-e49aa34eff14", "value": 180479, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793364, "uuid": "2a720dd9-620f-44d8-8489-f87b49315daa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793364, "uuid": "11784492-67af-44f5-b8c4-745292bc808a", "value": "83e86f733ad2bf6a0898fb9a7d0c31e8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c03af7f-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685782006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782006, "uuid": "fd5a1a17-82dd-4372-8932-430e51779f7f", "comment": "Malware payload", "value": "611fa15e7454b6fb6100eb2630763f9c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782006, "uuid": "e0e94e0a-0914-4852-947a-fa7f295a1609", "comment": "Malware payload", "value": "b2ab9242ed2a1a87bb939ddcb02d100fee353212b22ea485f37ce92ced871f6f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782006, "uuid": "8fc4ddaf-0f59-484f-ab43-5e5be4689167", "comment": "Malware payload", "value": "31fba31b12819634b26c8042bc33236000211fa9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782006, "uuid": "c0890412-281c-4339-9b11-c92f7d26ab96", "comment": "Malware payload", "value": "43fb20235b7af98be3a8182671dae72e6346766c7ec4834eb989d53387e270eb1e20d83f496c71a8af40c6412c733b2f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782006, "uuid": "4ce8f81a-693d-4e03-8c4b-22dfe1b2cfa3", "value": "T15DF208A9F8019D7DF85BE73F944B4C09B83077C55282572323B7BAB7AC721751822E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782006, "uuid": "f416df29-8335-43f1-a04f-104b38d0c352", "value": "768:E4ejI8pEzxNkXiyr3uDcN0YMBjexCqB8z0rw:Db8viyreDZYMBSxCu8zV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782006, "uuid": "2112a63e-f86e-46cf-9785-0352f8bafb19", "value": 34244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782006, "uuid": "2302c85b-8d55-45ef-8533-89bb8de8073b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782006, "uuid": "c258ccf8-81b3-4a06-88ed-f4e03fb1d298", "value": "611fa15e7454b6fb6100eb2630763f9c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b14ca67-01ae-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685755832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685755832, "uuid": "419fb485-3943-4cfc-9ad0-4572d6c4b687", "comment": "Malware payload (Amadey)", "value": "b6936e34dcb609b6fa901846f935e817", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685755832, "uuid": "5f6f6a41-8800-4b45-b0cc-9e85d779a227", "comment": "Malware payload (Amadey)", "value": "b4e42dd6e21172a3fd33b377622b93f7a7082fb8ea1eebc17aee4eed5eb19e77", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685755832, "uuid": "74f3de78-5fb4-48c5-a95e-65207bc7136e", "comment": "Malware payload (Amadey)", "value": "1a18a2f5c4da831b268aa64250082e31859aba60", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685755832, "uuid": "31c382d8-90c4-4ec4-9ae8-99f4be5c0521", "comment": "Malware payload (Amadey)", "value": "5a428ce2c21e28e9d5fe593cb5127225e90698f6f182b0a48543efc652dbd8cc0773685cb6ba1ebb90f5e7c4b18b8de6", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685755832, "uuid": "f6699259-6cdb-4e90-9262-8a3aa47cf4d6", "value": "T1E9051216A6D58473C9B527B036F607C31F35BDAB9DB8437B2344E8264CB2680A97137B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685755832, "uuid": "a032b7bc-9571-4431-bb28-8e606cb11bc0", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685755832, "uuid": "fce4578e-dcfa-466b-88f9-6d4f9378d57f", "value": "12288:xMr+y90KT2zlAhfrPrbeXlSFnXawgvMiHbOV3VqiWCDi3m:LyiJAxfeXgV3AiWe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685755832, "uuid": "cdffe9fd-0972-4d74-9e90-707c759f9e99", "value": 813056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685755832, "uuid": "4d6ac3e9-9d98-4e5c-bf8c-d62f5c11c821", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685755832, "uuid": "8ff8cf69-3e14-4db9-bf67-90a1e74d1ebb", "value": "b6936e34dcb609b6fa901846f935e817.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f7c6617-01a3-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685751034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685751034, "uuid": "d054a05f-2938-4f66-bbb8-cc30d8f956ed", "comment": "Malware payload (Amadey)", "value": "69dcde743dc7817f2fd284a8fee05829", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685751034, "uuid": "051d1781-ffde-45bb-9fb5-9c3f34b77bbc", "comment": "Malware payload (Amadey)", "value": "baccdf1f8bab6636b2bec3f1344836c82438ccb804fed30d558eeb6e949671bb", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685751034, "uuid": "537376ab-0de5-4d28-90ce-10d37165f6dd", "comment": "Malware payload (Amadey)", "value": "66a930317f14c25fc4e26d0ceb817c2f84f34d61", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685751034, "uuid": "418b7a2a-6dcc-43ee-b44c-c13289f99abc", "comment": "Malware payload (Amadey)", "value": "14d6b24f4d5d786effc63054cfb22f14d2183f6656216ddac8dda0994e62de90c83e289a182f52cbb787cb928b94ce29", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685751034, "uuid": "b2af8907-96ea-473a-9bdf-d9cede6b8b90", "value": "T1B6052382EBD40213D9B523F01EFA43830B3FBD624B38A71A1646AC5A1CB36D5957177B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685751034, "uuid": "bcf19c94-bcb6-4f1f-8b72-268ca9dfb606", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685751034, "uuid": "204d223f-09aa-403f-84da-67e3ba073292", "value": "24576:kykToj4/EEGLjKaSPRjG1YtKoiBeMWEszMmJw:z8oU/YKauSyQoi0EsQmJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685751034, "uuid": "b8abef89-b2a3-4775-80ef-4084848fbafa", "value": 811520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685751034, "uuid": "537060f5-21e3-4fae-92bc-1dfe9af5a588", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685751034, "uuid": "2a705a68-acab-40d2-900f-b4eac40b1703", "value": "69dcde743dc7817f2fd284a8fee05829.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6d29414-020d-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685796949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685796949, "uuid": "c6c7a69b-0158-4f52-9e79-91eefbccd4a4", "comment": "Malware payload (RedLineStealer)", "value": "88774e77df5a98e291140c8882418d60", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685796949, "uuid": "bd842872-1fc6-4e58-9d00-fb70dfeb025b", "comment": "Malware payload (RedLineStealer)", "value": "bc88f0b6c0d5675f7ed9b30bc01cab6ec8d39e2e80ba0ee01caab557c679c84a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685796949, "uuid": "092750a0-1538-4bea-9f6e-a29654e015fb", "comment": "Malware payload (RedLineStealer)", "value": "25ee8779f1f4b8e7b791a165d73c6934aebb7066", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685796949, "uuid": "9bbac8b7-8b8b-44da-8ddd-a34b6e3c0072", "comment": "Malware payload (RedLineStealer)", "value": "a53938aab9bca6a13e1b3e0f7d05a9be7fe94a4ecb9836869e66367411b459d9122d67ae3a52f00af416f34deff5bdd6", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685796949, "uuid": "d41d93d7-9ca4-4a05-a389-c5eeaf4e5234", "value": "T13D052252EBCC4476DDB163702DF702C31F39BDA188B892573359AD5A18B2288B57273B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685796949, "uuid": "a06689c4-d5d3-4341-884b-0a2e6a8e622a", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685796949, "uuid": "782e3ec9-e75d-4872-8190-596d7e63c73f", "value": "24576:Ry2LnAoYR/s7jA1iurDGRUNtTA/sFm47r:Ek9Yxs78EurqRU3TD97", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685796949, "uuid": "b8d64110-2015-4e5a-97de-19e80d0703db", "value": 796672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685796949, "uuid": "2002d825-4f3f-45ba-a7e5-526439d3f5b0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685796949, "uuid": "cef42b94-583f-43f9-ae39-5a56a02b7d9a", "value": "88774e77df5a98e291140c8882418d60.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29709193-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685782001, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782001, "uuid": "4a64f7c2-b4de-44b2-8ed8-bbd42046055e", "comment": "Malware payload", "value": "5a27aa4197d981f11fd3f92e012f3cc1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782001, "uuid": "d0d0e4e8-2dd9-49b4-a6e1-6ced09ced0b5", "comment": "Malware payload", "value": "be2b36a1fd8d91f9c86043b1afa8a87acbc935d6087d0ed2e565ddcf4f7c9504", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782001, "uuid": "974dbe82-e488-4d1c-b428-831df5c6fbdc", "comment": "Malware payload", "value": "10a94707b788f64cd683b0e6fb2511b2df6da18f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782001, "uuid": "c6398527-2721-4641-aa5e-406f73144535", "comment": "Malware payload", "value": "f07181a9cb6f0f9125d9f630552d5d2b657fcfd34aadf2dc4b5f005d293031825cf311f04b186bfde6b5cbe895d7b906", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782001, "uuid": "6de2036e-c75f-40c6-a635-246268610d57", "value": "T1BC030A3496BDC65DC96A137DF81503E811B9CBFE3226E7B80B59D12C3DA3B10C519AB1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782001, "uuid": "48292ad7-1a53-40e9-b6f8-3098dcc3a651", "value": "768:rr0q7cCi87fYxVxNo1A1W6+VYspAvCjOCNewWJ:rAlU0VxCHVAvkZ3WJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782001, "uuid": "31fbe242-dd85-4533-922d-145815cf65fa", "value": 38400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782001, "uuid": "2bba7945-5c5f-43e5-a5a4-eccfa1cf4594", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782001, "uuid": "051803d7-437c-48c1-aaeb-7aa3c9f0b6cd", "value": "CAPZcbB8DM.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e96e63dd-01f3-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685785760, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685785760, "uuid": "1c70724a-5a5a-4893-a7c0-bffc353d62aa", "comment": "Malware payload (Mirai)", "value": "1e1e4c2e1576890ca2cc2d7381e9f29b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685785760, "uuid": "5482aaf4-22fa-4ff3-9fe2-e437bc156f9d", "comment": "Malware payload (Mirai)", "value": "bef11409ad30f83d7dfe1e7feec23697c1b1ab0671dcaf98e76f3725218ffea0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685785760, "uuid": "b0690a1a-9ddf-41a8-afc7-c2e81a7951d2", "comment": "Malware payload (Mirai)", "value": "ddb7a2621a1ca5c37aeea2c9cbe7b87fc57b7eeb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685785760, "uuid": "b2a73675-0af7-4f46-b165-4b80ce5e6165", "comment": "Malware payload (Mirai)", "value": "e9e30eee5e3d3faf6a92f58f471df5b007027be10c73d8ac27bde864edfdb4d6f56be77499d9dc1e12759f6f2c4b4d1d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685785760, "uuid": "631128d0-3692-4f16-9e11-027c820b72d2", "value": "T194A36C13A662C6B7C08342B523CFA5919433B57E0B33626773D87EB42F119D92D5AF82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685785760, "uuid": "50b8074d-7fb9-44de-9e05-5236b3cd2c16", "value": "3072:UGYBQLHkuog7WVGy3QUhuj9XZimnQVrpiFZxHj:5ke7WXhe0mnQVrpiFZxHj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685785760, "uuid": "21f6f59e-9bd8-4f49-91f2-62c4e6055c36", "value": 106353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685785760, "uuid": "068af5f3-f9cc-44c1-9149-94c7308e2c69", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685785760, "uuid": "9d66d4e3-b48a-4ffe-b87f-21527dc8723b", "value": "networkrip.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c407568-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685793307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793307, "uuid": "67fe051d-3374-43c5-ab44-6439df7b1350", "comment": "Malware payload", "value": "c726d98afa5d984ca9ad502078d0a963", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793307, "uuid": "f37b4e3c-60ed-4983-9b95-eaa28c89483c", "comment": "Malware payload", "value": "bf6704e18d774165c000eae49dfc9456cd598b390214cf8cb6f049755192c4dc", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793307, "uuid": "7cd81160-72c9-48ee-8743-42b7902fd076", "comment": "Malware payload", "value": "8e5aa6a83ab57d5d2924413f2a9381ef67b7bf35", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793307, "uuid": "2faccf66-bd98-4724-a831-f3f57d30a58b", "comment": "Malware payload", "value": "43a7e3e579c425766e40d27c28d1166feba9ca3c17b1007a61dadc63eae7675a597c2bbd60c5277b79a6ff45eabed0e0", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793307, "uuid": "9fe2b773-fded-4fb6-a3c9-70573ca13d2c", "value": "T136830959FD829B11C5C1167AFE1E558E332307BCE3DE72129E246B3077CA56B0E3A846", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793307, "uuid": "138ab57a-8b4e-4633-8f7a-971b9d6fb2d0", "value": "1536:QynO0CeV3b4LEvquUT0C2mhmGtUaKTr6yIbiNg9b49Q7vn5OYn6:bC4b4jMmgGtUaKhg9b49QznY8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793307, "uuid": "09605a1a-64b2-4894-b3b8-7c08251b92a6", "value": 83644, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793307, "uuid": "6fdc3e4d-1922-494e-a7fd-85a48987a884", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793307, "uuid": "45b26fe5-230d-447a-b5cf-bb0362d82763", "value": "c726d98afa5d984ca9ad502078d0a963", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f98007b-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782039, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782039, "uuid": "b8dcb69e-cd8a-4807-abfc-66d594a5f8b6", "comment": "Malware payload (Mirai)", "value": "f5397fe7701e804e73fb659d98e58532", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782039, "uuid": "13ffec51-1649-4bc8-80af-3d18cebf5944", "comment": "Malware payload (Mirai)", "value": "c029b2bdce149ab1725c089730a65a11edecbc6fa397c7d3c8a3d25f70a0c3ba", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782039, "uuid": "0b2af175-0172-4f21-8a76-4f0419e00c09", "comment": "Malware payload (Mirai)", "value": "aff3459fed0b49bfc3f815ef0b1d036d6ced2926", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782039, "uuid": "69ff2fec-9522-4641-a7f9-826f469d6b5c", "comment": "Malware payload (Mirai)", "value": "8c143b5808830f57d6f8b02fec928306ef036e781667ee73e3ef9cd7469d62d789fd937c917263629391e9dfbfa27661", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782039, "uuid": "27dcaf76-bcfa-48a4-af81-08322987a38e", "value": "T1F0430795B8C29A17C6D462BBFA2E41CD332523E8E1DF3217DD212F11778A82F0E67651", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782039, "uuid": "eacfcd5c-ec8a-426c-b8b9-f7f07182cf77", "value": "1536:fYsZY/PQZri7ry1+GujYWTcast5AxOBXi:fYsZYtJEHjbgOBX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782039, "uuid": "820e89f7-e022-422f-95ff-0631ac7c0bff", "value": 55676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782039, "uuid": "ead56d6a-6418-4dc3-a030-f553776f192b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782039, "uuid": "f877d4dd-4c76-43fa-948f-397682838af9", "value": "f5397fe7701e804e73fb659d98e58532", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3b03ed8-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685793373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793373, "uuid": "d9c7764d-e0a5-4cae-8775-b0d0814b2cc2", "comment": "Malware payload (Mirai)", "value": "040652ca570ecdd98d50e47d97b047d2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793373, "uuid": "c3c248f4-8daf-41be-a4b3-5bf1c1dfda97", "comment": "Malware payload (Mirai)", "value": "c069524d37dce3d375bba446f4d8d1a3d5a76e1d51abb38feab04aff6c8a2e5f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793373, "uuid": "c738857a-c731-4d8c-97c2-b1828f25ddb6", "comment": "Malware payload (Mirai)", "value": "2840804ee4571d35d44aa3158b51263bf6c47b17", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793373, "uuid": "acf7cbcc-8374-4ab9-b52c-fc393940be07", "comment": "Malware payload (Mirai)", "value": "2146ef0b755715ebe878a5809498e72020180c21746b405787f3de13df7eda4509c1d8a92308302e0f5087635284e240", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793373, "uuid": "093b77ad-5454-4e2d-a87a-7a3692f11dcb", "value": "T1CCF33B46EA418B13C4D22779FA9F424533239B94D3E773065928BFF43F8679E4E22906", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793373, "uuid": "6b9e1c34-8b97-449c-91e9-3d8289673eab", "value": "3072:/t7j0NMfh74ahEH5lsOAqVG9qKFGAXEt7bmpj3NM/9Qrdup7pv:/tn0NI4ahEH5ls3qVEFhXCfmpj9M/9yy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793373, "uuid": "2ca5be35-19e6-4319-98b8-acf47edd93be", "value": 161208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793373, "uuid": "a06ba53e-4715-4a08-aca3-0cfa20f2e41a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793373, "uuid": "46f44ef3-ddaf-4c9a-b2b9-4ca591d8669f", "value": "040652ca570ecdd98d50e47d97b047d2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d2f9b2c-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782035, "uuid": "1c33d17a-f86b-44cd-86ff-9b1a875d57b0", "comment": "Malware payload (Mirai)", "value": "8a471e7a740f97d4aee51b195f6d7758", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782035, "uuid": "db926859-c3c5-403d-bfd9-28ae10078026", "comment": "Malware payload (Mirai)", "value": "c0bfbeef3638aa12eb67ac8945b26ff3ba66b7cbdad16e663968cfe9198dbb60", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782035, "uuid": "06c4ea1d-d7e2-4818-b03f-9c7aaf0d5af7", "comment": "Malware payload (Mirai)", "value": "c64a1f9499e5e69a361779e43073f4cae87b3402", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782035, "uuid": "100dbafd-e1b8-466f-b442-0d7a2a76e90e", "comment": "Malware payload (Mirai)", "value": "137af915041c82d368415fb80778132dc61da7b792277c117f03364cce8c96b0fdd460cd75fe008cecd9df210ef47096", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782035, "uuid": "7678a1f3-ea88-41eb-ae3e-3660e380bdde", "value": "T11B434A36BA792E17C4D0B5BA21F38768B2F2575E21F4C61E7CB20E4EEF1164062136B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782035, "uuid": "3f04e40a-ba47-4c68-bd28-e23fc14468e7", "value": "768:eLRoeuq9iU8yuZsvBMkaRN2SL1tRQRtpO+q+YE1Yk:eVBuSiU8yuZsvBMjN/HRQRrJJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782035, "uuid": "e148c2b5-17c9-4e04-b2cb-a31bf5e43433", "value": 56976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782035, "uuid": "18b6ad61-048f-4f6e-a0f7-1681b50e09ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782035, "uuid": "83c77451-d1ee-45dc-80dc-6b552ea9ddb9", "value": "8a471e7a740f97d4aee51b195f6d7758", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ea7cafd-0268-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685835858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685835858, "uuid": "924d2d01-6694-4261-abce-1430ac6c686b", "comment": "Malware payload (RedLineStealer)", "value": "58b1fe202df404578803fad452142337", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685835858, "uuid": "1be8fd2d-7f9d-4c76-b85f-24800ee02181", "comment": "Malware payload (RedLineStealer)", "value": "c0cde7089d6c966e87c1f3bb030296c5618011644e7afa90c0849852b8f8f946", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685835858, "uuid": "b02b4f7b-2493-4efb-95b3-f783398e48ae", "comment": "Malware payload (RedLineStealer)", "value": "436b7d014b5e5b9319d845e9e9ebdff09c518833", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685835858, "uuid": "785c3575-79e5-4105-a987-5fcae5c85229", "comment": "Malware payload (RedLineStealer)", "value": "d942ac5f31f04243c174fe58e1b9ceee441572821242355038b35f10c680083faf1cd14f39fce84fc4af2ba6b1987f23", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685835858, "uuid": "e8e054d9-0d2e-4128-8d0f-1a00cf9c0ab0", "value": "T19A052352A6DD8422CCB223B058F702C71A39BDE1997C831F3B5AED1A1C725C4787676B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685835858, "uuid": "1533401f-3ee4-4b60-a897-09e9c55a4ac6", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685835858, "uuid": "68f19d54-8ba5-42d8-98aa-a1e570735aed", "value": "12288:XMrRy90VLBL88227l8lOR30QixhEpLXKSYsiJHga41G2ZtvTkDzA6AUv5:CyKl8X2ZgOR3XpOJY1G2ZtvwI6P5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685835858, "uuid": "9087d0e8-8dcd-46c7-8844-98904ce41899", "value": 796672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685835858, "uuid": "ee6870af-5caa-4300-b191-22953bf91e5a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685835858, "uuid": "29b5e10c-80be-465d-ab88-6fda6fe95049", "value": "58b1fe202df404578803fad452142337", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a966572-01c1-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685763938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685763938, "uuid": "61a9e702-01bf-4221-9c1c-3c63eaab2775", "comment": "Malware payload (Amadey)", "value": "978c8f0b1ebcb4f83ba0b5dd168ba17a", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685763938, "uuid": "873322af-b73e-4020-99b9-6f2bdb1e1dac", "comment": "Malware payload (Amadey)", "value": "c78197ebe149aacc46200c486e4e4eb40e2d45396e0dbc72b9bb5259a1880fe0", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685763938, "uuid": "3213a571-c25e-44cc-b81f-ba147698fa5a", "comment": "Malware payload (Amadey)", "value": "d726b44a90ff725bd086230ce627cb005da5dbeb", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685763938, "uuid": "76a34b78-6b09-4ed3-8542-0af547e1c93a", "comment": "Malware payload (Amadey)", "value": "0647065cfbf2f2d2039149ee8a420080b6b58035a5b12bf0171d3d59e25585d80cf80f61881ba0a2302900e09950e27c", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685763938, "uuid": "3cfa1dd9-6e55-4bda-9918-86f2aac3eef7", "value": "T1A5051226B3D48573E9B527F02CF603C31A36BD729938826B1742AD991CB3984B931777", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685763938, "uuid": "24eca16f-25aa-4a67-834f-2e67c9655a63", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685763938, "uuid": "95c205de-0b38-495d-851f-50b30f3cf0ed", "value": "24576:LyGDn9hkRNpwj2gJTr66ZTdaCsMKWJgc2OT:+GD9hknpw6U/6M5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685763938, "uuid": "1521827e-a9a3-4f17-930f-c04e653b3258", "value": 811520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685763938, "uuid": "a2eea39b-3390-4a7b-8ca7-df1d91582abe", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685763938, "uuid": "736dd993-6dcb-4569-940f-6b011bf554bd", "value": "978c8f0b1ebcb4f83ba0b5dd168ba17a.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53fac7a5-021d-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685803548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803548, "uuid": "99f4bd7f-75a0-4723-a706-d4230a5fb17b", "comment": "Malware payload (Amadey)", "value": "814c221c8333adf103f919300786ab5e", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803548, "uuid": "6c7ec719-0a0b-4a26-83a9-490bcc06af8a", "comment": "Malware payload (Amadey)", "value": "c7d5a7cfcdd64a4f5537b3c9577e557649620b312105c3efd2f9422df31be7fd", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803548, "uuid": "9ab97587-ca8f-45cb-9e1c-cec5a636436a", "comment": "Malware payload (Amadey)", "value": "8af30e8c92b912733bba2e97f5f0c0f2c5b4dff7", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803548, "uuid": "90a31d63-c6de-48ae-9735-2316667dcbe5", "comment": "Malware payload (Amadey)", "value": "dab5c428b467f21da5db2339aee763f733a9b90e954b55ed10610df1081ae5efb5025ac4e8bb723521c6c1675990ee48", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803548, "uuid": "86174154-8575-4fed-afe6-418614d31ca7", "value": "T179444C0373E07C64E6264A328E2ED2F4765EFD918F15BBE71605AE2F08B11A1C772716", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803548, "uuid": "ab582438-e271-47d5-a942-996e6627a8ba", "value": "72d2bea31579356588b8915b650bbcc6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803548, "uuid": "e1314be2-4bff-4ee8-aed2-706288d67ecd", "value": "3072:i4VeqFPZ2D42FIL6NmBLwqDFH0b94J/EjLnyabqZrz6Q+Np4JiPMtpowPy:Pd5Z/GIiONJUbG8jryeWrzz+vUtq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685803548, "uuid": "1c399ec6-ec12-4bbf-94ba-76a7282798a7", "value": 254976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685803548, "uuid": "492d69ed-a72d-4c75-8ca1-e60802f39161", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803548, "uuid": "39b63f9c-07ab-4d67-bdf9-42025555581c", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "198a4da2-01c8-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685766942, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685766942, "uuid": "109aa81c-f05e-4510-bf21-3747ec602545", "comment": "Malware payload (Amadey)", "value": "542546b9f45e5d0b4ef8a0b399f4e71e", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685766942, "uuid": "1ae1d7ef-043c-4928-add8-66a3b9f5313a", "comment": "Malware payload (Amadey)", "value": "c7ef57a253109d8a407586a3e4e0ec9fbe08a3fe47c71d2e1a31f42dcc1e6755", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685766942, "uuid": "e7483038-8dba-47c1-be78-4051c91b4aa3", "comment": "Malware payload (Amadey)", "value": "887f66ff8d5269c54049c690f8dde2cc15139715", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685766942, "uuid": "47ab2566-76b7-4872-9775-9314916a7290", "comment": "Malware payload (Amadey)", "value": "0e77653de4de0e5371d2cdbf9822c5220deb0cc5be68ce1ef1733f0bb5abe96abb49aa2beed92c3ff0bc7ab748b302a5", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685766942, "uuid": "3edb640e-7ee3-48d6-9591-dd2b5ae9f2ab", "value": "T169051256ABC849B3ECBA2BB019F603C30935BCA19DB8436B1355685E4CF3254A97473F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685766942, "uuid": "902124d0-f77b-4f11-a983-dc36e1c6bd7f", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685766942, "uuid": "8c0f39e5-28d5-4454-b241-7e6dd66d7cca", "value": "12288:/MrMy90qpdhoiqZz5xENZA2pcjl1THcQFD999WPywOWjYWiGczNAW6DxrKNol:by38Ap2TjJ99VwrcWiGZWar3l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685766942, "uuid": "1f455256-d2d9-40ba-a512-29e277b18ccc", "value": 812032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685766942, "uuid": "e9741346-d555-4466-b160-5583605a7938", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685766942, "uuid": "64d8c64f-e4b4-4d66-9b48-5bf243789cc0", "value": "542546b9f45e5d0b4ef8a0b399f4e71e.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e7ad09f9-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802507, "uuid": "7cedfbc0-506b-4026-aa79-c98b3b0447b3", "comment": "Malware payload", "value": "cff8271de6bd1f9b5a328d42040f9bd7", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802507, "uuid": "3c50aa14-aa93-4a31-ab1d-59b74fb91d51", "comment": "Malware payload", "value": "c83b25ef8783487fa4b90e5c8902f6a6ee433c0f3ab74c20c7a62ccbfaee7205", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802507, "uuid": "f287dd04-1f7c-4fe6-9e51-550510e8c929", "comment": "Malware payload", "value": "be2c7dcd213dee6bccaf8c1f4822b6b50a64646e", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802507, "uuid": "1c6785c5-9b4f-4576-a0c7-69c44c12a975", "comment": "Malware payload", "value": "0c8c0827f9cd3f284cec923da82295b86d18af46fc726ba41fd351447bacf65d0e6d203b715d3388f7137555a9167659", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802507, "uuid": "0536ef37-68fc-4ad1-8b70-7da8617f6242", "value": "T1EE734B02F7C545E6D49165FD209A2F76D6337D2CEF628AD38FB23D6858742C0A83532A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802507, "uuid": "f74524bb-8bb4-4822-9e87-5a7410683832", "value": "6d8eb980a22027606ca35712632f29f6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802507, "uuid": "9f1b34ea-b886-42cc-85a1-bb946a31c11e", "value": "1536:eoaiTAl1Mz+c377D5QV7K7UWFzWDJA8JS71aV6d:+iTAl1xc5Q1ZWFzWDJA8JSQg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802507, "uuid": "52f7e6a0-8f63-43b2-9630-367bd1a349bd", "value": 77312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802507, "uuid": "80f1346e-80df-4c18-81f5-d72175995335", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802507, "uuid": "a0d893c7-283c-40ab-9713-fb3a4835eb90", "value": "SecuriteInfo.com.ADWARE_CYDOOR.11320.5252", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c276c7b-0246-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685821224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821224, "uuid": "bc45f4f9-645c-4d81-a267-b5118bdc41a3", "comment": "Malware payload", "value": "49b55b5189424fa00c16d438cfcab0e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821224, "uuid": "54216b1b-ded0-4f2b-bc0a-af5ed7f4d709", "comment": "Malware payload", "value": "caf577935671be92ac6d345a23f49168787250316edbe6ddccebdfbcdec385eb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821224, "uuid": "da8b2e68-9897-4e9a-9bb5-6807fb47fd8a", "comment": "Malware payload", "value": "488e9f9035076250cea5e41119f41d63f25c474e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821224, "uuid": "46eea537-4f71-4eb6-9afa-7d27aef6dd6d", "comment": "Malware payload", "value": "a4424e752a26b66fdb9533d891dc8b755d104c9c1808f60919b2a3ef886b6024b02c5cb83d898451e9cc1efa7e46a575", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821224, "uuid": "5ff6330e-3293-4900-89dd-dceb60838a0e", "value": "T15092E042CB470A8BCC9C13F1300994DC7AA2EF8A57DB4516EB6CB71A61B2208C5F9399", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821224, "uuid": "dd2dde44-e111-4ccc-8e14-1f117b10acbb", "value": "384:MWeHKBGXaLKbt3PSgArJK2dRQQeCPKlFYjKN399R5lBHcUexKXnUbeQLq51e:MQGXiuK902dRECPJeN9jlBHcUeA3Pe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685821224, "uuid": "423e8753-d2dd-43c6-a2a0-e40c15b85249", "value": 19380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685821224, "uuid": "6f1bd32d-2a5a-47a7-8060-0d0525fbe1bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821224, "uuid": "4c28a183-6cce-4a6e-98d0-34ac2a9598fa", "value": "sshkey2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98088e1a-021e-11ee-b3cf-42010a9c0076", "comment": "Malware payload (njrat)", "timestamp": 1685804091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685804091, "uuid": "b0c9f590-04df-4ea0-9d94-be732cd83450", "comment": "Malware payload (njrat)", "value": "ea37075f856f4711873a009813ec898e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685804091, "uuid": "1abb20ef-68fb-48c1-b006-459b60594c76", "comment": "Malware payload (njrat)", "value": "cd57124ee4c3870947ca0c1cf48e22e52a9159a2b5b7063deffe3c3332aa8554", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685804091, "uuid": "76efcd8b-000e-4e7d-b4f9-48aba63a4474", "comment": "Malware payload (njrat)", "value": "c7e3478bf096041b0d8496d6535e1df8962088a6", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685804091, "uuid": "7e186752-680e-4ca2-825d-a9656690c57e", "comment": "Malware payload (njrat)", "value": "e6f30bef542b0a99d233fba4004230696afb5594f9bf702253d9932a900bbdb2bfb2995fae2ea550dc363d43ea163824", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685804091, "uuid": "2aa007b0-aa09-4127-9388-c04c7c31aa84", "value": "T18C032B8D7FE18168C5FD057B06B2D41207BAE04F6E23D91E8EF564AA37635C18B50AF2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685804091, "uuid": "c43d7783-3b60-41d1-8e04-4e7444ec7c9b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685804091, "uuid": "1a79a63d-6092-4db1-ba42-96f2d33595b5", "value": "384:q62KMizd9jnBhFbJ8ycPVnvvnwaUBKrAF+rMRTyN/0L+EcoinblneHQM3epzXeNn:f2g9lLJfcPVn3VU4rM+rMRa8NuYjt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685804091, "uuid": "974c2081-c065-4856-ba2b-0b080ec2229d", "value": 37888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685804091, "uuid": "6a704ace-0417-4d07-8e99-5f9a9c014b82", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685804091, "uuid": "64d541d2-656a-4d6a-99eb-cffe9409c563", "value": "dsdsd.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c7f1923-01f4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685785845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685785845, "uuid": "0cd73dd0-0948-4da9-b3d1-0b2f6bf3817d", "comment": "Malware payload (RedLineStealer)", "value": "b9a1b752b2cf461bf74700dbe176e705", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685785845, "uuid": "e13e6e63-f12f-493e-9a71-401ed2f08adc", "comment": "Malware payload (RedLineStealer)", "value": "cded1e1e75ce2d506ce7223d894e1726c9a9b17fb727172ba68cb94770702c56", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685785845, "uuid": "0b7eb893-3499-482e-812b-6b3ec867c664", "comment": "Malware payload (RedLineStealer)", "value": "c0befcebdc811dab3ab9f63bcddeb34307828922", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685785845, "uuid": "51ec4ff9-35f2-47db-82cb-29b8772b68ad", "comment": "Malware payload (RedLineStealer)", "value": "b190c45c40e8564ab1307ae65e38e39f8b74554ccd7318f7783f9b1b8a22f90d7bd9fe84f1408e3622422c48932df48d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685785845, "uuid": "b72c865c-4d92-44a5-83b0-d3c066c239de", "value": "T1E405124196C85122D9F52B7018FB12930F39BDF55EB9C39B2385991E0C72BA0E8717B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685785845, "uuid": "8815e40f-70ae-4e7e-9600-ac454247c9a9", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685785845, "uuid": "f6bab52b-c4d7-47c9-b809-436f58334a52", "value": "12288:uMruy90WwJe8g0goc8oBqeBIjZWsl37mKYwyhah5H5UlfR90izP/xc/Bicf6:oyuJeVwc8JeBCaKU25ZyfoizSjf6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685785845, "uuid": "d6f4b277-4d3b-44d9-8ba9-7532dd33acdb", "value": 796160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685785845, "uuid": "d1ed482f-f79d-4aae-9974-e553ed314890", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685785845, "uuid": "48f92ec6-cd85-4e1a-a59d-be877407d583", "value": "b9a1b752b2cf461bf74700dbe176e705.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f0b5e42-0204-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685792748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792748, "uuid": "7f7607cf-bee4-4066-8824-3ccf61ee8f4e", "comment": "Malware payload (Amadey)", "value": "dd404946a2ca5db2ffcaecd2b2388199", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792748, "uuid": "138ce388-0156-410a-aa04-09b3b431dbbe", "comment": "Malware payload (Amadey)", "value": "cdf833d90bc19a3de2de7e6725b60ee4c22fd62fa275ac218bae2fd72840e598", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792748, "uuid": "0289e438-1c9c-4dbf-8783-be22265f9ab1", "comment": "Malware payload (Amadey)", "value": "7543818d0a93c7494fa5246fdcbc6d940699f86b", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685792748, "uuid": "e69e9774-a333-4aed-b7f2-6f9679480b34", "comment": "Malware payload (Amadey)", "value": "cd84b514164ae7926fe2210305d4a0fafd11d7ee04d5be94720015021894abfa768b768630de382ffece9ad1b132a0c7", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685792748, "uuid": "ce14c414-d9ed-43af-801b-78a75646d616", "value": "T13105129373D84066ECB127F25CF216A30E36BDF1057897AB3746986F1EB2291653036B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685792748, "uuid": "15f025d6-e677-4115-b08b-2b511a7129e8", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685792748, "uuid": "88aed180-a89f-4232-9116-7e6eed0f6258", "value": "24576:jyJSEa/Lpi2zoBbTYgJv7TqDICBw6UbVoq:2Jgz4vBh/QIYw7xo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685792748, "uuid": "c0514eb4-fc42-4170-a3ad-8d6e6fa3c634", "value": 796160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685792748, "uuid": "43b5dea9-a2c0-4da5-8b1c-daf04c8c7569", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685792748, "uuid": "e4210e1a-64d3-40dd-baf2-adcf7970e975", "value": "dd404946a2ca5db2ffcaecd2b2388199.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f99b2d1-0216-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Fabookie)", "timestamp": 1685800507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685800507, "uuid": "d152eccb-b1e0-4a92-94dd-4201f0e40f3b", "comment": "Malware payload (Fabookie)", "value": "94bd726fde3f81340dc168d593d12377", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Fabookie", "colour": "#289638", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685800507, "uuid": "868dcf26-3732-483b-a7da-24e6622a4769", "comment": "Malware payload (Fabookie)", "value": "ce07c76e83f9c3a7e9e22a265accb19f522a763c69a6085d220ed9b38ec9c6cf", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Fabookie", "colour": "#289638", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685800507, "uuid": "c62cf9d3-0434-405d-ba35-d529819c2875", "comment": "Malware payload (Fabookie)", "value": "7961462eaed69bf46619df36f322ddccebfe1630", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Fabookie", "colour": "#289638", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685800507, "uuid": "be4b1cf0-2f9f-4f59-87dc-33bace9ac678", "comment": "Malware payload (Fabookie)", "value": "d7a16da0996375d3952a2d071aa2dea75bff3dfcd454ccbb512985aa69683d6e530002aacd21e31cf42397a9d0572c3a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Fabookie", "colour": "#289638", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685800507, "uuid": "0b1d8d46-6d26-49ff-89fb-5712f6a9c53c", "value": "T1C5444D1372D37C65E5165AB28E2EC6E46B1EFB918F4737DF12146E2F08721A1C272B42", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685800507, "uuid": "0a87bffb-9663-4531-8ac6-a728b137b660", "value": "9bbc9ec767e0d044dbe137327e0459fd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685800507, "uuid": "20128780-81cb-4ea1-8f34-11f97c466f64", "value": "3072:5OSY3qioWSx8QT93QgA4CpaWUCDPRmO97wasHvZthdyYJ6T5E0i/D:8SxiYf9ggA4R9CDPRr1sHvZVrJ6Tqd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685800507, "uuid": "e12e491b-6032-4603-abc4-c1752aa39085", "value": 270336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685800507, "uuid": "74ef401c-6a56-47c7-8638-33b9fd2a0325", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685800507, "uuid": "aa1b867f-a193-4073-9996-634d240c1b3c", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b254deb-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685782058, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782058, "uuid": "d7699ebc-a586-4e87-9c6d-fd56069fbc01", "comment": "Malware payload", "value": "4e2813ef4994edb02150c5bc4d626633", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782058, "uuid": "1584a44f-c3b6-4a6b-bc5f-9718c128087f", "comment": "Malware payload", "value": "ce24d5da697bb4f4edbf24e6b6bf87f66cce036d58decab3388c79228ca86c1d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782058, "uuid": "27480cf8-ac8b-4e6d-ade0-bc4780cd05f5", "comment": "Malware payload", "value": "85f6a0d97a7da4b819b7db7b13c0cbb9081228ca", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782058, "uuid": "b456f8a8-51d7-462f-9347-9f64e482962c", "comment": "Malware payload", "value": "09057c63e3b0c6945261066744c12c1142b1f8da09af1f4790b811831a6dead3f84c07f56b3e75275ffb33ef0be7f610", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782058, "uuid": "d13789e1-88ab-4e62-9bae-a8585af0fa69", "value": "T10003E17DC8F388D5C79CACB653768366358DB2E0145D4E6D8F86A4CC435645B23CCB64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782058, "uuid": "91c5cb5c-4227-4abe-b7e6-54bf73dad87c", "value": "768:0KVUFBnmZmIWJSPPMbo8k7nU2gGM/8LN02GTW3OVY8WTNq:hUFBmZPWJQ7bLM/QC2qVY5Nq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782058, "uuid": "a51d9e7a-dfd2-4015-909e-89262cdeb998", "value": 38236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782058, "uuid": "6e5b23cd-34cc-42f3-90f7-86c40bf7905b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782058, "uuid": "b0cb3483-6492-4dd3-876d-594befe61109", "value": "4e2813ef4994edb02150c5bc4d626633", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0374825c-01c1-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685763899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685763899, "uuid": "946ffc1b-0638-4033-a366-9b24c478b122", "comment": "Malware payload", "value": "d4b3faecefeb04f61a881ea7aa91e7d0", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685763899, "uuid": "6a28dd57-7bbd-48ee-ac76-7767394d1e75", "comment": "Malware payload", "value": "cfcfeb0df69ee6a6e05cd6a8cddb72c0c313778feecd39465ec223fc0edc0291", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685763899, "uuid": "8ab9a509-25f3-4ad0-a314-a1c6ca0cdc82", "comment": "Malware payload", "value": "016faf7f5b5aceada5de79cb78b57eedd6404e6f", "object_relation": "sha1", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685763899, "uuid": "fdc39208-ff7a-4f32-ab43-58c272f0fa98", "comment": "Malware payload", "value": "e067cd3cddf1872aed173a53c583a06b109f8bda4db90500817f48c426452d01f8cd4ebf9c1630ed8b15f0a11f632ee8", "object_relation": "sha3-384", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685763899, "uuid": "ba66ca62-654a-4f07-bbb8-a1c74cebda1c", "value": "T180D6330108C4F6C8C64BF997A99D25DDA0159C827FB6E3A86058C6C8D136FD71BDF2CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685763899, "uuid": "f29f4fe4-fa95-4ab3-9c03-48c095e9dafd", "value": "393216:QBcun5SiCb8ExCM6+eZ5V+sPU2kf6axplup6a3nFTIEUq8bkBhQv5PfV4rZ:QBcun5SiCb8ExCM6+eZ5V+sP1fcplu2i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685763899, "uuid": "eae1490e-fe18-4ec7-a8c0-66386432b021", "value": 13591067, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685763899, "uuid": "922cd608-70e0-4e0f-a927-d5ffd3ca13f1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685763899, "uuid": "de48a33f-3cc4-4431-907f-ac796acde17c", "value": "Album_Lonely_Girl_In_Hotels.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e43e7640-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802501, "uuid": "e40c7d59-c35c-4425-8fb4-83e1737e1336", "comment": "Malware payload", "value": "31472a7ab68d486342bbdef380dbae56", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802501, "uuid": "2ada5c73-df7f-41fb-8ca7-b00af781b262", "comment": "Malware payload", "value": "d0c28541bd0b9078543ccbae0e15a80891e3da2bb5cb483f4b105e67604bc928", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802501, "uuid": "fcfce878-d78d-4717-a220-8a27f4c607e5", "comment": "Malware payload", "value": "aef016d7c5544a1079e4c7657ef78367527772b0", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802501, "uuid": "1683455d-31cf-4b9a-9ccc-b11144d0040c", "comment": "Malware payload", "value": "0923418bcc64e6b20368940d06148e6592ccc50c672721c227172bbcfbe7a524950783c0e6bec85e82679c463bba944f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802501, "uuid": "24c851ee-3367-4e9f-b1bd-7b01a4dbeee5", "value": "T18E45AD01FAE6C4B6D1A301729E1AD77ED274BE21C9208953F7D03F1EE9B6691863530B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802501, "uuid": "a2d9d6e9-1f25-4d1b-a1ba-f42d68999458", "value": "3dfa0b14b742782984795ef2b558f208", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802501, "uuid": "40948afa-6615-47d2-aeef-8af434e90aae", "value": "24576:eCMHOFcJ0huDYykRN8C09gtUQqoI36lM7PoHWX3ANhkWKOh/FwM02Ea0+2mQqtFW:eCMHJ0huDYykR+C09OUQqZ6u7OuotCu4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802501, "uuid": "121d520a-1924-4026-8802-bb30cf8c8ed9", "value": 1228800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802501, "uuid": "fd917d90-9131-447d-b872-dc1a0723adad", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802501, "uuid": "14e0db81-3ee4-4052-b4b1-9331c82753ec", "value": "SecuriteInfo.com.Trojan.MulDrop1.44591.21285.25262", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38a0358e-01b5-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685758834, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685758834, "uuid": "33fe4699-48e2-40a5-89bd-c2ccdea60c9b", "comment": "Malware payload (Amadey)", "value": "bf647f8e3248b8eded34a46d2d6e9229", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685758834, "uuid": "4e95aa53-9a58-4555-b861-430e47860178", "comment": "Malware payload (Amadey)", "value": "d1d59eff5f50c5b1733d16d084d0e6e33084f08d9765e78c35747e67b7731e64", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685758834, "uuid": "5f2d28ef-3733-4217-8223-74453c2301ac", "comment": "Malware payload (Amadey)", "value": "aef8aaf828d06939dfe242a85be0e5ce86925f46", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685758834, "uuid": "ac335c4b-ce5e-44f9-926a-de257bbd700c", "comment": "Malware payload (Amadey)", "value": "0f19ca381b2a05cbfae5dbbc594cf4fdf045af541f4f2cebfd0c78afc25cef16d82d4dfafefad851a03e76967883de28", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685758834, "uuid": "d96168a8-07fa-4071-af0a-33a10e2059bb", "value": "T182051242D6F48062C8F83BB095FA67C31E367D6447B8A2672B446D4F0D72684B9327B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685758834, "uuid": "ea7e6d9c-7009-4eec-895a-c32ce6133e1f", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685758834, "uuid": "7d93c0a3-8a1e-4a7b-ad73-f9737dca82a7", "value": "12288:FMrty90U5dQ63DD10AGk0OLAAYXQ9MEx2oqhG8dCltg9N2XFl0yMiSWEDwrLJHM+:MyZ5d/F0AG0ba7Ex27hStAHRW9FM+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685758834, "uuid": "6c420886-6408-4514-abf4-ce9db4825c46", "value": 812032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685758834, "uuid": "bd3f32a0-fcaf-44b3-bcec-d51946db2c75", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685758834, "uuid": "00f7e260-bb8d-4810-b90e-6396a63b8556", "value": "bf647f8e3248b8eded34a46d2d6e9229.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b77fbf0-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685782085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782085, "uuid": "5646a04b-51cd-46f9-8a5c-5aca44ace30d", "comment": "Malware payload", "value": "c49dd7dff1fd7cf06b2d7e7f89194caa", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782085, "uuid": "73a3ab94-41b4-473b-9378-a318aec5b414", "comment": "Malware payload", "value": "d306f8fe234e799a681a1cba41b7f15a9f3253cd013906d7e8b5124869e634a1", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782085, "uuid": "30a62ef8-01df-49a5-9fb3-711c87bdad12", "comment": "Malware payload", "value": "c9788557a39fa9fd9695686ce5d8e2a64b076b4d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782085, "uuid": "a828a77f-47a6-42b4-81e5-7aeee4bc108b", "comment": "Malware payload", "value": "a78080c4c0906a2da5eb3fc7822a105291312fba494cbd28359aa8638a3aa90cefd74bdfeb1332a0501928d6bddb7b80", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782085, "uuid": "1baad455-d40c-4447-a0e0-d51537b73c06", "value": "T14863AE33C96A4658D5854674B1A08E746FE3F00081673EF75AEA87BA1043EECF6197F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782085, "uuid": "d55e7f55-fb16-4788-836e-d1f61cffd9ba", "value": "1536:xatvFiupSCVYQRbApYBPVNDDFVlCCN1KC5mVueKCfIk9:xo7tPV8olfCccCheKi9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782085, "uuid": "245f46a5-2ab4-47d0-8db0-37fe343d5a61", "value": 68492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782085, "uuid": "826bd268-83c7-4f5f-b208-50dc0b0302e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782085, "uuid": "94616d9d-f20b-4a49-8cd7-9692cd647eed", "value": "c49dd7dff1fd7cf06b2d7e7f89194caa", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bbf21ad-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685793360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793360, "uuid": "9fe651bd-f5d5-4a85-8753-e8c8553eecd8", "comment": "Malware payload", "value": "71e2fff107ce53f9d13e8bde16781989", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793360, "uuid": "fff66452-b04e-4b90-b260-9f6e2fd68989", "comment": "Malware payload", "value": "d361066fd077d9d277ee33cd3b8441f75e8d96683081d4efa0f2b08e4921bb80", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793360, "uuid": "e67f6895-b78c-45c8-90eb-6048de2abf22", "comment": "Malware payload", "value": "344975cddc0ef3565d28febebcf6d39f79d244ac", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793360, "uuid": "1b18f4eb-33aa-4789-9110-5cc574db434e", "comment": "Malware payload", "value": "1efbc8807694f682ee3934baf295faeeb9a3cf645e8eb5b3e328e928a7dc563bccd3a78d649cc8b9a0c715723adcb496", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793360, "uuid": "052cab12-eae0-450e-9d55-af591a4bb5b1", "value": "T156A42294D72A875EFFBE54FF70FB99068EA422E77D01452AA02CBD330637946A04B135", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793360, "uuid": "ecc6a038-ed63-4713-870e-9984c5f24003", "value": "3072:6C+5AdmVNpsmwdSu+nOgRA/M8zhWLyp2PIj3Ia8XWxuzfewtP6rp5C0qmi91//C:eAdmVNpsmwd7d2PIj3RE7As0qfr/a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793360, "uuid": "7b76f5c3-1495-4bd5-b9a9-cb662a16c809", "value": 469848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793360, "uuid": "39787b21-5063-4601-bb71-dc4399d5f705", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793360, "uuid": "81579f4a-b540-425e-b5d7-e1a0bb379052", "value": "71e2fff107ce53f9d13e8bde16781989", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ed65b41-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685779004, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779004, "uuid": "d093d647-e8aa-4946-91e0-f4f81ee49a26", "comment": "Malware payload (Mirai)", "value": "e4f9076b06bce406150889b8f292ac8c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779004, "uuid": "c5a3d384-c110-4b50-881b-ddfc54c9e355", "comment": "Malware payload (Mirai)", "value": "d49960f2a8b723b88401791d3d56a23b5c6bec645ef4cbd467bbf6f3cd68e158", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779004, "uuid": "4369e713-f352-40ce-b926-a9c6c64c9cad", "comment": "Malware payload (Mirai)", "value": "f4addb2e4d5dc6046cd9921a5b6178168e64707d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779004, "uuid": "15b4ef0e-613b-4990-90d6-a31f6f9674ee", "comment": "Malware payload (Mirai)", "value": "d8eb1f383ac18547eb9e1d0d4989388733fadddb06d251e87418727bc53ee8dca7206ea2913cf54bd6c9ba540611d369", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779004, "uuid": "ba3ec8c9-6863-43c8-9b9f-47cfa10d3a3d", "value": "T14CB31A37A61C0B43C09B55F02DB77BF24F69AEA313A611C46609FEC04B73AB22551F99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779004, "uuid": "d586b3d2-1be8-446a-acad-176d5e7d7691", "value": "3072:pC/4rdZHsXsZwwR9/Nk5mm/QcuLmHniPNb:pCwrvHwsZwY9/Omm/QcuLmHniPNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685779004, "uuid": "07ca5ddc-8ae9-42d9-997c-218c63fc863e", "value": 116786, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685779004, "uuid": "9c390a33-55fa-499e-bdf3-cd97b6a35925", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779004, "uuid": "5676512d-37c9-4e7e-8761-1c8005740646", "value": "e4f9076b06bce406150889b8f292ac8c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34361c0c-01c3-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685764840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764840, "uuid": "6363c9a0-5ea4-4788-a2db-a3f5c155b26a", "comment": "Malware payload (RedLineStealer)", "value": "b06e832806955cc3c0a40da51e6d7b7a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764840, "uuid": "77c30831-8b8f-4821-9a53-f771ceab94cd", "comment": "Malware payload (RedLineStealer)", "value": "d95aac3ab85c4141a9c8536efc95030d829b586e8a7749cfcac4b89773f87e72", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764840, "uuid": "5fae641b-ed36-43f9-b124-69caf806212e", "comment": "Malware payload (RedLineStealer)", "value": "1cbfe51c0032fc209f358e28c09defd1b80ff2d8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685764840, "uuid": "fd28033a-4041-40ed-831a-927483b17200", "comment": "Malware payload (RedLineStealer)", "value": "89170cd5b6bdf129d7d9821f9ed6740370c6ca32990accc7549907677c81d5409fd89c38b71345a8b0881a69d007b31e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685764840, "uuid": "528936ac-b5b4-4239-8644-086d422c01ec", "value": "T18225DE9D366075DFC85BC472DEA81D64EB60B47B831B5203A42726EE9E0D89BCF141F2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685764840, "uuid": "0943367d-1364-4b55-9093-f67e0faa75e9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685764840, "uuid": "715fee40-60a2-4350-96a4-f5a5bb859da6", "value": "12288:XTunKobECuu3C3O32STjl6owrL5PAjEwmfnfa6RmmHXLnWawunLKXau9LaIddisi:WK9ZuyemAxDg6jFo3RV3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685764840, "uuid": "55ca1c0b-8fd5-404c-a5aa-2a1791890c6d", "value": 987542, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685764840, "uuid": "413d0397-750f-42fe-bcd2-7f0231400783", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685764840, "uuid": "a92e4571-8138-4d30-8da1-98f5931d06f9", "value": "b06e832806955cc3c0a40da51e6d7b7a.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0a5997c-0213-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685799408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685799408, "uuid": "13614db4-3f91-4987-b6f1-c35ba72184c0", "comment": "Malware payload", "value": "3a11a1d04b2ed8050fcfbba96fc201a1", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685799408, "uuid": "be2dadd1-49f7-439b-bab2-06a15ea68000", "comment": "Malware payload", "value": "da03c5ac964bca23c89a548e391243964e2bda12a20fa9862a22721f4b423d38", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685799408, "uuid": "166a6d76-fc19-4eda-8166-b90659638742", "comment": "Malware payload", "value": "bb4c0ae99d15a39c4d93d2f822830b2a984ae3b1", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685799408, "uuid": "1b2f6ed3-1972-4cff-8ad1-fd96c4dfe1be", "comment": "Malware payload", "value": "974501edc6737b22cc2a83dcbcc3de3d4c7370e99c8c6d8a254737c1f3b865b15d5ba0aa928e87a6396f3dd5981fdbcf", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685799408, "uuid": "8f698f18-166d-4eb3-9335-933fcdb1e480", "value": "T1EBF63326E3CBC121C56D017BE968FF1D1539BFA3473050E7FAA939AF88B48C19275942", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685799408, "uuid": "a3c1b8db-3f51-49f4-9a6c-3069f5193de7", "value": "393216:AakepblAUqH/F0T+RWkrqIoLpwmOvWmTr86sPDl34WT2/VD:OINqfs6ybVwm4WmNsr1q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685799408, "uuid": "af412150-3218-44f1-b4a2-2226e7baa3b6", "value": 15499264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685799408, "uuid": "5778dfae-8853-41c7-9e3b-e99a8200d56f", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685799408, "uuid": "168ab7e8-0ff3-4aeb-b58e-ccc6e624b0f2", "value": "Boleto_0943345_99.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dec6fb57-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802492, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802492, "uuid": "38d3c509-79c2-484b-aeea-8a6e4aa67ceb", "comment": "Malware payload", "value": "4ad3b6d83febc839ca105a9e30a27190", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802492, "uuid": "f1491042-a75a-4384-9bde-1a5407abb665", "comment": "Malware payload", "value": "db57073a9beab51b7cea2d988d6c32b36225f48aa97652917d4545e832c2458b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802492, "uuid": "2a22da47-33b3-45f7-89ae-d345cfc362f9", "comment": "Malware payload", "value": "fee4317cbe80dfb72c72036a8f74821d90f5812e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802492, "uuid": "4ffc4758-2033-417b-8560-62982d39cd91", "comment": "Malware payload", "value": "1c9e12577b9131df951058dbe0a96c2b5fbe0d923f66a83935d53b415effa7dd70705bc619fdb5ea3112cf8034fef4c5", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802492, "uuid": "25a83a98-57a3-43d4-9673-8bc76a0ea15d", "value": "T181648D67B550D67EF4964176DEE3DB3992352B305B8012DB82A86D8A13180C37AF3E4F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802492, "uuid": "97e26bd7-f1ba-4a4b-9def-eec30699463e", "value": "3072:c/rLL1uzGxKIXP/m7UIDuIx6oDH085EmQBJb:YLTxbX3m7UIDZxZUqA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802492, "uuid": "562fb5b7-cc93-46d7-9799-6404946e3b4e", "value": 324608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802492, "uuid": "399d679a-23ad-42e2-8db6-c78a4d325e53", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802492, "uuid": "722555fa-40da-4901-8c8b-b06cd9afd123", "value": "SecuriteInfo.com.W32.A-62389890.Eldorado.3224.28062", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab2427ea-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685793386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793386, "uuid": "c28dde58-b533-4b62-93c2-4bf0dfe9c843", "comment": "Malware payload", "value": "72d31eb4923a9fe31b3ebdaa2ee36dfb", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793386, "uuid": "be59e026-06e3-4086-9389-241d2b0330fa", "comment": "Malware payload", "value": "dcdb043cce86736f482d7f746f063855fa9a0029a3317a9f27c4a34099ff0b86", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793386, "uuid": "4a041d1a-567a-47ea-bb8f-3284cc16ecb7", "comment": "Malware payload", "value": "917338651e3880e2d54fd9b80f7a0d1fba903766", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793386, "uuid": "96f64b10-759d-4127-9efb-f231035149a1", "comment": "Malware payload", "value": "ec30ad345a3850b38b3e909724229b8dbe76697d2d8c0ca83b49f2e55cd9f102d077698e0717112c6cfb7571cc33c1f4", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793386, "uuid": "5f1922ed-a51c-4af8-bc79-e3775246bc65", "value": "T1A8D32A06B30C0D47D2632EF43B3B27E1D3EF9A8121E4F640655FAA899271E325586EDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793386, "uuid": "324430e1-2ed8-4091-8070-b720c94c915a", "value": "1536:D+pXqU5K5ZHtxBVvZzpJmducNyE6efDLojo8vA8vhEVYxLXsZqyqFWQL:DtZHtxDRFYccR6iD9h82QL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793386, "uuid": "9f34fbe0-61f9-4555-8845-33d8c61856fa", "value": 133636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793386, "uuid": "c8a31bd5-6719-4211-beea-235781410990", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793386, "uuid": "66666b56-e36a-4884-9949-ca4b23a94a8f", "value": "72d31eb4923a9fe31b3ebdaa2ee36dfb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9148b1f3-020c-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685796349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685796349, "uuid": "820990b8-8d0b-468f-a606-44443f4c4936", "comment": "Malware payload (RedLineStealer)", "value": "57897b2974ac48348245af1a56e89f68", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685796349, "uuid": "a61259af-65aa-49bd-880e-081f97061785", "comment": "Malware payload (RedLineStealer)", "value": "dced09999f640c0a63a7a60fbefc685b5891c67336d7c88ca79cb74ad49068de", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685796349, "uuid": "37f72bad-6336-47d5-ad7f-50db735b2847", "comment": "Malware payload (RedLineStealer)", "value": "169795d1e34efdc7636fd9916b47ce256be5ac1a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685796349, "uuid": "c236de92-9448-4b61-9131-1804cf395d9f", "comment": "Malware payload (RedLineStealer)", "value": "0d1d419fe22c94702a0d8fd6d2b3d10529ccdde679b056cce8ca2763171f49d9e93673722c366c2ecb226c9d93cce74d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685796349, "uuid": "ed1b93df-4050-4c5f-8bd4-96da663e67e4", "value": "T1A0052352B7E88472E97917B42DF206DB0B367C7289BC872B26850C5F09A3644F97137B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685796349, "uuid": "bb6ad58c-74d1-4489-9373-8b0cd02e55b4", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685796349, "uuid": "2e3539cc-21a4-44a0-920b-b3cb03b24f39", "value": "12288:2Mrcy90buriqyIn6i8qJlV3wdN5K+dOMAb9iGPf1hztD2AN6LJRfLMfNfV:OykuGq9bZgDAb9jf1hztDNwpMfv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685796349, "uuid": "c84bec0a-6413-49d0-9c2b-92b877b210d9", "value": 796672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685796349, "uuid": "03fac230-c2d3-4f01-8fda-632f6acea1c6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685796349, "uuid": "a58c5fea-dbbc-40a0-ab00-1bb09de6d081", "value": "57897b2974ac48348245af1a56e89f68.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebd9e7bb-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685779321, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779321, "uuid": "486a2238-4286-40b4-8190-1b7239241f0a", "comment": "Malware payload (Mirai)", "value": "fed2765e0ed8661b7d7205092c501241", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779321, "uuid": "eacf98a9-d1cf-48fe-80cc-753a49159345", "comment": "Malware payload (Mirai)", "value": "dddbafd84636a8bba3e5c0103baf25420fd86af8c43482700045f8a61af6d79e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779321, "uuid": "91ca38b6-cb47-47f7-ba95-cf2df4668cf2", "comment": "Malware payload (Mirai)", "value": "96b621302d89b22a90345077206f8d238df11c7e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779321, "uuid": "93c516a6-ee0c-4cf2-9065-a51f739ddd37", "comment": "Malware payload (Mirai)", "value": "17a7b6a7841cae6de2224b77839e9b57a6b7cd389ef87efed06399d66c31bd1fe19f47d0c6efed2d25fe30be3d77b463", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779321, "uuid": "b52b2f78-8615-4a90-af30-d23eac2fdddd", "value": "T101B3F872B804DF66F00A96B504D38B367E30BFA70E6316A2731B39669D331D528A7F45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779321, "uuid": "9a736071-8391-4d33-b072-4f57bcb95093", "value": "3072:Ydg8GXIDvGIk1MG8+mjypvZSoamm/QcuLB1niDNb:YuFX0GIk1MHyphHamm/QcuLB1niDNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685779321, "uuid": "d47adde8-c816-42fd-85e5-c5c62a023a22", "value": 118090, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685779321, "uuid": "15be93a0-45f6-43ae-97ac-d92f7f2f04b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779321, "uuid": "2083ba30-c3db-49fc-96b0-9fa1f02c9a09", "value": "fed2765e0ed8661b7d7205092c501241", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f5f47d5-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782119, "uuid": "6e0fc143-dc15-4589-b610-e3ebe690c197", "comment": "Malware payload (Mirai)", "value": "58bbe6fa57ee4034fe4e8fb18ada2350", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782119, "uuid": "4fea6f9b-0d86-4cff-9a71-ac6f4c830cdf", "comment": "Malware payload (Mirai)", "value": "de151be8e285116e7fd2433d64c52c287198a3a956f13aec845f04476a5397ec", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782119, "uuid": "a4bf18db-0640-412c-ba82-0242cc8ba35d", "comment": "Malware payload (Mirai)", "value": "26660a9c2a280841fc2dd94a51409f172c1ac785", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782119, "uuid": "3e53011a-2ac5-46a9-9711-1a7a0df072cd", "comment": "Malware payload (Mirai)", "value": "e8b777febe16739e4b70e9bb357917032519dd066ba11dfb86e754f1247c70e44ce1942ee308513cf3971716a2340364", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782119, "uuid": "543f22bd-ada7-4d8d-8556-3433de8a6429", "value": "T1EFA2C034449CA3B2E9F06E38F074060B77EB0B38DADF7599B118A9C46AD440A93B5C53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782119, "uuid": "9bce1b68-e9b6-4f29-89b7-53637c475c48", "value": "384:0O6YNAT+pu2+hYtu3BDMBkhuAtQtsqnNrkAghEol95T4ZlJNESqmdGU5EeCZdrt:4/SbSYA+Tnp8FTT4ZlXESq3UIrt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782119, "uuid": "e048acd6-4732-48cb-ac7a-f58cbcea3741", "value": 22588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782119, "uuid": "845c6b69-3ba1-4804-93a9-c0598985859e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782119, "uuid": "63568c6c-1dd8-4fd0-bb0c-70be3f8ed6d5", "value": "58bbe6fa57ee4034fe4e8fb18ada2350", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a00bb1e0-01af-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685756431, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685756431, "uuid": "8464d4fa-ed3c-4653-9b01-9931f9a73ee3", "comment": "Malware payload (RedLineStealer)", "value": "54342350f989b34febcedb30c7df3a4f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685756431, "uuid": "be2cd528-56f7-46d6-a5d5-59504b1e32f3", "comment": "Malware payload (RedLineStealer)", "value": "de1b747097c790544796370224133578862c1a0e6f19b3ac8e4e1d848b8dc30d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685756431, "uuid": "baa4819f-9c7b-40ee-82ee-9f8b7dfb3391", "comment": "Malware payload (RedLineStealer)", "value": "e5ee89a4c925f908646f0818d3b352fa655a3cb9", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685756431, "uuid": "1078660a-b25d-42d2-a428-83a887000081", "comment": "Malware payload (RedLineStealer)", "value": "b754f5d7694eed71c44a090d27a8ac68185108e224ba4f2ce60c9f53d8988ec6852fa9afd4212caa5b800c1941e80c12", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685756431, "uuid": "67b548f0-0bb7-466e-b0e1-2ee4036897a7", "value": "T12A051213FBD88062D8BA23706DFA07470F3A7DB15D78922B2BD5B8990DE16916D31336", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685756431, "uuid": "8f2c1823-ec9b-4ff1-847d-ff6bcfbe6732", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685756431, "uuid": "44f7cf50-cc58-4a10-8063-f954be0466ec", "value": "12288:8MrHy90RCi6LJOHw4f8SwcORvUk+rqORDCiLO3hHnZmWzDjOlzf:zySx6xNtfRLKR3rW4zf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685756431, "uuid": "d90863c5-b50a-4837-aae5-34b0488d778f", "value": 812032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685756431, "uuid": "db0f1686-cee5-492e-bb1b-85a15937b982", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685756431, "uuid": "3fd7005f-d9c1-4aff-a74d-c6661a2db0cb", "value": "54342350f989b34febcedb30c7df3a4f.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9dc06f35-0200-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685791216, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791216, "uuid": "306a3647-e0e5-4df3-bdf1-b73746bef380", "comment": "Malware payload (Mirai)", "value": "e8126579e294b145dbbca61e3dfde609", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791216, "uuid": "d20639ab-0d43-479a-b948-7f3ae3f59767", "comment": "Malware payload (Mirai)", "value": "df093413e0832692e642021c690e9c8df12f811e79415f340332a87e5964cee1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791216, "uuid": "f458f5a9-6e01-4cdf-a5cd-ef89eeff05d8", "comment": "Malware payload (Mirai)", "value": "e4856bc34cea0b26aa61cd1f89a93e815f21874c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791216, "uuid": "6c5d5fde-34df-4171-9be5-ce2cf2a72084", "comment": "Malware payload (Mirai)", "value": "d387f5c3178e00abfecc24e4b689f3e1bf4b343be39cd77dc9b168a411a262d2bb7b7628ac647589eaf48718cbabeee1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685791216, "uuid": "f1c1b789-bc63-43ab-92fb-107685215c65", "value": "T1F974D3B06D3390FCE46859E7909F26F97B4A093BE6213B67B69E0710CE75372898341D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685791216, "uuid": "ccab7fe7-fa79-48dc-9718-7bb1aa015c15", "value": "6144:UGDlS4teFK2AlkxSJobIzH3oczCLNTIoCaJG6U3AmR:UylSoeFKfkxSJokzXozLNTXCaJG6j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685791216, "uuid": "4d90ae03-42af-40af-8705-955eb5ef1ace", "value": 345744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685791216, "uuid": "3c7f875c-f5d4-4417-b132-55f75634c375", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685791216, "uuid": "b9164797-54e3-4c2e-938f-3b2406b8cf38", "value": "KKveTTgaAAsecNNaaaa.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8a24d9f-021b-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685802911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802911, "uuid": "df2fd519-2828-4939-bb84-2fae5c45c0db", "comment": "Malware payload (RedLineStealer)", "value": "18c0acc000b9169ee8fdbe6700d77449", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802911, "uuid": "80a52ff4-d013-494d-8241-c2a9fd8fa902", "comment": "Malware payload (RedLineStealer)", "value": "df0b457bfabe33893d8b25b0b6ef09d1910d39bd675f6042541dc5abbe148bb8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802911, "uuid": "0bec4abc-0326-4c1b-a0ed-213d73b3219e", "comment": "Malware payload (RedLineStealer)", "value": "adff3ca156fbe1b11c8231d01bc4d98fb0f48771", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802911, "uuid": "66f75af3-31a9-40a8-a56e-87fba9726b54", "comment": "Malware payload (RedLineStealer)", "value": "c3e233c8b7476a0d1cff33ccb3b94bad007fc15e8a683aef45155c235c1d445ee64a3d7624c5a34f8f336f81abc4fa3c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802911, "uuid": "7e2ca2c2-101f-4ae5-99ab-0be7fdd185bb", "value": "T1DC54E1213181C437F96328B28A6AC9B19E7EF4740B2551CB3BC6593D4E753F19A3478B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802911, "uuid": "674cb756-6eb1-4bc5-bc5f-01391e92a76a", "value": "4702929088abf05768d9241bcca6fcd3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802911, "uuid": "74836b88-1c6a-452c-90fb-8a5b10332749", "value": "6144:sRveQIGIHn4rMI9xr9r2F/PctIgy0SxZZpW4bXM:6veQIGIHniM+xRqctIR1ZrXM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802911, "uuid": "722f8988-f9a8-4897-9015-9b652afbd533", "value": 289296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802911, "uuid": "23e8e7c4-be35-4293-b3c8-6611bb81d762", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802911, "uuid": "ead1f663-2d40-4534-9537-0eb8df5b1379", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecf71e15-01ae-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685756130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685756130, "uuid": "406bc52f-5f9f-4b49-ac16-e5abd85bd874", "comment": "Malware payload (Amadey)", "value": "162afae5ac0dc9f4260478aaecfab480", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685756130, "uuid": "7feab848-cc7e-4933-a4d1-3d679fd38f30", "comment": "Malware payload (Amadey)", "value": "df15da3f6f7e2645847d78e684e9fa7538b1693f01abc354d278001b6f2a3363", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685756130, "uuid": "75166284-9e79-4180-91b3-214ce05a23ca", "comment": "Malware payload (Amadey)", "value": "b6b7562bb1c7bef9047207dc67d68919a21c1b20", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685756130, "uuid": "f066d0fd-52d9-448d-b41c-d90304503dc0", "comment": "Malware payload (Amadey)", "value": "6f9f53691adffa2ae259ff402cef570743f325bddfbf8c92010335d09170c5c4bb1c5380e6c89e4aaeb5dfd7a7141cbe", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685756130, "uuid": "9fd29537-a7b3-4b8f-a864-5b310e075c06", "value": "T105052363E2C88072FC7537B068F683872E35FCA59DB4565B23425A9D2C636C478723A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685756130, "uuid": "1325b0b8-492f-47a6-b0f4-38147600bd94", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685756130, "uuid": "a72448dc-48d4-4601-9342-6675ad8c3544", "value": "24576:xyk4r6CmQS4BrBTtIHATuzOINHwHAWo6ew5:kk66N4rBegivNHwH/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685756130, "uuid": "eda5cf71-7eca-4c03-910a-874fcc7cd1a1", "value": 811520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685756130, "uuid": "ba3d5aae-88e9-41c8-bba5-3cdfe817f9e4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685756130, "uuid": "ef7aed8d-de69-4b70-9456-d720c20e16bc", "value": "162afae5ac0dc9f4260478aaecfab480.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc0a454d-01cc-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685769040, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685769040, "uuid": "82f77e50-32f9-4abb-857f-592d136e6949", "comment": "Malware payload (RedLineStealer)", "value": "14eeee66f25176b215adf635199c9284", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685769040, "uuid": "654f02e8-1223-453d-82f7-efbfd15e0bd8", "comment": "Malware payload (RedLineStealer)", "value": "e07393d0858ac4bff83b95bbfd696c0b39c5d5ff3e979899dde379bb04c716fe", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685769040, "uuid": "d85e8c41-c6ea-4339-a422-52247a72cbbd", "comment": "Malware payload (RedLineStealer)", "value": "03c18704a3a6dd5cda46189a2d5933509eacb53a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685769040, "uuid": "213c2865-1d71-44b5-a5c6-00ddf589606b", "comment": "Malware payload (RedLineStealer)", "value": "b3f54da0a3fc865510d72bb1295ee660e762068e0a0f9611282d30b8b9f6cc24d9c45220112f1a28c88c6a3128bc0f91", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685769040, "uuid": "84886a54-e594-484b-9a11-92c046286548", "value": "T15D051252B5E45433D8B927B01DFB13870A3ABCA199BCA61B1382AD4A0C727D57D7037B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685769040, "uuid": "fa351a12-d445-4a9f-a4c3-e9a2c23aa03f", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685769040, "uuid": "16a10f93-8a98-49f2-864f-821516cd2757", "value": "12288:8Mrky90y0exobj7AW/DGpItBLwPjIE+oaEUybFuckGqosFyx0lYhd1WEDlGLpa0u:4yP0wonqpIk8E+oNbrkGq+iYW6G9K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685769040, "uuid": "15c32ecb-fd6a-4882-97fb-969de8629863", "value": 812544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685769040, "uuid": "a6a75d6d-2e91-40be-b391-121c0df2fc65", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685769040, "uuid": "73993091-5c2b-427a-b9c7-1f2c41f4e6e9", "value": "14eeee66f25176b215adf635199c9284.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a19a049-0264-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RecordBreaker)", "timestamp": 1685834106, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685834106, "uuid": "46b84372-92ab-4178-962a-5d0030f5b89c", "comment": "Malware payload (RecordBreaker)", "value": "3a8465df8b12904a5d7a38fc1b6ae300", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "recordbreaker", "colour": "#EFDCC0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685834106, "uuid": "009c8ab3-347d-43c4-a6d7-f4ab4db4adbc", "comment": "Malware payload (RecordBreaker)", "value": "e10f1e70fa84b2d135123e72e4c46770d9f663f0c2036e3e7a4e7a3bf8cd5f96", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "recordbreaker", "colour": "#EFDCC0", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685834106, "uuid": "3a6949fb-4337-4f1f-b32d-f5e8ef1085d2", "comment": "Malware payload (RecordBreaker)", "value": "5a88a335d9de71dadcf1fbbfc5f25384bac0c460", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "recordbreaker", "colour": "#EFDCC0", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685834106, "uuid": "ad734c3a-28ff-40f3-ae84-d1432e1dac20", "comment": "Malware payload (RecordBreaker)", "value": "1c947350651baac15d8ef74115addaf52f07b09fa6f2e9fca2ba87ba2de62cd2ead52f5c69ee3b7a73e6dfd660007a7f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "recordbreaker", "colour": "#EFDCC0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685834106, "uuid": "c08c6961-599c-4329-9d1a-a5811431202c", "value": "T19C444C1373D36C60E5165AB28E2EC6E46B1EFB918F5737DF12586E2F08711A1C272B42", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685834106, "uuid": "4dd49000-d8dc-4cca-bf71-47526f4fbaa6", "value": "382962f043b5a0413c587a899bceffb1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685834106, "uuid": "83a343e7-c1c7-4fa8-a1c3-4082f06e9159", "value": "3072:NTWEhkRkN8P+1YD4HZHVNP2k627LIyewPd+jKXQO5Zs0hGV5j3jIWsei2/:NyEh5Nw4HdVe279VEcXThe53jgm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685834106, "uuid": "4a49ce46-792a-42ee-89ff-ff08f287b833", "value": 270336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685834106, "uuid": "f095886e-9c90-4b8e-add7-5621796e1496", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685834106, "uuid": "7251cd3c-edeb-4ce1-8623-9702b2ce7bc9", "value": "3a8465df8b12904a5d7a38fc1b6ae300.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62787344-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Adware.Neoreklami)", "timestamp": 1685802283, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802283, "uuid": "9a61d6bb-99ff-4b8a-b710-d50d8e2358a6", "comment": "Malware payload (Adware.Neoreklami)", "value": "ef656b24aa8eeacae44a350ac04b1e81", "object_relation": "md5", "Tag": [ { "name": "Adware.Neoreklami", "colour": "#5DC9D2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802283, "uuid": "2e7c807f-1859-4049-a692-90139feec1b7", "comment": "Malware payload (Adware.Neoreklami)", "value": "e1228b340c399b5c4eb139e100253fa9ef07862b28f8aa8fb728bc924906d4b7", "object_relation": "sha256", "Tag": [ { "name": "Adware.Neoreklami", "colour": "#5DC9D2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802283, "uuid": "90559239-5450-4bf0-9e4e-f6e784859916", "comment": "Malware payload (Adware.Neoreklami)", "value": "9b5358e2da87e0c802c84a4ff06c582e92ce3c30", "object_relation": "sha1", "Tag": [ { "name": "Adware.Neoreklami", "colour": "#5DC9D2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802283, "uuid": "07de80e3-78f3-4769-9cdf-0417e0b66987", "comment": "Malware payload (Adware.Neoreklami)", "value": "bce6a6e0594e0771631c4f2e9a6827c493d7a71969ec5dd3e305ffc1b1617d2c1d41ae2c160074d9144bf99b76b209b9", "object_relation": "sha3-384", "Tag": [ { "name": "Adware.Neoreklami", "colour": "#5DC9D2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802283, "uuid": "2ce824a2-1850-4110-9152-b7bb1ec56c0a", "value": "T1447633217DC046F0F7F8247346B9729FEBF6E5A64F10419313A209A94CBEB979328E45", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802283, "uuid": "408475bd-5208-4032-9ac5-fbbf476e3789", "value": "3786a4cf8bfee8b4821db03449141df4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802283, "uuid": "d6c9feb3-64dd-44fe-a0e5-298228e93f3f", "value": "196608:91Oai8EL15sx1NANPeYKMPjVdYlJzFAYDB9dGb:3OaipL15s2Bf5dkJiA9kb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802283, "uuid": "a40d1c52-356a-464a-8178-241d1e484079", "value": 7609481, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802283, "uuid": "52738cbd-12cc-4f97-a33c-094189aff6b8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802283, "uuid": "0e28c515-681c-4468-86c0-29876d0131c8", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45ed8ce2-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782049, "uuid": "1888a300-711b-4dbe-b844-5dceb90f228d", "comment": "Malware payload (Mirai)", "value": "41c4b27029307ee60f6131f3ce92eedc", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782049, "uuid": "8f535bd3-382f-4212-b53a-75109b3e4128", "comment": "Malware payload (Mirai)", "value": "e12d43aea0cdf666468dbab9d35655cc115673cb68be766984ab33cab27e6eb8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782049, "uuid": "2cff6b44-32d4-44fe-aa95-7de34765c04a", "comment": "Malware payload (Mirai)", "value": "6065eeadfea5a5d24c310dfa07472fe92a549bf2", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782049, "uuid": "23731daf-31f2-4ec4-b418-89aabcb23aaf", "comment": "Malware payload (Mirai)", "value": "30f96458a56d7cfd2c482825e4a5b4540ce5ce8fcff83ffc32b8722f79f6a4fc408587951c52fadebd87b38ae1725cd6", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782049, "uuid": "35cd420c-d733-4f2b-88bc-0f18484b72cf", "value": "T118A2E01572A32D56E3E81C3DC96E8217F9670BFC90F6327669412620C94D20B3E39A4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782049, "uuid": "9fe45be6-c094-4a16-a243-d013ea5f27ee", "value": "384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjGhymdGUop5h6:vvQn4j+ZO5fKAlxCs3Uozg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782049, "uuid": "27457ca1-dda8-4d63-a268-1b60c760ce2c", "value": 22160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782049, "uuid": "77f7e71f-924c-4a1d-bfd4-4aad62d35b41", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782049, "uuid": "6d1436d0-5a43-4548-a29d-efcc29a1fb49", "value": "41c4b27029307ee60f6131f3ce92eedc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74c696ad-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685782128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782128, "uuid": "d62d7118-7b1d-4d85-b9c8-d5481f971857", "comment": "Malware payload", "value": "f5309854491267d6f5325d4dff2f677c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782128, "uuid": "93fe5df5-526d-4be4-956c-8e77a784b77a", "comment": "Malware payload", "value": "e1984fc3b3aa3241a605c8d3a9bf3cfcbc824fb98883493c5a69f6187ae7cdfd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782128, "uuid": "00e1710d-b16f-4e41-b02c-7a83ef35667f", "comment": "Malware payload", "value": "947db75248ac0f90210080c638fb2752a721ac41", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782128, "uuid": "f7206539-efd3-462d-9851-681d4b8aea8e", "comment": "Malware payload", "value": "b9fbf0a50dc762c0bca4e6aa8d1a50ec61175b3f9ee6b1714934fee8e131640504e7d4cc751b62b54cce5cbe4f1f818b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782128, "uuid": "c6c018b6-ebec-4b28-a702-5d911ef18688", "value": "T1BC735B32B9392A2BC0D9A4BA21F34258B1F46B4E21E8C61F7D720E4FFF3164025576B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782128, "uuid": "96f8ee47-a2b3-447a-83e2-91625c50333d", "value": "768:YxoUCSFl0+K9A6IfoC/ncXZug0ngkg4//oB+l2gU+SaTuO+75VLLrhJU1tEJAIc:YxrJTyA/f7fcpP0gkg4no+w+/o75otPb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782128, "uuid": "b76cc187-63fd-40f4-a5ae-b6819715dc6c", "value": 80268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782128, "uuid": "e4afc61c-9abf-4e52-a273-774452bb9fee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782128, "uuid": "1a21d154-1dfd-48bc-b273-d343ee0a0e18", "value": "f5309854491267d6f5325d4dff2f677c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1d61745-0239-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685815785, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685815785, "uuid": "fba20d87-26ad-4148-b9eb-cd15071a605a", "comment": "Malware payload", "value": "e5a64e893dd466dc7c494fc0688b6ed5", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "Jupyter", "colour": "#301341", "exportable": true, "hide_tag": false }, { "name": "Polazert", "colour": "#2F56A4", "exportable": true, "hide_tag": false }, { "name": "solarmarker", "colour": "#1340D1", "exportable": true, "hide_tag": false }, { "name": "YellowCockatoo", "colour": "#C3007C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685815785, "uuid": "32b7a538-d460-4760-ac3b-50436193318d", "comment": "Malware payload", "value": "e2a0c8dafd2645513bb3984abbd30ac25d16dda8381ad10642605a6d3c579ec1", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "Jupyter", "colour": "#301341", "exportable": true, "hide_tag": false }, { "name": "Polazert", "colour": "#2F56A4", "exportable": true, "hide_tag": false }, { "name": "solarmarker", "colour": "#1340D1", "exportable": true, "hide_tag": false }, { "name": "YellowCockatoo", "colour": "#C3007C", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685815785, "uuid": "99a87352-f096-4b6a-82c1-8ab624f1cd78", "comment": "Malware payload", "value": "c4cc3fbc219694a27e9e602fa6de658722b8365d", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "Jupyter", "colour": "#301341", "exportable": true, "hide_tag": false }, { "name": "Polazert", "colour": "#2F56A4", "exportable": true, "hide_tag": false }, { "name": "solarmarker", "colour": "#1340D1", "exportable": true, "hide_tag": false }, { "name": "YellowCockatoo", "colour": "#C3007C", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685815785, "uuid": "c667e2a9-891f-4d3c-8fc3-0d6e8913d547", "comment": "Malware payload", "value": "1311eb135ac245dfd809ac4e926515860472e1a8d9c4b0bb0c5ab233fe691611d10532e0bbd4b0f9fedfc6431bab0917", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "Jupyter", "colour": "#301341", "exportable": true, "hide_tag": false }, { "name": "Polazert", "colour": "#2F56A4", "exportable": true, "hide_tag": false }, { "name": "solarmarker", "colour": "#1340D1", "exportable": true, "hide_tag": false }, { "name": "YellowCockatoo", "colour": "#C3007C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685815785, "uuid": "93b92591-3f02-4a2f-bebb-c0ac7fe2a6e8", "value": "T1F5F4EF143FA7DC108B3C66E978EB57178B2796B3E5CEEF074AA291300A5A96353510CF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685815785, "uuid": "bbabbe05-121d-40ae-b2b2-b192d6b18696", "value": "dae02f32a21e03ce65412f6e56942daa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685815785, "uuid": "7b8b8f2b-85fa-4e83-b828-5c2f26003376", "value": "12288:EAbxJnVOsOMzUa6+Hfc/CSxMXHvEAyiYKXK/17S5QkPbf7dKfG:PGXAc/Ic69EfkPbf7dKfG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685815785, "uuid": "d5f500ec-42a1-46a2-bfef-30b71be010c9", "value": 727552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685815785, "uuid": "05fa5e63-84f9-47c6-a95c-ed1fa6af4580", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685815785, "uuid": "ae4adf30-da85-4bb7-b336-7a9966e5a094", "value": "BABCDEFGHIJKLMNOPQRSTUVWXYZABCDEFGHIJKLMNOPQRSTUVWXYZ9MRWOXXArMXEQHJ5WRODwTEK.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5803d019-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782080, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782080, "uuid": "4094158e-ac0b-4ebb-a83b-c70299278517", "comment": "Malware payload (Mirai)", "value": "524f4c5322f38e3f32df2b95adf1ba4a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782080, "uuid": "2fd997f1-cb8f-465f-9ac9-0eb555516e5e", "comment": "Malware payload (Mirai)", "value": "e3397cb0f08f4548989b1c0da0a23188ac1365f02a322f32f9639187bcf9c587", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782080, "uuid": "691d3bf5-c9c7-4a16-a8ed-329a72abe4eb", "comment": "Malware payload (Mirai)", "value": "13f94d2f01ddfb3dbbf0543f0bf435ba41b7baf9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782080, "uuid": "d6ee9ac1-8446-424e-87b3-d8dacc49f6d6", "comment": "Malware payload (Mirai)", "value": "fa8f4dedbc71de5b461e1cf8ec8520e33113699828dc360538fe98d4078fc24b36df8226c6d827a2207d929a5a5e3b69", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782080, "uuid": "c0370083-7ee8-4c1e-a5bf-18253972d30a", "value": "T108336C36E029DED0C6560134A4E88F751F03F1C883536EBB2AE546B2645396CFA19FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782080, "uuid": "dbda49a9-a428-465a-b105-f2a69ef42882", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782080, "uuid": "aab34a5f-e08a-4b0d-8940-c0ab1857179b", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782080, "uuid": "6190bebd-c180-4e8f-8d0e-4b7c6582692e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782080, "uuid": "c7f9a8a1-f750-4250-b0ff-4743774e6792", "value": "524f4c5322f38e3f32df2b95adf1ba4a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60164ffb-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685782093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782093, "uuid": "20bd7c84-141e-49a2-9ed4-8f7c6f1ff8df", "comment": "Malware payload", "value": "0a5a7a25032d57057ece84ae74e9635e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782093, "uuid": "48fc4cbe-8fb6-4d8d-b216-6b7536d4107c", "comment": "Malware payload", "value": "e39d300005eed0ad7719316c9441006422ed1361ece926ff21bd51d0c3702b54", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782093, "uuid": "5eba5ed3-e8ef-4ac9-b0d5-2111a4f10613", "comment": "Malware payload", "value": "8b333d2730864e2417537747ce8b02282ec69b0a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782093, "uuid": "7050919f-b617-4851-938a-394ec29aa511", "comment": "Malware payload", "value": "03a0b9937808d10a778759657e2527e9ce6d8ed0f2f4182a0876c437032ef53e4db03bcd30132ff74517a465c5d54e36", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782093, "uuid": "b9b9f888-23c0-4633-b211-519ad3107fd0", "value": "T15C72E0B7CB8D8F6BC8FE9A73810D6C75B3D91F9E11468302B0E69041993420E98B7ED4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782093, "uuid": "4b0d88fd-4d59-4ab1-a9d1-ec9c646576e5", "value": "384:kXZGzIf/VpZ36/ozr+tqcIh5EmLYBmbxtiw5Va4du58:kXZXZ3cozSIzxif4M58", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782093, "uuid": "9a8e0a74-dd2e-42d8-ae9d-94eefcd994e7", "value": 17368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782093, "uuid": "279d7eee-4c78-4072-b533-2f29ce1979f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782093, "uuid": "be4c130f-88af-439d-afc2-9f1181f9a1c7", "value": "0a5a7a25032d57057ece84ae74e9635e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "821b1873-01f5-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685786445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685786445, "uuid": "4225bdcf-3826-433a-8bed-1d9859100adf", "comment": "Malware payload (Amadey)", "value": "4bf5863c323ce86e34428701f7e17a5d", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685786445, "uuid": "135583fa-2cc4-4b69-b801-e3c1adc2fcfd", "comment": "Malware payload (Amadey)", "value": "e3f858db6eb52c2c11677c2871b43dafe13dc1f4426c8505a00bf741f8949ff5", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685786445, "uuid": "c178bc3f-4061-4acd-8d93-54870bd8e8cc", "comment": "Malware payload (Amadey)", "value": "3e9a40ce520dd0584a0af1f27efb565bbefdaf5a", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685786445, "uuid": "c6e4694f-7870-4f3e-ab60-23cba7182560", "comment": "Malware payload (Amadey)", "value": "45fd98dc4a1d730692edffc947ecd510bb507aa090ae4bef4e8624f15c36d7cf26d20555af2e4964b7196431e68d10f4", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685786445, "uuid": "6b833c21-c6ca-4534-bf4c-3d07dd5f3f3c", "value": "T138352366ABF9A167EDB427B054F152930B35FCA18D7403872788E84A0CF2B9064757AF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685786445, "uuid": "f959dae2-8045-4c2a-a16d-8ade75b1019e", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685786445, "uuid": "c56a0f42-e66c-4b19-944a-5f7324a32a39", "value": "24576:9yFeuTBziufRYFmmI/s//7ZcU2U7ZmQe2Ws9UK7L87k6ehz38HIO:YFT+ufmF76w/x2UTqSRUk6GSI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685786445, "uuid": "1dd3e419-786f-4c31-ba57-9cea77ce4e88", "value": 1078272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685786445, "uuid": "e76005cb-05e9-4352-9d30-34720c808da1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685786445, "uuid": "76e81154-82af-4709-83f0-b4c3d89cecd9", "value": "4bf5863c323ce86e34428701f7e17a5d.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebe9aa6c-01e8-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685781039, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685781039, "uuid": "cdf05589-3d4a-48bf-8523-e0052470117f", "comment": "Malware payload (Mirai)", "value": "e4261dfc69029ca48d6767311e529a17", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685781039, "uuid": "428e6aa0-0081-4c2c-bf63-7b5130b3b90b", "comment": "Malware payload (Mirai)", "value": "e4205db7452d754076dbccf684ce5394fae2eb05fde666f6b2e5cb75e659abae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685781039, "uuid": "b3e361a8-9071-4858-b1f4-edaa80d3c226", "comment": "Malware payload (Mirai)", "value": "16b231e12a0e3e57fa10b20a7d395cb954af7247", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685781039, "uuid": "2c1c3a8d-3946-4aa4-a485-f00d31dce0ea", "comment": "Malware payload (Mirai)", "value": "b1d509d37f3d6f63232e4fc628230f2d6330ea01da783c666e160bcf1fbc64d70794f0fbfcde22e8fbcb905a522957b3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685781039, "uuid": "968e1e80-96bd-47ea-8c1e-59d465f3cd35", "value": "T1BC72D0ED129A4015CDEA3577B92B788D2A925D10032FF712DA3D865FB7B10B437A4078", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685781039, "uuid": "677f0217-cb62-4565-a279-a21ca4599a85", "value": "384:Mwmhf5PCo2xLs5t/p1J5NE91BY89cm07YqDKxG:oxPymB7fK/C7Y4KxG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685781039, "uuid": "d47caf05-225b-49c2-8b27-f94a17c9210d", "value": 17188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685781039, "uuid": "af66f578-2065-4947-b056-a53a84d33a24", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685781039, "uuid": "9e9ddd0f-80e2-4ac8-b97d-69b6bb53f83e", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8314d2d-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685779288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779288, "uuid": "99b948a9-d825-4814-a927-29ae8388d729", "comment": "Malware payload (Mirai)", "value": "d9130fbbb69913644ffe0ce4e55f5b96", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779288, "uuid": "677d3921-e018-4cff-8a97-da47b58fbd97", "comment": "Malware payload (Mirai)", "value": "e4cb988a8002513a2fedb9971f6c22e326c6b18c97fabec8742b7a2ba8401842", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779288, "uuid": "9b6a29db-4cab-4ac2-9385-b9de1c429eec", "comment": "Malware payload (Mirai)", "value": "d1398fa696551c28e9c06d25512ca0f0986dd750", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779288, "uuid": "37da88bf-961c-4579-b979-2b6cd659ac6a", "comment": "Malware payload (Mirai)", "value": "a79706558bd1fdb121ba033f0dbe5b2e065dcbfc867af938f2e457da4540b51ee552e064892fab776359d27564739e69", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779288, "uuid": "c58c47e5-9d32-430c-a6c8-4f076a0b4f78", "value": "T184A3F831A641C973D04305F212A7DB660D32FDBB1A6AAE56E32C3CB0DE360C5B565E9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779288, "uuid": "7ef18191-f180-4666-a070-235c65ccac2b", "value": "3072:VK1z13U6HzHoXRtmTUhQog7EmmFVcqq0GnDZT:VK7DDeKlog7EmmFVcqq0GnDZT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685779288, "uuid": "f6835a48-b588-4339-97e5-699d7f02ab6b", "value": 100042, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685779288, "uuid": "2a428bbe-863f-4d26-8c34-af2839566b57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779288, "uuid": "08da6dba-5f0c-4c83-9829-71045d0b17b6", "value": "d9130fbbb69913644ffe0ce4e55f5b96", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a34ece47-01f7-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685787360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787360, "uuid": "fd40eb51-9521-43bd-bbc9-3c7bb78be9f5", "comment": "Malware payload", "value": "0a6e31e8d7a0989f682b7ad92d489eb4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787360, "uuid": "5983e8d2-8e13-44f7-8843-f890887c2a5e", "comment": "Malware payload", "value": "e4e4cb8e87b66d2846563f0194da78c9e684cbf5deffd660525efcf0fd54a276", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787360, "uuid": "15e31e5d-6bfe-4697-b3cc-b422103cf115", "comment": "Malware payload", "value": "04c0807d48680d66d84574413da9e85c2e3822aa", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787360, "uuid": "8586ac53-55d8-4eb2-91f7-0e4f94a30fa9", "comment": "Malware payload", "value": "511adc25c7dfacc66bd04611e109e124abd8e17dbeea49bbb4decbd7f1f12445d089f1042b0d64386d94c174d31c7d23", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787360, "uuid": "e8eecc8d-9f51-4078-a55b-9b2161da13c4", "value": "T1A707331877541CBEF4B2503362318A31A2BBF86A9711DC4B2F2443171FA36D85EB9ED6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787360, "uuid": "ea0d4893-ce53-461d-b9f2-14706f7662ca", "value": "5324ac1e1bceff69ec8d4435c50bfe0e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787360, "uuid": "13423e25-177e-426a-957b-4f43dcfebd60", "value": "393216:1au7L/WwAyXYPh8TInEroX/lh2plfEqirRRovon2P4j75QHOzl7:wCL+TyXYErUNQppwvMo2wZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685787360, "uuid": "96fe236a-3f36-4027-9740-8a067c9f48f6", "value": 17968187, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685787360, "uuid": "8772669b-1144-48e8-924c-885733db67ed", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787360, "uuid": "fa164f56-286d-4bd4-bac7-2c9dfca44fe6", "value": "PAP46E1UkZ.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09a4e594-01c1-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685763909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685763909, "uuid": "8ab9ccd2-0d60-404f-baa5-4426d8a11869", "comment": "Malware payload", "value": "d532befa3e77bf813dac577509b3ad26", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685763909, "uuid": "ab65e3ab-2e80-4811-a5ec-73a1e8fa2600", "comment": "Malware payload", "value": "e4f738d33c9553fd8e2a6ef5066a400720e5fccd5789bce973e68a3341e717c8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685763909, "uuid": "436dd648-6532-4313-bffe-2c5219a34f12", "comment": "Malware payload", "value": "b37162b9f1b4178602833b8fa83043c4d0be32a3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685763909, "uuid": "dab87ccb-242d-4259-8e4c-6818589a533d", "comment": "Malware payload", "value": "a89d214f033b7fb9f432220b3c7e90c96a0b41906d4ba15d510cf7d1c7de4baa60989ca2782f023caf5e09717d3e85a8", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685763909, "uuid": "2ab1875b-1b9b-4840-ad4c-402368e9e08e", "value": "T10853C4C527E80226F3BE1B789FFD011106B5F657B823EA5D1DAC50DE8A633818A13776", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685763909, "uuid": "eade8446-9cd2-45c5-a4ee-70e63322db4e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685763909, "uuid": "52801cb8-4510-42a3-b3d0-6f472be41f69", "value": "1536:fC7GXES8GJb7XQxbO7McJ595UWLhsNQZ8CfI:SGXEZGNLQx67McJ5LUAqNQZ8CfI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685763909, "uuid": "0a6d2918-ee0e-46bc-a4f1-4ada09eb9d95", "value": 66048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685763909, "uuid": "e249d914-4fd8-4ca4-a0fc-2b4884e74b5a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685763909, "uuid": "908c35bb-93ee-49af-a0cb-9168fd16573a", "value": "IMG_1282_Lonely_Girl_In_Hotels - At_Deunjin_Chung_Ae_Studio - By_Eogeum_Bora_Photographer.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d1b3b7d-0206-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685793711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793711, "uuid": "3e89e849-d522-4423-8ce6-eb19fd6fde54", "comment": "Malware payload", "value": "441b836767334eacb3b82ef3f32b6cc7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793711, "uuid": "ff06a285-803e-412e-a53d-a0c0dbfdd737", "comment": "Malware payload", "value": "e5f14e2e00b706da223da35387f6d4ac6c53e6ae92b50a3b3c3c3d9cc409635c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793711, "uuid": "6cf35700-071f-4032-a9d6-41f11e5614cc", "comment": "Malware payload", "value": "61a6cf5ac1973f6977a0d0698650ed901e09327f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793711, "uuid": "37006254-1c30-48c7-bbb9-83f58dd3541e", "comment": "Malware payload", "value": "b4878867707b4ce7c5a161100d08055c60447f511f0590eb78a40abbb88f8d02ea8415122226bd2dfc5d46934914d4ca", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793711, "uuid": "1702634c-24fc-4303-9a38-b2e2f20a51a7", "value": "T13074C6A3F213605CDD76A9F54398AB3C880529EF65330493D135FD68075C2EB8A8EEE5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793711, "uuid": "5554598a-12d8-424a-af8b-b73e4a15acb7", "value": "3072:kAkuLmf/7LQRo2Y8kFLuiIpdiX1h6aQ1NOmbdVdJ3JER45pUdi:LNLmf/7LQ+8GLuiIps+aQaAPomii", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793711, "uuid": "5a65c8a9-6bcc-47cc-a574-25e276383d58", "value": 349264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793711, "uuid": "ec4f1bf1-f217-4f81-9748-75682f4a3e64", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793711, "uuid": "af53b7f6-9ec8-45ca-9f3a-e3ce5ffa277f", "value": "441b836767334eacb3b82ef3f32b6cc7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89bf553f-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685793330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793330, "uuid": "c325bef7-fd09-4a7c-ba26-81f65ea740e5", "comment": "Malware payload (Mirai)", "value": "bfd457f9bb6e4b9fbcf075c3eecfa9bd", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793330, "uuid": "3cefd2db-b188-4678-8835-c2e2153ebd8d", "comment": "Malware payload (Mirai)", "value": "e77a9e55e2d2109e6b2643e4089fcd22430eb2d490a2ff390691f4f5fe3f4f68", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793330, "uuid": "73903e8b-5bce-4fad-a5b4-a23fd3243631", "comment": "Malware payload (Mirai)", "value": "e1374defbf9c49274efad4c79aa41edd5f801050", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793330, "uuid": "ea9b14fd-8732-4a4f-8f5e-92b87341788e", "comment": "Malware payload (Mirai)", "value": "952479f4db80de69e65e535119857d2aa486c38b35c4278b08c15f222d4c0f02db87e85afba97c1cb965c9c535122437", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793330, "uuid": "ab978b3f-1dbc-4edb-85ff-cc62bb6ec9ba", "value": "T15E7471A8F8D58D56C4F8A2F9F08A22B90F3C46F6B4576133D8280F74769754A748E336", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793330, "uuid": "b6e1de39-bd32-4775-9c84-d1a82805f3ba", "value": "6144:14nfPMRv+VjD8a11esGCQLO9V6JSusq8ycE+lDGAs6tNesdhCw03utW2aB8OsBS1:1Wf0yjD8G1DGjL6VqS7q83ESJsONT3DM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793330, "uuid": "edf2136a-3637-4d47-8196-f3563c3c12fa", "value": 366940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793330, "uuid": "0005532c-6fd4-4af1-bb33-d4cb6ca31772", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793330, "uuid": "40a562df-9f0d-4653-ae5f-0980149dbb0d", "value": "bfd457f9bb6e4b9fbcf075c3eecfa9bd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65df0bd6-0206-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685793699, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793699, "uuid": "f10d8e6e-0368-4c45-9d88-3073d6caa457", "comment": "Malware payload", "value": "3b64772291b8d2fbf6cd6bc9470736ad", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793699, "uuid": "a08df262-b174-4a0a-8172-38bfb81f657f", "comment": "Malware payload", "value": "e7a9f2239564568cf63b52c8776ac5544257e43d576285edd15901dba39ea447", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793699, "uuid": "1b856f63-8b8f-47e3-80c8-a8d84201df9c", "comment": "Malware payload", "value": "52f04ae838510a954a5fbabd890fc718d55120b3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793699, "uuid": "cca8c9dc-94aa-48e4-9953-dfd2e5079a6e", "comment": "Malware payload", "value": "773098452db73cf7191402a3d7d37d007ba557def8c3e400b1252ebda34b53be06f64a5eb8a40f80455b2ef1d39f0ba1", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793699, "uuid": "76d85494-768e-4d67-ac99-7f93626a502f", "value": "T138C2E795BCC29667C2D1537AB76F478C339277A8C2CF3717D80427103A86A4F8D62B51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793699, "uuid": "8d21aa95-20f7-465b-b982-e2422964d9ac", "value": "384:FlfM3WQKjQ8JgsoFDQCm48tG5rtl+6jclFfIMcKbFJqbG9XaLfyb5CDLop66s6tD:FN/HjQCnoF5EG5rtl+5bCbXTDLop", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793699, "uuid": "3dbffc06-46d7-4265-a469-8b71ce7d35ad", "value": 26488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793699, "uuid": "36f09de1-3272-4674-b597-834fd62858ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793699, "uuid": "3bfd5738-afef-4a01-82d0-ba20639fd971", "value": "3b64772291b8d2fbf6cd6bc9470736ad", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6b3295a-0216-11ee-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1685800814, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685800814, "uuid": "9f5b957c-e4f5-411d-9d04-b24da1f8db91", "comment": "Malware payload (RedLineStealer)", "value": "fadf027e65835d6ea0123162d2210852", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685800814, "uuid": "c1accb33-e93e-4824-ad1d-5ddd37ac471d", "comment": "Malware payload (RedLineStealer)", "value": "e899b408f2cb7ba552bc1eabfa6ed858215dbfc2c3974196367ccdcb2a444ecc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685800814, "uuid": "0362a927-8777-41d6-9bb1-8523b8f6d209", "comment": "Malware payload (RedLineStealer)", "value": "512e08c0906138344d90058ba3a5d76c7301a719", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685800814, "uuid": "8f7bd6b7-d146-4620-922a-d7ac572cd166", "comment": "Malware payload (RedLineStealer)", "value": "2d43fb066379c04e4c2e45bda704960ca9b9f7f6e4c5299583e42ffb545b87cd0b0f3b374991c9b3565c6a618f13f0d4", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685800814, "uuid": "61ee2386-f3f0-43d6-b801-0673617d6a9e", "value": "T1F1052216E7D840B6E8B567B048F705C31732BDB19F38866B368A2D6E0C72594B8317B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685800814, "uuid": "5a339680-72cb-41a8-9b62-772fc582f1fb", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685800814, "uuid": "6c4e7151-393d-4eb4-b248-1416d5e660cd", "value": "12288:sMrNy90/WPoxjT+1vupO3E491aqS4zwHtEGIgqsFVjsGRlMKiwcs0D6AVkQ4ZX:Jy+FxGca791nSsO3tqsFrRTiwcdfVQX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685800814, "uuid": "8daf1653-5b1c-432a-8502-59fd0d1edcfb", "value": 797184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685800814, "uuid": "a1265e58-6ce2-4144-9b3f-4c05f2ad414e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685800814, "uuid": "28a3b8c6-cac9-41cb-bffe-b49d66930e0f", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52fe8827-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782071, "uuid": "119250eb-6830-452f-b53f-bf25decfd2d5", "comment": "Malware payload (Mirai)", "value": "65023681d6671a7d766817f94f0ff68b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782071, "uuid": "129f44e6-958a-453e-a463-50d00dec397d", "comment": "Malware payload (Mirai)", "value": "e8c608fc91c124229ce54694d2a21cf327cefa86129ebfa5167ab25b641bb1df", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782071, "uuid": "ad4bd5aa-6fdc-465d-8391-f4602e6740e1", "comment": "Malware payload (Mirai)", "value": "08cefc7f707b9dce7ef1f9bcb75f99d13c334806", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782071, "uuid": "b97d3942-5d1e-4bdd-87df-ec9a8e34c226", "comment": "Malware payload (Mirai)", "value": "4efb036c4e92595aa1fbabf932ffa16ed12ff960b5709bbf43fec6f5f802d3cd87233821bedd180fd6844049fa5732ab", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782071, "uuid": "e22cd762-a7c4-427f-acc6-3f1b37dbdde7", "value": "T112334A4272280A47E4575AB0353F1BE093AFFD9031E4F688694FDB5A8635E371286F8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782071, "uuid": "50aa15f5-3477-4969-b659-d4d80b9d27a2", "value": "768:7ha5/jPuIRAqpbCnQpqMNOAYgYBiUsWT6SOGTBrn4+QG1ho:k5bGIAnQpYANy/sw6kNrn4+z1O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782071, "uuid": "e4d74f64-8c50-41d6-b657-323b705dc8fe", "value": 54440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782071, "uuid": "850b39ac-f79d-44e4-a5a9-cf14ecc56e89", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782071, "uuid": "48515227-d962-4769-8b44-716c62dd580e", "value": "65023681d6671a7d766817f94f0ff68b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81f028eb-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782150, "uuid": "eb78b776-6c44-40e0-a9d6-1b4e086465a3", "comment": "Malware payload (Mirai)", "value": "90a6f87f3b7e02a2581514fd24fc5e9f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782150, "uuid": "541c5a0e-8982-49b4-875d-f91c7c22a21c", "comment": "Malware payload (Mirai)", "value": "ea790d4e2e51aef4bd7e6739c4c93c3377ddf4001942fa6f7c3b02907de37bdf", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782150, "uuid": "ebbb3edb-bdd5-4a7b-8f77-e9650231fc34", "comment": "Malware payload (Mirai)", "value": "f4079a906f81bb0a9f0163a01c7e601a78c712e9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782150, "uuid": "d1aeee9c-7d16-434f-8632-6f1a66eecbb8", "comment": "Malware payload (Mirai)", "value": "04ecdcbb944282667287c2ea3bc335055c5d665b7cfa6695a606bb45f71ccb8af9b0c7e57d3c0c0f8b2b45a6f555b41f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782150, "uuid": "8f26ef12-d043-4334-85ca-02343745ec33", "value": "T13263F946B8818F11C5D413BAFA2E118D331757B8E2DF7222DD206F247B8A92F0E77956", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782150, "uuid": "04206e9b-39fe-4f1e-952e-0e04655fe909", "value": "1536:rUnZ5nmBGGEC8coUcmcxdiVFrxDizVIWiiX7p1f3:aCGTvVrpxYVRyX7p1f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782150, "uuid": "28f1ced7-2f50-4607-8e93-56f85a92c95a", "value": 66936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782150, "uuid": "5e69927a-1e63-42fe-9e1d-0d3283b69385", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782150, "uuid": "4ffddc95-3086-4d94-aa4b-01608ebbdd73", "value": "90a6f87f3b7e02a2581514fd24fc5e9f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed3aa94e-0247-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685821844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821844, "uuid": "a6fe618f-f047-471f-9ff8-2921fd544b93", "comment": "Malware payload (Mirai)", "value": "ae9b8b0a09b4dd6e540fa61d0a627fcf", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821844, "uuid": "93adf976-ac90-4453-9be2-b421305b4335", "comment": "Malware payload (Mirai)", "value": "eb5f71bdb979e518a2c23980484795b33a07ff2cb8c0f74c5ffca4930e774a80", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821844, "uuid": "e4e8a198-fb8e-43b5-b088-90fe8550ea12", "comment": "Malware payload (Mirai)", "value": "1c13340aaed04f848510a98f18b920e21d59031e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821844, "uuid": "16557f50-6852-48e1-9d38-04f0995661ae", "comment": "Malware payload (Mirai)", "value": "bdaa7ff25f17c65eba0d180d6022d1ca1678f54dbc904417d4a28f632eab4e930bd9ab9d641b7329c5f426f988aafe49", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821844, "uuid": "f34e9267-5b49-4f6b-a3c1-d9798525c5fb", "value": "T12033E851BD916A2AC5E013BBB97E908E332177E8D1CF3217CC201B547ADA61F0DA7B52", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821844, "uuid": "bc04900b-734c-49e5-b901-5235597a6af2", "value": "1536:kqmmFG1km+TW6JLjpqrtwOviFHTNwZCBoh+r5cK:HmUOgHTqZCOhsC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685821844, "uuid": "5c4a54ce-73ad-4916-8b06-40b62d765477", "value": 50632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685821844, "uuid": "830a89d5-eecd-415e-80f2-b2cd3901294d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821844, "uuid": "3d68afc7-6e8b-4b1d-91c2-f3e958ce8716", "value": "ae9b8b0a09b4dd6e540fa61d0a627fcf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fade676-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685782146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782146, "uuid": "840b6d17-54ed-49bf-af33-9f592b6e3081", "comment": "Malware payload", "value": "5968f197f87fb96af6d96ac515a9b18a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782146, "uuid": "804bd310-55cd-4925-aaa8-af65ae157b4c", "comment": "Malware payload", "value": "ec4c5ab61910809c2df00c614cbd488b9321ca04a641eb0d76b55701092f67cf", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782146, "uuid": "bda02fe9-bf3b-403f-9673-627b8f2822d4", "comment": "Malware payload", "value": "432515565c6ea2a0eecc7ccbf89338244cef8422", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782146, "uuid": "868eba47-adf0-4864-95f6-7c853d7c5463", "comment": "Malware payload", "value": "1b48c2f2f7d5ed9f3273203307bf7107ebf5d5e194909b28339916b6e92804b800dbb69c89cde2e65f5738d4a8d592cd", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782146, "uuid": "733daa72-1051-4364-81a1-ca16435c3ef6", "value": "T19192D0987BCAC87AD1B2F7BA0332825634B875C5C88BAF958C07711F579F6068F70486", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782146, "uuid": "dc82646d-52c8-4345-bf3e-d45d29266eeb", "value": "384:vfFJF2MTJCRx070aNuvzTmEPpNIKTMC96AF9ZHDHV6UQfnlhKSNs9:lCMTJYxjaoziEPhTV6APz6Uyad9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782146, "uuid": "39eaf9a6-a2b1-4466-b547-623a0515dfb4", "value": 19844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782146, "uuid": "af8eee89-1338-4bca-ab92-0f555c51efd7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782146, "uuid": "630bae2d-fc7e-4bb1-8555-7077c15c8758", "value": "5968f197f87fb96af6d96ac515a9b18a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0a540ee-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685793368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793368, "uuid": "86eed5d3-8ad3-44a1-81f3-0d7957244a16", "comment": "Malware payload", "value": "34908e94b6068a014ac7da3f77c9eb0f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793368, "uuid": "40379664-8477-4c59-8693-afe71171fe80", "comment": "Malware payload", "value": "ecad1a30bd38a5c3588ef5123177590a73101a76bddc252f9ec48a7e6cf88f3d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793368, "uuid": "98d6331e-d21d-4551-97c4-588ec663d3af", "comment": "Malware payload", "value": "52ddc22dcf1e9efa333e91fa9a5b37edd6cd7b2e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793368, "uuid": "823f6684-845f-4895-8c82-313ab401cd78", "comment": "Malware payload", "value": "d09f76cf25a557e85555a175488b09a836c0f74014cb265c9902aed9ebaa52c75c542bbbeb6292d6a62ef8637b3afc11", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793368, "uuid": "945bfc02-27cc-4fbc-8919-d9cac81ed2f5", "value": "T1D493D719BF514EFBD86FCC3746AD0B0139CC559622A83B393674D828F64A54B4AE3C74", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793368, "uuid": "1f1a8243-7610-405e-922a-208402e85f1b", "value": "1536:osuSawI/xgWPNYPx/Oq+vl6j/Fklasb2iyQZqNwQtYsZR9BiMK6XEOzb:V9awI/xgWVyx/OgIRb8QUF5EOzb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793368, "uuid": "95756d1d-2864-4d6f-b9d6-86ba3df81878", "value": 97296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793368, "uuid": "df335401-1785-4b51-865f-33ace82f9fd0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793368, "uuid": "8851c041-4598-4bde-9345-ff68eb83a36d", "value": "34908e94b6068a014ac7da3f77c9eb0f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb6fdc90-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802513, "uuid": "233d4440-002c-4b31-9e02-bbe2779e004d", "comment": "Malware payload", "value": "c630d8dd93606b4051e5ca68fdfdb91e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802513, "uuid": "6a83e8ea-91bf-4fd7-bc67-dbf4e3245866", "comment": "Malware payload", "value": "ee44fab429ded66df03e28dcae12e0c5842df6bb3e12a241efc4fdeb50ea1b7e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802513, "uuid": "653cfcdc-4b8d-4ebd-b36c-a1e63445eaa5", "comment": "Malware payload", "value": "a57d83040ceba5d06343d87a28972f580f6e96b2", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802513, "uuid": "63fa1cfd-16f9-4a9f-96b6-4105b7afc6d7", "comment": "Malware payload", "value": "1ae7d6b0b677e0bb55df15138e32cb37a1536d1b666513ee572b69ccf97b6e14edf5e0025293a2cc7fdaca1f9cf40d33", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802513, "uuid": "71ac1d37-c6a4-42a4-8eaa-7e25e78f7f33", "value": "T18413C023B522C912DC9C1735E152E7D4912A6E759BCF0F1B2785BE2AFCB2B40995133C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802513, "uuid": "50db1cbf-56fe-469e-94d9-0d6486e2f79f", "value": "768:2zvP3eUo99qorTOLVzGRzDZIdIUXBThm:27mq7LVzHI64", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802513, "uuid": "8d29660c-f434-4ceb-8e67-14cbb1c4b909", "value": 41984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802513, "uuid": "9e290e12-3a86-4a33-9cb4-2f13c785d67d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802513, "uuid": "918120b5-6c45-4fb5-ad9f-f73978e5ef77", "value": "SecuriteInfo.com.Win32.Evo-gen.16069.28235", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77d78b5c-01d7-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685773543, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773543, "uuid": "a8a525b5-0a8d-48f6-a36d-af9616bbc3f5", "comment": "Malware payload (Amadey)", "value": "de262589e71dd1f9e47f7bd08566e708", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773543, "uuid": "a0c2e720-3b7d-4bbf-9723-51a12f615c86", "comment": "Malware payload (Amadey)", "value": "ef6414dfd34fda8e869525eab91867b5967d548386617e604481ac8b45a2550a", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773543, "uuid": "32c491f3-67ce-481a-9039-c50a4e1a22fc", "comment": "Malware payload (Amadey)", "value": "b04ac42ceb565ab16ba7c1ad8a869e3ba37969ea", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685773543, "uuid": "4893c452-53ad-42c4-bb8b-8eef3082d470", "comment": "Malware payload (Amadey)", "value": "5129d8d688dc6bc25ffa23b96de28f291b98170fc632867223cfa33daac2db8f6082d38c002d3bd38e10bfee9d15e0f5", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773543, "uuid": "d5896fcd-7921-4700-a754-e42b41df3efb", "value": "T169051207E7E88076E8B417B418F913471F36BCA249BC83676B84A89F8CB67847570767", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773543, "uuid": "b11fbab6-ff8c-49dc-9537-946ac1d55838", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773543, "uuid": "b017c348-c55d-4d65-82f7-04204cfdd410", "value": "24576:3yYY0SSu6Hxq9Gc0Yx2rCaM+IFWEWF0/:CmSSLQkex8CaXIFa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685773543, "uuid": "ac082b43-1244-48aa-929b-f5f77611d160", "value": 812032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685773543, "uuid": "be2afea4-938b-49a9-ba54-07e3a26166b3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685773543, "uuid": "e0a02866-381b-4690-aed8-ddc162e6e4ad", "value": "de262589e71dd1f9e47f7bd08566e708.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "751addbd-01f8-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685787712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787712, "uuid": "7354b585-df6d-46ab-bee8-43b1feca15f1", "comment": "Malware payload (Mirai)", "value": "af00b21268f11fdc326857f36dbada83", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787712, "uuid": "34d22d17-cf7c-4234-9d73-3abf42c2a812", "comment": "Malware payload (Mirai)", "value": "effa25385bb72282a8fb01805ea50a564b350ae3169b34856ba1f79d7a9a8224", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787712, "uuid": "98679630-c361-4105-8db7-3d5b188e5502", "comment": "Malware payload (Mirai)", "value": "77849b13d262465e0c3e762d0ff3b1690e85acec", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787712, "uuid": "0fa7fa9a-6f08-4063-a17a-7e70d634342a", "comment": "Malware payload (Mirai)", "value": "35f28b3fdc6a59608db9e5ffb28d18a4a223d7df1e0a495a8a7e4104e7b12bc3840d282b1b3ace4687bb6bc6db1842ef", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787712, "uuid": "7c88328a-2122-4972-84c2-9e0e0a061457", "value": "T11CD33A02F4504757C2D2177AB79F520D37236BB987DB33129A346EB42FC179A1E3A9A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787712, "uuid": "d01680ac-3fec-49c9-b0d2-4a7494d473a3", "value": "3072:rd/KCajzLHtKJpzAHR+qs+h/9nRPY+AucjmWQ9AKXNY8:5/KCaDHt9s+h/VMXjmWQ9A8NY8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685787712, "uuid": "983fae1f-58fd-4300-a837-6d84a8284ae5", "value": 133080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685787712, "uuid": "b4c16d69-9795-4f1a-8a63-257d50f1ddc1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787712, "uuid": "346dd952-022f-45cc-8739-d7be40a18f16", "value": "af00b21268f11fdc326857f36dbada83", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07a67afa-021d-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685803420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803420, "uuid": "2384d259-84d1-44ed-b50a-262e758c2b58", "comment": "Malware payload (Amadey)", "value": "e577585dcf548d7a8cc492a48f16b883", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803420, "uuid": "7f28b815-2580-4910-9736-96e2c4e24418", "comment": "Malware payload (Amadey)", "value": "f0fd8ce8c4d6793bf61cb45b10b86928354afe916d5cf507e95477d259863045", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803420, "uuid": "afacfd5c-361e-4a99-a3bf-71d1f8d3a43d", "comment": "Malware payload (Amadey)", "value": "3c7b4db82d1743dd157c17f5425703caf100ee52", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803420, "uuid": "bae1d17a-40d4-454c-9667-31bd36ea3e8d", "comment": "Malware payload (Amadey)", "value": "6feae2b1402d43033cef75a6fae2f47bcd30c3085ec63a02e6528dae448307a6d984b01bdfb8d4537a6eb2c5bf202c59", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803420, "uuid": "0291626d-046a-4379-bb54-09c6edb612c0", "value": "T1BA445C0373E07C64E5664B328E2ED2F8761EF9918F5977EB1615AE2F08B01A1C772706", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803420, "uuid": "dfc50578-af5a-4674-a41b-1179323c1a5d", "value": "a52b903201b2b26f84fa5c505e01f1fe", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803420, "uuid": "897d45a8-77fb-4943-b77d-fdcb002f8308", "value": "3072:fEs/Xdzs8Rk3hjTBxMfXhtpssEqqnJffzsQ5BjXtasSsIpOk6d30UIMy:csVz8MfRjsScrzjTIpOfV0U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685803420, "uuid": "4498beac-876e-4116-9a57-41edc42b3abc", "value": 269824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685803420, "uuid": "3d41b159-6d80-4e1f-95d5-4855cdcd9acd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803420, "uuid": "0d4d14c5-eeae-468b-b1f8-3373abc8659d", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb8ed74d-01b5-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685759081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759081, "uuid": "94b015b6-a44d-4be7-84b5-c9057ac4c9f5", "comment": "Malware payload", "value": "9f790f8b619a09e5d28353976f19f862", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759081, "uuid": "9fb70035-a5c7-44f3-a22f-4fc0e14de08f", "comment": "Malware payload", "value": "f16eb4a2a81cff1030bbb4e7decd13663ce62e421476d2f32f42d8c2b3d1362f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759081, "uuid": "5455c06d-ad08-4acf-8925-434ae6d3a914", "comment": "Malware payload", "value": "7a6c763b98ecff743daadda994471e0a50478020", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685759081, "uuid": "141a7a17-cd81-409e-9a31-c28914734d96", "comment": "Malware payload", "value": "cc9afe14ff03c77f9b40b9ef4cc615fd8c5f3c900224aae68f4235155438126601081a603d818bed5067a93c5a43e7ce", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685759081, "uuid": "87791e12-b204-4f9c-b7df-5f30bc8a85fb", "value": "T12D562913BE18D71EC62522345EB2CEA4672A1C8A86D6A517B345F309B8F10BC5D6FCF1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685759081, "uuid": "4156fe0b-3ed1-4c3f-9046-9ef635a3eb60", "value": "49152:vj2ikDKMeT6zKjTmB+dGpawj/mNGZWtaan757Hhu/BQ37A78dWLilulp73RbGog2:LuLiWhPf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685759081, "uuid": "9f317846-921b-4aa5-a7db-f7a02761404b", "value": 5898240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685759081, "uuid": "e636b523-2420-47dd-8177-e5a231fd790e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685759081, "uuid": "6a17da61-e40a-42d5-905a-7098fefa3588", "value": "9f790f8b619a09e5d28353976f19f862", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5efa7a5b-020b-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685795835, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685795835, "uuid": "adf323e0-7bae-4582-b6f4-16fd8f373fee", "comment": "Malware payload", "value": "c551987a2851117bc7ada86d449d5f68", "object_relation": "md5", "Tag": [ { "name": "Jupyter", "colour": "#301341", "exportable": true, "hide_tag": false }, { "name": "Polazert", "colour": "#2F56A4", "exportable": true, "hide_tag": false }, { "name": "solarmarker", "colour": "#1340D1", "exportable": true, "hide_tag": false }, { "name": "YellowCockatoo", "colour": "#C3007C", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685795835, "uuid": "16aa7a9f-41a6-4783-a31b-632caa814577", "comment": "Malware payload", "value": "f2560063dcfa982046d4ffcd04fa48f008bb0571a45db05544e5d2af9c75adb3", "object_relation": "sha256", "Tag": [ { "name": "Jupyter", "colour": "#301341", "exportable": true, "hide_tag": false }, { "name": "Polazert", "colour": "#2F56A4", "exportable": true, "hide_tag": false }, { "name": "solarmarker", "colour": "#1340D1", "exportable": true, "hide_tag": false }, { "name": "YellowCockatoo", "colour": "#C3007C", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685795835, "uuid": "8ed982f2-b479-4b7d-a031-ad024154a288", "comment": "Malware payload", "value": "2c80a2382b2639637dfb2f3949032ea8788797e8", "object_relation": "sha1", "Tag": [ { "name": "Jupyter", "colour": "#301341", "exportable": true, "hide_tag": false }, { "name": "Polazert", "colour": "#2F56A4", "exportable": true, "hide_tag": false }, { "name": "solarmarker", "colour": "#1340D1", "exportable": true, "hide_tag": false }, { "name": "YellowCockatoo", "colour": "#C3007C", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685795835, "uuid": "82cd6056-b54e-4c1c-9f56-131178d3d890", "comment": "Malware payload", "value": "9480697a5f62f30bef42bd8645da68afb621dc938b221676442902d6da3f28e3aa4da46070c2129a19900dc5dc4840a6", "object_relation": "sha3-384", "Tag": [ { "name": "Jupyter", "colour": "#301341", "exportable": true, "hide_tag": false }, { "name": "Polazert", "colour": "#2F56A4", "exportable": true, "hide_tag": false }, { "name": "solarmarker", "colour": "#1340D1", "exportable": true, "hide_tag": false }, { "name": "YellowCockatoo", "colour": "#C3007C", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685795835, "uuid": "630786b7-8c98-4c37-ab50-4c2d13fd9da9", "value": "T1C895334F785BC30F80ADD5AE1464972BA2809D1F404A8E94D7BC4BD9E1FD0AD70EB4AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685795835, "uuid": "f560608e-3437-41f3-91a4-fe09f920b0cd", "value": "49152:uP39+UHuYzGccS7YKTkPxXj5qdZqxrA1tbKNgBd:uP3w5UG5S7YEMjmA08gBd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685795835, "uuid": "3fd5a90e-9202-428e-aa69-36440ed5f6cd", "value": 1967146, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685795835, "uuid": "506e25df-d568-4d52-9973-81bbdeb09491", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685795835, "uuid": "b09a7c15-e245-4403-aad3-74a3a05b811d", "value": "a13278be27e4b0c38d7102496f3d4fcfb31cf710389edee244a4c5dd40055c4f.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e594a987-01c3-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685765137, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685765137, "uuid": "f8643b31-837c-438a-b5f1-f01af53a3683", "comment": "Malware payload (Amadey)", "value": "78643cf992ed21061c79a4ddaf76eb95", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685765137, "uuid": "c04a62a9-18ab-4d33-a6ae-3841f52da88c", "comment": "Malware payload (Amadey)", "value": "f354b84d30973c64b5549e58fd2e91dc460dbb69e1a1c50ac508e4a94d2a45a4", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685765137, "uuid": "bb28d140-ba81-4b72-b9fc-2b8d9ec2b1d5", "comment": "Malware payload (Amadey)", "value": "bf2f51145eb2132f4a1c68423b6f785d546549a4", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685765137, "uuid": "ac618fb3-e723-4be7-a2a4-3603d8754961", "comment": "Malware payload (Amadey)", "value": "a47968b9e4931b894c324a29b865def6fe131f8f6f7552cc5b020c84c4e0e7db2dd6d6a6e45912ed66c4045fa4eff11e", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685765137, "uuid": "65ff0da4-c6b3-45e9-ae32-4b88fd5cc534", "value": "T15C0523627BC494B3ECF5277069FA43431E36BCA1967C476B179568AB0CB3750A930327", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685765137, "uuid": "e1c5cd0b-cb9f-41d0-ae32-241a1c20a4ed", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685765137, "uuid": "584a4699-bcf6-4b98-939e-1f02a8dcd7f1", "value": "12288:bMrSy90Q6hA+Rbg/8KTzXKAzPB/sYdpih0AshHjDEjuuMl1Ku3dSW6DGezyY/VB:dyghA+xhAF3m0dRUMnKu8WtezyYdB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685765137, "uuid": "c5a3bbe5-9bc4-47cc-83eb-cfa300ad6927", "value": 811520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685765137, "uuid": "239cb894-9165-4917-9276-81b98c8eff85", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685765137, "uuid": "f555e89b-e12a-468b-8453-47cdf02186fd", "value": "f354b84d30973c64b5549e58fd2e91dc460dbb69e1a1c.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b8667e9-0201-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685791588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791588, "uuid": "5d417b12-a6d3-4a79-904d-8ce34b17d11b", "comment": "Malware payload", "value": "983449b324fa3c9598ee55b34ec4de0d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791588, "uuid": "41b17ca4-7ac9-4013-b3af-aeea1db8bed5", "comment": "Malware payload", "value": "f369b85a1d52527e06e0639864ce4307bc0a64d04ce5de96cde05b808a4d2ec4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791588, "uuid": "0a274a41-253a-4594-bc28-04eaa6f761be", "comment": "Malware payload", "value": "da522e1963324fc662e61c0358d483385600203f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685791588, "uuid": "51e3cfa0-438a-4169-8bad-c942e694c976", "comment": "Malware payload", "value": "b9fe12dddf70f21f2038859ad1d4454236de584ea1b8bcca80c0168c67641dac840695ac8a9aaa05663c507432c62844", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685791588, "uuid": "683a097a-1cd5-4b4d-880c-e0d9353a7e20", "value": "T10D935CC5F683D4F6EA5705B15137A7329733E43A602AEF42C329AD36DC62910DA1B36C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685791588, "uuid": "9b08c2c5-de2e-470f-92d9-e48aed0c1581", "value": "1536:WWmseUZNsbAU+ge96KwzwkuggIyB2PRf1SwRXXU:VOUZcAUVM5awbgSBu8w6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685791588, "uuid": "9465e12c-bb41-418d-84df-5969424bc448", "value": 92108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685791588, "uuid": "1773fe38-c882-439f-bad1-b608d41b267a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685791588, "uuid": "e7b59077-79e6-415d-8814-4e96749a587e", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe198260-01dd-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685776345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685776345, "uuid": "369f0d11-55fe-4746-8327-16dabeec5215", "comment": "Malware payload (Mirai)", "value": "85fddb8d1f9a7ddcfa3fb84031b91bbf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685776345, "uuid": "95c60da6-8c08-4808-9d90-2d24fa3b3e85", "comment": "Malware payload (Mirai)", "value": "f36ed47327ce75f8d2b42b3821d1a39c6268a526a0815d599720acbf2dffae66", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685776345, "uuid": "5e226902-5ba0-44bb-9569-31bcc20293d1", "comment": "Malware payload (Mirai)", "value": "0661f387cbd1a3aafb8d9faef2a831cc62775bab", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685776345, "uuid": "f2883c46-73e7-44ca-8421-ff9657241231", "comment": "Malware payload (Mirai)", "value": "808f6871ed9da21dd7210f85dfc2c42ec43e71ef1daf814ad7361a492e9b1d543199f11071a4e58d1422c843f12570b8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685776345, "uuid": "4596a2f0-e51c-471c-831b-4331ace45d45", "value": "T1F2B33B376251C97AC08356F426EBC5729D13BCBB0B32219A33D47D60AF368DA1E99B05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685776345, "uuid": "e2e231a6-034d-470a-9397-fed178461264", "value": "3072:kiry859a2ADJf9wHYqbgFFo8+HeA1+TRCm7FnVqfJXFWbNb:T9a2aLqkrMYsm7FnVqfJXFWbNb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685776345, "uuid": "60cbf302-473c-494d-b650-51927a73fb5a", "value": 116503, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685776345, "uuid": "5b9b6e50-fc52-4bda-ac98-a73bcb385dc4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685776345, "uuid": "8868730f-1cc0-4363-aaf0-a0a673308fe0", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8d11e48-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685793382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793382, "uuid": "ca6c3a3c-efde-4998-bea1-40fabb6b32d9", "comment": "Malware payload", "value": "061a45cc3a153368625e80ce27c13f1a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793382, "uuid": "f3987a6f-dae4-4d60-9484-aea0c013ce50", "comment": "Malware payload", "value": "f43ff3850df360c555fb64c0710545d73f18773cdfbc914cab6d776a36bbe0b5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793382, "uuid": "f8fa9c0a-da56-45d7-9f7c-528d891dc010", "comment": "Malware payload", "value": "d2c2010c0e68f1b3a38524775b05c7469375793b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793382, "uuid": "33aab7dd-7ffb-45b2-a9e5-e3d67986e86d", "comment": "Malware payload", "value": "7ed5656e55b1899f1242a8dcd634310410dbaf1f0a0501dbc18b04113f03f6d2e1b6759c4b885411d2975caa2da7599e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793382, "uuid": "b94d404c-6104-4061-a576-ac244101aeb9", "value": "T18DB348B3CC29AE5CC664D5B4B0B18FB82B53A961814B1FBE15A6C2749043ECDF6453F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793382, "uuid": "4632ba2a-e8ee-40ce-b958-57f461875a13", "value": "1536:ejKvZA1Dq3jrECx5KiVal7Qoq9y24c6W+jjnPTkDlR0e:eGgDerEEAiUi9dl6W6nPT+0e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793382, "uuid": "a3394949-b012-46b6-bb7b-849d7882507d", "value": 117164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793382, "uuid": "e630634d-884c-4629-a4bc-8078fde70508", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793382, "uuid": "89d08004-630d-4252-a6ef-6cf5eaedd4a1", "value": "061a45cc3a153368625e80ce27c13f1a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2d52bf7-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802499, "uuid": "d63862ef-7a41-4b19-af9e-353535f2857a", "comment": "Malware payload", "value": "abe6887f567147f09e02384c2da43288", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802499, "uuid": "6021c6f7-6897-4877-b876-e034cce43f58", "comment": "Malware payload", "value": "f44f4f9c9a611b2ddcf57d43614acd16a80781d68cab38d0c1e680a0bdd91306", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802499, "uuid": "f3a47db7-ea06-4e9e-bf54-80d5c6541fec", "comment": "Malware payload", "value": "ffda5c066f66a61e1601a390e15c40d07342fe4d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802499, "uuid": "cc5d4f21-7b1c-48f3-962a-310bc50bbf2b", "comment": "Malware payload", "value": "d072fc62fdbdb5602ea37c653d523efb949ca616cace75862e932931cd1cee903d3766f0578511c628f46986dc6ad851", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802499, "uuid": "6d21f1b7-ba61-45c0-ad16-9bbf7f2beeab", "value": "T117D38D1097C380B2CC8ADB3024ADEBB7A67FFE44A674B0AF87915DAD5431900A059F76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802499, "uuid": "221da30f-4acd-4756-8d71-f1f0a4a9c1d3", "value": "1536:ktg1zeK9GIks0CZEXT/T64TbM3N/A7epomT+y7NKRaeZV/+iSL3:ktFK9Gc0CslbM3N/lTKfGi0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802499, "uuid": "c558f7f6-ea46-4371-8c63-a67114eb3304", "value": 135168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802499, "uuid": "6f425427-9764-4497-a28e-6d379bc8f25e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802499, "uuid": "16c8067c-ef02-4944-bcc2-f1fd0696efc0", "value": "SecuriteInfo.com.Trojan.TR.Crypt.XPACK.Gen.27040.31494", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5b8804c-01e4-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685779311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779311, "uuid": "af89c387-f8dc-4d02-b259-492134b70fe8", "comment": "Malware payload (Mirai)", "value": "e321e3f25b1c0c289a575a6a5de29dcc", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779311, "uuid": "25dc3992-1443-476e-9838-122dfa5f4cd5", "comment": "Malware payload (Mirai)", "value": "f4cf3107339e74b78d2a90290877741f1b8f154d6bfd7e9e5f34b5086977a9bd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779311, "uuid": "1c26ff01-d635-428f-b2e2-c62009805c0f", "comment": "Malware payload (Mirai)", "value": "c6870bf2b88b2c91e734288003e78a36faddbeb3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685779311, "uuid": "c33cbd05-b103-417f-a764-32048d0f5bea", "comment": "Malware payload (Mirai)", "value": "9f540c78614fd326f8e3173d69c9fd161ac46354617806f48a57872103ac6b64795a1938f8f07a679a27bc3a588571d7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779311, "uuid": "40c89376-f643-41fb-b00a-fd5fb715649a", "value": "T1ACC2E1A9D44D3AF8CCBF6BB4CDC8C24027724F2E5B12E06226CA7B6510166127A867A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779311, "uuid": "7ce03d21-2f94-4610-a2e3-f2f1f89dc79f", "value": "768:5VgvcFlhSvpgVvHzR7fJCgAjBta4uVcqgw09r:bgsldHzlfcgoBQ4u+qgw09r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685779311, "uuid": "c979351a-9158-4861-a782-bd3921a6f5f7", "value": 26128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685779311, "uuid": "b7b73526-fb4f-45eb-90c4-f6a2a6deb1f9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685779311, "uuid": "d385be15-8034-438a-b807-0b28367b0627", "value": "e321e3f25b1c0c289a575a6a5de29dcc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "924a6ff9-024e-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685824698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685824698, "uuid": "ad92175b-0a9a-4191-8f34-05f4d495f7ae", "comment": "Malware payload (Mirai)", "value": "f49a3a1a8d067f201194146c26cf6023", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685824698, "uuid": "81d04f7e-e60d-4324-a83f-0be598aee22f", "comment": "Malware payload (Mirai)", "value": "f5d50f9187e944c54a54758a7fea8cb28e12646e07736e3c43609b88761e76cf", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685824698, "uuid": "5db63eb9-e1e3-44f2-992b-32d076c62f87", "comment": "Malware payload (Mirai)", "value": "95e7069be8d9772d061a269b6be8dc3004b3a6de", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685824698, "uuid": "7940aecf-e8b7-4de0-9bbe-6257c213027d", "comment": "Malware payload (Mirai)", "value": "1b893043e17a6a56da8dc06823f058e76598143ba49cb5afc77389fe20ff5e8785b5c02dfa5e385c7621e7fd70894f23", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685824698, "uuid": "3b83b6ea-2888-4fc5-9e18-d101117df9b1", "value": "T149733B92B901EEBAF40BE77A44D34325B270FB654A530732B31B796699363C43827F46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685824698, "uuid": "8bcb4050-a506-49fc-99fa-0040316d8e3a", "value": "1536:f+irPZb9U8wQqHA0xAatbbPvFPnTRqrHN5joeE:m0PZb9RqLxtNhmN5jO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685824698, "uuid": "e54d4682-3880-4141-ae47-6ccd1f79bacf", "value": 78136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685824698, "uuid": "fd5ac34e-7891-41d2-8ff5-17b8c09d36df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685824698, "uuid": "7ae8e23d-b0ff-46b2-a63a-33f903c0eb38", "value": "f49a3a1a8d067f201194146c26cf6023", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96ad67c7-021c-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685803230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803230, "uuid": "e50224c8-682d-41e2-a46d-3e59b1c228cb", "comment": "Malware payload", "value": "6fd3116c23bf2917d1511ccaf936105d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803230, "uuid": "67ec1e35-953f-4428-b53e-2981c9e92759", "comment": "Malware payload", "value": "f61cac8f69ccbf82dd0ee127770619f1572e1bbab78bf7b1537e487ec6fa0080", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803230, "uuid": "e08cee2c-8a9d-4db6-8390-fb524f4167d1", "comment": "Malware payload", "value": "5a7bf1736c10c4034b4d7e71dbf10723c5d48ea1", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685803230, "uuid": "781d735f-852c-409a-b311-aa26f39ef20b", "comment": "Malware payload", "value": "e18fdbaa440ecf64e0b79bafd6c291dd4472d212a6e9d6759db720344c52331bd907716c22459d615b9a1fb6c81dd89c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803230, "uuid": "fca8fb81-5f9b-4303-bb15-c569ccc5cdcd", "value": "T189C6CFE325C2669DC036C5FE8792BC6E968FF8351A16B4F39069B1B1ED23C503625F09", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803230, "uuid": "cf082c23-3dd2-463a-b001-0b9fad1c543e", "value": "35a81d16af9f2ba6d515f11152d0364b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803230, "uuid": "e3b1d09f-f0ca-4032-90ad-5793efa58b57", "value": "196608:2gX7ZnnZz0ApmsvDpvczGdHOCbs7bCrfd9ix0AO0xW2OUOL10dk:2gX7Zn+ApmcpvczTpHC+GOW2M1R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685803230, "uuid": "11ec41f7-83ae-4c97-a8d4-5890cd35e72a", "value": 12057824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685803230, "uuid": "af65e0ab-479f-48ba-8e07-31e2178553b2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685803230, "uuid": "9dd7cced-e70c-483f-8a68-f1ed9c6ec450", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac881ee3-0217-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Tofsee)", "timestamp": 1685801119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685801119, "uuid": "f10071c9-f3d0-4383-ad87-682b8aeca129", "comment": "Malware payload (Tofsee)", "value": "efbeb9e59d12e56e8025fb3f13484820", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#0155AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685801119, "uuid": "c0d5b76f-1a17-4a9f-b509-149cfdb31a67", "comment": "Malware payload (Tofsee)", "value": "f6d40c99bbde7b24d679bde627fb92bd5f695922f8dbdacc567d20fc3e990619", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#0155AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685801119, "uuid": "663c3ef0-c75a-487c-a69e-2645cc93938f", "comment": "Malware payload (Tofsee)", "value": "84de3934d54cdee52c5e7f15a7043cf549565867", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#0155AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685801119, "uuid": "6e028bf7-283c-4e8b-96d5-f53a7079e635", "comment": "Malware payload (Tofsee)", "value": "ecc53576c1ff81d665abb3bf32d568b4a30c6d177a139f1b12bdd6a5385cecdf8724775f9314d4a4a8d254971bd82a47", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#0155AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685801119, "uuid": "e518cd6a-8fb3-4d5e-96cf-a6611ceaf1d0", "value": "T14E445C1362D37C61E5164AB2CE2E86E86A5EFB918F5737DF12146F2F08711B1C272B42", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685801119, "uuid": "246f27cb-a21a-4a73-909a-65697e617df6", "value": "5eda38ec3329e662bd4d2abbcac5fbe5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685801119, "uuid": "16e0cb74-51ae-49ea-a8e1-24d1bbbe86a1", "value": "3072:UhLEHt/Pc0Z4P4jVac+cao7MyqGXxFLrSHMmnw1R/H+AIN6oCXCwSi/D:kLG/Py6ccwmMShRr6Vnw1R/HUYoDA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685801119, "uuid": "c2d10787-fdbf-476d-b0c9-327267d9a0b5", "value": 269824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685801119, "uuid": "c83ca093-82c7-4102-907a-66731cb386a8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685801119, "uuid": "563b1a63-2b57-4000-a906-6d83d6aa85d4", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4fd60ea-0247-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685821830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821830, "uuid": "7718bdeb-0fcc-4a5c-93e3-ba559570e9b1", "comment": "Malware payload (Mirai)", "value": "940365e186daea2b849b86845d45d9f5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821830, "uuid": "68851053-7fb1-4769-9708-be8bb64301e1", "comment": "Malware payload (Mirai)", "value": "f738ceaa65ffbcd7325d94da83a961f50480b925afb4b3540444e645f2fcadd5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821830, "uuid": "9cdf1cd2-e636-41f5-8b5e-e98530ff0357", "comment": "Malware payload (Mirai)", "value": "9412105b9435c53564192118d52a47b249a4f888", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685821830, "uuid": "2c683227-fb99-459d-b365-472a4a6e67d1", "comment": "Malware payload (Mirai)", "value": "f0cfa2d104ef89429fb83fd11f1be1b37e212fc7180f999e8ba72ac33011232f2afd819db5c5fb14df649bfc2249d799", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821830, "uuid": "e427b21c-bf0f-4eab-b35d-12adb50e7dc9", "value": "T13493B406BF710FF7EC6BCD3709A92B45158C550A22A97B35BA34D81CF64B25F19E3860", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821830, "uuid": "e4d681d5-ff7b-4f8e-ab67-f93c264ab74e", "value": "1536:VUMZTtbATWZtnUj/98mqqQvmGHLvtGoZsWXBS:VUMttAWH2VO1BGo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685821830, "uuid": "a26eeea4-396d-45ef-a308-e33b3504be2a", "value": 92444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685821830, "uuid": "6c1b6ef5-a961-4e31-a66c-861da47d1016", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685821830, "uuid": "656c2e36-600e-4af0-a865-c7753582cf39", "value": "940365e186daea2b849b86845d45d9f5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "654b7ac9-01eb-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685782102, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782102, "uuid": "05d1cfc0-4072-415d-abf2-9bd6535bde30", "comment": "Malware payload (Mirai)", "value": "84e6455b9860ee701481f4b92ea3e3b5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782102, "uuid": "24f4952e-c9be-48cf-9e13-510f2798b7f7", "comment": "Malware payload (Mirai)", "value": "f8333fb8b93967dedd3bfad492f36490324539576c05d052ce27ce01f81dc82a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782102, "uuid": "378b8dee-bbcf-4221-9440-1e9c6394543b", "comment": "Malware payload (Mirai)", "value": "5a8c4a9fc516c19c73eda84ed9171408299249a4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685782102, "uuid": "2c451316-d03c-4eff-b937-b0dfe56209f1", "comment": "Malware payload (Mirai)", "value": "3726dec36e4da1ea304bbe23ad4edd0e679daf2b44985b2ad6a627be8f6d14800ecdb80e799a689b9f89588be5f66e4f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782102, "uuid": "f79e3743-7d57-46ce-b8d6-b8f6196326c5", "value": "T17AF23A34F9761E17C0D5A47661EB8B28B9F407CB36A4CA1A3D710E9DBF61A416403EF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782102, "uuid": "e7ceae55-204c-4981-9a12-5c917df4bb02", "value": "384:ZIobwpl7NBDeWn168t9AFX/rpypr3OciHq7+elQj7e0FU+pKypuYj:ZIoIpNBDx6QAFX/F5JKSelQjXO+jpuYj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685782102, "uuid": "39e39c1d-e6dc-4ae4-891b-2d09198b7bb1", "value": 35748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685782102, "uuid": "315d9d65-da54-4161-b7c9-5bef6d3e3d5c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685782102, "uuid": "44aca6a9-2d77-4b15-97ad-bc2ece2b6d7b", "value": "84e6455b9860ee701481f4b92ea3e3b5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ab91a14-0262-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1685833194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685833194, "uuid": "1bda0c3c-db42-478e-950e-9e91032d766b", "comment": "Malware payload (Amadey)", "value": "0761711acb836cd3822f860fbad54585", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685833194, "uuid": "d90420d6-2472-4f20-8f61-1d260518b067", "comment": "Malware payload (Amadey)", "value": "f845e9d8bad6f1cada0619c5f033c4e3cb7a5c3f55886eef9b2a0ebecd17df6a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685833194, "uuid": "494b8df8-b598-4802-b508-b2c9c7938823", "comment": "Malware payload (Amadey)", "value": "91bb422b43b6c2d92470fa1271e7583530c2c6fd", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685833194, "uuid": "2fb0deb9-9a84-481a-8f59-432ae2a889c6", "comment": "Malware payload (Amadey)", "value": "38373b7e32b3373bd35bdece6f278fd305ee8c08530311c3f244adad9d9907bbe15509d2ecd660400df90ce582b4d5d9", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685833194, "uuid": "0182c210-b19a-491c-8075-34bc4a7d985f", "value": "T10E051283E7D88077ECB423F26DF315531A39BC618AB55B572A88A96E0C735C4643237B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685833194, "uuid": "fa85edab-3a28-4557-bfcd-24c71e0a7bf1", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685833194, "uuid": "d9aa4c43-6852-4b29-8d99-e2e8e059b978", "value": "12288:OMrgy90Dfg5FbD5llWIuE6+a7XKMFfWi4Gmte40w90MzguioDSamQinDGAPAWGO:iy55FX5LWvK4fSGkv0wma1ibfhnTPgO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685833194, "uuid": "fcff44c1-7de0-45c5-b4b8-b0d26b58e40d", "value": 796672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685833194, "uuid": "2866888c-8481-4879-a375-e7e33334db3d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685833194, "uuid": "00a489ae-eacf-4e4e-bc56-ed8fd2631ab3", "value": "0761711acb836cd3822f860fbad54585", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72c6a939-01f8-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685787708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787708, "uuid": "8b2f268f-a88a-4b8d-9ee7-504cef23882e", "comment": "Malware payload (Mirai)", "value": "05e393d95a9abba1579ab55add05ebf8", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787708, "uuid": "4b02decc-2189-41d7-837f-7d0d9bb7ecf9", "comment": "Malware payload (Mirai)", "value": "f8abbb2e39a2354a3606c6f24145d06741f80bca54f1029498af4dfebf6684e7", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787708, "uuid": "34af01b7-fb10-47e0-8e68-d156faf5d3cc", "comment": "Malware payload (Mirai)", "value": "16be89ea1445ab982cee38381d24c3bda663fb99", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685787708, "uuid": "e93210fe-7c0a-4527-ade5-edad35e9c1fc", "comment": "Malware payload (Mirai)", "value": "77de6912cec4c399a8037ec6a73c4b0d08d499e2c0ccbdd6fa17516d641992b46dee202ebfb197996fe6212bfa1e901f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787708, "uuid": "ed150838-da46-4405-b2cc-c8256ceda9c5", "value": "T10FB30A01F8004767C2D22BB6B78F474D7B3257B957DB3311AA385DB42BC1B991E3A9A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787708, "uuid": "0c28a44c-fde8-435b-af75-087f4820035e", "value": "3072:9ACxqAsgjV32mBTvggf/mtcDQFbtmXU+j:FqARkmBTTmtcDQFbtmXU+j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685787708, "uuid": "5dfdfac8-0370-4f29-b0a1-c8cad4380022", "value": 110904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685787708, "uuid": "ee475c6f-31f5-450b-a370-f5c839e7406b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685787708, "uuid": "6b92991d-b2fc-46b0-a48c-21b9055c37dd", "value": "05e393d95a9abba1579ab55add05ebf8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e89b2b8-0205-11ee-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1685793338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793338, "uuid": "2c0f7725-2aa1-478e-903b-d3d76880e15b", "comment": "Malware payload (Mirai)", "value": "06216f04503532df1f2ff5b472358ce1", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793338, "uuid": "c0de532f-f080-4d38-8dcc-70bc65f8bb96", "comment": "Malware payload (Mirai)", "value": "f905c0cde2546e4d9551421bd561a7deefcdcd5fdda9a4133be75ee1546b87e8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793338, "uuid": "f3fcf745-5526-42fb-8cf2-60c240770d89", "comment": "Malware payload (Mirai)", "value": "5b2b50fa26efd66ba084035f54aef1916ae45df4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793338, "uuid": "b92c6525-b998-4e48-af55-81c401e9f655", "comment": "Malware payload (Mirai)", "value": "43c08d02537bff76a360503240155b32783a4494f6b57d97ce47a488afa352c85d65be2ce21d88d368666b667d2f8790", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793338, "uuid": "529cfaa8-e850-4258-b16d-e82f53991c37", "value": "T1408482A8F8D58D56C4F862F9F08A22B90F3C46F6B4976133D8280F74768745A749E336", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793338, "uuid": "db223a03-eb0d-4ef0-a3ea-127098877630", "value": "6144:ppyXba4uYZAkzY3o9K6ot4dgQ0BNgYN4F/YJVvQ0agM2It5IVBQEkAAr4ltYpYc/:ppyO4bZk3ojg+gxbVNA/kZxaB2Y5YBBs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793338, "uuid": "9a169691-682e-4a1f-8d31-2a13180feb52", "value": 386352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793338, "uuid": "303676ba-0f4b-4aab-931c-c75bcccae86d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793338, "uuid": "785c2645-b120-45f0-b567-37bea1e79736", "value": "06216f04503532df1f2ff5b472358ce1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63827f53-0206-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685793695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793695, "uuid": "a8d1679e-ada6-4abe-aeab-06fab0b28653", "comment": "Malware payload", "value": "d1e688daaeb6935a2d3517f2c178096c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793695, "uuid": "5ed767a9-fa2d-416a-be0f-88c6202907d5", "comment": "Malware payload", "value": "fa5bbd27708f04fd29701469b7b7ac8dca2e331f3df2a4b900f0b33e9b2b522d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793695, "uuid": "9296327c-9f3c-4fb6-b333-9c2f68d4397d", "comment": "Malware payload", "value": "e128c2496084e734fbb43e7136a8ea8e3bae4965", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685793695, "uuid": "81972670-57ff-4407-bc1d-c09546f447df", "comment": "Malware payload", "value": "4d5c7d031a8e4e245a405f30e43c350ac2672f33eb8e8ac5401a5e8a7baba8514bbf89c9408072243795ed53bbf33c01", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793695, "uuid": "6b60e7c1-ad66-49b5-b8ce-2648bc3190ec", "value": "T19154F7F5693D82E1C8BD957670D623BA4F4B0853B806EC3389260F30AA5725C356F76B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793695, "uuid": "0232438d-a306-45af-9dfd-4796e6ea1f72", "value": "3072:jOc7H1xLRG8wTvScdmnXaxuuzfewtP6rp5C0qmi91/:jnH19cddQyl7As0qfr/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685793695, "uuid": "6f50bafc-05b9-4f90-a0ad-38631335066f", "value": 296684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685793695, "uuid": "6c9f3f01-7528-48c4-adc6-da7f94863048", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685793695, "uuid": "1c9b3396-cf43-4997-9cbb-2b764ad8348a", "value": "d1e688daaeb6935a2d3517f2c178096c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d067c0d1-0222-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685805904, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685805904, "uuid": "ed7a8bba-14ab-4592-bab1-df5a71b7ebaa", "comment": "Malware payload", "value": "bb3ef37dca965c8fb9f3fa44c2cc2d59", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685805904, "uuid": "d9fe8f0d-2214-407f-9806-081b1fe731bd", "comment": "Malware payload", "value": "fb94682598137ea15c9accdc28edfbb4b7530e0491feefdf73669c557ff0d490", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685805904, "uuid": "f56fc162-87d4-4ae3-aeb7-9bfff33ba3e7", "comment": "Malware payload", "value": "ed3bf24d347db49331f0e068dbdce0f52bc1574a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685805904, "uuid": "120db879-a103-4f6a-9209-c5c35ff6144c", "comment": "Malware payload", "value": "d294c209f934b8a7a11ec9bdfa12d3436ecc4153f2c4071c6a59f50798b1b16814a789f7ed8eac6d9af0b7598a515ec6", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685805904, "uuid": "b7ab2a59-d33a-4950-9b75-5921841d7de8", "value": "T126F68C5D2BC4116E3B670D1EC6FFF521D10B6A363F121AC79734BA58AD0F4622F09A26", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1685805904, "uuid": "42675a29-58a9-41d0-8b59-1b72ff152b7e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685805904, "uuid": "33ea252e-141d-4a43-a308-b3bc0190aa09", "value": "196608:KK//qhm/iEQKBZsKsdaMz8v11trR0gJ6DtgJGI2Ikdcf7E7SUF+GX1JuGNNRoeu:XnnhzBiB1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685805904, "uuid": "f29b2ffe-a998-4c2d-9276-0689a0e230b2", "value": 16010752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685805904, "uuid": "22c183ef-e270-4b31-992b-16ebe64c76e2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685805904, "uuid": "03f67ef3-4e13-4226-b1d7-b7bf7216e550", "value": "sxr-Uni.bat", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6774fe93-020a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685795420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685795420, "uuid": "cd2958ba-99d8-4974-b6e4-7f1681b8343d", "comment": "Malware payload", "value": "ba539d49d87c59a907a9f0ad5da7ab76", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685795420, "uuid": "5ac1708d-d4d2-44e8-a5dc-6490d92ed474", "comment": "Malware payload", "value": "ff50b92c04b970fd6680e3216ad368743b868367f5d9a37498efee9ae17e8af5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685795420, "uuid": "ddebfa69-d117-4ccd-9b48-3a78561d0bbb", "comment": "Malware payload", "value": "0ee8cd23854709ef8d61a8bf74cc74e97c42cae8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685795420, "uuid": "027a6ced-8ad5-4003-b836-1da9ebb7a5ad", "comment": "Malware payload", "value": "eeda509e405c44b2d86d0c8ef8621f8d1cc7fbf99004dbc68fc93a879cf8fe266e536aa86f34c6bb473186883cdaf92f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685795420, "uuid": "e0f9e73a-bfec-413c-a019-4b568d9f53cc", "value": "T17282E04FF3508063E31FCEFA458C49F434BA29C55A08ABB8967E8757C2955316142F5B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685795420, "uuid": "a0c1a0ff-a578-430d-95e4-b55aafaa89f3", "value": "384:4Zn09mfbBweSMyrZw5pR8wDPCYZMw4qdJDWftuS0swJaiDl0:4C9mfbyeSMYaDqY7d8taswJaiy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685795420, "uuid": "3906af71-d2af-4fb3-a940-82c6744c4f88", "value": 19316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685795420, "uuid": "96250f7d-b82e-4a66-9f2c-98d4d5af8608", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685795420, "uuid": "6898a1f1-5924-4f37-bee7-09ae0f22b0cd", "value": "SecuriteInfo.com.Heur.20230603122907337151345", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e663f4cb-021a-11ee-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1685802505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802505, "uuid": "c7f7af87-64ed-4685-ba6e-eaeffb56c853", "comment": "Malware payload", "value": "85db739618dbd5582d425af10f365d2b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802505, "uuid": "6c4bce3f-55a6-4c68-8133-019b230e723f", "comment": "Malware payload", "value": "ffa0244f7d27c710d636fc322c8cd9987c5b197365da88668a0e4d8e0fe30070", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802505, "uuid": "e75cfe8f-1ff4-413f-bb7a-0ff370e55fec", "comment": "Malware payload", "value": "93f9e9aaa5b729fceb11a24d74d70ca41fc44375", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1685802505, "uuid": "f0197274-fe93-48b9-8621-da3dc457ae4c", "comment": "Malware payload", "value": "1c8b183c9ba28f197dc5c406e5af0fa54f122f21f20ccc564cbec760dd750101c77a39cce981b1e5cf3f6a56a4881092", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802505, "uuid": "5efe6c20-9602-4191-8a66-0069d163949f", "value": "T123A5DF41F7C2C492E21B56714D7B6B3ED53EFE550B055E93B278FA9E2E732A09812023", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802505, "uuid": "5e035375-de83-40e2-832a-b2f338513c4a", "value": "24576:8kCLdCKCekTt7GZ6ybCUf2FfWl8KuqGavkg3NyNIbbbIoIBAUZLYH2h:8JdDkR7Gpb7+s8KuqGaX0ToIBAUZLY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1685802505, "uuid": "cf3e1814-0382-4967-b64d-0b9270051f4a", "value": 2072576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1685802505, "uuid": "958a1667-ab2b-4d41-b413-561eb2fce203", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1685802505, "uuid": "f73e9bd9-5179-48e5-be17-ca3ea7ef7b99", "value": "SecuriteInfo.com.Win32.Trojan.PSE.QP57SD.6345.18223", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ] } }