{ "Event": { "published": true, "date": "2024-03-30", "threat_level_id": 2, "info": "MalwareBazaar malware samples for 2024-03-30", "timestamp": 1711843381, "analysis": 1, "event_creator_email": "bazaar@abuse.ch", "distribution": 3, "uuid": "b1991a1b-2f73-4782-af57-fc17a8e45742", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "564627dc-ee6f-11ee-a120-42010a9c002e", "comment": "Malware payload (IRATA)", "timestamp": 1711787245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711787245, "uuid": "47e9729e-2c0e-4623-b9b3-46bb403dbdde", "comment": "Malware payload (IRATA)", "value": "ee8dfc02c1dc19829501c2a72468a442", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711787245, "uuid": "9a19ec84-4184-4a08-b1b0-ec1f3c236b43", "comment": "Malware payload (IRATA)", "value": "01d840496d457504661cf29b0a9bb231411bd83bed375087f80824e4575d139b", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711787245, "uuid": "3cdbc896-a852-47e6-878a-3f8c32ef7bd9", "comment": "Malware payload (IRATA)", "value": "f0e8d39e9dd4c8aec55777d11ff1c98abeafa269", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711787245, "uuid": "7de9f10b-bcd5-49e2-98cc-4980c6187388", "comment": "Malware payload (IRATA)", "value": "7b2814cc1f41c16cbe0b45825c4890be2e9f985397be1b53a2a0fd36139bd3addd85915846dd5287886c6d4bd9438508", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711787245, "uuid": "34f31474-146f-4916-8b6d-96bb0f3cd3da", "value": "T124951243F67AA91FC476C0723554063A121A4E18CA42FB0B39057BFA68FBDF84F85AD5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711787245, "uuid": "64892da6-9907-4b5c-812d-d8bccf5526c6", "value": "49152:AsdkkgeXwYn1lDLXbJpemlMte1je0yfRidlRkYbTAXMWFo:Lkk5XhlDLL3evte1jCkdlRkEG6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711787245, "uuid": "cea533a9-b66f-4597-a7fc-f8d125b8cbc7", "value": 2056471, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711787245, "uuid": "bd90c338-8878-4183-8d8a-046723d4df3a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711787245, "uuid": "13f09b19-dfff-4d1f-a1f4-893c73cb4f85", "value": "base.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88175c93-eebd-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711820829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711820829, "uuid": "86480956-5536-45b5-b2fd-35a91dd720cf", "comment": "Malware payload", "value": "436bd90a95f5ff01c7c05c83935a3c31", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711820829, "uuid": "03e6219d-f1a7-4445-88d3-141885372a11", "comment": "Malware payload", "value": "059f83868e7063b70bb6a36a7a9a618a4b3887c4dce94cc713d400e45b2337b5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711820829, "uuid": "85728c86-baac-4f62-a57d-8333f4866178", "comment": "Malware payload", "value": "1389f2152a7107952b12e547078eee5ed8ad9839", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711820829, "uuid": "9e23ea91-36bb-47e3-801b-bab6764ebae5", "comment": "Malware payload", "value": "c031adbb9047eefb5d2b3a58389662336096c4e728bc94af73883c97753ba9a3694ff8f600f0951614a2942e47a925e2", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711820829, "uuid": "ec8a095c-3a74-4891-a14e-61936c2c9b95", "value": "T1953412806BF45855C4615EB2FAA2EBAB3EB471834885D5E43037E0782E527C2EB75372", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711820829, "uuid": "79e777f8-4066-4489-b2d6-942364a86aa8", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711820829, "uuid": "f2624f44-a544-4490-b238-28a5a5bcc720", "value": "6144:cwhV2xyQSlM/KsQRz7/ssEZATM8YSU1sIAQ:cwD2t/bQ52wQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711820829, "uuid": "d326bc94-8487-4592-9b04-010cd747ae20", "value": 240264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711820829, "uuid": "65197b3c-725c-4435-a577-300ffbaad7eb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711820829, "uuid": "633f18f2-286c-4002-b219-994b30847bf4", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5817ddc8-ee69-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711784671, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784671, "uuid": "5ec29ae5-6b2f-4ed9-a797-32c0713b6edb", "comment": "Malware payload (Mirai)", "value": "fc39c5044c9040bcf82aaebdf26e8b61", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784671, "uuid": "378bd238-9cae-444f-a944-6b0f23b19597", "comment": "Malware payload (Mirai)", "value": "05c87347e2f7a5994d25e486764f3492dc7c51da39c1af1dba2f36cc9ff53aee", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784671, "uuid": "9adc7028-1ee4-4b83-9504-f76f91e0ba8d", "comment": "Malware payload (Mirai)", "value": "be1c8eed8f875da18cd1348374177577c0f85f80", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784671, "uuid": "fa10cbb7-ef34-4545-9eef-4366da693c70", "comment": "Malware payload (Mirai)", "value": "68cc2d3a523cfd07fe732a52d34ded6e2155c77b170c4fc7c1f031f433f7af1e22dfb660ee7e12a6f847414dafbc1764", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784671, "uuid": "2537e39b-4498-4797-b486-7c76ccf1e38a", "value": "T191C36B076A8379B8F2A300F4E69327ED2DB319181F4E92F27995613BEB711C94579F80", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784671, "uuid": "a37827f0-ecf2-49f4-bce9-9b46c9294b36", "value": "1536:pPnF3BXfQkofvSnR3V8lWabSF2HaesvSmlubK03jde5sGWCgdhZhV/LW:pPF3BXfBooV8lWYSFaadwKMeyGDg/Vq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711784671, "uuid": "b442be2a-1e6c-4574-a7c8-96d910ec5e71", "value": 124468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711784671, "uuid": "44609eb8-d0fa-4314-a5d1-185d403330d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784671, "uuid": "81d0df05-dd01-4f4c-8093-f27f21e5dd8b", "value": "fc39c5044c9040bcf82aaebdf26e8b61", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63b58df6-ee69-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711784690, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784690, "uuid": "5c89db6a-c1da-48d1-9b37-a57769eb1e27", "comment": "Malware payload (Mirai)", "value": "e585319c8460f6c03844847a0d6d3de7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784690, "uuid": "55c3fd69-b821-4004-b5b7-84e0ae502505", "comment": "Malware payload (Mirai)", "value": "06f25dc71d6fa8239b689d188644b1267f87447388500c84652c5e017032b079", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784690, "uuid": "e4b26483-1105-41f7-9547-82270f6e7e85", "comment": "Malware payload (Mirai)", "value": "103285efbb09bd2e71c9feeadf92100496fd67b4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784690, "uuid": "eb853035-c64c-4be7-a35e-9d37cf6dafa5", "comment": "Malware payload (Mirai)", "value": "3ec4abb880c61f15382b27d80a73d802fc70ff10bfc8c365ff59f24e5ec97a71ab304117f573ddae7567fbbe5d611fe2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784690, "uuid": "4c22213a-15a4-43d0-b046-42eac3f1aa98", "value": "T11EB3B54DFA649B29C7E332FFFA5912CE322A0B9CB7EA70119E310B5537C8E565935120", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784690, "uuid": "5b725c07-1733-4dcb-b9a9-064dd6937b42", "value": "3072:u7nzHTDSi25E7CAucLfcO65VDXzEl1qh2K:u7Xz1dQO65VDXYl62K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711784690, "uuid": "8ffd8f3f-340d-4634-8c40-cf13c6b94ed6", "value": 115872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711784690, "uuid": "752453ca-2698-4947-ae65-bbcbfb46c42d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784690, "uuid": "d613af2e-4d8b-4b5e-bd5e-e300f541ab22", "value": "e585319c8460f6c03844847a0d6d3de7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a9bfc7d-ee77-11ee-a120-42010a9c002e", "comment": "Malware payload (Smoke Loader)", "timestamp": 1711790634, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711790634, "uuid": "b3aad26d-5541-40c7-8975-042db66df948", "comment": "Malware payload (Smoke Loader)", "value": "8b2f1a0f480177fe032cbf896442a44e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711790634, "uuid": "a46eee77-3c64-4388-a049-68e84d839b1d", "comment": "Malware payload (Smoke Loader)", "value": "083c9a8679034f65137bce38b2f1db98225a8d1f18dc351ee4d5adfc464fa72b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711790634, "uuid": "b8a77069-fda0-4890-aa44-f8425c219512", "comment": "Malware payload (Smoke Loader)", "value": "96099aced1b2724dd7fc56f6978802b87aeebaab", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711790634, "uuid": "9de378ad-8e82-4c67-b0ae-57dad15463e3", "comment": "Malware payload (Smoke Loader)", "value": "f5b1fa39aea0dacd4dca80cfcc7e0f1725627a967f7bfc27101ff5693bcd8b7217e1f990cbb36c5b6828f6dce73ff179", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711790634, "uuid": "7ac0e9ae-a415-4dc9-9b4a-b48cb9b79ff7", "value": "T19844AD01F6E1F075F9F3467158708A954E3FFC77EAB18A8B3388664E58712C18626B63", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711790634, "uuid": "1390703b-1df1-4864-8ebd-294f0417277a", "value": "624073eb8eb5db9d6388daa3da73856e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711790634, "uuid": "cd5ed1ba-c483-4624-9836-de9b4b569428", "value": "3072:8LZMm58BE5RRc8+HBi1/G66Czp+lbWhXrcrB0F0VC2MZUrTTk3:8KEVc8dH6ColYrcrB0F0k2MZmTT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711790634, "uuid": "c215e5d7-8275-4b69-8428-9aaf12b3c3e8", "value": 273408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711790634, "uuid": "880e7b81-34bc-44f2-962c-ed42857666ce", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711790634, "uuid": "ed14eacc-585e-4cbb-b1eb-9c73c594c13c", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d24a611-ee4f-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711773539, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773539, "uuid": "80cbe8bf-7b71-40b2-a68a-8a6b9d2d602c", "comment": "Malware payload (Mirai)", "value": "d110ea06130dc5143dadb2c795cdb075", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773539, "uuid": "c3232da4-d6f8-4849-9382-13dc8ce4d03d", "comment": "Malware payload (Mirai)", "value": "094675d6abeeb09d2961b4b0e7c5bd19c76913ee61e6e87e0c50c25d0fbfeff1", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773539, "uuid": "cbc9dfe6-9a85-463a-be13-634c8177a5f7", "comment": "Malware payload (Mirai)", "value": "f9b57d3ce84f9f980601b9294096707dba6232d0", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773539, "uuid": "9f5f0f43-bcaa-4808-a20d-a027e2369d9b", "comment": "Malware payload (Mirai)", "value": "63a64bc5d7284f98f5198056b62ff1ea25e0d86c22a2dd2b3294598df3a79a0d4d18533c4e3ee8c6fee8786cb4ee1dc2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773539, "uuid": "6c9d8ff5-a7de-49b2-8d0a-ba9d1fe104d2", "value": "T105435C02B2180E57D0931AB0253F1FE097BFE9D025E4F6492A5F87568A36E37158AFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773539, "uuid": "94977aaa-dd9e-445d-85bf-d5d338500b49", "value": "768:Tgm0gwCPGM+eu04w3RJpAQ/TRnUC1epj79QY1Nyrj53p+psEZ1varPR7IOtr2L3x:XScTf1Cjf+H9pLEZUBtr2LXCo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711773539, "uuid": "41a9eaae-9611-4a94-99c6-d0291106b005", "value": 59176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711773539, "uuid": "ed4030f3-6066-4634-b881-f24290a7876d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773539, "uuid": "02268f8e-2495-4150-9786-a63594b1d7b1", "value": "d110ea06130dc5143dadb2c795cdb075", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e110d5a8-ee4a-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711771586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711771586, "uuid": "226be062-ed9a-4249-88b4-02357b7794ab", "comment": "Malware payload", "value": "20f6a06ec3e7ce6c0cc81d21b121f369", "object_relation": "md5", "Tag": [ { "name": "py", "colour": "#E74BB9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711771586, "uuid": "d9db4006-e24a-4e24-aa49-49ade96ef5d0", "comment": "Malware payload", "value": "0d8d2dc299aedbfc0cfefc35d8112f4bfbcc29835a68539225ef6cb107a3eb1a", "object_relation": "sha256", "Tag": [ { "name": "py", "colour": "#E74BB9", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711771586, "uuid": "e89ceed4-ec04-4fb5-bf70-3a8a0a3dd717", "comment": "Malware payload", "value": "729545cb7facffcaf6efbc148feea4c6abc7537b", "object_relation": "sha1", "Tag": [ { "name": "py", "colour": "#E74BB9", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711771586, "uuid": "9e1ce9e5-e654-44cb-9d61-06c4137124ee", "comment": "Malware payload", "value": "9fe0d429cf6ed3109fa3686d0bc311eb6cd54373d340990e58b7d32bd02fa4506674efa15786b35228c65d22d8d34de0", "object_relation": "sha3-384", "Tag": [ { "name": "py", "colour": "#E74BB9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711771586, "uuid": "91b770ce-b808-4ac8-a82f-f8117795b2f9", "value": "T1693165297871CB705B4211A9394A44DB63991F2F13A87C34394CD74ADB1AE3152F1EFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711771586, "uuid": "23b0e8c7-1b69-4d78-b4b2-2743034ef2d3", "value": "48:rfSzjyUjH0TkkrJcqcKQhoMjK6+TW+TDMzcMEUaf:razfokgJcqcK5oK6l6MEUg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711771586, "uuid": "adf978eb-ac4b-4e46-800f-73297c52d377", "value": 1825, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711771586, "uuid": "51ebf825-93b2-4d0a-93a4-1344e7a0f460", "value": "text/x-script.python", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711771586, "uuid": "d58dfda1-1d11-46b5-978c-8b82414c7a67", "value": "getcert.py", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f52c8854-ee38-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711763889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711763889, "uuid": "1fa8f33d-3338-4cbc-ace3-9d375f966548", "comment": "Malware payload", "value": "6af54086a619b131b32fe638a379e2fd", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "stalkerware", "colour": "#D7AE0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711763889, "uuid": "3f515604-3307-47c3-9763-349e844ff394", "comment": "Malware payload", "value": "115e93c3ebe4cb6427f062c9a068211b282019062c8d761869d4458add6b684a", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "stalkerware", "colour": "#D7AE0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711763889, "uuid": "78597cf3-b14a-4a22-a3f5-4e718d369f85", "comment": "Malware payload", "value": "82d8c39b90687460c4317bccecfef9a6ebcec787", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "stalkerware", "colour": "#D7AE0D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711763889, "uuid": "b2a7a9ff-76ba-48b7-860a-4c4b03d76b2f", "comment": "Malware payload", "value": "3adf1c5f3c0cff307f4287f99909fba522bad6695a5e86320db7b37e2d64424fb03253374fe7e4bfdf7bb2d55bc2827e", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "stalkerware", "colour": "#D7AE0D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711763889, "uuid": "a591c5ff-5f40-41f3-831b-c3aa6a4e887e", "value": "T179E50103FA228577D4FAD3352A65662821365C141383925E7C2C37BF27BF9DA0F96AC4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711763889, "uuid": "fc2fd08c-39eb-4b1b-a5e8-19591d487405", "value": "49152:Rl8hynATkPe88qGqNDB9jEZswJt+LR3N3lgaV7U3MfHn3WWG9:Rl8gnekPe89GqNDB/we135SaVBP3W9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711763889, "uuid": "7afb6e60-6c9b-4929-8394-70aae812efe5", "value": 3226551, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711763889, "uuid": "a270b134-2bb3-4588-a20c-093c19671668", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711763889, "uuid": "ecd057cb-e572-4494-a959-40b8c18e1ac8", "value": "WiFiService.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab9ed0e2-ee88-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711798125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798125, "uuid": "547182fb-0643-4988-aa91-f5ccf341605c", "comment": "Malware payload", "value": "f6249c996d7234facc6541b700e47374", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798125, "uuid": "aef76978-5f38-44ea-89f0-918bf8d22a62", "comment": "Malware payload", "value": "183d442591ddfc6ebdd87aa8049bd56001794813ef115f8d9820b0827f97e425", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798125, "uuid": "259a485d-7b3e-4ffd-9340-bb845d20cc70", "comment": "Malware payload", "value": "241ca0842817da7a08ce22076819e33ff762a290", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798125, "uuid": "a23cfaf1-2eb3-4be3-bcc9-9e789eda6114", "comment": "Malware payload", "value": "3375d2312496472d11e07b2e771598f16f1c3b796f54cdbc6203b5754726d53419a8a8bdc8763f0d56e6510880af7bc3", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798125, "uuid": "67c736a3-71b6-4b02-9021-bbcde87f3520", "value": "T1232623017923653BE22F52F7652F6FA87320B92E0B170AFD675C266A3D5394425B32CC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798125, "uuid": "aac4efc6-c7f3-4bf1-9775-06dfcd399964", "value": "617b7c20921ad6a6424a490abb9f6141", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798125, "uuid": "38c76f11-1686-45c4-a2ad-44215167df62", "value": "98304:2eEHki/UliwBA5urNpb1sBsaSUXUNYhfEmUizrYPCO5FrMgL5BW5tCwCM6FQr60d:2eNXiwBfP61XUNYh8mUSrYPvtzz2QwCt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711798125, "uuid": "e93e9dea-c839-4af6-8f69-1af61043ef97", "value": 4547072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711798125, "uuid": "6b56065c-0732-41ac-b1a4-22f7f2ccbaa5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798125, "uuid": "0b5cec56-0d79-4560-b58b-138d06e1123a", "value": "SecuriteInfo.com.Worm.WORM.Lodbak.Gen.11411.13086", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c7f7cc2-ee97-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1711804301, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711804301, "uuid": "8c28bf3f-3fb5-475f-a82a-07079ab055c2", "comment": "Malware payload (RiseProStealer)", "value": "a8e28ee786bf683e27f960e18d346882", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711804301, "uuid": "bbef3608-6d8f-4a5a-8679-c81450ca7712", "comment": "Malware payload (RiseProStealer)", "value": "1c9a3c6b1465f784955eb3c50066fd373d850ac864a08e36f70a54c4f06c5479", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711804301, "uuid": "7793aa87-4096-4e56-a719-1ff063ce15c0", "comment": "Malware payload (RiseProStealer)", "value": "b6dcfda6ba8d4866d9459be00cbd794d143b3ca6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711804301, "uuid": "35dd41c1-6ced-462d-8463-87976b209e4b", "comment": "Malware payload (RiseProStealer)", "value": "751799474dfd127cb665e87b4e14f8178f5b92fed69c638f5d52ea0b084d853232ed42ef382e7a79912f32f8d306908f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711804301, "uuid": "1c3356fc-4cd8-4254-bbc7-38e77ba49b96", "value": "T1D3E54CA2640AB1DBD48E23B4AC27CD826D6D47F9471444C7DCADA4BB7E63CC12976C2C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711804301, "uuid": "7acdca81-d939-4d90-add6-304b1dafbef7", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711804301, "uuid": "46610e73-4fd6-47d1-83b3-b7af0f09af36", "value": "49152:EVOvMQuLany6K9hG6ofc22U+bqdXBE+Kgfw7gu1F9wT:EVO0QIayVBU+bMXBEKIp1nwT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711804301, "uuid": "99b5fb2a-cb0f-4785-8004-a4fe36c38cab", "value": 3151360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711804301, "uuid": "bdc840be-a724-49bc-b2b3-7e003e2580b7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711804301, "uuid": "608ea6a2-5d72-4a6f-ae30-03156892de6b", "value": "a8e28ee786bf683e27f960e18d346882", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac3e2044-ee88-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711798126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798126, "uuid": "d96376e1-7e03-4ea5-aa55-2c432ffdeaac", "comment": "Malware payload", "value": "e4b3085ab62336fd686514ae480fbeab", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798126, "uuid": "78e9eedf-a1db-449f-ba5b-f1d6a650f33b", "comment": "Malware payload", "value": "237b1d86ee76775f1865ad435fe526adc5b987461571f9556c1c96da1819b0a1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798126, "uuid": "27a56e17-34ea-48f8-9d5c-1c529b072a53", "comment": "Malware payload", "value": "770d13df1adc230750f3ed558879ad9e97eb9ad3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798126, "uuid": "eba40ccc-e964-4871-99f3-0fe35146190a", "comment": "Malware payload", "value": "3da0b503924fd0cb551f34e7a2db34c9b5e3ec0d8f80374b3eea72c9caf031f0bd84fd1c2cdca8747b692b1df1ac5336", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798126, "uuid": "603bb860-4a95-4629-93cb-7e810897cf86", "value": "T156C44BD1E9F644F1EB08A43014BA6F75FE658A490B25CFC3A724ED682D33281A93717D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798126, "uuid": "598fcb91-50b4-4fd3-a2f0-d23b055bea62", "value": "6144:/4Z4wWI9NYXfIHPJliZGNcSLraTphUrXWtWwr47wKuE8o6IttH:nwh6XgESLr2phCGWw829It", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711798126, "uuid": "777e21bd-aea9-4942-bd52-90af14fca117", "value": 585728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711798126, "uuid": "c699e408-705e-40d8-ad25-d0c8b94e890c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798126, "uuid": "3f933e0c-0566-42b1-be16-590341868d13", "value": "SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.2102.30146", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88d156b5-ee5b-11ee-a120-42010a9c002e", "comment": "Malware payload (LummaStealer)", "timestamp": 1711778739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711778739, "uuid": "d6407363-817a-455d-bc38-8a118ae48b14", "comment": "Malware payload (LummaStealer)", "value": "90f41880d631e243cec086557cb74d63", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711778739, "uuid": "d79e6bc6-6b57-41b4-839a-4f8530e8e25e", "comment": "Malware payload (LummaStealer)", "value": "23b62a27e3f5c424b16f31e5009af4f24c8bd13b1f035f87879e2a29236be7a0", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711778739, "uuid": "c40b8717-c925-4919-9d78-51ed5eb6f976", "comment": "Malware payload (LummaStealer)", "value": "cb385e4172cc227ba72baf29ca1c4411fa99a26d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711778739, "uuid": "92f1113f-dccc-4981-9696-9aa0ff00d7de", "comment": "Malware payload (LummaStealer)", "value": "33c9fe6d636dcc7fba5e163173e0114376c1200a735274db012d299116570732b3d7f6ddab168238beb3857d0416947e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711778739, "uuid": "fcca4d7f-846e-4395-acc3-edb1b24445cd", "value": "T1EF84C02477EB101BF22FAB725AF12698867BB3107F63AB6E104153354DB7751BE92830", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711778739, "uuid": "3a18a59a-e0ca-42b2-86aa-4a8faab3fa51", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711778739, "uuid": "8439caff-6860-4c30-a655-8ee6c9f2df07", "value": "6144:bJpEcFOcL0W0UXTAwutvdygbqD7jHSm6xBkNLt9kAWHtXMErCU8Oe:bJpdFOg0UUXNdxqLf6Xy8H/rCU8Oe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711778739, "uuid": "1d804792-8b20-4eac-8820-276a1926f565", "value": 388608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711778739, "uuid": "96dda673-5cf4-4e1f-9dc1-bfc02d3e65e7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711778739, "uuid": "20cad4fa-e84d-42f4-961a-3170e623fd1d", "value": "90f41880d631e243cec086557cb74d63", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "262de435-ee96-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711803914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711803914, "uuid": "fd1f98a9-b032-42fa-af60-ff3c2445a0c7", "comment": "Malware payload", "value": "f4f9e32e0e9f86618ecbdcbebd710abd", "object_relation": "md5", "Tag": [ { "name": "40.66.40.211", "colour": "#DB737E", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "sky-beta.com", "colour": "#2AF68F", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711803914, "uuid": "ce443680-ea4a-410a-b584-c161f00e4deb", "comment": "Malware payload", "value": "26950a50e2c9819b32d8e8ec31feda084ac9c291c9079f3cc01dd26381d358c1", "object_relation": "sha256", "Tag": [ { "name": "40.66.40.211", "colour": "#DB737E", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "sky-beta.com", "colour": "#2AF68F", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711803914, "uuid": "98090498-449f-4bd4-811e-1c2dd8999c6e", "comment": "Malware payload", "value": "47b30f53264d6de8768d4a99361c867cfcdb29a1", "object_relation": "sha1", "Tag": [ { "name": "40.66.40.211", "colour": "#DB737E", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "sky-beta.com", "colour": "#2AF68F", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711803914, "uuid": "3806ce29-3f17-4099-8c6a-6f618079e797", "comment": "Malware payload", "value": "67a50cc3e2bb390fb977ee4e591f912487f87c632a673fc310f138199b2c0f03df5f5e8b9be2410cbbf8b582c35cf6b6", "object_relation": "sha3-384", "Tag": [ { "name": "40.66.40.211", "colour": "#DB737E", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "sky-beta.com", "colour": "#2AF68F", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711803914, "uuid": "7802ce61-e9de-4e34-aa2c-043f23994878", "value": "T16508330CE35BA915E926FDF6BAB97530D96562C733E0E0B33F604980646CE03B6691D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711803914, "uuid": "e47ea034-9ebb-44eb-b7d5-c4d72fa49042", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711803914, "uuid": "4adeb467-d180-4a36-98da-f79dcdd828cc", "value": "1572864:6IJ39K2V9MXY5B8ceyIS7nqYdd6hIEhSmnJZxRByudPXFPc:6z09MA/vP7nMhJnzxRB5dPXdc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711803914, "uuid": "b9a76293-360d-4222-99c0-bb54ca7783a9", "value": 84177498, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711803914, "uuid": "f20a5f29-93e9-46d0-89d5-19a6e073501c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711803914, "uuid": "3d2c1921-032f-4d50-9b5a-8ce20d3e6d3b", "value": "Sky-Beta.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a504ca35-eea0-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711808422, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711808422, "uuid": "965e3b30-283a-46be-a5fb-ff5d0d2a841a", "comment": "Malware payload", "value": "9a89a5d19473367024999f5032b54a8e", "object_relation": "md5", "Tag": [ { "name": "xlsx", "colour": "#683C47", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711808422, "uuid": "73461a9f-4551-4547-9384-7bbae2d8a7c0", "comment": "Malware payload", "value": "29953a3cddc2f2c4b5235eddb04c4604138a6bfea0bcc58066f2951be634f7bc", "object_relation": "sha256", "Tag": [ { "name": "xlsx", "colour": "#683C47", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711808422, "uuid": "fb937d1e-d915-4560-bfeb-cc70fc509c00", "comment": "Malware payload", "value": "3834825ef2050b3e6d9bc838aa3f9d776229c200", "object_relation": "sha1", "Tag": [ { "name": "xlsx", "colour": "#683C47", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711808422, "uuid": "f14712a1-d1ec-4a05-a566-7a0fe8c2f402", "comment": "Malware payload", "value": "692d69fddb17209126408974269fc3ac6259d0833d0d18d774cf878063b6dfea569456bee6b5c8f835863cbe4a0f3843", "object_relation": "sha3-384", "Tag": [ { "name": "xlsx", "colour": "#683C47", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711808422, "uuid": "cb7fe42e-06c8-4bb9-ab9e-fc2b0e3bc101", "value": "T147C52388FAC38E63C5559A38D0E7572A3231AC404717931BB7A83B1B3A71B451F9379E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711808422, "uuid": "16e72677-9f45-4c51-82f7-39aa8c7e6441", "value": "49152:VdlIAKXg6La/55KssSeos990DrNQNOaFa89n26EPO057ATWFkFNmH9:9WaezoskfNXahn2tOigNmH9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711808422, "uuid": "fac2d685-2301-46ab-b485-16d6023044b1", "value": 2681856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711808422, "uuid": "c21aa5b5-5edc-4934-aa59-848246602b1f", "value": "application/vnd.ms-excel", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711808422, "uuid": "a3366687-064b-4272-a1f1-c23a71aa45ba", "value": "SecuriteInfo.com.Heur.1544.15693", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8cbce86-ee88-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711798120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798120, "uuid": "a959ee90-471d-4a87-afd8-8c02b7e6c350", "comment": "Malware payload", "value": "cb1b3e522010ed69a72387220c521732", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798120, "uuid": "6b7baf85-5e30-4337-9835-1b17fa87c2cb", "comment": "Malware payload", "value": "2edb28f89b7a69c8e84703d68a4ee14a3b4378aae9fa7bb8c37593574a0dca38", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798120, "uuid": "009ade29-6aaf-48ea-a661-eccc0550509a", "comment": "Malware payload", "value": "bf02a4424088a7a7e6e3e4fa74fddd0d93e70816", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798120, "uuid": "ee709162-ec02-4344-af4a-7e8274223674", "comment": "Malware payload", "value": "2648d7a73f8929221d0f09c36b4da0675a87c14b3ec6000fb6e5d852fcd31fade3ccc337f46cdafca43e53f0deca301c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798120, "uuid": "ce7dbf1a-36d7-4b20-9c09-c6b5fced50d5", "value": "T173158D01FAD340F6D635153114AB3B36EA3EEA861B24CFE39364DF6C1D32641993726A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798120, "uuid": "f3c49e2d-8e86-44c2-b031-86890a5ff4c5", "value": "12288:doS4UsSCUUsrW6MrdPlnbuVUosrcw+XXG4:dWUv7UcW6MpVbuVUHrMG4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711798120, "uuid": "cc654d1c-d2ef-4686-b99b-2517a00f28ab", "value": 889856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711798120, "uuid": "ce0124b0-ca34-4018-9f6d-5e20438e3609", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798120, "uuid": "700f75b8-e91a-48d3-813a-1ada4b50d27f", "value": "SecuriteInfo.com.Win32.Application.PSE.1OV7PVV.23432.18937", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44bb930f-eeea-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711840043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711840043, "uuid": "6db498ed-ee8e-492a-9539-8ed496a578d6", "comment": "Malware payload", "value": "4f0cf1d2a2d44b75079b3ea5ed28fe54", "object_relation": "md5", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711840043, "uuid": "9a07d735-2d9e-401c-b699-71fd440e93c3", "comment": "Malware payload", "value": "319feb5a9cddd81955d915b5632b4a5f8f9080281fb46e2f6d69d53f693c23ae", "object_relation": "sha256", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711840043, "uuid": "f96ac0ed-a00c-42ea-accb-5918626730e5", "comment": "Malware payload", "value": "72e8163734d586b6360b24167a3aff2a3c961efb", "object_relation": "sha1", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711840043, "uuid": "1d4957d1-b057-4fe8-9478-5b42863e350a", "comment": "Malware payload", "value": "4b543c7f42227fdb16eab30447648bc58fa93e7611d4a7d1162ee648fa69f2cd13d1eb56e4695c2f31a7b85b3974ac78", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711840043, "uuid": "83b536a3-13dc-40bf-bef0-d1ed80d7223f", "value": "T172342A4AA5A2F8EDD6AACC30C267CB276AF1708502116A7736C85B781E5BF305F1D713", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711840043, "uuid": "dc68d995-5c2f-4c2a-8f5c-56bdf95021b4", "value": "6144:Mpnu600tc17tTkfNQXA+zGqmmMMUu3p6YOSTl:Mpu4tc17t4qFzimi2st", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711840043, "uuid": "86670d71-00b4-4709-abe9-63bff990c75a", "value": 247800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711840043, "uuid": "2d11a308-1ce2-4589-92bd-3054ee5d8a8a", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711840043, "uuid": "54050e6f-0fd3-4a9a-a3cd-cd2e5f490374", "value": "x86_64-linux-gnu-liblzma.so.5.6.0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "760328ba-ee4f-11ee-a120-42010a9c002e", "comment": "Malware payload (RedLineStealer)", "timestamp": 1711773554, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773554, "uuid": "b0792737-d43a-421b-82e8-28874643098d", "comment": "Malware payload (RedLineStealer)", "value": "25a2cc92dba27d59febe862cff866746", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773554, "uuid": "868c1a79-9c6b-4d0d-96bb-0962fba83d45", "comment": "Malware payload (RedLineStealer)", "value": "31df7bb88a2edac0749d84e8c245faaf85f1695f2021253bdb142d8cbeb582f5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773554, "uuid": "e4bc4674-3edc-4570-b065-d60aebadc506", "comment": "Malware payload (RedLineStealer)", "value": "978176f597765ae8b7162b074f63810161bceb64", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773554, "uuid": "4168e771-05f5-4c2e-8085-82c189c23608", "comment": "Malware payload (RedLineStealer)", "value": "84a98f4023f7226dba3e43e6f8998b577ec58c595a41522a0da901417d1a7b10fd00bd1a485293698dad8f4b861ff4bd", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773554, "uuid": "73ee942b-3c42-4812-8cd5-7f43f2b7859d", "value": "T1AC34CF2075C1C1B3D4BB113444E5CA7A9B7A30324BBA96D7B79C1BBA6E213E163352CD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773554, "uuid": "e2715045-5e45-473d-abe0-2ee18001d6ba", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773554, "uuid": "fb48e22d-c5b9-4351-a2ec-108bcfd4a40a", "value": "6144:0DKW1Lgbdl0TBBvjc//aofijyrudAmRIpvwIN:ih1Lk70TnvjcZij7AmewIN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711773554, "uuid": "ec08b09b-6071-4ded-87e5-e096a5c0ee7a", "value": 250368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711773554, "uuid": "11cedfe7-9c99-4910-83ac-fbaa58bc0b00", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773554, "uuid": "50c1500a-9a4f-4bb6-8b31-a001aee3b4f8", "value": "25a2cc92dba27d59febe862cff866746", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a04adf5f-eeb3-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711816575, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711816575, "uuid": "bbb454b9-9c13-4de0-96af-31d39c47fddd", "comment": "Malware payload", "value": "d6ef3dde905283b95a1847093961181b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711816575, "uuid": "201d6bda-0083-4021-bb9a-d6dfdc6361b2", "comment": "Malware payload", "value": "339cee9259c00b0387f7dade15ea2eba0d3d80e857765a3c42837eb2083ab704", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711816575, "uuid": "678858d0-e389-4878-b18d-daa3eb9907ad", "comment": "Malware payload", "value": "a05b59c4d70b8083b01d9ac437a0fb9823a879f8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711816575, "uuid": "70803aa8-a58f-409c-9cff-9d8ee0f92116", "comment": "Malware payload", "value": "1001b18f447cd1962f7661249765bb53c023510ead47c22a6b1c00bee8c9a9d6734ea7b91421b460a7e4db639332e0ea", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711816575, "uuid": "7e00c369-c9ad-4c5b-9d84-2a3bc96e2bb7", "value": "T152E47C56E3F414B9D177C139C5534223E7B2B4651320A7DB03B08A7A6F23BE66A3B760", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711816575, "uuid": "a9d63813-e9f0-48a1-8a08-9d297f1fcbc7", "value": "c86121860bee8f7935c9ca830d327682", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711816575, "uuid": "f0f6075f-db08-4048-b819-7dca00fbee8c", "value": "12288:vvIArRDjmkqR6tv3cKOuWmDxyEI+mVLIOlxBns48+MVjt1wIbo:vvI9ptuWKxyEI+mNIOl7nsd+MVxho", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711816575, "uuid": "19be9729-9d87-4ace-b230-7024f7591e0f", "value": 682048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711816575, "uuid": "71e4a0b3-b4a6-4ea2-be86-f0c855aeb0b2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711816575, "uuid": "ce9f4b79-0332-491b-a3f2-d60aa83cf9ca", "value": "libcurl.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "709fa275-ee69-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711784712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784712, "uuid": "7c67b144-cb10-4de7-bab9-74fd36e99065", "comment": "Malware payload (Mirai)", "value": "ce7883b59637f8d5f9abba8da7d1b45e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784712, "uuid": "2075b4fb-bf4d-45ec-9adf-6b98b4cd5db5", "comment": "Malware payload (Mirai)", "value": "349fc9a9020fc836a86d86d68f367719cdcb05b2f20b4774630d3588698fcf0e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784712, "uuid": "b361ad0b-590d-4613-8429-4b7cc5544733", "comment": "Malware payload (Mirai)", "value": "a6947b99a8ea43f507663294824affabb3c93564", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784712, "uuid": "f4aa6b66-81ab-427d-a4bd-99e6048d2c27", "comment": "Malware payload (Mirai)", "value": "3c983cf46c39c4ed3f21ac6ee9246994a10b02364977af4cf862b6f8d338e9a4c8f7993e10b3b4bb7bd7d783720328d2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784712, "uuid": "947082e2-ee1b-4461-a584-216ba29723aa", "value": "T17A63810AAF600EFBE86BCD3746E91B45248C641A21A97F757934D828FB0A15F06F3C75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784712, "uuid": "499a4d81-9304-44e4-9fdd-d6da45dc8918", "value": "768:ZcbbcthiG+n0yWE4Ny64ipotP9EGK1ux8j7aCUL2Q4o/se1UeEYeg2kgOZVP2XiX:ZQsy64ipot1n6UKLYUZYH2kVZVPizm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711784712, "uuid": "8bff0f0c-cf16-4424-b336-92a1d85fdf3d", "value": 72588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711784712, "uuid": "3713fea4-d9e1-46ff-b94a-6df71eea0975", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784712, "uuid": "cc65ebf2-71aa-4f57-994c-adbe75193709", "value": "ce7883b59637f8d5f9abba8da7d1b45e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ef5569f-eecc-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711827229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711827229, "uuid": "89e880e4-a119-4989-86ae-025ef4d5de31", "comment": "Malware payload", "value": "265c51576376949fa89c0e2387364efb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711827229, "uuid": "2b4b1e12-ad56-4256-8b65-cdc7d3c17d50", "comment": "Malware payload", "value": "3713708ecc5463a30dce7c42fe41f72df646b28350a7ca6128e52ab0258fae18", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711827229, "uuid": "58624d45-e05a-4554-b72a-4cc4f70a0ccd", "comment": "Malware payload", "value": "8df1a35aa106c05f3be79e868a300e9d40e89787", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711827229, "uuid": "9f5b91e9-dc42-457b-8378-325712ed36dd", "comment": "Malware payload", "value": "34b024ddc65683031b581f29963c101cafcc5a254db9ca4ea6b508fdbe0025ef97b7296751b7b4b8dc2cc4dbfd546ba6", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711827229, "uuid": "fcd859c4-fa92-4fa0-afb4-bcd71f115a7e", "value": "T1E4A7336084B31669D473FD7324AB3173677060D94342CEEA6E8AC3D7DACC36257B1A86", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711827229, "uuid": "4d6389c6-cbdd-447f-a423-94d0c3bf85eb", "value": "3abb48ffd439394547bc1b88aa652127", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711827229, "uuid": "2f469212-4b01-4cb2-9995-136bc8d5913f", "value": "786432:bDAtknlnRUvy4HODWBE85asu+qBBCFA0Ml5S5qP1J62FJrKIVfHU6YN2JMZ/067W:bDrRUvy4HODWG8UsubBBCFKl50O1w2XT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711827229, "uuid": "3d85952b-ad7b-4d25-a58d-0ea6d42c5b85", "value": 45343903, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711827229, "uuid": "2b494982-a1f8-4ddd-bbff-8674fded18fc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711827229, "uuid": "eba73a4b-80e4-4120-ae1f-31c144bb48af", "value": "SecuriteInfo.com.Adware.Presenoker.18699.21052", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c9cc41e-ee69-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711784705, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784705, "uuid": "edb7c74d-fc66-467b-992b-340dd533dd2f", "comment": "Malware payload (Mirai)", "value": "111d4e72ca18bbafab90016f8f58ba71", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784705, "uuid": "a684d3bc-1004-494e-adf9-379e37ca6da2", "comment": "Malware payload (Mirai)", "value": "3998b36e109e62f5cb2ab2db468d1e3460a0e59cef8713ba848ce0a2a32e882c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784705, "uuid": "582b8a80-e9db-4a42-95e6-f25bc76e6e64", "comment": "Malware payload (Mirai)", "value": "b6b7dcde9bef80bed7315ba63f5d4d12f5f1efc4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784705, "uuid": "916f2c10-13b2-49e2-9681-230915b425b8", "comment": "Malware payload (Mirai)", "value": "fb1d97e8537a7306c10457e6859b0db5f9351542dceda2ecbe16d2f3d9b3debd7deeb9ce40e90b65deec8ad2591519d9", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784705, "uuid": "c95aa37b-a2cd-4f50-b670-d4a80e226160", "value": "T135236CC0D543EAF8ED5A25B014B7AB514FB6D43626B4FF97E7A82531AC13B0096073AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784705, "uuid": "1f80f942-cd4c-4d5b-8114-193a1fd0d7bc", "value": "768:JjSOF8r818WCsqXJTvFMlAUo/eIVGhHgpQTmoh55gQpkdO23sy:Jue8rWC/XJTvFiAUCVGRgpQTf55DSdO1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711784705, "uuid": "7977eca5-8c90-419c-a47c-30e0b89ee3df", "value": 45904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711784705, "uuid": "bb22c96f-fffc-495b-a608-9bf3d355c6dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784705, "uuid": "9bf8afb7-4058-4d4e-901e-43feb433715f", "value": "111d4e72ca18bbafab90016f8f58ba71", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a5efc7f-eec2-11ee-a120-42010a9c002e", "comment": "Malware payload (CobaltStrike)", "timestamp": 1711822792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711822792, "uuid": "efc11bb4-7bf1-4c44-bb44-4e9e22ced1eb", "comment": "Malware payload (CobaltStrike)", "value": "ce8e1592a4685f349136cb13c12e543f", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#8E4D73", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711822792, "uuid": "b991f4c1-3de9-4c93-94e3-c6d62e146d86", "comment": "Malware payload (CobaltStrike)", "value": "40516869f63341f2c9a760ac0faa823a11168fdc0067beef413cd6ed9e858f07", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#8E4D73", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711822792, "uuid": "fa07cb25-8deb-4ca5-a7a8-1de25a064e48", "comment": "Malware payload (CobaltStrike)", "value": "fbdccab7f53e063d53dc296c4f1eb7d236a97d46", "object_relation": "sha1", "Tag": [ { "name": "CobaltStrike", "colour": "#8E4D73", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711822792, "uuid": "f3fcaaa9-4ec4-4864-9be0-ddeea2261d3d", "comment": "Malware payload (CobaltStrike)", "value": "c57556025d14bcee9cdd366825bbc1edd6436e52540776b1a57c85d2f787e0e48ba65fa11efc0d369ca7b2aa90cf244f", "object_relation": "sha3-384", "Tag": [ { "name": "CobaltStrike", "colour": "#8E4D73", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711822792, "uuid": "9a17753b-0013-4bba-860e-52f65af13391", "value": "T125656B4ABCE105BAD46AA3368CB25681BB75B8090F3733C72E50B2783F767D05A75718", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711822792, "uuid": "2ec71479-0df3-418b-9fe4-d528466b3997", "value": "c2d457ad8ac36fc9f18d45bffcd450c2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711822792, "uuid": "4646736c-3356-4bd6-9289-295e3bb8cc49", "value": "24576:yse92KNwXkWxZiwdMeHRmXKNjhdAT2JSzrSQb92Jco0a:E2K8eexmyj/nCmwo0a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711822792, "uuid": "5c94c16d-5041-4c54-9f13-cf33373ed9fb", "value": 1500160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711822792, "uuid": "9689a73d-aeb1-4143-9f36-683a3aefbafa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711822792, "uuid": "f3735efc-6ca7-4ab6-8785-850ebaee106f", "value": "SecuriteInfo.com.Win64.Malware-gen.28363.11760", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ddf0a7a-ee76-11ee-a120-42010a9c002e", "comment": "Malware payload (Smoke Loader)", "timestamp": 1711790210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711790210, "uuid": "17a4424a-000f-4363-a02f-e57893617908", "comment": "Malware payload (Smoke Loader)", "value": "340a95a1d7cbc1298171aebaaa6638a9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711790210, "uuid": "08e23c81-41d4-4235-a70d-0c307db6f7b9", "comment": "Malware payload (Smoke Loader)", "value": "430be53678e8616b604b7210d16dd57f1561aa9cebb32ac451247387a53aa919", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711790210, "uuid": "2f8fabdc-681d-49a2-be9d-576d06d34c31", "comment": "Malware payload (Smoke Loader)", "value": "b1499d545dc7838274f46dba1233fe9fb3f84e2c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711790210, "uuid": "d64fe208-d002-46e7-a0bc-0fcd9c31c3b3", "comment": "Malware payload (Smoke Loader)", "value": "711bd12606f724117b8e903dfdfd79e0d2f92604ce1f9f58cd89713aef222beb0e88a009cd8edc4866e208193400e224", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711790210, "uuid": "b93f71a4-b685-4628-9037-e3437b45f4ee", "value": "T17E44BF41B6E5D4B5F6F346725C709A400A3FFC779AB6898B3394274E2C712C09A26B73", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711790210, "uuid": "4e686c38-975d-4c42-9091-134852bab1a1", "value": "55b3f253581fc6c12e413465066562f5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711790210, "uuid": "d11ac790-eab0-4ab2-9a4e-f81be6e6bad3", "value": "3072:ULb4PKxxB5OhFv+YBiLDLljSxMqbWTQk1B3A5hMpCIKxKNK7EdevdTk3:Uqw5evmfluxMp71B3emds8evdT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711790210, "uuid": "39c293ce-8c49-42b2-b9e3-9a80e963afd3", "value": 267264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711790210, "uuid": "13742560-dafd-4523-8ae6-1d7e2f5ea8f5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711790210, "uuid": "a713d7af-ee79-4f59-aafc-9c44a3b9f50d", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "211a9ac9-eef0-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711842561, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711842561, "uuid": "17a656d7-c869-4a2c-a4e9-7f9ab48a9b84", "comment": "Malware payload", "value": "e2cff4d71d1e476c656909125ab1acc0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711842561, "uuid": "52751d85-4050-4a24-a9da-56bfe5708e69", "comment": "Malware payload", "value": "4bc2982c897f3797b032ea997ee63bcfebe716520228df1e4c01c5aac6d9a5fe", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711842561, "uuid": "c6d7e3de-a4e7-4b94-a174-b67e10e70fb8", "comment": "Malware payload", "value": "e1c5a086dc1a7a06314f9b200b2e113732d6ae2a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711842561, "uuid": "48d3d836-1a52-42a6-a2c5-6455bc48da53", "comment": "Malware payload", "value": "6cc091793db9ef9df937ed1cab1d1c9e0fc4897585cb76ac2bfc519736f4728070dea9853b3eff0ecabc0404f95dc6f2", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711842561, "uuid": "ea548dbf-0f10-4df2-a066-2fd62de2b6a6", "value": "T1BE73CF02D9C85425D1A2127E6B753AB66874F5FA3716C19B398CCDF5EBC0CB0A2263C7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711842561, "uuid": "8c9e1a43-b81e-446e-ad5c-3f58ef1166b1", "value": "481f47bbb2c9c21e108d65f52b04c448", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711842561, "uuid": "eb908bb6-3798-4997-86e7-a02f2d283760", "value": "1536:Ig9TrzVH+gUmVD/pH6Fxx9Mb+KR0Nc8QsJq39:ZNw4oFxx9e0Nc8QsC9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711842561, "uuid": "bc9102b9-6993-4499-8039-d44d50dc970d", "value": 73802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711842561, "uuid": "a1c10e8e-3f01-4033-86cd-d54067a0e67b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711842561, "uuid": "1a215af8-e33f-43c0-9477-3ba8ecc9d71f", "value": "ab.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "667d2737-ee69-11ee-a120-42010a9c002e", "comment": "Malware payload (Amadey)", "timestamp": 1711784695, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784695, "uuid": "c55890a4-2afc-4242-b5ec-c6205beffcdf", "comment": "Malware payload (Amadey)", "value": "abaf1e6e0cadc624156319232e349005", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784695, "uuid": "f23e4f1b-0824-4274-9863-68322ca19d88", "comment": "Malware payload (Amadey)", "value": "4bf50d078ab6f3cff117e42e77edf162d0ee9778993b585824157993c45c901d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784695, "uuid": "d7126975-0f34-4a96-b149-9b85ca9f7646", "comment": "Malware payload (Amadey)", "value": "cd856459027e73b316e0998d0ed9823dcc3b272a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784695, "uuid": "c30e94ef-8456-4c15-a746-eeb0a7b2d850", "comment": "Malware payload (Amadey)", "value": "16b3581e02c1eee53f8ece051b6e4177053da7c9c7241b8168006370bac306df5f73a8e6568e9b3dc125a126e603c426", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784695, "uuid": "0e923624-c1e5-448b-acc5-1b9509d5f773", "value": "T1C3C5CFDFED94AB1CF98B3EFA8322231C5EB46C1B71E3B5587A0515E405026937386CE6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784695, "uuid": "570901a0-faf8-4069-8249-eedb6bc7527a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784695, "uuid": "c6b0b9b8-2881-4e19-a694-d1a96c67a0a7", "value": "49152:KefMkcNeKO0lRR85uZ+C8X0muID5V8LJsnjP3QJop:xRQeKvlTgEm32JsjPgJop", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711784695, "uuid": "bbcf3907-5390-4a7d-8355-2505daa9dbc6", "value": 2722816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711784695, "uuid": "b73c3036-bcd2-4915-8d3b-dedba7aba31e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784695, "uuid": "9d8209df-55f1-4ab3-9d94-20a7fe485291", "value": "abaf1e6e0cadc624156319232e349005", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cca6c082-eec5-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711824380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711824380, "uuid": "e20ac453-dd08-448f-a08b-1bd41f2c64bb", "comment": "Malware payload", "value": "0785e089e51a1a5198d741fd93c56c04", "object_relation": "md5", "Tag": [ { "name": "gamerforyou.com", "colour": "#38C628", "exportable": true, "hide_tag": false }, { "name": "pw-beta_EKhZFa", "colour": "#737F96", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false }, { "name": "www.gamerforyou.com", "colour": "#7FA6AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711824380, "uuid": "16b0db33-8a2d-4ff0-8632-833056fd542b", "comment": "Malware payload", "value": "4ef7fba4058d0ab3dc6751d0a4877bb688c518ccf36792a4664572bc4d2cf163", "object_relation": "sha256", "Tag": [ { "name": "gamerforyou.com", "colour": "#38C628", "exportable": true, "hide_tag": false }, { "name": "pw-beta_EKhZFa", "colour": "#737F96", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false }, { "name": "www.gamerforyou.com", "colour": "#7FA6AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711824380, "uuid": "ccf075c4-d824-4c9a-88ac-e69628cafede", "comment": "Malware payload", "value": "b29a0f15a3607307ab9465a3fcb2227f3c6a15c7", "object_relation": "sha1", "Tag": [ { "name": "gamerforyou.com", "colour": "#38C628", "exportable": true, "hide_tag": false }, { "name": "pw-beta_EKhZFa", "colour": "#737F96", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false }, { "name": "www.gamerforyou.com", "colour": "#7FA6AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711824380, "uuid": "3fb39d97-0d9b-4fb0-998a-22e53e080849", "comment": "Malware payload", "value": "f953173796b6586601d6d34f04a185b094cf09b350142144844abac6d221a990bfc8790027417bde41f395387e28aeec", "object_relation": "sha3-384", "Tag": [ { "name": "gamerforyou.com", "colour": "#38C628", "exportable": true, "hide_tag": false }, { "name": "pw-beta_EKhZFa", "colour": "#737F96", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false }, { "name": "www.gamerforyou.com", "colour": "#7FA6AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711824380, "uuid": "094265c7-301e-44a2-bb5f-08eee90c16b5", "value": "T1C5E733183985E7ED5B2BC2EA301953AB600BDAF66902621D6DF7E09C31546E3C3D8D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711824380, "uuid": "55e50292-8052-4797-b8d3-dcb67a347415", "value": "1572864:uLdqYfIstyVDgjkupapfE9HTbhRJKaTNgO2j:60YWVsjppyfEtTLTy5j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711824380, "uuid": "2f794c9d-8409-4909-8cb2-f2c95e7d85d9", "value": 67591950, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711824380, "uuid": "1c0a7bb3-13ec-49b2-b0fa-989676dd916a", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711824380, "uuid": "458d6e3f-60ba-4861-ad3b-cd87a8a5bd31", "value": "Mauqes.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a856816-ee3d-11ee-a120-42010a9c002e", "comment": "Malware payload (Adware.InstallCore)", "timestamp": 1711765643, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711765643, "uuid": "7d36c159-e7fc-4b3c-b0c6-08612649cf78", "comment": "Malware payload (Adware.InstallCore)", "value": "bda7b01f3f1ed03d770a12d871486d91", "object_relation": "md5", "Tag": [ { "name": "Adware.InstallCore", "colour": "#35D5E5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711765643, "uuid": "ffb6581b-7dfe-4214-85e1-fc1f7269f551", "comment": "Malware payload (Adware.InstallCore)", "value": "5092083ccd00c6ae2b94e48b319b0457dd937da66b528fc12b15c2b0f1f64c4a", "object_relation": "sha256", "Tag": [ { "name": "Adware.InstallCore", "colour": "#35D5E5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711765643, "uuid": "6301db40-311d-48ee-9053-6edd6de8e238", "comment": "Malware payload (Adware.InstallCore)", "value": "e25482450faee2626b32b1f4e4e55694e91ef15a", "object_relation": "sha1", "Tag": [ { "name": "Adware.InstallCore", "colour": "#35D5E5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711765643, "uuid": "b6c48412-903e-488b-b72c-2ac5db0bedb6", "comment": "Malware payload (Adware.InstallCore)", "value": "e252a1c9eef8458d365685f9ea2312031361ea4fb7dc3fbb03a682e5770817144d0790b7a94a056c06c15a84ea3de63e", "object_relation": "sha3-384", "Tag": [ { "name": "Adware.InstallCore", "colour": "#35D5E5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711765643, "uuid": "a855a222-8eb7-4b03-8500-23649ba02e40", "value": "T1CC953332B251DA70D563D9F80E35D0674B32BF523E3052B6B9CCAC6FAFE1612450A789", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711765643, "uuid": "3ee14d2a-6fc5-4879-a8dd-92a4092fa631", "value": "2fb819a19fe4dee5c03e8c6a79342f79", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711765643, "uuid": "175b91f5-cc44-4bf4-8e54-729dff5fd9ea", "value": "49152:qy43fDDOqLqnDTh/b26Rk4DyVVNmUjHtXbOdUMwCS:L4hqnDVCd4Dyf8U7tXkfs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711765643, "uuid": "b6ec9cd1-668e-48cc-8d7b-5c38ae9d6306", "value": 1906576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711765643, "uuid": "aa7d1546-4159-4c7a-9d69-c5f7bfa5e011", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711765643, "uuid": "2cdb6603-5f26-473f-8b87-ec46048c98f7", "value": "SecuriteInfo.com.Program.Unwanted.4064.6311.9078", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa1978a-ee8a-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711798776, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798776, "uuid": "be2791d1-d06a-41d4-83d2-d830527adbdb", "comment": "Malware payload", "value": "92bdcdb75f94fc4667ac8d96af45102c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798776, "uuid": "495d9a79-b925-48da-b6be-d17694c61463", "comment": "Malware payload", "value": "50b02eac282eed07f439587d295a8d796826b052bbdc5479d4386975adb5cf0d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798776, "uuid": "bd47530a-4afb-4eb0-ae3f-10c82d912a94", "comment": "Malware payload", "value": "56d3ffd944775636c92b6e36e578977bc886cbd8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798776, "uuid": "2927bf78-300b-4e79-a1b5-34802d2fe910", "comment": "Malware payload", "value": "4486b2818145805dcdfd5b08676741ff17a3c5e464b7a2ab474ee8422978e2505e940a9f9af00e9036439f07a8bc3b7d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798776, "uuid": "e6b6e693-259c-4469-a36a-2e3d20d48d09", "value": "T1F463A55E2E218FEDF36D873047B74E329798238627E1D6C4D25CD9011EA438E645FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798776, "uuid": "68b757e0-59fb-4d43-8d1d-ded4299350f9", "value": "1536:mlNV9N4MCHdJiqdmtRWiZP4BWoCIRLRvrtKUE:mUdijZP4BW6v5KUE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711798776, "uuid": "b3a08fc1-ecb1-4e54-b38e-18a4a738607c", "value": 68432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711798776, "uuid": "3f8644cd-b745-40bd-8ba1-eba60e72d2e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798776, "uuid": "2860efdb-3b29-4b20-9580-569de43e2d0b", "value": "92bdcdb75f94fc4667ac8d96af45102c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d9d568e-ee5e-11ee-a120-42010a9c002e", "comment": "Malware payload (AgentTesla)", "timestamp": 1711780063, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711780063, "uuid": "8f799048-16b0-4a84-b342-07ff7b753ea5", "comment": "Malware payload (AgentTesla)", "value": "e1fe3f51ba6f04a38a0aadd4504c3a46", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711780063, "uuid": "c94ab628-94b9-421a-b24d-841a5045c666", "comment": "Malware payload (AgentTesla)", "value": "577e6786cfc7e62f1ada7642e01d3de6846494ee5f94ab32dc859bb3fb68ce3f", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711780063, "uuid": "f4f95a81-3523-4895-9534-d4c5440ae8f4", "comment": "Malware payload (AgentTesla)", "value": "fc6c73c8c53cb57e49ba3c5886ff15ae389a8827", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711780063, "uuid": "299afcd5-ba9b-433b-af40-8a2e9dc308ef", "comment": "Malware payload (AgentTesla)", "value": "deecca71468c07b32c19ef54830938cbb163152f9631278f3251e2d2eefa2a991cbe2805cc35f498ee4eed023bd68dd9", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711780063, "uuid": "d61bfb47-698f-45ad-98ce-6a0b7ae0d24c", "value": "T195E4335B8AEC6B8BCA437609296698C07B316E53143583A63F387BA5F4110F66512F3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711780063, "uuid": "57866aed-bd40-4bcd-8e77-a85f0d524f76", "value": "12288:YHhim3PGZD5na3jcXJxTl/lYHeAAeWO6RGHo9fynr2xEQODWHFmR3BU7ZY:YkwcXbR/OeAAeKjgnr2xEQ+YFu3i7q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711780063, "uuid": "ae1b3c51-64de-42d1-abcd-e6861fd3b294", "value": 687039, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711780063, "uuid": "fdbb55a0-2535-4f4a-8389-65688109ffba", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711780063, "uuid": "98f89c6d-2944-4746-af70-57e63a0d032d", "value": "BL-INVOICE SHIPPING DOCUMENTS.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c1fb734-eeb3-11ee-a120-42010a9c002e", "comment": "Malware payload (OffLoader)", "timestamp": 1711816568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711816568, "uuid": "eba551c3-f4a0-4f20-bf84-855844226348", "comment": "Malware payload (OffLoader)", "value": "efa2c65ab75028a909740e99763d1acb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711816568, "uuid": "617acabd-138a-455c-aca7-e67a3a1bbf3b", "comment": "Malware payload (OffLoader)", "value": "5c07ed55846b6418cdcb02ae6ef96c0448cc2fd457179d6072a051ecb0e15909", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711816568, "uuid": "2166a32e-2dd5-4e69-9976-e3df4bbfe163", "comment": "Malware payload (OffLoader)", "value": "688970c4b44da217a4312404303c312d33602b21", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711816568, "uuid": "acd1788c-7ffc-4759-9299-42a6d5098590", "comment": "Malware payload (OffLoader)", "value": "55dee9b63685b410c2425bf3035fc65c2945129c0e05925eebcb55ef60a0c36cd8ca8ffa3126b235c334f034fd395f6a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711816568, "uuid": "d9db4050-a100-4f3f-980c-6aabd3af96e4", "value": "T17C96233BB268A13EC16E5B3159B3D210983BBA65781B8C2F07F4095CCF6A4711F3BA55", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711816568, "uuid": "14495179-8cd4-478e-865f-712ada4be480", "value": "5a594319a0d69dbc452e748bcf05892e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711816568, "uuid": "10fc6565-1c8e-48d8-9e32-88aca2feac06", "value": "196608:5GpJ8Kz72bL218dGAJ8Kz72bL21gJ6M8YYi:58xWbL2ed9xWbL268YYi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711816568, "uuid": "2af6ebd0-3b12-41ea-8d6d-47e475fd7b0b", "value": 8703255, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711816568, "uuid": "d2891233-e01c-45da-9c2e-3dafcc873f84", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711816568, "uuid": "63b4d3ce-acd0-401b-b57b-c65581580574", "value": "winrar-x64-620b2.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "213f7ede-ee5c-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711778995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711778995, "uuid": "eb9cf543-e3dc-40e0-8d4a-5f0afdc08c9d", "comment": "Malware payload", "value": "d04db0e7938a496b85ca9a09598b672a", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711778995, "uuid": "cfd9202c-874f-44d1-b255-5ca99909524d", "comment": "Malware payload", "value": "5c39e71c3ed00beebe48f719f9fbbc024486d368cfbddabedc7c8eec1853bd67", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711778995, "uuid": "c01fa408-9761-43e6-bffc-48659c223dfe", "comment": "Malware payload", "value": "82692d965bebc02788dd0435de3ff5737bb4ea5c", "object_relation": "sha1", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711778995, "uuid": "b82274f0-a692-4902-8957-a7e707613db9", "comment": "Malware payload", "value": "4de0a7ee5c06e6ec3bc9b9590a6d9d48d64b8a606f6ff42a4d40dc187cdc1f6ff010f66f6619831b0e0ffd39f4e52278", "object_relation": "sha3-384", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711778995, "uuid": "495b44f6-a158-49fd-b63e-bc96e0314e1f", "value": "T18E12BE9AE620C3D0B5AB44F129835457D27712254966B52F37E8C1E7B359E3CFC14707", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711778995, "uuid": "65651262-91ae-4249-a3ca-6684a2015e57", "value": "192:PNbizfw2y2/yKK2Nfbhmakq0hnqsYZmYtQfvKs9EkgcuNG6sUgo6C:1+wdSyGDIaB0h1nZsNGPU/6C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711778995, "uuid": "fefc9cc2-9129-4478-b84b-6ef0176e76cf", "value": 9749, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711778995, "uuid": "93d0ca39-d42e-43c0-ab66-a20cff8b3ab7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711778995, "uuid": "2ce1f677-595a-4443-bc38-423335c33bd5", "value": "d04db0e7938a496b85ca9a09598b672a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1361356-eec5-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711824414, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711824414, "uuid": "3cb0f61f-2037-43e1-b6ca-6a43d903f2ab", "comment": "Malware payload", "value": "236ff27ae596837588a1c73dde646ce9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711824414, "uuid": "46549260-ff89-4e5b-89d9-2a506f4ac49a", "comment": "Malware payload", "value": "5c7934c3e6a1679801cb14f748355dceb388b7bfc6a0f08ed6da86443232baeb", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711824414, "uuid": "3ad473b2-a2ca-43c0-b47b-f9987aa72c95", "comment": "Malware payload", "value": "a0dc5f1610c804d82a193bd802fbf27043c490af", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711824414, "uuid": "3637eca9-bf5a-482d-ae02-1f3f93718480", "comment": "Malware payload", "value": "1675b83b0f2941c044647ef5229bda345c2c26506f54dfb2e639cfe36ab81c1f919e08cced51287b97a4f17dc7f456e5", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711824414, "uuid": "fdb26287-957a-4aaf-988d-5d3ef0297e95", "value": "T1B3A39D8BF60B5460C86287F01BC34FDE3E636211DE6BC8E72C1E16B918756DB4D4A792", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711824414, "uuid": "c6491cb7-9f54-414b-9c84-7a28153263bc", "value": "1536:0xpfDMwfU3EcGKqouehjZF9O4Y4rggM/LWzkH:wfIwcJjr7hD9dY4rggMq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711824414, "uuid": "d46e10e7-4d43-4888-9ad3-5add8cc32418", "value": 99968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711824414, "uuid": "cd597108-0b5a-4ad3-b18d-7aba1af9d205", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711824414, "uuid": "1f1759d2-84d3-4f50-97d1-6a9108410c16", "value": "236ff27ae596837588a1c73dde646ce9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5280a296-ee4f-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711773494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773494, "uuid": "9e472267-bacf-4c44-9a6d-61d15fda22b4", "comment": "Malware payload (Mirai)", "value": "762a07162762bb3cba71a70aaa151dc3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773494, "uuid": "8d6f9754-4795-4abb-a5b9-6674c0f5723d", "comment": "Malware payload (Mirai)", "value": "5f7c9e7421e5952d0a4b1711305aa65c42a57db62aaef6db62094ece42d0b8ff", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773494, "uuid": "03c6e074-8425-4cb1-a32b-5dfdf6c32990", "comment": "Malware payload (Mirai)", "value": "90e4eab42d94234aceb385ccc4b70afe9bc797d5", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773494, "uuid": "e9e78739-6351-445f-9313-90cd1116a141", "comment": "Malware payload (Mirai)", "value": "b4838de10e9d49c79a21e5f28aca33248c9dcdb340abfe754e516da80910c963567bac1ac7ba8eddee93a6f845ba12de", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773494, "uuid": "9c9d8d18-b496-49f1-9caf-e332ac58e5d8", "value": "T159532951B8818A17C6D0237BB9AE418D373163E8D2DF32179E211F207BDA91F0DA7E95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773494, "uuid": "b2c29ef2-1985-446f-b5c1-65bb79bb60fa", "value": "1536:QYz0kkjXCxI740BqX402/UusIoWhKRGDzaViRP:QY0tc3PIbhutViR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711773494, "uuid": "49154ac4-f61f-42be-b8d8-22c74a78ce13", "value": 62460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711773494, "uuid": "f88cbe6d-3daa-4c9c-99d9-56977a66e393", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773494, "uuid": "021f01b5-3207-4759-80a8-63ab4056725e", "value": "762a07162762bb3cba71a70aaa151dc3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da50f2a9-eee9-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711839865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711839865, "uuid": "f955ba5c-8e06-4a22-aca7-31e0e5b99ff3", "comment": "Malware payload", "value": "53d82bb511b71a5d4794cf2d8a2072c1", "object_relation": "md5", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711839865, "uuid": "0159f55d-5211-4e7c-9e1f-37a2198857f9", "comment": "Malware payload", "value": "605861f833fc181c7cdcabd5577ddb8989bea332648a8f498b4eef89b8f85ad4", "object_relation": "sha256", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711839865, "uuid": "2767fed4-6b0b-4265-a619-6725b3024d45", "comment": "Malware payload", "value": "8a75968834fc11ba774d7bbdc566d272ff45476c", "object_relation": "sha1", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711839865, "uuid": "f87b94c5-7b89-46aa-9fa9-d5560bb85f4f", "comment": "Malware payload", "value": "cda899fc23ce44f38d5664da7e22d9183a967e77d42823979aa5a342635347f990475be7f98d414dfb734491f3dcfe1e", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711839865, "uuid": "bd864f00-4678-4311-8012-2a59dafcfce6", "value": "T1C8342A4AA5A2F8EED6AACC30C267CB276AF1708502116A7736C85B781D5BF305F1D713", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711839865, "uuid": "f7ba74ac-95a1-41ec-be33-1a4f655b548e", "value": "6144:5pn1610Qc1ythkxUXAWe6/UDYUFR7Pp6YOugl:5p1XQc1ytOO9eNDrFBPst", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711839865, "uuid": "6b11a290-8439-426e-8c7e-2c7ccd770c68", "value": 247800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711839865, "uuid": "54b633e7-d2d4-4e1f-ba0e-02a4cafd9b7a", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711839865, "uuid": "8a45f014-4e89-481c-9fdc-dd495301a7a0", "value": "lib.bin", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ec45e44-ee6a-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711785165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711785165, "uuid": "2746b3b4-f8d8-4c2b-a51e-e74e585e6036", "comment": "Malware payload", "value": "77fba97e03a90b9a5df6bb5379e6f5b0", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711785165, "uuid": "cf81e16c-876b-4a17-b596-3bbf56065c58", "comment": "Malware payload", "value": "631529a62a03978091b64b75d5a584e85e384267d1502467764ba9e315967d25", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711785165, "uuid": "5576948c-33a2-4456-b5ad-f7256b5e641a", "comment": "Malware payload", "value": "d2154ca6b403d9896757cdf81f3aa07c880027b9", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711785165, "uuid": "e6202d49-677f-4655-afb7-9d1c3eb10056", "comment": "Malware payload", "value": "9e8f81badba5010ae1e2a91cda1ba33f0aaff2ccf655f511b11d94d2f4c7f7d01e07e30803b34e55c8da0d40bc71090e", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711785165, "uuid": "99a254bd-896c-4426-a017-2d9a353ab277", "value": "T1D3837C50B6D2C470D47F493128B4D1A65B3E7921CEE0DDBB7E860A295F707D0AA38E36", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711785165, "uuid": "e4a2ce59-6507-47db-bcd7-e5cdf07f5ab0", "value": "2d0b5b40695cd42fb8b3d5495cd5069f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711785165, "uuid": "6f34c143-d0be-4107-9b14-11b23d008c78", "value": "1536:/3zQ0q32qT+06v0UQpTcX+CZntb9KviEossWVcdPu8U6Y5TCHOM:Xq32j06vKpTcX+fl2Puj6Y5TCd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711785165, "uuid": "866652d7-c6e0-49aa-a46b-7b098860f5a2", "value": 86344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711785165, "uuid": "54735d23-9050-4bf4-b43b-c6e9f5268bd7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711785165, "uuid": "a0cbbe27-bebe-4507-859f-1dd0cfe30a8a", "value": "ATKEX.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5aad0f58-ee69-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711784675, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784675, "uuid": "4d9af1a1-ae46-49d8-ae22-bce95d68b480", "comment": "Malware payload (Mirai)", "value": "5ca64f3b0893ea4147c70bdf4f2c6502", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784675, "uuid": "3a3b0ebd-eb26-49a0-964a-f96319eea1b1", "comment": "Malware payload (Mirai)", "value": "631d7172ac5296a00e6d43420ef345aad5fb849abc225c1bd3982b2dc61039fe", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784675, "uuid": "cdc6913e-5b83-4c75-91ba-f1d7b500ae53", "comment": "Malware payload (Mirai)", "value": "c77777509597a7952418e1d8b2c685058159850b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784675, "uuid": "827aa05b-be1f-4463-8726-af04840d46b9", "comment": "Malware payload (Mirai)", "value": "7e728b5131d2cc8dbb9bd614ee26243e91080ea3201d5d7cf02466bcd17dfad14e684be1ab2c0e6cd6d601b17353c749", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784675, "uuid": "fc44cfc4-707a-49b9-8326-a34756cffcec", "value": "T135333982B3180543D5A21EF0343B17E0D7AFAAD222E4F349760F9B5A84B1E37A546DDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784675, "uuid": "23f485b7-aed7-4b7b-9ca2-b076c1b724fd", "value": "768:NhIFCNxatfpo1rXfubv8M47T2/4DTQESqtetViAqTyw2uPXeENI5+itQPTyH:nEWr6e9DxBtiVlQyp+9NIcDyH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711784675, "uuid": "b6d76784-4102-47bf-ada7-1808f09c004d", "value": 50276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711784675, "uuid": "f12a87b6-a0ea-4da2-9f6d-12ed8542ee74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784675, "uuid": "8e5c4fe6-98cd-48f4-bbc0-b4f63545c608", "value": "5ca64f3b0893ea4147c70bdf4f2c6502", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19f7e1d0-ee83-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1711795733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711795733, "uuid": "874568dd-78c9-4504-8f02-438cbd787ebd", "comment": "Malware payload (RiseProStealer)", "value": "ce865cc1b78bc4fa16532168c74c5ea2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711795733, "uuid": "25d15eec-56a8-498f-ab50-9fe1bd30a3c0", "comment": "Malware payload (RiseProStealer)", "value": "69302432014571ce6d454639fc471fcecd731d6f20de26c0e150a929f43adb2a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711795733, "uuid": "0b58aa5c-c213-4d3b-99e3-837542cfa264", "comment": "Malware payload (RiseProStealer)", "value": "e0153e5871f1a67e244332de4c952dd5978d760d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711795733, "uuid": "9b72795e-8203-4569-8f83-3a1d0f69ea5d", "comment": "Malware payload (RiseProStealer)", "value": "0ba2db14dd15c8e6012f0efc83082c972abb7c22f3d4befad2a39ec89145e0b9cf39e6e87cdcf367e74176c080b949ea", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711795733, "uuid": "00de2e82-6a31-45a0-8cab-94a3613a192c", "value": "T117E55CA2BC4872CFD8DE2BB4941FDE86695D0BB5872008CB98AC657F7D63CC115B6C24", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711795733, "uuid": "66ed33c3-fcc2-45e3-b41e-464274afe6da", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711795733, "uuid": "bf6f77b2-3c40-4691-9f11-da3b5d90a2ef", "value": "49152:fVQcncWFPwlR9FVb8SwHbttqGKguuLMvgWCfBrLBei2:9QccWFMR9FVbbq3qzWzV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711795733, "uuid": "9a2816c0-2dd0-4767-81bc-11637c4f0291", "value": 3102720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711795733, "uuid": "7e71c301-6aa5-4b0d-98c0-82a49325cf78", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711795733, "uuid": "640ef96d-9435-48ff-84bf-396963e028a9", "value": "ce865cc1b78bc4fa16532168c74c5ea2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5552e1f6-ee69-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711784666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784666, "uuid": "ddd359fc-85bd-4bb3-9bd3-f9d00b762af0", "comment": "Malware payload (Mirai)", "value": "cc4fd088a61401482fd89d5f8490d9ef", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784666, "uuid": "bc6d5c95-f313-44ed-86a6-397a75de3e95", "comment": "Malware payload (Mirai)", "value": "6c3878a14ef62ddf60a88f0ffeed6d79b6b34a6b09bc9a8e79255399401a8cb4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784666, "uuid": "33094dcf-6b54-4919-80e1-1e7c0f74eec0", "comment": "Malware payload (Mirai)", "value": "b0261430a4daf6e61e4b042fdb21c7d41f8fc655", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784666, "uuid": "08d8f61f-53cd-4436-9603-d326013a6d7f", "comment": "Malware payload (Mirai)", "value": "1adb1aae68c828fb7236564e1337f39dff6a7aea650fc5df0eac95069fcbea7dc8751c8c36cbe0c194c82e8792300ca4", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784666, "uuid": "fa0abf8d-1a6e-4911-902c-ee3829372e56", "value": "T1CC330785B9829A06C6D4537BFA0E42CD372973D8E2DE7303DE152F123BCA92B0D6B151", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784666, "uuid": "14caa998-048e-4f82-a303-9e963d68a124", "value": "1536:ugy5840h1ZP+2PitlCu64C35aZV4EqcqG:3y58R1Z7itlC71EJq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711784666, "uuid": "17cb8cfb-2582-41f8-8f17-f5104cd2df32", "value": 54272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711784666, "uuid": "53525cf9-24f8-4013-bf7c-3c8b24f57d34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784666, "uuid": "b9ea9ddb-624c-4226-adbe-d0154d8fbb5b", "value": "cc4fd088a61401482fd89d5f8490d9ef", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aaca3cb8-ee62-11ee-a120-42010a9c002e", "comment": "Malware payload (Stealc)", "timestamp": 1711781803, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711781803, "uuid": "6bb85ecf-cb86-4f08-8c0c-bb6296d4e396", "comment": "Malware payload (Stealc)", "value": "2bd2806801a2442b274d468b58b0b854", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711781803, "uuid": "3665f79c-b462-49b4-bf0c-090844f8dd8f", "comment": "Malware payload (Stealc)", "value": "6e68947d87194f7a2619486e640205fa0c6776f1d4b5740ed97583014c448ba8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711781803, "uuid": "273057d8-fedb-4b23-a923-626643c66ef8", "comment": "Malware payload (Stealc)", "value": "b4f87f61a4e4d65fa5477e32d0636deb95b86130", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711781803, "uuid": "f79e08df-790f-4cbb-93dd-ef18b194f454", "comment": "Malware payload (Stealc)", "value": "e5f1b1d47d43788248dd9550f0114678795e4c65f1910c4d150184a1d5108b50aef327e3327d01701f422b2938fe2dac", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711781803, "uuid": "1fb78358-7422-44ab-bdd2-160651a4ec15", "value": "T10694E0127AE1D077F3F746320C789A844ABFFD67A9729A8B3394664E18701C0571AB73", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711781803, "uuid": "5ae7623a-33f7-45dd-a4b2-50963d53b32e", "value": "f5ff86389ed30782f254062b6cff3d47", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711781803, "uuid": "b020d474-ea8c-4943-bc06-55919cbce9fa", "value": "12288:LRH71BhbLpHwVcdwZsem/CLx7018eMEX3:lpfmbmMGueMEX3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711781803, "uuid": "abbd7f6f-83cb-425c-bc49-18b29269b9d2", "value": 414209, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711781803, "uuid": "072438f0-7820-4854-8aa3-a5d3cf7b917e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711781803, "uuid": "5f1df290-167a-4096-a198-d81ee8e8ac3d", "value": "2bd2806801a2442b274d468b58b0b854", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fa4ae18-ee4f-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711773516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773516, "uuid": "85b2f63c-b177-4659-a0bc-33ef9dfddde5", "comment": "Malware payload (Mirai)", "value": "3344a326e6a6fa133d0dab5631a3f1f3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773516, "uuid": "4cb6aafd-3985-468f-a7bd-d771f76f5113", "comment": "Malware payload (Mirai)", "value": "726b453c474c0c05801eeede815ed646ce310b27a7e341d52ab53ab6923ffda7", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773516, "uuid": "59440943-f7f9-4001-87af-a1dbdf180c37", "comment": "Malware payload (Mirai)", "value": "a169557b9c062575c5da1db281ea872c3f81cc56", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773516, "uuid": "21ec6284-9284-48bc-b93c-2428f1fdf02f", "comment": "Malware payload (Mirai)", "value": "119d9d1d4966bf781fb4a3a67cd236a4bcada1b6dcf586206c80b385d447810b8ae0a76ef878a8f0d20bf48f906635bd", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773516, "uuid": "ddb00af9-84d8-4dc1-9898-cb50880bf610", "value": "T1C3D33A46FA818F13C4D5177ABAAF424A3322D79493DB730689285FB43F8675F0E63A05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773516, "uuid": "77bcd938-71f2-4170-86a8-41bbbdb6cd4e", "value": "3072:WaNcZlF0L2vDEeWMjUQCKYDBGoSEOBr2HPfGCM/9CYe:WaNcHF0L2LQxQCKYDEogd2HPfrM/9CYe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711773516, "uuid": "b5ea85ab-4cf8-4bfe-a1ca-9a4e08dd727b", "value": 134941, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711773516, "uuid": "8d8878de-45b5-4d2c-b625-b11cf4a9f6d8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773516, "uuid": "c89e01bb-9ad8-4002-bed8-05dade6b9caa", "value": "3344a326e6a6fa133d0dab5631a3f1f3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab0e83b5-ee6f-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711787387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711787387, "uuid": "fa93cda4-0947-40d7-8b3c-1297fe91ba05", "comment": "Malware payload", "value": "b5b2948d407676eab86b1152e7ce5ec4", "object_relation": "md5", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false }, { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711787387, "uuid": "c7082a03-91e6-481f-86c9-d06f3cc1a891", "comment": "Malware payload", "value": "73c5b71d2923b11a8b262321c6229520c93115f82c78d742f041a650725d482f", "object_relation": "sha256", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false }, { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711787387, "uuid": "1973773f-dfaa-49ab-9554-9a0df3fe09a3", "comment": "Malware payload", "value": "85de7e562d97c36b9318393fd6185df6b1ba55b9", "object_relation": "sha1", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false }, { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711787387, "uuid": "1ed314e2-f7b3-4ced-bbfc-3f710087b427", "comment": "Malware payload", "value": "ed2c0d3ce999ad694f401ef1fddb147dbfbe70b90d1ecbf2004040a8547a0824c74f64f176d738071b893ada2080f572", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2017-11882", "colour": "#945F25", "exportable": true, "hide_tag": false }, { "name": "rtf", "colour": "#F0EC83", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711787387, "uuid": "fe551ccd-5e46-492b-8688-1eefae72e585", "value": "T1B753F46AE34F0955DF55A73B034B4B8A09FCB73EB28140A1396C973437ADC2E466297C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711787387, "uuid": "0bc0c1f2-cd3e-440e-ba0a-f9713e9b3a70", "value": "1536:fgoIW1uYod+RuUl9Zh7teyDdvqMhRSiupwk8uXjlh17AY9j:otyuYod+RuAZh84vSiowk8uXjlh17AYR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711787387, "uuid": "394435c1-e326-4aec-be00-57ecc45a5f6c", "value": 65425, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711787387, "uuid": "104532cf-cc3f-44a8-913c-a01da8e06887", "value": "text/rtf", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711787387, "uuid": "a06b5a39-d602-4f33-b3d0-3f33cfe63e3a", "value": "b5b2948d407676eab86b1152e7ce5ec4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a434a507-eea0-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711808421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711808421, "uuid": "5d98fc83-1f9a-468c-945b-171a476b4c05", "comment": "Malware payload", "value": "f37b5c1390d3340e7ab1176d96c93709", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711808421, "uuid": "a7f42d00-2b45-41c6-9ff1-4c9ec1ea7931", "comment": "Malware payload", "value": "75ac368f3b2ab63dfc840570f0d60f31181e8ba5197b043b4213fefefbd3c18a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711808421, "uuid": "7be9131a-aac1-4f55-bae4-74961444e808", "comment": "Malware payload", "value": "1090dc5827569a841736ad7e4d38efa266b79fb7", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711808421, "uuid": "69a81c4b-bfab-4975-bbf9-c1c6c9e30518", "comment": "Malware payload", "value": "49e1cb022dda2ce8cd2c95e957e604a5f4f181f412bed1038c2dcd64ef465b4047b663b9c60ee4818b26b332d5ea4836", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711808421, "uuid": "bc8eda7b-77c6-4c7c-864b-53441ec3bcf1", "value": "T1DAA649AF9BA8BD10C43E377E32A47000C3F091DB8952E507A9D2B5E97B376506ED5C86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711808421, "uuid": "2002999c-e84e-44fa-99e6-c32992e326e9", "value": "3072:WnYCkfM9bN2LJAbPvrV5pQM4PIg97OWH31MjsZsDSuiBe49inE1b//ekx/iSy:gYCMM9N2LJWp14AaOWH6SsWTIL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711808421, "uuid": "e3ad74d6-63d0-4b84-a579-1496085c7ed3", "value": 10114560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711808421, "uuid": "97530c19-8508-467e-88a5-5dac3dbd4c1f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711808421, "uuid": "e833d75d-04ac-4521-a4a9-ab554eb13919", "value": "SecuriteInfo.com.not-a-virus.HEUR.RiskTool.Win32.BitCoinMiner.vho.28481.18891", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa081f4e-ee88-11ee-a120-42010a9c002e", "comment": "Malware payload (Amadey)", "timestamp": 1711798123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798123, "uuid": "6c40b6d5-fe31-4576-8571-d6120f789263", "comment": "Malware payload (Amadey)", "value": "22a7cea92efbbc67eb138dbd922dd341", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798123, "uuid": "3c60ed72-96d0-4a47-8a44-eeeaf14ea32d", "comment": "Malware payload (Amadey)", "value": "76ea573ac14a96a287299d60921512ee16c9308910edde6df2f26159d420fd33", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798123, "uuid": "71443645-0612-4e1d-9337-e6aa959f2a8c", "comment": "Malware payload (Amadey)", "value": "1df779641f44a870fb918ed1b50a130169ecba62", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798123, "uuid": "ebbcc3ef-ca36-43ec-bcb0-97c63e3fdc86", "comment": "Malware payload (Amadey)", "value": "026632ae416f72a682aeb1b5d29b0fa414b99e56c00bce134e6f5c87a79cc7319be2a363636dc1a0e66eb9114028e928", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798123, "uuid": "87b55487-ceba-416c-aa8f-341f9afef597", "value": "T19E9633F4896DDD43D2AA7BB8C0C2EB7114635D44E4CD42886DE9760AF4EA7D72E28D30", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798123, "uuid": "a75ecf66-e4fe-4957-ae58-6e660d470a9f", "value": "61cb50930618cbd689faa75c133604f5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798123, "uuid": "42b74b24-5dbd-4398-91a5-ae2cbaeed494", "value": "196608:1rlh/RXHoDloByy80ZPHAlldX9WYmGRQ4rbwjgmGuzxml3w:1rlBR3ulRl05OdX4APrb9mzK3w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711798123, "uuid": "6c83fb63-830d-48ad-afd3-8bd17abd351d", "value": 8706144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711798123, "uuid": "169bb979-258a-4862-9175-7b533909db89", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798123, "uuid": "b25c214e-c6ba-4ec6-9fd4-b0c609f0117b", "value": "SecuriteInfo.com.Trojan.Win32.Crypt.11190.19582", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "715caf34-ee4f-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711773546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773546, "uuid": "521e717b-4262-4a2d-929c-cf25492f6c64", "comment": "Malware payload (Mirai)", "value": "52e82931f8fa4f6616b369dc99ea0af6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773546, "uuid": "ee48fa38-a310-42fc-93bf-6dcbe2aca1b7", "comment": "Malware payload (Mirai)", "value": "7930728026973facf02526d044b606eb4fe1f0eab0a0b950573a0645aa65a25e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773546, "uuid": "c62799c4-440e-49c0-84b9-804627be1b9a", "comment": "Malware payload (Mirai)", "value": "d470e54222bbc8d0f05e185b536233574fb10d20", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773546, "uuid": "29f293f2-ca8e-4a40-9886-dcf13b1b38ce", "comment": "Malware payload (Mirai)", "value": "f2369630b84c1098d2a7583e6e5a7a2955bdbd7c46532a276a813464993a113d43b9012bc2c52f0303553db74e800805", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773546, "uuid": "3f95799c-7d6c-4cad-97f0-98252eec89a6", "value": "T13D83C61EBE228FBCFB99823547B78E119A4937DA36E1D181D15CDA011E7124E341FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773546, "uuid": "10e7178b-eaa4-4411-b759-fd08c4e25a4b", "value": "1536:uTrYGvmqKDAk2zoy1pvzwB4q/vAyhs4MGNb5:6YGv02zoyfvE4q/vAyhs4BNb5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711773546, "uuid": "26b2310f-c919-4e59-956b-12c15dc64e55", "value": 81132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711773546, "uuid": "d71fefa9-7bbf-453b-9279-2d6d7b325edb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773546, "uuid": "eff3edba-3f6b-4ed9-b78d-cb51880a8e6a", "value": "52e82931f8fa4f6616b369dc99ea0af6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32aa6e72-ee8a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711798781, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798781, "uuid": "6a2f93d1-235e-485b-963d-6e453c9adbda", "comment": "Malware payload (Mirai)", "value": "f51aa3229a5b770375c2037aa8ff4438", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798781, "uuid": "391e681e-c4e8-4ca7-8c84-dc19fc1b1a5b", "comment": "Malware payload (Mirai)", "value": "7a6c0949338c338be971bb7594eb8bffd2f475a2c160f5d6090566ca7cda7c20", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798781, "uuid": "07cdef2a-5595-4e81-8c7f-3c61ed34d809", "comment": "Malware payload (Mirai)", "value": "4546e2f2749728b3ab8d1a89dc9213397ca80d1b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798781, "uuid": "29d83a46-5c5b-4933-b92c-7c9726c04ee5", "comment": "Malware payload (Mirai)", "value": "ce4194aabf9d26b02bbad28a6f2ac4890b1c56287d4ee7c1592cd4698d684e2761240d70b009f862a3ff178062ac6675", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798781, "uuid": "5a6329c3-3ae2-4979-9d1d-9415d3cea1a4", "value": "T19C331994B981AA07C6D553BBFE0E42CD3726639CF2DE3207DD252F5237DA92B096B101", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798781, "uuid": "41c0f176-855f-4304-8074-a1eb043f61eb", "value": "768:EYfq5JwcDOoRuZnaMaStTIQYcJ5QwG2CdgXULts7yXWVKC13tqzMI:dgBbSyQttG/dgXOtLGVBfE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711798781, "uuid": "06ccbca3-2244-4e0b-9c08-57ce7089156b", "value": 50656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711798781, "uuid": "1a92f4cf-1277-42eb-9871-4bd3df506abb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798781, "uuid": "055dc3cc-875f-462d-93fa-6b4b15418a44", "value": "f51aa3229a5b770375c2037aa8ff4438", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e416f73-ee69-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711784681, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784681, "uuid": "d1b6291e-f4ad-4c1e-9546-9607f2f811c3", "comment": "Malware payload (Mirai)", "value": "746ecc6e4e3fac86c47e8df1475039e6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784681, "uuid": "b00d907b-ad00-4655-a7eb-556de968a530", "comment": "Malware payload (Mirai)", "value": "7d4eff90a03a0a69094d0035781d17dfcd9b69bb97adf7f5e148832b805969ab", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784681, "uuid": "f8f94b58-5a7e-4199-951e-3c5669ee8488", "comment": "Malware payload (Mirai)", "value": "04e7ddc5d08d0b3366367e2932fb79184512ce5c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784681, "uuid": "e0a1282b-66ff-4fd9-9a21-88d934a80445", "comment": "Malware payload (Mirai)", "value": "ba48162fbcd5d08c644d94e0320e0d3f22c03ed29202e5bf5af205537991b47bd6fccd9b3d7ed6957c0d9d6d4f5b7125", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784681, "uuid": "82a16b29-4054-4391-9a82-d0277671c5a4", "value": "T1DA330785B9829A06C6D4537BFA0E42CD372973D8E2DE7303DE152F123BCA92B0D6B151", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784681, "uuid": "5d958f26-060b-4326-96fd-7ba20add53dd", "value": "1536:4gy5840h1ZP+2PitlCu64C35aZV4EqcqG:ty58R1Z7itlC71EJq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711784681, "uuid": "e74b29f3-9da1-4d6c-84b9-c8e1d39042c6", "value": 54272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711784681, "uuid": "2af0f3b5-ddb3-43a5-93ce-2a0407640b61", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784681, "uuid": "adb587e1-6d8d-456f-a538-b63fbe55f362", "value": "746ecc6e4e3fac86c47e8df1475039e6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94eee55d-eed7-11ee-a120-42010a9c002e", "comment": "Malware payload (LummaStealer)", "timestamp": 1711832017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711832017, "uuid": "f8b2f8e4-edaf-4a19-8c41-e86a0716a1b4", "comment": "Malware payload (LummaStealer)", "value": "a67cd87428bf619be94c8cee14d4d9bb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711832017, "uuid": "786403e3-0273-417f-9dd1-0744b99b5970", "comment": "Malware payload (LummaStealer)", "value": "7eb9327b1e9279bd1555a58930fe5bc72c729a06b155154aa733a89dc2a6ac31", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711832017, "uuid": "e6345d6c-0a61-4ea0-9565-27f8d3a79d55", "comment": "Malware payload (LummaStealer)", "value": "32010ff46d32e8b8f01a3d2dd71412f949468182", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711832017, "uuid": "a22cc3cc-cc65-4ee9-b1ba-b7ba32144b29", "comment": "Malware payload (LummaStealer)", "value": "4ac77b61b1719b812673059ec177595f6d2b6d3d2e76172bf1d643e34f79d1a69291ae6aaa88d8280369751e057d0697", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711832017, "uuid": "2842fb3c-0bf7-47ae-bc06-11f0a1bfeee3", "value": "T1B146232722A90145D6FE843EC62BBE9572F312B58641947C75FEB9C63F124F5E203A83", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711832017, "uuid": "d29303ed-03d0-4350-b475-bfe25bcbd738", "value": "89c8abd38fd3ffc06ee06d01f9b3cbbf", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711832017, "uuid": "ac2fe8dd-3540-4351-a352-74cab9f2ce65", "value": "98304:NltcgWr7Ifr2MjConjFpWImrFiHJwz2XEqVeDPA+ZDOwvgx8:1EIfr2gnjvkCKz2UqSNOwvgx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711832017, "uuid": "85576511-ee39-45e6-b28a-58e550da47c3", "value": 5754880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711832017, "uuid": "beeb6bba-5cfd-4f60-aa75-544110d7ab70", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711832017, "uuid": "03246714-7582-43a8-a73d-347177e167c2", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d6228ac8-ee91-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711802062, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711802062, "uuid": "1d8054f9-21f4-4b99-874a-050ad7661ead", "comment": "Malware payload", "value": "60b816bc3d086fea9cbce17f0ac226f5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711802062, "uuid": "43906524-82f7-413a-a477-b2122528b64c", "comment": "Malware payload", "value": "7fcbf3fb2673cd4581e32782af7010e04f99561bc725dcfe47d7c54d480b00e3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711802062, "uuid": "480ade33-02a7-4fcc-8801-1e9facb92fa6", "comment": "Malware payload", "value": "02938cdcf998663d004e616ead5612860d838646", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711802062, "uuid": "9a12d70a-2829-4243-a8c8-d65a7debe34a", "comment": "Malware payload", "value": "d4e49ea763d8cc8699aa47fba811b10034b9fe7e872afee378aee2b185a6008d204b981ba180dc2eb7237eb109f7e50a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711802062, "uuid": "7bcac1a9-16ee-46c0-95c1-3ea28ec035b4", "value": "T194C523027AD284B2D47316325EB59B318A7B7C501F348ADF535C592FDB331C29A36BA2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711802062, "uuid": "d1b3d8dd-6e18-4f94-ad94-94e749440eca", "value": "75e9596d74d063246ba6f3ac7c5369a0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711802062, "uuid": "a279a691-b656-4345-a051-694a1cc28b45", "value": "49152:dAL/qLDJvoAp+uV8JwcAx85FJuLNSeXb8/6/fO5lW6sOt9dIVazfAmW:d1LDJwAdcA2QSC3w7PdaOImW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711802062, "uuid": "e73b5475-a164-43e0-b287-78142b1d18c7", "value": 2566397, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711802062, "uuid": "21e0d21f-204c-448c-ba7d-6df5580ece2f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711802062, "uuid": "0df2b484-1d79-4f11-ab08-96d094e78a58", "value": "SecuriteInfo.com.FileRepMalware.1725.9814", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a726f63-ee66-11ee-a120-42010a9c002e", "comment": "Malware payload (RustyStealer)", "timestamp": 1711783494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711783494, "uuid": "e7d7faa5-5179-43f0-9dd1-5a1263803e0a", "comment": "Malware payload (RustyStealer)", "value": "91aaa299c33ba5714ae1d0fe91caad64", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711783494, "uuid": "fb92168a-8fa6-487c-912f-89b5410903df", "comment": "Malware payload (RustyStealer)", "value": "81866ba9249d43503a4905a8df592e577b341c74515eba7e16981d0e959234a7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711783494, "uuid": "badd2df4-a402-4bac-93a2-2ddd151f0d95", "comment": "Malware payload (RustyStealer)", "value": "21267a3547273c0683f8867d817e8a4b0569c88f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711783494, "uuid": "dc6e4d7f-cedf-4a1d-84d6-d766df77e7e7", "comment": "Malware payload (RustyStealer)", "value": "d3d2a3a2e7682421eb3eaa9e6a5a008a1066356de85b3558376a161607c4055f80c3c5ba4e2e2602cc36f3c060359ec1", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711783494, "uuid": "3db7c5b4-c71c-4e93-a9a0-5f45d5d6bcaa", "value": "T114D4C032B69604FDD12BC07686424662BAB6B4860731BEFF05D042752F2FBE95E3DB50", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711783494, "uuid": "1212e6bf-72f5-4cd3-b8d7-483e9ae779f5", "value": "167afe77d4c7c7c2076ad00416cf39fc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711783494, "uuid": "a9ea95af-7532-41f7-820b-364a0db383ef", "value": "12288:3efvxlWpC0EvHB7PAJ3lQ1kQCCEa04nOoHHKH2G++SxWvN6ie:OXjWM0cYfQ1LCBaOon22G++SxWV6ie", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711783494, "uuid": "e7ff2388-4215-44c9-85fd-d756a862cafa", "value": 653824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711783494, "uuid": "10487750-7bfb-4ed1-ba77-27d4b00cc9b1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711783494, "uuid": "f3d60322-ed49-4418-89bf-8e190234f512", "value": "SecuriteInfo.com.Win64.RATX-gen.25915.12178", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a81def99-ee88-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711798119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798119, "uuid": "e20da5ea-05c9-4859-9e86-341bf26f2e17", "comment": "Malware payload", "value": "27f5220ba10933dda4e9546f43b93bbc", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798119, "uuid": "e6c1e4ff-c65f-4288-a762-7c80c901dc25", "comment": "Malware payload", "value": "8314c84f0c3f005c3ae7c8f22d10ab575e731124894fe9ebf0c096402284dd07", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798119, "uuid": "aea9bdf6-7dd3-400a-8f94-585d09415e1b", "comment": "Malware payload", "value": "3e94712d45ae6c4c2e6bb1680869aeb91692f65c", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798119, "uuid": "6850edb2-db74-4761-b5d3-0afc6d6eea98", "comment": "Malware payload", "value": "72436de40c967854b1218d372f69eeab285de047c4cc6d7352a6c8a9bed686b062fdcad5f0da5ed51b178472f0c5b869", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798119, "uuid": "f78f6d9e-591e-4d3f-8b55-92ee2bf35701", "value": "T181A5CEDA37D8C851C2F8223018426ED25D6E5D20BD9F46263F4CB21B9F73AE163B6D61", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798119, "uuid": "ee13aff4-2704-436d-b9af-54145bd377a3", "value": "3a1a7cbd9baa210087804ae7f2e3688a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798119, "uuid": "3c8ffed8-d07b-4f13-8604-bfbd5eec9246", "value": "24576:7u7sk13lejNTM+K6FiLyGuT471hsf02uPQSRg1Aa5ebjFIDTI5cMI1v5y:7uA7BTM+K6YLyg3PQ+lFInI5RI6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711798119, "uuid": "ec450a75-be5e-4066-b989-b9869e5d5907", "value": 2222095, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711798119, "uuid": "b5693376-a652-4273-b569-64b495d824c6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798119, "uuid": "4c3ead78-1a30-4ecf-8a62-fe6dca073f12", "value": "SecuriteInfo.com.Trojan.Win32.Sasfis.25310.28619", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f98ae58-eecc-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711827230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711827230, "uuid": "438e022d-f4d6-40e2-8fcf-387279209ad2", "comment": "Malware payload", "value": "5870ef4ab0d94609e0286055db3c7b1c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711827230, "uuid": "41ed96fb-6b18-4e64-881e-7f0a696b265f", "comment": "Malware payload", "value": "8319ca6cf9cbe1f526db7cda92a964e8d16336ec0620a9fe8d390cb2a7a08fc7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711827230, "uuid": "4951f18b-09d4-4501-ba54-ce46c3e1b441", "comment": "Malware payload", "value": "8f39b9821491eb4fd52a469bdcc2f4e9d8706fd8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711827230, "uuid": "87507ed3-fbe6-46f2-ba6b-02e3dd6687d2", "comment": "Malware payload", "value": "d3143ceae9f2c624e6f7328f91854d878b555f8cf01aa1c2fa6fcb96d69fabe962d0a54800ea5a1dfdb3fc42a6e949f7", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711827230, "uuid": "7b43766f-37a3-4018-a48f-35c262d43848", "value": "T12B6412E69EB48106DDD7993470F0F333BE387782495052893538C4681B9AB927BD26AF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711827230, "uuid": "dc90a22d-4cc7-4548-8388-6df7f1f7f8aa", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711827230, "uuid": "1427db8e-1ca2-4289-8bbd-db02b78c89ef", "value": "6144:ZEXXLwwq8aMxc9KboOW6HGXK/Ub08nFvUZM2SmxscC:iXbwws6c9QoOW6mh0m6ZVSac", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711827230, "uuid": "a97ec862-971f-4169-a429-66af95296912", "value": 336008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711827230, "uuid": "40024174-d34a-40fd-aca8-346cee089a08", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711827230, "uuid": "b3a3e996-bb90-4eb5-a25a-79663861b699", "value": "SecuriteInfo.com.Trojan.PWS.Stealer.38659.29055.32270", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59463d75-eea6-11ee-a120-42010a9c002e", "comment": "Malware payload (RedLineStealer)", "timestamp": 1711810872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711810872, "uuid": "94efa7b6-6fa8-42dd-b24d-caee425870fb", "comment": "Malware payload (RedLineStealer)", "value": "046636f17f09a730132189632525ffb4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711810872, "uuid": "883d7d97-fbfb-4b82-a1d5-e40daa585f66", "comment": "Malware payload (RedLineStealer)", "value": "83a7e9e920ed3e08eca3c59f344fd603b1d4f1b65f19545862a1fa6aebe94d1a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711810872, "uuid": "7a6c9252-0359-4f4d-bad3-17bd6927379d", "comment": "Malware payload (RedLineStealer)", "value": "6931400160f8275a46683a0eb98ae2c871e3b78d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711810872, "uuid": "01921f89-a3d7-46e0-9f34-33ea537cf90f", "comment": "Malware payload (RedLineStealer)", "value": "b11da31648856900ad47cc94a1ae53a8955f665c67f605935678ae01a906c047dc9ef971c06cfcda99f1ab8ed960b67b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711810872, "uuid": "3d448e80-19d5-4d30-9dda-733408f1d0f9", "value": "T1CF7423419AECA921FD034475B8D0E251F8B8BB521461C0AB31ADF1ED9FB53E3B797022", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711810872, "uuid": "28e048a3-d9ca-459f-91c0-82defc1df8e9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711810872, "uuid": "52032d3f-8317-49eb-bfe8-2d87147a4155", "value": "6144:gTCu4fFrZEej3EunSfgwiUl2Xbh08Lm6qpn6mcNwIqBYmIxETj6DTKzNg1D:a4d1v3EuSf92+8LsYmRj66i1D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711810872, "uuid": "e4cafbeb-b11b-44c7-ae25-487ed77076df", "value": 340104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711810872, "uuid": "b4ef69c1-d6ee-4853-b0e9-e9c1d21a469a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711810872, "uuid": "e77762d4-5831-4dda-8c1f-bec070b57829", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6100963d-ee69-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711784686, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784686, "uuid": "8eeab27f-ab89-4f2a-b439-7867c29b716e", "comment": "Malware payload (Mirai)", "value": "adfe6ad72cb4d2bb764b9cc46a2dbbdf", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784686, "uuid": "f52110b3-5f77-4b66-9279-a20373e96036", "comment": "Malware payload (Mirai)", "value": "88390b0af5e8d9ef357566ee6881f80e9b76ed69606e0ddf34baabf5f4fe05b6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784686, "uuid": "0d6b524f-1f79-46d5-831e-8228dd495077", "comment": "Malware payload (Mirai)", "value": "b502308d1a996ab2f9a88cee9b7c0383e9f3bc0d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784686, "uuid": "93a48d33-32a7-4264-9bd9-f06f9ce58aeb", "comment": "Malware payload (Mirai)", "value": "fa0bbd661d853eac3cfb840f62dade2be36bb308c1ffd8f7e95e8ffc2c9d6e508f022bdea431176dcf1b7fc27500af15", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784686, "uuid": "6b5f303c-7f11-4dd8-847b-df660798aa8b", "value": "T1112349C1D642C9F8ED1519B020776B11AFB5E4326A35FA87F7A93932D813B0096533AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784686, "uuid": "0c62974e-ddf6-424a-b908-4526b604b6e1", "value": "768:vU3lIHa87j8APR3y8gGCRd/0X3M/0bqVwWWeyC29CqQqYxL0UPT3s8l:vU3+HhgAPRfvA/7MewWjyuqQDLbPI8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711784686, "uuid": "0ceafe20-7e7c-4d13-a713-8cc33b33789e", "value": 46096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711784686, "uuid": "56a4929a-9dea-49b0-b04b-58ca50799cdf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784686, "uuid": "0b1af8dd-41d5-49fc-a9eb-89ac4ed8a1e4", "value": "adfe6ad72cb4d2bb764b9cc46a2dbbdf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acdc45ce-ee88-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711798127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798127, "uuid": "884f47b9-7022-4f8d-a79e-ab631156f9e3", "comment": "Malware payload", "value": "4a97d2a4e0a19f001cae89ff816c382a", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798127, "uuid": "ac7a9b74-9cac-4a0e-b59b-5f035420ff25", "comment": "Malware payload", "value": "8b19f1ca3c8c4d9ace0f1d044d46f8997c37cfd13a038b4757a83aef775bde69", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798127, "uuid": "16ed2f17-ae79-4ec6-9672-f323edf6dfa1", "comment": "Malware payload", "value": "b754915b9ae43a01e0ae2e52da6a9f8819cd73c5", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798127, "uuid": "d6db73ce-fbbd-494e-b3a2-8fa7f3dd355c", "comment": "Malware payload", "value": "977cd55866c4c3133cb444c3d65f232807576276c963602a39469b7b74fd2d5a383bfabb766a8deb3975dcafb8e2dec9", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798127, "uuid": "b742c083-ba0e-46d1-af02-98f26c982c13", "value": "T1F7E31C8A8471F18FF67411FEB013FCB2698B5C464A6D441AA84EFEA6B1B074CC4D4F96", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798127, "uuid": "10f87e18-3985-4466-86dd-78a492393b00", "value": "525e19b4145fcab4c2711e63d6bdbc5a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798127, "uuid": "a332f710-79be-4102-bd4c-57b4ea0462de", "value": "768:Ky9EcJn39//////////ZwhmTUcHLZBfYiCT3lf+C1JzLwcO4hDd6d:ZJJXAmZBQiCT3wC1icdd6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711798127, "uuid": "5f011e62-5321-4be7-8068-5448be396895", "value": 149504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711798127, "uuid": "cf4c1608-cef2-41f7-baad-77c778beaeb8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798127, "uuid": "b005ec8d-b1dd-423e-9a09-e80730dfa087", "value": "SecuriteInfo.com.Trojan.SuspectCRC.6353.16417", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bce914b4-eec8-11ee-a120-42010a9c002e", "comment": "Malware payload (njrat)", "timestamp": 1711825642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711825642, "uuid": "aff636fb-8c95-421b-906b-57dc791417ac", "comment": "Malware payload (njrat)", "value": "efcd62fef0b4cbbeebf441ee3ef43315", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711825642, "uuid": "35303e63-b64d-4867-9ecc-0b70626ad15e", "comment": "Malware payload (njrat)", "value": "8c66f7abae263de14d58d0d5ee7a1de69b98994eedcdcbbdef9ad2ffea22f475", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711825642, "uuid": "3cbc1697-d2a2-495e-845a-3266bd5a1ed5", "comment": "Malware payload (njrat)", "value": "84986bb104639ab293df965e53937b6acd145935", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711825642, "uuid": "1566118f-c7ad-4119-9c06-6584bcbf79af", "comment": "Malware payload (njrat)", "value": "d2b32aabd14d76b0425c083b65efe5b230993a7d6bd735fd321c46c683888d49bf2b729522ee87dc711375c5f6edf500", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711825642, "uuid": "e040e8a2-e6b9-4da8-a4c5-87504893da24", "value": "T181E218067BE98215D6BC5AFC8CB313214772E3438532EB6F5CDC88CA4B676D04255EE9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711825642, "uuid": "0eda7fe9-9e6f-4db1-a15c-5aa0e67fdf27", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711825642, "uuid": "a198561f-4aa8-4a8d-9b3b-bf14ae8adf3e", "value": "384:T0bUe5XB4e0XGOt8w0Q0mS03AWTxtTUFQqzFFObbp:AT9BuVH55dTbp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711825642, "uuid": "9a229357-55ef-4c28-9e25-2da6af437b81", "value": 32768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711825642, "uuid": "bee01587-ae1d-4cca-98e8-4d1ded06003d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711825642, "uuid": "39f295d5-c2fa-48fb-a379-e7ff610cfcf3", "value": "bUvw.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "373efded-eee4-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711837444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711837444, "uuid": "2c0bfe11-c2a9-43b5-bbfa-a3223cd0a411", "comment": "Malware payload", "value": "c79c94f583fb17bd3d11e9213f95f656", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711837444, "uuid": "4b4c06be-d7e1-4ef9-b816-48df927a6cf5", "comment": "Malware payload", "value": "8eaba3c9c5748fe83a760bbce5456afb8ad78deecf334fd5b2be482fa6e08aa3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711837444, "uuid": "7e6e6014-bb01-4ff7-bdc2-b2121cd65183", "comment": "Malware payload", "value": "995eabae1ee5460944a5a0133830ba86e9f6c6c3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711837444, "uuid": "68cb64b8-8a3c-46a3-b3af-f35fe3c81590", "comment": "Malware payload", "value": "9fa68e7227312c46f2aca6950b4d611de334bba94e8d7288e19ad4ea6c1be84703bca2bec4371aacca48785c9f3244ec", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711837444, "uuid": "40f854ae-d237-47a4-817b-4255306d7bbd", "value": "T15F56F112BA86C032F9A201B05579A77B893DBE395F7185C7B3C01E3D58306D26B35B9B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711837444, "uuid": "4b3beb2e-d5dd-407b-ac7e-1a27206ac7f5", "value": "9e5c5e797053b04fee600a2868c7b384", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711837444, "uuid": "2981e612-0bae-4a65-82c0-abda3d6a1c02", "value": "98304:N9r3fyF0zwgSrClzVpGIyF1f58eSjOJMlA1XSE8P8P8P8P8P8P8P8P8P8P8pjt:NFvLwg9GIMN58eSjplkejt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711837444, "uuid": "7401ea42-a44d-4e2b-b7dc-532be76f51ea", "value": 6340472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711837444, "uuid": "4084aceb-9d2c-472a-9180-f24ee1bbac38", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711837444, "uuid": "69681fe8-b3a3-4870-80f6-bb637f6cd3fa", "value": "SecuriteInfo.com.BScope.TrojanRansom.Agent.1408.5847", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3513b441-eea6-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1711810811, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711810811, "uuid": "e954c48f-e9c2-4d43-982d-1d1813f0767a", "comment": "Malware payload (RiseProStealer)", "value": "23e6eacb8091301933e68db5dc9c3a39", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711810811, "uuid": "9db93be0-b2e6-49cb-8a69-21d0336ac512", "comment": "Malware payload (RiseProStealer)", "value": "8f803acf120419a2186bc211caf891ede0b72fdd547a10b2782ad9c5f56e12f2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711810811, "uuid": "866543d5-f02b-4877-9011-daca9e8f8606", "comment": "Malware payload (RiseProStealer)", "value": "60801359bc9ad78cd2c91c67d386afc9818893f9", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711810811, "uuid": "3c365948-8c61-41c7-9c95-69c944338632", "comment": "Malware payload (RiseProStealer)", "value": "ea78055470df76c9c2503a6aa78cec2155ae7284ee9e23599f6170661e39c58bd0c381ea5e4fa525d8f40b0ae6ff4130", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711810811, "uuid": "e3bfc12e-ee80-4123-aef7-6635096891ec", "value": "T1CD65333204E9C1A4C6A5CB712EAF5F767E6125272F484727A7854E883F763C2D90EF06", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711810811, "uuid": "84bf8108-aefb-4d2b-8763-a2393ee4450f", "value": "61259b55b8912888e90f516ca08dc514", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711810811, "uuid": "91005ae5-cdef-45ee-b5dd-4c3ec2fb8bd1", "value": "24576:4YMkvSGYvtruYmp2O6ywuJvWaYE7pZLzbiuVIvpiV/vNo1YjV0Nx:pVu1ruYAQ/gvhYK//g4V3uY4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711810811, "uuid": "00821b46-f385-4dc3-af75-fdfc43ec357a", "value": 1468288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711810811, "uuid": "9f1bc1aa-c440-4678-bdf4-b0a472ffdd8a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711810811, "uuid": "9ce79185-7df8-4c9b-b132-5a611c46ebbd", "value": "23e6eacb8091301933e68db5dc9c3a39.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16ae6103-eeea-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711839966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711839966, "uuid": "038bb2f5-3078-4e5f-96f5-73f8883cdb58", "comment": "Malware payload", "value": "d302c6cb2fa1c03c710fa5285651530f", "object_relation": "md5", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711839966, "uuid": "60d5d970-5ffe-4208-b661-451ee47d9a3d", "comment": "Malware payload", "value": "8fa641c454c3e0f76de73b7cc3446096b9c8b9d33d406d38b8ac76090b0344fd", "object_relation": "sha256", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711839966, "uuid": "b0ef0178-3377-4785-9112-a109b5f3e7ff", "comment": "Malware payload", "value": "123e570ac3d28a9f7ce6c30fdb19e20a8c23efae", "object_relation": "sha1", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711839966, "uuid": "7b8d7b3c-6255-4c46-94bf-6979ef249a89", "comment": "Malware payload", "value": "290a1206e736ae8c8b47bf82a9d420a10e1d3ea0d7ac15c9fa370c9473d8644f848c3b96f4325469ff070619a89e613b", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711839966, "uuid": "526d4008-ba55-4d09-afcb-5eb8ff78715f", "value": "T1CA442B4AA5A2F8E9D5A9CC3CC2668B2366F17481C211EA7736C85B381D7BF305E1D713", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711839966, "uuid": "c2ce20e4-190e-4f81-b0eb-a456b4ba44b9", "value": "6144:W600tc17tTkfNQXA+zGqmmMMUu3p6YOSTlopn:W4tc17t4qFzimi2sthp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711839966, "uuid": "bd7273ce-50a3-4956-8ab6-34ac0329db82", "value": 254521, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711839966, "uuid": "19921231-ea03-4ac5-85a6-20886e4712ca", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711839966, "uuid": "ee1ccb75-a859-431f-b61a-6add11e34764", "value": "liblzma.so.5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a096cd4-ee96-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711803894, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711803894, "uuid": "29a9dfb0-042e-43bd-b433-86ab07f8f55b", "comment": "Malware payload", "value": "0e30c307eb1119325d0ea8ef75ff390d", "object_relation": "md5", "Tag": [ { "name": "40.66.40.211", "colour": "#DB737E", "exportable": true, "hide_tag": false }, { "name": "pw-beta", "colour": "#37A355", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "sky-beta.com", "colour": "#2AF68F", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711803894, "uuid": "ad4878f6-4ba0-41fe-877e-dbc1262a33de", "comment": "Malware payload", "value": "905c274b72e944497a868117c31855a8b2452fe84719f50ecb843408a78a8b3b", "object_relation": "sha256", "Tag": [ { "name": "40.66.40.211", "colour": "#DB737E", "exportable": true, "hide_tag": false }, { "name": "pw-beta", "colour": "#37A355", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "sky-beta.com", "colour": "#2AF68F", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711803894, "uuid": "aba2fb49-ce86-4391-b5c7-809a3a69039b", "comment": "Malware payload", "value": "56ff0a6459e6396e46548203a5a89a7a563303fe", "object_relation": "sha1", "Tag": [ { "name": "40.66.40.211", "colour": "#DB737E", "exportable": true, "hide_tag": false }, { "name": "pw-beta", "colour": "#37A355", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "sky-beta.com", "colour": "#2AF68F", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711803894, "uuid": "513f14c4-67fb-42c9-9cd9-ac47debdeeb4", "comment": "Malware payload", "value": "98d455fa9874da2ae3559f9f45c72f2196dfc7ee541b6fa14041a676b163f6dffc47dc5f77610bb83e937f5a056ccbf8", "object_relation": "sha3-384", "Tag": [ { "name": "40.66.40.211", "colour": "#DB737E", "exportable": true, "hide_tag": false }, { "name": "pw-beta", "colour": "#37A355", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "sky-beta.com", "colour": "#2AF68F", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711803894, "uuid": "7de44ef1-cd64-41fd-9862-b6b353d6299b", "value": "T1ED083312465F4288322DF6EB42478F1C91DC5DDCA2633BAA00611B2DBDECDB29DFC569", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711803894, "uuid": "271c1e22-e848-4607-b167-d031c6b96cb2", "value": "1572864:+Hr4x6aBQxkOhPA5Gzozk0Ns6dVHFgiO4jLC86nzd9:c4x6aDOhI58ow0JfFbHN6nj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711803894, "uuid": "6b98fa7e-8072-46ec-ba02-5a5dcb07ef27", "value": 84302812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711803894, "uuid": "8c7678d5-8e1e-4fc1-8644-1bd6f77cc775", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711803894, "uuid": "c6339109-0485-4016-bf71-16fa7a34b1a1", "value": "Sky-Beta-Setup.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae2bcc71-ee88-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711798130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798130, "uuid": "b0a726e1-8403-4893-9277-8c75a33c488a", "comment": "Malware payload", "value": "ae903e465d36d9db29aa4681c7de64ad", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798130, "uuid": "19772059-d8a8-4da0-b809-34786e01c589", "comment": "Malware payload", "value": "92de4e5b3ecf5dec192910872b7f3a3299f059920b02b57602c1f114fe606429", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798130, "uuid": "9323d369-fcce-4ae6-8dc2-50fffc5f0283", "comment": "Malware payload", "value": "b758f68f9d1944de2396963d39cec0631a6a5245", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798130, "uuid": "8c2b7f85-f695-4261-8fe2-f92798be46e7", "comment": "Malware payload", "value": "e61b42f919bed3bbe8100a1962cab22a94a3e997c08bbbbc04659664ba71876b739372cd7217a3ea4022e1b90ef9472f", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798130, "uuid": "46372530-e74a-461a-aa1d-498cf3ee2139", "value": "T10035170BBEA1D89BC8ED48F048BF46A4387B9CC56E66C6472548B63D3FF32517A161C4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798130, "uuid": "3ccd61d3-910c-4d09-9abf-33fc8357c8f0", "value": "9d48f73722f36ae6301afc26a93899b0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798130, "uuid": "a1e06bb0-f6cc-46ab-81f0-14cb4fcc3f3d", "value": "12288:1V80TM9r5zTeqN8a3Sao7amenvqVdDPwQcS0LpCb:D80I9rJTeK/3wajnCTwQcS0G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711798130, "uuid": "5a42cbca-1d0f-45fb-b958-2ea8ca56fe77", "value": 1059968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711798130, "uuid": "8ad95cfb-de56-4f9f-8eb7-1770042d1af2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798130, "uuid": "1cbaf75e-c29d-4f89-91e4-5ccb42da3e6b", "value": "SecuriteInfo.com.Win32.Banker-KIY.26029.6109", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aab5c72c-ee88-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711798124, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798124, "uuid": "9b808f60-0e98-497a-be12-dd3018b79a8f", "comment": "Malware payload", "value": "3d234ec2eba4d8dc4d9964ecca1ad598", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798124, "uuid": "d9c5de0c-5925-49c5-8fad-f43a5b0ae7ad", "comment": "Malware payload", "value": "93618f170c687c52de46133240ee40ce463b3d23fca2b46d1c250cce01a843db", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798124, "uuid": "2927f5dd-79a5-4d87-85c4-513d3945f082", "comment": "Malware payload", "value": "804afe788223198f74ea122dadfc8224f2d79c87", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798124, "uuid": "0dddc61a-31dd-45c0-8ca5-665b9dcff1a9", "comment": "Malware payload", "value": "4ca4786626132a1290f1dd16b78700e32e8e2f846e3fc5c89af3c7ea6e2362d9115325ee959316ed41a71eb4428837c6", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798124, "uuid": "c3eaf088-6469-49ef-9916-acefaf4d2439", "value": "T1C6356C5AF681C93AC57E0B7D9C3B76846629BE102C3868667EE83E0C1F73553342D396", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798124, "uuid": "cab5eb80-48f8-4325-95e0-0764aa190a19", "value": "24576:KHrF6FY7L+hUvQHlNVFQWmQ8HgcG/BhSE2b:DYv/5HgcG/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711798124, "uuid": "cf7349c0-6769-4d88-8489-84368c07a779", "value": 1065984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711798124, "uuid": "5f9a9790-9d75-42b3-bf75-e03630396e0c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798124, "uuid": "e3e41dcf-d622-459f-a1bd-0eae9b213366", "value": "SecuriteInfo.com.W32.A-62389890.Eldorado.2515.13403", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84115103-ee55-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711776155, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711776155, "uuid": "56ac20cf-6273-44d7-831c-b95fcfcd4c7c", "comment": "Malware payload", "value": "a2f438f68efc689033871e9c92086ade", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711776155, "uuid": "6dfbe23d-2357-4fa0-976a-bcefa1c10352", "comment": "Malware payload", "value": "9527343296da11d1c6db18242779b3e604771b8806f19d89ad8d5f24c0425813", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711776155, "uuid": "5490db37-7d02-4137-a24f-d76819530f60", "comment": "Malware payload", "value": "ab7da32ec9a12e2a295aef01fc413aff5026f3dc", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711776155, "uuid": "f76742b2-9831-4966-b8c9-835925b94987", "comment": "Malware payload", "value": "a4fa52eea6e76cc2b784034ab29c6b6a32f760e2983327f4f7db9386341d59a710af00e4c301136bf8d0147fd552a95e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711776155, "uuid": "f21f38bc-328a-404b-9745-3d2783455546", "value": "T16C762374F3A15CBADF37A5FCD08E44D7AB5AB8A203C8015727F089E68B613D0542EE59", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711776155, "uuid": "8bb59854-4e8c-4c1b-8e46-b6fc5495efbd", "value": "2bf1fc659e1e270e26d98d8a21b8f037", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711776155, "uuid": "355aa14c-962a-4210-854a-5d77632cfeb3", "value": "196608:18xDHVaK2A2HM/JBNOqeZ1GIjwNa4iNg4x:18xDH0A2H8MBXGIjwNaZZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711776155, "uuid": "be9f838a-4771-4999-a656-ec99f7bcbd7d", "value": 7329888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711776155, "uuid": "05406512-532a-44e6-ab4f-5c41cbb693f6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711776155, "uuid": "ce945803-c742-4081-be18-0106b04949bf", "value": "SecuriteInfo.com.Win64.Malware-gen.5852.30904", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6a6ba7a-ee88-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711798117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798117, "uuid": "32305cbb-19b5-44e5-924e-682612ec1f8e", "comment": "Malware payload", "value": "54ccffe428980fe911b4708776f8d526", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798117, "uuid": "156825b9-16e9-47d6-99e6-73c82ba8bb51", "comment": "Malware payload", "value": "967a26f2e783958b7580c6c5cd90a6bdca02a2c35bd73e294b258d54e90d8fae", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798117, "uuid": "b47cbb22-a7a0-48c9-bb79-e8233b7f8506", "comment": "Malware payload", "value": "42846c81aabe9dbc57b493452a55d2851b8e7774", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798117, "uuid": "e508322d-0f0e-4917-973f-044cf26f409f", "comment": "Malware payload", "value": "e61b35f22eb678e6aa3ace2250ac2821b5f3d16e52dc98b0293d3b62346af1a5739bd5765b50cf00a4b03fb67e619a7f", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798117, "uuid": "e3345545-fb19-400b-96a3-73d8a629551d", "value": "T1F9E32A23A686D1E0D38555B335608B7A3BF7F3032D6106BF3E98AED519A09B11F2BD41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798117, "uuid": "4bb04e88-bff2-46a6-89ba-ee5466a9d2bd", "value": "768:MC9r0ljHpbF0nf4Ty6fTHP3HT+AcPYHS+8pJCdrdptLJF8Y4j7aGSZufDOryt9ic:MCMcf4/T/T+zQ8HCFNMqFkyvFL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711798117, "uuid": "66718558-1b47-414d-8d68-a1c2d3665fd6", "value": 155648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711798117, "uuid": "38e6dd8a-e2f6-42d9-b8c6-4f6f104ddf04", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798117, "uuid": "3d1e639c-9cd5-45e1-9803-a6c29fa7897e", "value": "SecuriteInfo.com.Trojan.Crypt.19933.31474", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56d69bd8-ee4f-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711773502, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773502, "uuid": "00023c6a-954e-4969-8c07-b545d4dd9fe1", "comment": "Malware payload (Mirai)", "value": "95592d2f0f5be4fd43278e1f860bd640", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773502, "uuid": "2cd39604-95d1-4a9f-b5e0-62784d7604f7", "comment": "Malware payload (Mirai)", "value": "9876ed1e33dda1141c3ba46282712d8aa34b7efc50f525e7df9dffd894f38983", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773502, "uuid": "87a81341-d8e2-4841-abcd-82507cfc4bdd", "comment": "Malware payload (Mirai)", "value": "5be81dc7416422920abb459361b53308eb42052b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773502, "uuid": "b84665b9-931f-4bf5-a604-cc489ecf240f", "comment": "Malware payload (Mirai)", "value": "16b97b5673f6b39808943be4289bc4d7489d5f8c53e744bc0a646ef74f56aba0701b2cffd47cc24ec14d2496fd0e14c7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773502, "uuid": "abd7ff47-81df-4241-b91f-0e0143e8d45e", "value": "T144330951B8825A2BC1D1537AB9AE968E373073E8D2DF7227CD205B107AD651F0DA3F81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773502, "uuid": "d14fd1a7-0fd5-4de9-8b5d-844749dd7984", "value": "1536:FmlYL/Qbsmep3qyqjcvoWqJ3WhKOSQfF:FmIQpmqsh95", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711773502, "uuid": "7df192db-38fb-42b0-9b20-3c43bf6995b6", "value": 53212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711773502, "uuid": "6bab8080-0638-49d4-8aa9-b88c6d9ad9e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773502, "uuid": "0e4b24b5-4c3c-4973-bd7d-7ce9b3319769", "value": "95592d2f0f5be4fd43278e1f860bd640", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35659572-ee8a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711798786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798786, "uuid": "8d437961-b47c-4899-9972-4cde92c04672", "comment": "Malware payload (Mirai)", "value": "c21a4dc0a18db79fa62e195029bd8f63", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798786, "uuid": "a80b7d33-5b7c-46b4-88bb-209d1316d557", "comment": "Malware payload (Mirai)", "value": "99820ec74f184b1638b9bc9b30630c76b953299f5ed8a02cc6d599c24147878a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798786, "uuid": "6f2baaa9-b36d-455e-bc8d-44a13ff6c5e7", "comment": "Malware payload (Mirai)", "value": "d4424de008128369627989d0559337ccf36cd49f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798786, "uuid": "26a927c9-922a-497e-bad1-505ff83fae96", "comment": "Malware payload (Mirai)", "value": "378fc14d47c8e614784e8d8500077a7a9e7d3b5426b2c63c7f79dd72ae049a5994905eb17498a170dfd1a083db85bcf0", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798786, "uuid": "3f5434d0-9a5e-44f0-88d1-d7bf9e4901d8", "value": "T1F173085AF9819F01D5D522BEFE0E018D3353676CF3EE72129E215B1567CAA2B0B7B402", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798786, "uuid": "34ca0179-5922-44c5-a695-cbcbde80b66a", "value": "1536:Aan7ZNjEXLdn+geRePGNrcKzJWh9Zq2ll7YivDEqjLlR:tPj+LxIMPGNrcKzJWh9PRDEqj5R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711798786, "uuid": "b55faf5a-6296-4033-bc98-92ba1e1a51ce", "value": 73748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711798786, "uuid": "815053f9-69b0-4b42-b18f-bcf3ffe49485", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798786, "uuid": "1c9f32ab-872e-4d2f-b3bf-0d26d991071a", "value": "c21a4dc0a18db79fa62e195029bd8f63", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63089307-eec0-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711822055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711822055, "uuid": "3cda71dc-02e5-4d04-bfba-394ea12d2326", "comment": "Malware payload", "value": "fd3c5ff86016fe626ad8a23befe38bec", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711822055, "uuid": "77582d9c-3786-4cbf-a27b-6be70d224892", "comment": "Malware payload", "value": "9a206cf78eda03be0caeb3377b6dd1d50ecb869a7c478d73af3464ae11a8625d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711822055, "uuid": "90aec2f8-bd7c-45a5-a7cb-e6f8d767ffae", "comment": "Malware payload", "value": "8eee4ac751ce0592f8865437a68361187ef1f913", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711822055, "uuid": "bb0a2b01-2d33-45a7-8b00-6243a59984b4", "comment": "Malware payload", "value": "ae8c42132edda371187831c5905350c70928a552922414589115634c4eb6660273263c3f26008814b9cd0a4354b9c179", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711822055, "uuid": "2b3aa9e5-70b0-4180-85b4-0a2dada333e5", "value": "T1A02612D2F284D49AD41B0277CC7AD971A413BE7A4970861E296D7D2B76F7382102BE0F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711822055, "uuid": "ebd6e949-a742-4cea-b01c-f3bcd97d7b88", "value": "cb23e26cc45ed9aa58fdce155e7da31a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711822055, "uuid": "340db107-e665-4041-90b8-92fdd6d9d368", "value": "98304:F4ixv63obnoZnmdHEGWX5kGS7+PkHyEzoG+3Uq:bvXUskG+PSyPbTG+3Uq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711822055, "uuid": "c0900ea4-c580-4f60-9e4b-f9fa4e3e55d4", "value": 4438767, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711822055, "uuid": "5f758228-0277-4eac-893a-be0ee03df61a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711822055, "uuid": "bd897f9e-eb4f-4a47-90ed-e35b61515b4b", "value": "My_diet_chart_Daily.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0936311-eee9-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711839768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711839768, "uuid": "092afd72-08b5-48dd-8902-b31522443c17", "comment": "Malware payload", "value": "540c665dfcd4e5cfba5b72b4787fec4f", "object_relation": "md5", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711839768, "uuid": "d524a641-614d-46ab-b3ba-c1ffd52edf2d", "comment": "Malware payload", "value": "9aef898229de60f94cdea42f19268e6e3047f7136f2ff97510390a2deeda7032", "object_relation": "sha256", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711839768, "uuid": "75a6e162-1e74-4878-923b-7292b23947e9", "comment": "Malware payload", "value": "50941ad9fd99db6fca5debc3c89b3e899a9527d7", "object_relation": "sha1", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711839768, "uuid": "38b60421-c021-40cb-b87f-f42de8934707", "comment": "Malware payload", "value": "7ad8a203405c74a0941a109483b59d12e57ded120943c3667c8a7ae84eaeb8a3621b87e8542c685ddfe84246b14586e9", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711839768, "uuid": "d66884b0-0fe7-427c-b296-4c2417101195", "value": "T1A7F2F28E3797C1F34EA0C218B1A5941BC9709BCF5A415946903875BCAE1BAF70718D72", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711839768, "uuid": "158c87b3-35db-459e-8956-9d6b128d3eb8", "value": "768:VWjswsN8rgjjT3VdukNy0JPkGBGbd0uhEkUDVjoI/USGt0rjnnqZKwIK:opk73VdDNy0JPk6kqu10v/Ux0EIK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711839768, "uuid": "fb735de2-d699-49d0-a769-62088bbf5cab", "value": 35421, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711839768, "uuid": "3ddc6820-fd86-4683-bb92-2d8b988bcfac", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711839768, "uuid": "35660417-446a-4bfb-aaba-bb2e8e33e899", "value": "good-large_compressed.lzma", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d324515-eec6-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711824649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711824649, "uuid": "fafdc1bc-09cd-441f-ab93-44215468d263", "comment": "Malware payload", "value": "35631c1f8f26d19a0425a2749e4ad0de", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gamerforyou.com", "colour": "#38C628", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false }, { "name": "www.gamerforyou.com", "colour": "#7FA6AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711824649, "uuid": "e06ff9a4-7a78-4d29-8819-dd675b483955", "comment": "Malware payload", "value": "9c71cbf0cabe258504ad3f6227a2f074210f1cf0dc4a43e865b26ba364277586", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gamerforyou.com", "colour": "#38C628", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false }, { "name": "www.gamerforyou.com", "colour": "#7FA6AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711824649, "uuid": "95cd3ceb-d5af-4b66-a3e7-221d498263a6", "comment": "Malware payload", "value": "96f9f08b0dc5c20823eef2c223ae84984c592922", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gamerforyou.com", "colour": "#38C628", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false }, { "name": "www.gamerforyou.com", "colour": "#7FA6AF", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711824649, "uuid": "ab1ca393-ed15-4baa-9f9d-f7ee1e951f76", "comment": "Malware payload", "value": "acfacd514777bc9a3f20849cd51f1cc3bf1d943e1aaa1e09b8cd4c38ad93e078be709dd1f832166e513d60411ebb4357", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gamerforyou.com", "colour": "#38C628", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false }, { "name": "www.gamerforyou.com", "colour": "#7FA6AF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711824649, "uuid": "fd6a778d-fdf3-4575-a90d-61ee256278fb", "value": "T15FE733C560A19C4BDF0697F911351A9E10F6387067237AFCCA346DF0A72B6529E2239F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711824649, "uuid": "e0c1ff21-675d-42ff-badc-49d64be46d55", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711824649, "uuid": "3987105b-3d2e-4122-9b6e-826fdfc1d975", "value": "1572864:JyXoONw5l0EpyQ9pVTrkf2zi4ckgodbokkE57TEj9Uk7:kXk5uoyGVTEgi3kfok5TEZj7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711824649, "uuid": "e98d6adc-7f4f-404f-ab8e-0361c251e468", "value": 67487550, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711824649, "uuid": "7930bef0-f5a4-4370-b64a-c17f0be1a37d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711824649, "uuid": "e4d8a313-31d1-4678-86d3-819bc3c45439", "value": "Mauqes.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "643365ba-ee4f-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711773524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773524, "uuid": "a4c401ea-c77c-48d1-9e1e-d6439502d98b", "comment": "Malware payload (Mirai)", "value": "88a701f18425dd6987e816270ec5951f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773524, "uuid": "80d533f8-7278-4834-9faa-7f96f4c26d22", "comment": "Malware payload (Mirai)", "value": "9cf7c4a3035ad68e5c8f14cfe9a236dc81c192d964bcc6bf384a36bf527c9df5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773524, "uuid": "a08749f4-8f15-4af3-8622-d7a1f48b637c", "comment": "Malware payload (Mirai)", "value": "d4f21da0806d268f1dca364f81056b1acdd5de71", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773524, "uuid": "0d95d1c2-21a3-4b31-bdd8-4ee222ccd377", "comment": "Malware payload (Mirai)", "value": "97b276dcbc0d5131a12d4b652d803c02287885f0ec14b1d8d6c2469d1af7d7b88b2d0d1a28d02798a7e88a8631386479", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773524, "uuid": "c23610ce-4e8c-48ea-af50-15f463789b1f", "value": "T13F433B95F8019D3DF94BD5BA441A4E09BD2023C052A34F2767B7FDE3AC721ABAE12D41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773524, "uuid": "3d26588f-7d19-4177-9f98-616ef70582ec", "value": "768:cde2cPW+XDjIu4KO00uCgiqUfwdFYr4ub80MaHLZNbaE9rtUXFGA4:cdJc+xNKOv7uErRb80MOZNb19rLf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711773524, "uuid": "2bd390f2-8f90-4e72-b5f3-e6634ceb8a68", "value": 59896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711773524, "uuid": "4f89fb05-e582-430f-97bd-2f71f5ea0518", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773524, "uuid": "26ac20ec-153f-416f-88cd-db65141ac573", "value": "88a701f18425dd6987e816270ec5951f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c5f96ed-ee8a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711798771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798771, "uuid": "77ff21f0-d39f-4274-855b-3be21a927463", "comment": "Malware payload (Mirai)", "value": "ade243234f0e119e59d15ab16bfda059", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798771, "uuid": "8cc2558f-92ed-43ba-ad72-0bc0110cb1bc", "comment": "Malware payload (Mirai)", "value": "9e0221db5574de8ef5298637f4435a9e51bcb8da9bc329b169eb75e9adfacb9f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798771, "uuid": "192b1433-5c6e-4c4e-8c0f-571e37081cd6", "comment": "Malware payload (Mirai)", "value": "12cfe5f35f176ad22b849b26a89b346ce7a3e595", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798771, "uuid": "57dd619e-8bf1-4fcd-902e-86ac252224d5", "comment": "Malware payload (Mirai)", "value": "c63f4c806ed98048075b08bddf9622fe383a34f7a7841c16b70d07f0a0194b92f3265f18a0d7172754bae3fd6cee30ac", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798771, "uuid": "e3ec8ee6-b997-4d1f-825f-0e3935c1ab1e", "value": "T16663A40ABF610EFBEC1FDD3709E81B06258C650A22A93F753934C928F65A64B05E3C64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798771, "uuid": "c4efda49-3974-4d2e-a898-808111951bbc", "value": "1536:nOzVtLezIcICysMUq9FMvxQn1SR+lgP7V:nOJtLwIcbYUUmd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711798771, "uuid": "c643a50f-f3ed-4f3a-a23f-ebafa3676ff1", "value": 68432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711798771, "uuid": "28011e56-2c10-4ff5-9528-2c4ec1b5210b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798771, "uuid": "40bd5b77-d0c0-4bb7-af5c-50cc15c4d644", "value": "ade243234f0e119e59d15ab16bfda059", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7246e62-ee82-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711795621, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711795621, "uuid": "a113a353-e6ac-476a-9df7-91ee9adb7711", "comment": "Malware payload", "value": "c0b3bd75b4b6ff58268a559b0de71ad0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "mariyel-therapy.com", "colour": "#976B77", "exportable": true, "hide_tag": false }, { "name": "NovaSentinel", "colour": "#8C2A17", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711795621, "uuid": "3fab72f5-bb3a-477e-ba95-491093b2447a", "comment": "Malware payload", "value": "9f9574738e37b08b88bdb456916dd1c7354905ab17fa4005d9d228aa013ea943", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "mariyel-therapy.com", "colour": "#976B77", "exportable": true, "hide_tag": false }, { "name": "NovaSentinel", "colour": "#8C2A17", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711795621, "uuid": "509e49bd-6080-40ac-8d4a-8e0ee0e89fe5", "comment": "Malware payload", "value": "346a7aaab418a0d75bc3153d104998bdf348f862", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "mariyel-therapy.com", "colour": "#976B77", "exportable": true, "hide_tag": false }, { "name": "NovaSentinel", "colour": "#8C2A17", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711795621, "uuid": "a4873bf5-af89-48a7-bb9f-bb558eb26ee6", "comment": "Malware payload", "value": "656b8b4b0a13a9dd4448990f6efb1e92090d26dfc484414e318dfe0dfa5185854cc151ff2fca73b56fe6f25b19af5d97", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "mariyel-therapy.com", "colour": "#976B77", "exportable": true, "hide_tag": false }, { "name": "NovaSentinel", "colour": "#8C2A17", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711795621, "uuid": "05dede9d-5c89-4fd8-8245-de481493cbd5", "value": "T18418339CBEFBD9C5E82B69BAD07941DE1C09ABC04882277D508FB5C3910A5989CC7F35", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711795621, "uuid": "571088a0-239b-4d2b-aa28-8f12a5a5aa51", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711795621, "uuid": "f10bd8f6-cfcd-4dbd-abdf-3a455cb6e295", "value": "1572864:4DU+P7/noNhrSTkj6xPQGUb5NF5QkHhkp5jSOr1959Al2+2511I8:4DtP7n60xF/23Qq6pZKc51K8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711795621, "uuid": "605b2bf3-41a3-4345-a4c5-9e3fb62d6e66", "value": 84865138, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711795621, "uuid": "e218b7d3-3635-4ce8-91da-868b7f8fc65d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711795621, "uuid": "209eec1f-99a7-45a9-8117-fc018dd54bec", "value": "Mariyel-Therapy_Launcher.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "685ce678-ee4f-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711773531, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773531, "uuid": "6ca5c95e-62ff-4ab4-b1a5-f135d510cafc", "comment": "Malware payload (Mirai)", "value": "526957cc5d136537f8afab42fbf01aa6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773531, "uuid": "0d076c5c-d8aa-4643-bf60-52e6da906ded", "comment": "Malware payload (Mirai)", "value": "a382a4202d027465021bd42276ce7418fe6bafa1d233902805ddb4c1c8f47e1e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773531, "uuid": "1b954244-51fc-4929-80ed-8c4639256954", "comment": "Malware payload (Mirai)", "value": "5c3ea63ee028fc8c685ea860d2a417d1cb91ce9c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773531, "uuid": "848d5cd5-3c8e-4b2a-93a9-0f7bc233b3e3", "comment": "Malware payload (Mirai)", "value": "c6b3fe4ec3868c9dbdccc9f8d4a2af54928fe9ec70e44855638a75faf65a3be6d78a0ae6459488e5c252e13ea8e49083", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773531, "uuid": "6d4ca27a-488f-45b7-970f-248679773c21", "value": "T198438D3AE46B5D94C0890234E4668F745F63E1C892A33EBA5791C2B55087EECF908FE5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773531, "uuid": "e001fb25-7f96-4e37-983c-b9d879424fb4", "value": "768:rK/GyHeWje582eAwdMLHlvBdCRzRvkPSqZEk3gCuJoVcEZGCVDwk:rMdH/jd2LKzRvkPS43glOVdGCVs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711773531, "uuid": "b01c6914-f81a-4833-933a-88e4b814dadc", "value": 55432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711773531, "uuid": "c65ddd54-8bbf-49f1-8e09-c3ee6aae1208", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773531, "uuid": "acd4f632-28f8-43b6-9cca-4ed451cc0aad", "value": "526957cc5d136537f8afab42fbf01aa6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67da5c08-ee66-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711783409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711783409, "uuid": "57b781f4-09a1-48ad-8e80-92856488f68d", "comment": "Malware payload", "value": "d99020c900069e737b3f4ab8c6947375", "object_relation": "md5", "Tag": [ { "name": "docm", "colour": "#502578", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711783409, "uuid": "85d84c00-0323-4d34-aaac-63d32341f3bd", "comment": "Malware payload", "value": "a6562d8f34d4c25a94313ebbed1137514eed90b233a94a9125e087781c733b37", "object_relation": "sha256", "Tag": [ { "name": "docm", "colour": "#502578", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711783409, "uuid": "1d523c5b-bee6-431e-8817-76a475b213ef", "comment": "Malware payload", "value": "af5b24062ff7d53cda41cb3a6d22fde57cffb467", "object_relation": "sha1", "Tag": [ { "name": "docm", "colour": "#502578", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711783409, "uuid": "e3409eab-c09f-470e-b750-294447132142", "comment": "Malware payload", "value": "a445ba56a6cc31da5703353266a27e0f1650f6c7c0727b204a0da54cd393533fa689b0544b675fb4b7af72117d737204", "object_relation": "sha3-384", "Tag": [ { "name": "docm", "colour": "#502578", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711783409, "uuid": "d7bccce5-28c3-4ac8-b83f-666ffedea31a", "value": "T1CF729EBDE6047876D0E5C83E61084AE0F81C26096715687DAF0C939CC7862DB9B57EE9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711783409, "uuid": "90c1acf0-37e1-4528-a35e-a9882d759f01", "value": "192:/imtcdEeDeJ88AQYbIFYpWHIA+ugOAo//dhhCHrPJf7hOSZLB/oZcLaBXDc6:/imtc69C8AQmuoAB0M/cLFhFZ2ZFc6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711783409, "uuid": "cb1d1b04-c869-4736-8b9c-b8a1d1f96691", "value": 16767, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711783409, "uuid": "aa98927d-2092-4a96-b010-d02f8059a012", "value": "application/vnd.openxmlformats-officedocument.wordprocessingml.document", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711783409, "uuid": "bd234fed-d1e4-4878-97f5-47d949d244ce", "value": "Transmittion swift.docm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aee85761-ee88-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711798131, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798131, "uuid": "101415bf-018d-4584-b735-5642ceb35f6b", "comment": "Malware payload", "value": "b8385d666e6c094eb149ccf8e3331f16", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798131, "uuid": "cee635eb-176f-49e6-a8de-71e4a7707a82", "comment": "Malware payload", "value": "ac983ccc73edeb7f766022d28f6895f5559fa8a2c2b06bfbbbe7ca92fd516363", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798131, "uuid": "50dba6ae-326c-4b14-93b8-8ff70406bf3f", "comment": "Malware payload", "value": "3ab70f12c3150ba00502786eb5e0db5d1430a4b5", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798131, "uuid": "906cd703-4f34-4057-9a8a-b6f640211228", "comment": "Malware payload", "value": "fcf17229a15409fe3e69cdbbd4eabf2aa7e1f694df98a02f22b671a8b6213998774bd6ef0e569351d3dd76870b1c9ab8", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798131, "uuid": "6a63faa8-a289-4cff-9ae2-0a32a591e71f", "value": "T10F8502D1F764821BE692F4789127C2194A911D25EBFEA49BE0F93A4D73381F05BBD302", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798131, "uuid": "7e8c465c-19e5-47d6-af06-3f32948279db", "value": "bc3b2f6718f1299d23c39d1ac5294e9b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798131, "uuid": "8bc7333d-8b14-4c06-a966-4639288b04f9", "value": "49152:fkta1ZQY/aKEb4cABah2NpkHAkt8d2lsI8qn:8NMBRkgGs8su", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711798131, "uuid": "6152aaa9-ed2f-4e7f-9a8e-84ea8ade821f", "value": 1805104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711798131, "uuid": "f354d627-19a1-4b13-8165-5a40ac10f425", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798131, "uuid": "5ce22a46-ad26-47c6-b900-e59bc50011ee", "value": "SecuriteInfo.com.BScope.Trojan.Occamy.16275.12321", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85a57810-ee55-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711776157, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711776157, "uuid": "7420281a-4188-4f4b-8dbb-818bc79b475b", "comment": "Malware payload", "value": "4f972ad9f0223f947c0d204a9d3a151e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711776157, "uuid": "cae663ae-36f8-4063-ad00-96fa33ca4ce2", "comment": "Malware payload", "value": "ad3ed86e2f6af81178bc581cc7013e958f71cbca0a3e5bd76979cd72138deda1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711776157, "uuid": "3454b81c-029b-453b-af54-ad6001355472", "comment": "Malware payload", "value": "50536acd7ca0d935075256bd4190c3265c6f6d4c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711776157, "uuid": "3eea18ae-9e99-46de-b57f-2d51f195d9bf", "comment": "Malware payload", "value": "58faa094ec75d82a6253ec49a944275b70988ecf42502a55631cf2253d09e6af3651b0f798930d1bd12760c015c87257", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711776157, "uuid": "ddddae50-3b4c-460e-b351-0ee6a995a634", "value": "T16DA63311A5F2D4B1CD8C767A11DFB3B2A632A163B70DBD57C3344D6861B42DA0A3A2CD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711776157, "uuid": "a8ad48fd-2c82-4b32-a912-325857ea63bf", "value": "ddc42efe1f8c1461f7d369f1d64393f2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711776157, "uuid": "a64ef9ab-3c25-4de1-95df-22a5b989063b", "value": "196608:1ik/uSu5gTe3p2VLyM0/f7Pnj57ymavlb+hVlW0cJjkr9Fk:UkimTe52VGM2/j57ym2b+T80cJju9y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711776157, "uuid": "3fdd4116-ffec-4d8b-a5bd-47d8e1022950", "value": 9759936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711776157, "uuid": "042c4ac5-623f-4d64-8da7-21ffc716789b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711776157, "uuid": "6c7c2059-47b2-4ee9-a810-3af78e5a2055", "value": "SecuriteInfo.com.Trojan.Dropper.5344.29723", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32436a75-eeea-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711840012, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711840012, "uuid": "87216640-eb58-45e0-8a51-5e4aa24562f2", "comment": "Malware payload", "value": "d26cefd934b33b174a795760fc79e6b5", "object_relation": "md5", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711840012, "uuid": "61949828-bbe3-4bcf-96a0-2bfe15c033f1", "comment": "Malware payload", "value": "b418bfd34aa246b2e7b5cb5d263a640e5d080810f767370c4d2c24662a274963", "object_relation": "sha256", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711840012, "uuid": "1ef110b4-2e67-416a-8bc2-03d466bb6537", "comment": "Malware payload", "value": "cc5c1d8f9924a3939f932a50f666dba03531e6a9", "object_relation": "sha1", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711840012, "uuid": "d909748e-12fa-463c-9b8c-c55f854aa2ba", "comment": "Malware payload", "value": "413ac03de4552736e505dab1ae4283b1b068792ce18d27c5bfedc68a4a391be5f19ce3ccf4430b2c48e80439895851aa", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711840012, "uuid": "7caf1cb2-d093-44dd-a924-9aaa758cef95", "value": "T1A983C707B9A684EBC4ACC934466BA265B63AFC55993473037740772F2F71F10AB6A720", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711840012, "uuid": "bd9e6857-8931-4445-b15b-57be6710f1b8", "value": "1536:paW0m6lUoBmc+u1PQ8orIH5xaBZ6+LGP4DWBbIpFp2DqtaQ7r+/B0KPEooKcQo2q:paQQBMue8orijaBU+G4pF1ip0KPEooKQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711840012, "uuid": "8ba76974-88d9-42ab-96d4-5dfda90d4bba", "value": 88664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711840012, "uuid": "9b1ce04a-31ca-4a95-a61c-b9ab40df3b6d", "value": "application/x-object", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711840012, "uuid": "83030628-f1a1-4d59-ae40-5cf327069159", "value": "liblzma_la-crc64-fast-5.6.1.o", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e2393c3-ee66-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711783500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711783500, "uuid": "7f108dd6-0496-4738-9a98-632a316199f1", "comment": "Malware payload", "value": "c6bf42cc2f5b2dc87c0d7dcfba254150", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711783500, "uuid": "e68bf77c-f221-4c9d-bf59-cd08f3b09a81", "comment": "Malware payload", "value": "b43a447bdcf9124afbff831fea7571de26c0b36052a745ff7fe8e15a786a71d1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711783500, "uuid": "4f3717a4-c45f-4892-8e86-9700e0aa9a85", "comment": "Malware payload", "value": "f38e0b9692f0f597203e4bfed79fcec3a88713fe", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711783500, "uuid": "9289b338-f666-4b95-b598-b9e2dabc4db0", "comment": "Malware payload", "value": "43640d92840c0a60866a65f6e3c85012f589cc6049f049ace9bb0e7990155316f266af8dab6e54c367fce3d6072a72cb", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711783500, "uuid": "ed8a7f49-1b99-45fb-bdca-bf830994468c", "value": "T1D4A733F435D379FCE1B6117B41978FF9E55880A4ADCA2AC72943A40B54F9238782B2DC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711783500, "uuid": "06760bd0-70b7-4fae-805f-be026b394876", "value": "32569d67dc210c5cb9a759b08da2bdb3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711783500, "uuid": "5c78d030-be5b-4a39-9c1f-a2213eb50285", "value": "786432:6vvt95Xu9QfuuGyew+4TrRzPYMmG8NdD+BiHiaady3qLlPcpfaVrgXWMeAaJVGZH:6vvt/XeqzPG7DaRLBcpyVrgDeMYE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711783500, "uuid": "fe6c938d-8a94-4422-9882-825ebcefd3dd", "value": 44844640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711783500, "uuid": "0b04732e-c415-48ba-bb32-3a807b1df3cd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711783500, "uuid": "f1db9676-6d1e-40ea-bce5-d6b11bb03723", "value": "SecuriteInfo.com.Trojan-Downloader.Win64.Rugmi.24898.11573", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "529c1ff6-ee69-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711784662, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784662, "uuid": "e0ee9051-b62a-4147-a025-8708d72dbefd", "comment": "Malware payload (Mirai)", "value": "cbe6220cd6dd38552e44f580d3ed41ec", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784662, "uuid": "265c78e9-dcbd-4e3b-929a-6289038ae756", "comment": "Malware payload (Mirai)", "value": "b43b4d6e51010c48565b41dffa873bcf74d92464a02eac0192919f201adc98f4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784662, "uuid": "19bfa958-b4da-4e20-b282-822cdfa39d74", "comment": "Malware payload (Mirai)", "value": "dd4fc0ea4d7a71a9e8c51ca5d42f8de837c7c3c3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784662, "uuid": "f39cc453-db2a-4024-953a-5c19093c73b3", "comment": "Malware payload (Mirai)", "value": "7933351e92ca187229711945409447fbae60fecc1a58d96e4fcda0120dbbaca679da85231cee99e7d3820687877e3d40", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784662, "uuid": "bbd3b79e-d580-498d-90ca-7a478704e562", "value": "T1C763A30F2E318FADF76D823447B78E21E258339216E2C641E15CE9111FA434EA45FBAD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784662, "uuid": "569c58d7-f718-41d0-b435-19d5e19ce17f", "value": "1536:n5f4U2ToooooUs3sapQ6Nf/UCTKNKGoCjYYtJ7Z:OU2TbL633tf/UCTK4G3kYTN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711784662, "uuid": "b94bcf0f-a76f-4cd8-b37f-cbe4df39982f", "value": 71788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711784662, "uuid": "563aad93-3e13-4556-88b2-8826afbd4e37", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784662, "uuid": "c4ea9f48-7641-4c43-b6fc-ec374640e7aa", "value": "cbe6220cd6dd38552e44f580d3ed41ec", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1aa50ccd-eef0-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711842550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711842550, "uuid": "0d094260-98a4-422a-aa9c-0d84ac0dd612", "comment": "Malware payload", "value": "571d0c1b811c4fb6c47869eaa3222c58", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711842550, "uuid": "b63112f3-d326-48dc-8f9c-608d41e50663", "comment": "Malware payload", "value": "bc3d4d7af946ac7ab32d2ed1c0156a484a0f2625ee6d084e4fd2756828f453e6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711842550, "uuid": "4af55cb1-2e01-41fa-90f3-ff6fef477ed9", "comment": "Malware payload", "value": "5fabe2a4fc3e6407bed5e14879ffe7fe1d56189d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711842550, "uuid": "e7645785-c25c-4e92-b09b-b552dc949054", "comment": "Malware payload", "value": "bfbe3a8cea6163d9fc5f1f7b8da2856bb7ea8c24873b579d6c87668ead8bda8ddf8d53a16c0e2ed4489a0f6de42063ba", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711842550, "uuid": "c43bffdf-821a-49d5-ac41-a08fa0662502", "value": "T1C683B6236E46807BE1498EF1943B851578767E360680BC5B67C8BF6C2971613B9B233F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711842550, "uuid": "470bb84e-7bbf-4211-b2ea-c8d3c7d68f37", "value": "81e86e41452052a02b1c6f694aff197c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711842550, "uuid": "7e4790a3-8d25-40fa-acd6-39d3d4983bb6", "value": "768:IqL+cNfZFQIbX2rpjGSLrWa5MsBj98Aj9cItSShEV4SWExBT6KPJqURSZpBN8caj:IlcVIIqrRGXYMsBmA5hiWeF729fetxF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711842550, "uuid": "360d3e7c-89cc-435a-a330-31ceb26d3e1d", "value": 81920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711842550, "uuid": "2d2de529-5497-461b-9e08-c5ae922cfd39", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711842550, "uuid": "c8610537-73a2-4b27-9a37-f8e86b7393e4", "value": "kiltren.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c88293d-eec0-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711821964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711821964, "uuid": "5a995790-2db3-41d4-bad3-00c487ab7129", "comment": "Malware payload", "value": "39bcff51ad0c4491bea74c100240c86c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711821964, "uuid": "fdc69029-a776-404d-b10e-f21a6903bbed", "comment": "Malware payload", "value": "bd349624ce6fd61a503f440b45096d61e0408a7754e11f1d91896ba4e905fb2e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711821964, "uuid": "ee143628-cacd-4718-82d5-9bd84eb7452b", "comment": "Malware payload", "value": "18deb7b04eecbc7605ebca46edb2d5bbced0b716", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711821964, "uuid": "1cf3b5bc-abbb-43c1-8c6e-4e6abc2dc88f", "comment": "Malware payload", "value": "50474f7fefd53f62a532abb4cb9654b74340c1f9f25baa4c0c19e890d4d33ee5418477a412fdac910264894952c81ef4", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711821964, "uuid": "cc4125ed-b368-42bd-9d92-4a0ffe37d5b4", "value": "T1842612D2F284D49AD41B0277CC7AD971A413BE7A4970861E296D7D2B76F7382102BE0F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711821964, "uuid": "6d567e69-59d5-4955-ab01-2aad273e0758", "value": "cb23e26cc45ed9aa58fdce155e7da31a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711821964, "uuid": "805fffca-6dbd-48bf-aba5-1be1fca206d7", "value": "98304:F4ixv63obnoZnmdHEGWX5kGS7+PkHyEzoG+3Uj:bvXUskG+PSyPbTG+3Uj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711821964, "uuid": "c55d38a1-7d54-4571-a58b-731f951881cd", "value": 4438769, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711821964, "uuid": "18923dd6-6515-4bdf-8443-900b7a752f26", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711821964, "uuid": "f6e1dbf4-c0fc-4c0d-9d55-af96280bafb0", "value": "My_diet_chart_Daily.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b86ad96-eee8-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711839088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711839088, "uuid": "1143aefe-a825-43b0-bd82-be59c5dfbef3", "comment": "Malware payload", "value": "212ffa0b24bb7d749532425a46764433", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711839088, "uuid": "ce5b422f-3dad-424a-8626-3787f00f80de", "comment": "Malware payload", "value": "cbeef92e67bf41ca9c015557d81f39adaba67ca9fb3574139754999030b83537", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711839088, "uuid": "c626bb26-f105-4b4e-ae84-30b3d9e97510", "comment": "Malware payload", "value": "0ebf4b63737cdf3e084941c7d02f8eec5ca8d257", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711839088, "uuid": "4fe5165d-8054-48d2-a614-2b35e6cf20a0", "comment": "Malware payload", "value": "ee73ee55a771037a24c0c2a6b4a6b8ba0d9e8170ab941b24e38ab450cad44f90dee11f98cca51252429ed34849ffe75b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711839088, "uuid": "c63c7230-9a6e-48da-8045-41774a87e65f", "value": "T1A183D807B9AA84EBC46CC934466BA265B63AFC55993473037740772F2F71F10EB6A720", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711839088, "uuid": "0be77c06-4fbf-4d0f-b7ca-f5a276e733df", "value": "1536:4aW0m6lUoBmc+GtlWu/gIP5xaBZ6+LGP4DWBbIpKqqEg2B8TLXM/U8udsO+x21Os:4aQQBMRu/gujaBU+G4p3acM8udsOz1Os", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711839088, "uuid": "3c566609-1e08-4157-b7e0-c017ed65e254", "value": 88792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711839088, "uuid": "c9df9163-9145-4875-bb53-6decb20d5a4f", "value": "application/x-object", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711839088, "uuid": "c5a66871-07b1-4767-b369-1119afde40d1", "value": "liblzma_la_crc64_fast_o", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9899aba7-ee90-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1711801529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711801529, "uuid": "fdd81dd0-6dbc-4556-9ab9-bb765124b217", "comment": "Malware payload (RiseProStealer)", "value": "cb1bbca75a3bcbfb2f40d8ada483f37d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711801529, "uuid": "d721c9ba-8e67-429d-ad03-8a01f0d9368b", "comment": "Malware payload (RiseProStealer)", "value": "ceaefd25ad7b260c2cb6026dcabeeb34eae2cf6110ba8f9a19a197d13731c804", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711801529, "uuid": "74639674-6327-44b1-b2ba-ec07d1887d96", "comment": "Malware payload (RiseProStealer)", "value": "82192d7c52c1cbbd944e2cccf0795bb6f8310423", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711801529, "uuid": "ddee5f2e-ebe2-4032-a044-59986816c5c7", "comment": "Malware payload (RiseProStealer)", "value": "5efe5d03c9f202a7614bab894659f5e3bba9dda7d6c6f51ee32250400d94c9e95d9958ddbc750fdbe6e9f75d613a27b2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711801529, "uuid": "37e706de-d14d-4f4f-97c5-1ab2a3195e31", "value": "T1D2E53AB2F70672CBD48F2774956BCD92586E03B927200CE3986DA4BE7E67CC112B5C25", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711801529, "uuid": "dfcb7022-c5a1-485b-a3c8-82bfb818f42e", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711801529, "uuid": "7cd2caa6-48dc-4398-acb3-d91f927cb7a7", "value": "49152:DiSPK+0dNa73N/nfk2QFXCyXyoKTcWqtuzSwG5T:tPr0dNa73Nnfk2QFXCEyoNFtFh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711801529, "uuid": "47f82ac2-7bcd-4364-9cd0-20b740b8503e", "value": 3173888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711801529, "uuid": "7332f212-22d0-49a2-b450-69bdc5eb971f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711801529, "uuid": "08adcaac-a755-4a2f-bf58-8d0d0dad4e1b", "value": "cb1bbca75a3bcbfb2f40d8ada483f37d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18d1c942-eec2-11ee-a120-42010a9c002e", "comment": "Malware payload (CoinMiner)", "timestamp": 1711822790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711822790, "uuid": "2b233369-c181-4440-932b-bf981769c54a", "comment": "Malware payload (CoinMiner)", "value": "b091c4848287be6601d720997394d453", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711822790, "uuid": "bed11faa-223c-4081-8eeb-41575cf3f581", "comment": "Malware payload (CoinMiner)", "value": "d0b06ca6ece3fef6671fa8acd3d560a9400891abcd10f5cedcfe7bd1e6050dfe", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711822790, "uuid": "4c904e61-bf75-4e52-b880-af0b88339102", "comment": "Malware payload (CoinMiner)", "value": "9180e34175e1f4644d5fa63227d665b2be15c75b", "object_relation": "sha1", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711822790, "uuid": "9bbe35a7-401d-4697-a4e2-68df5ca47950", "comment": "Malware payload (CoinMiner)", "value": "c71f620e3ea047aaa054dc1584f611eea8051249ddbe561a77506396172f9de636c678e8e8333c2b2d1b231559275e50", "object_relation": "sha3-384", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711822790, "uuid": "1c52df48-7ef5-4eb3-b862-ddfae248d063", "value": "T14CB633C25EB4F8B8D1D196344ED79B0911C5B242E1FE2D9E38DB1D021EE0A15AE4E6F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711822790, "uuid": "c12b47bc-4d5d-4673-8342-5f8b5f630b8e", "value": "c7b7b517cf49febe9724e1b897a98881", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711822790, "uuid": "4cf2fd89-91a3-435c-a6bf-36fd0c783570", "value": "196608:oPnV1Bk/fRaGxUCBIORz5Z2YoZX0tMmp6tgq1D//XxdgPxwdT:oPKfR/UCBF+dZX0tMft/vxdgpG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711822790, "uuid": "4815d5f8-c87f-4bbf-8aa7-d350a448f412", "value": 11214848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711822790, "uuid": "bd964cbc-dd29-4f9d-bd23-b3770854ca9e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711822790, "uuid": "800864e8-e8b0-48ef-9df7-50c3c345fe20", "value": "SecuriteInfo.com.Trojan.Siggen27.52043.15111.6134", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "357ef684-ee80-11ee-a120-42010a9c002e", "comment": "Malware payload (RustyStealer)", "timestamp": 1711794491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711794491, "uuid": "cc6e6ec1-14bc-4bef-b9dc-4afd592a56e6", "comment": "Malware payload (RustyStealer)", "value": "75eba467495d0e9add1389029a730c49", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711794491, "uuid": "b6840cd1-15e0-4f95-b09b-c85a6ff20d01", "comment": "Malware payload (RustyStealer)", "value": "d1d845a011a5c1f1b57233974fd18def6080d5a5616e8a7b8d00a1377ea109eb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711794491, "uuid": "d736d4fd-cf2e-47cf-9873-e99237fd0f20", "comment": "Malware payload (RustyStealer)", "value": "0a35c180af58e331a8c183e04a4aa33bd0fcfa19", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711794491, "uuid": "1caf8ecd-81e3-493c-8b6a-7b8581810b5e", "comment": "Malware payload (RustyStealer)", "value": "0b813eed9245fdd70cbdb5341a66e39a9fe99aeb7ec3f3cb85940f781f1c5de5d7627224b5b6cd13f1b939538111e316", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RustyStealer", "colour": "#889E80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711794491, "uuid": "88609f91-141a-4c5e-b753-8578031c2c2b", "value": "T1AB17CE02F2C241FAD5660174A55FB76BC3343C250339C6EBB39C3A199F3A6D15A3AB16", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711794491, "uuid": "34042216-b64a-43a9-952d-dabc629a8c2c", "value": "7fb7ffcd350f4a05a015b72a42af16a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711794491, "uuid": "6b3c3cde-92fe-4f21-b3dc-26767f95bc06", "value": "196608:wJIu2fmppNWdCDqtK/IEIVMvm4QGsfjZrqNdRtJs88eukPdbjYUAX9ohwQZDrade:wEwpNOK/fvm4QGsftrqNaUAX9oTu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711794491, "uuid": "e783c860-4016-4052-9346-2d669635ef24", "value": 20010496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711794491, "uuid": "5e6a9de2-8496-4a91-aa3c-b9c36da087c8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711794491, "uuid": "56657541-3440-4554-b9d4-a5dd70aa2596", "value": "SecuriteInfo.com.not-a-virus.HEUR.RemoteAdmin.Win32.RustDesk.gen.10805.12039", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53daaa02-ee2c-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711758464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711758464, "uuid": "b744c56e-4176-402b-8d15-4347c317bfb1", "comment": "Malware payload", "value": "fa0e8dcfd604316caca479f687edc64c", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711758464, "uuid": "198bfd6c-2a14-40e4-afce-ffbfa37c56ad", "comment": "Malware payload", "value": "d7ebbd30c2f47a64f501ccdee0910fb88e470d7cbcad5a9f1c967f0ffa6651a1", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711758464, "uuid": "5c1c18d9-4744-4fdc-a2b1-3e585a462ba0", "comment": "Malware payload", "value": "b797fadbc46f85d4f18f0e491db56117d76c0b9d", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711758464, "uuid": "2ada9c42-085e-4653-9a91-368f5dce98dc", "comment": "Malware payload", "value": "a1e999ea8db425d3d4446abdff7ddb4d0eb529825abdcd6372631bafaa54f1ade61373b20cdbd644f715f782b7d5b8ed", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711758464, "uuid": "ebe8b11a-7a95-4d3b-814a-42925db0c70a", "value": "T13CF63302B185B633EA6B0E7A543AEB508F3ABDFCD21408296255733D1FB26B16773513", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711758464, "uuid": "cdc7989c-809e-49d8-9648-073ce08cad10", "value": "393216:X3gFJlGM7pjVau8JRL7n2cLlxiQsHaF+rgmiJsaqPGu3zoYo:HMJlGM7lAjJRL72cLlxizHaovl85", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711758464, "uuid": "eb3b1f98-f4ea-49a9-844f-ee7c99184572", "value": 16154624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711758464, "uuid": "8300d937-f302-4cab-823a-565257e241bf", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711758464, "uuid": "8b30fc7b-9c16-4c82-91e6-a96a18d45425", "value": "SecuriteInfo.com.CIL.StupidPInvoker-2.Heur.21383.1432", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6943c71f-ee69-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711784700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784700, "uuid": "510d806e-0133-4ddc-a2e3-0c3d97e1820a", "comment": "Malware payload (Mirai)", "value": "2e559b4c50595829ae5529b7d83ba7a0", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784700, "uuid": "dd31371d-80ba-43b3-a2f8-c2f4c8fe2f28", "comment": "Malware payload (Mirai)", "value": "d82501cde4662df77703f3bf9325783c9dbf21487878376344649c124ed974f5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784700, "uuid": "4c1bb243-93cb-4dbf-a221-b928b481002a", "comment": "Malware payload (Mirai)", "value": "cbc369b2745ab4e0d2629747873fa0f635fda2b4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711784700, "uuid": "1d4b0397-e2e2-48e9-837b-0f03d59f8531", "comment": "Malware payload (Mirai)", "value": "8817b1da3c907baae508b8ca64cf130205c0ed10b2f41c8f158fa033b0fc91c0e11d02b96eaae626b3f056af61763a65", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784700, "uuid": "7a0aec24-97cb-4042-8782-c48662d9341b", "value": "T157139E53C97E5E68C2194EB4B5305F3C4F23E958D3475EEA88A581BAA103FDCB8192F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784700, "uuid": "d11f9a48-d144-4ba8-bdf5-50236e462340", "value": "768:JbCPzloEUcCarEMndndnfaU7MrMLFEuRmozQiYAC8IPT5:JbCPzqEDHJJJyU7MrMLFx5zeAC8q5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711784700, "uuid": "c80add71-5905-41a8-8340-a0885fc32d04", "value": 44264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711784700, "uuid": "73b310ae-b4c8-4b69-b011-1a221427860d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711784700, "uuid": "a1f946f7-fdc9-4257-9928-f55faaea5042", "value": "2e559b4c50595829ae5529b7d83ba7a0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8871af5-eea6-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711811139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711811139, "uuid": "5190f1a9-45ba-4829-b907-f824078f647b", "comment": "Malware payload", "value": "62c33455853d5ac04cba371b64e14caf", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711811139, "uuid": "9c2ccfa2-04e3-4871-ab4f-e04710c8d166", "comment": "Malware payload", "value": "db3740eff8e251180c695bb58f1e44637596a5c38c05932bd333c38e163235a0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711811139, "uuid": "3f8afed4-81eb-489c-9af5-7cde81ec4a2d", "comment": "Malware payload", "value": "be539426dfe463aac7221afe595c1b9e5cecaeeb", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711811139, "uuid": "6306b899-e3e0-4759-9c89-5ccba7b8df6a", "comment": "Malware payload", "value": "d9fe589a8bfd55be38e922f45067619f8e34decf1693e1c3f66305798d47ce4cba031a5376d04bcd86594ad0a317ef2b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711811139, "uuid": "ea650a8a-b92d-4672-86ee-7bba75bd3de9", "value": "T118083318F356BB24D819FDF6BAA0B175DC64A2C635B1E0327F652E81E8197137B321C2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711811139, "uuid": "da80f1bf-7381-4144-85cd-46783f6ba531", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711811139, "uuid": "eec0e4a1-01b7-4a2e-996c-7425b7e9cbcb", "value": "1572864:3oJ39Kk9Mg+3tikkMEB8ceyIS7nqYdd6hIEhSmnJZxRBlIiBFn8:3Tk9Mx9Le/vP7nMhJnzxRBlxV8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711811139, "uuid": "5d4a99b1-7a03-4184-8315-00b8e6f88ff8", "value": 83908441, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711811139, "uuid": "1f425d75-f685-4290-ac1b-ee65d6ec4247", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711811139, "uuid": "3a6387b6-808f-46d0-a708-af80aca93f96", "value": "Hellevator.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be8d7138-eec0-11ee-a120-42010a9c002e", "comment": "Malware payload (njrat)", "timestamp": 1711822209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711822209, "uuid": "9cc11aaf-de7c-42f3-be57-638589b5e98e", "comment": "Malware payload (njrat)", "value": "2882e6da8b669c6ebdb249c4759fadd3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711822209, "uuid": "c9acde46-ba39-4662-8234-a428a22c34ec", "comment": "Malware payload (njrat)", "value": "e553efd433836d0b5d9efb987f951ad10f4b20e663aef13240f88709b04f0d85", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711822209, "uuid": "2a5c6a73-7bd8-484c-b695-2732afae723f", "comment": "Malware payload (njrat)", "value": "23f52601947e0481019019e2927af5f6fe331984", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711822209, "uuid": "6fa7ee83-37bb-4f5b-957c-2ef9b68ad9c9", "comment": "Malware payload (njrat)", "value": "8406c73c6080e48bef084084d48d3b43d8ed5edf0b06a08de158543b75c359b3ef7cc831dc09e67456ea60ad254303ee", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711822209, "uuid": "ad9f5202-cb8e-49bf-a08d-3fafe2bd70ce", "value": "T1E7B3E7347EE91229F5779B7C46A06685A67E7BA33717C80D14B512CE0B33B428AC163F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711822209, "uuid": "d74ba73f-afa9-4423-8704-14897f47483d", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711822209, "uuid": "74587579-9ca2-4d11-952e-ceafb2f2889c", "value": "1536:E3eJG53G73mxdvdbLnX/K1Y2DM/eoitv/YXvqSco9UzM6k4xcIUAvn2oQiD:E32GhNv1LnX/KSERoWoJco7LRiD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711822209, "uuid": "962c873a-9239-4a05-acaa-6e48c14241b7", "value": 110592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711822209, "uuid": "a3825042-5257-4d86-8e92-16c17aecf880", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711822209, "uuid": "be3b739a-aaf4-4c7c-a027-ccb0b2d54dd1", "value": "2882e6da8b669c6ebdb249c4759fadd3.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "688efa86-ee66-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711783410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711783410, "uuid": "93b1b71a-e1f9-447c-8b74-82c5527069fd", "comment": "Malware payload", "value": "d837f2454869bcfa6d3ce98b07feb407", "object_relation": "md5", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711783410, "uuid": "df6ead30-e658-4860-8ae5-854ec043b16d", "comment": "Malware payload", "value": "e6e3163e2a1656d7dbd9e8b30fc6c20eaad4c515e47739bcd05e89d2162d637a", "object_relation": "sha256", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711783410, "uuid": "4d708734-03e3-4493-92c9-b7d28b0658d0", "comment": "Malware payload", "value": "2a031411ccfaf2fab04c2d7e9d1a2d68d17ec548", "object_relation": "sha1", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711783410, "uuid": "5653cd20-4662-4794-a102-290f466ada72", "comment": "Malware payload", "value": "11ca2b7220647471773ef3dbf5a56ed9d556add2f6ef2f47d7d54fac9b5f3275a0fa2cb7908cfdfe8c36b109d1e811ac", "object_relation": "sha3-384", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711783410, "uuid": "17892153-329a-4ce2-871e-f3471e9af85e", "value": "T187D302F82CA69F9BC67BEE3FCE9B25001015CA776191ABDFC0EC6275619B91B01C06D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711783410, "uuid": "c7d3258b-4b0f-4400-a55e-965fcd845949", "value": "1536:TlYgyfqcDNMaVdhxHYA55wBmty8iIxXYqJ3AL+ECuSCeDdxhsLUUomvU/7jjmnMM:mnHCyd74A44y8isXYwECm2Ns0njPQEPU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711783410, "uuid": "6055045a-4988-45f8-ba0a-8f13b4ec3344", "value": 130508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711783410, "uuid": "6bf5bc07-d1a9-47a9-9090-8a5bf7214d16", "value": "application/java-archive", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711783410, "uuid": "2b0e75e8-0c8a-4476-8082-e3882c0bd463", "value": "T_AGM__1623.jar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7559481-ee88-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711798118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798118, "uuid": "30eed37c-8c40-4a55-89bb-0226f03f4e8a", "comment": "Malware payload", "value": "acc2c05006c9b322d3e97de896a77ec3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798118, "uuid": "2fa26b11-8866-4869-b9a9-e047b265f3d7", "comment": "Malware payload", "value": "ea7d49005fb25944d6aa2056d260f04267ca250e95fb4946c1f9e6f3975fe361", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798118, "uuid": "11698795-8b29-42b4-af9a-1024f47a02a3", "comment": "Malware payload", "value": "7c29c447d598f0629309be031edd1f45da1763c0", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798118, "uuid": "7faf895c-e964-4d2a-a8e7-b65003598c5e", "comment": "Malware payload", "value": "2a9f3067364b6bffd878fd6024644f062584b6771507a71006ae4b0fb6fe973160d715e88f4398f62251846f26b7af8c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798118, "uuid": "6f0204ec-5e33-4fce-8613-921ec94fbfe9", "value": "T146256C52F132D456E20335311EA26B765E7DE53B3930BBEF5690CD6EAE22532D83B060", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798118, "uuid": "f5daf8b7-8f51-4fc8-9f05-614bb03019f8", "value": "12288:IOerUF64ol2iK5sCjTRrzKOTU9i29HZOqx4T:IOerUKKeCfRCB9Ry", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711798118, "uuid": "109853f1-0222-433b-a792-1c5a78ad91aa", "value": 1044480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711798118, "uuid": "abe56bbd-254c-475f-bce2-2e633c175685", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798118, "uuid": "4361df85-1cef-4fe9-b6bb-80734c35638b", "value": "SecuriteInfo.com.Win32.Trojan.PSE.1S437JY.9615.26219", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf05fa66-eeea-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711840248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711840248, "uuid": "472bee48-b715-4807-a73b-0e88f74e20b3", "comment": "Malware payload", "value": "35028f4b5c6673d6f2e1a80f02944fb2", "object_relation": "md5", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "xz", "colour": "#B4E6FB", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711840248, "uuid": "a0d42eb4-c0d2-4e75-b98a-7f740c95fb2a", "comment": "Malware payload", "value": "ecda10d8877d555dbda4a4eba329e146b2be8ac4b7915fb723eaacc9f89d16bd", "object_relation": "sha256", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "xz", "colour": "#B4E6FB", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711840248, "uuid": "e0137a5b-4e07-47aa-83cb-134893259f8c", "comment": "Malware payload", "value": "86fc2c94f8fa3938e3261d0b9eb4836be289f8ae", "object_relation": "sha1", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "xz", "colour": "#B4E6FB", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711840248, "uuid": "c8506cfe-5d55-4a8d-b2d1-b3d8e6b2735c", "comment": "Malware payload", "value": "255659a738739ae78cfde1e31582e465d188fef58a881b31daedaa4bc0047324db0b16027e56d13bcb46d5445fb5b403", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2024-3094", "colour": "#B95743", "exportable": true, "hide_tag": false }, { "name": "xz", "colour": "#B4E6FB", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711840248, "uuid": "cf9ed893-1b40-43f1-a345-c9c159065dc7", "value": "T129F0C9C490A7F684881C4A21F4C673882B178662921B0412B1EEBCA0262DB942321876", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711840248, "uuid": "91a47dd2-66d6-4316-b39b-082d325c9041", "value": "12:Eo53TAT1hT0xFmLab7js5YsXcgn6EN90vGltqekkXhWh:EU3TenTQbVsXcgTblxhWh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711840248, "uuid": "52fdd32f-5795-4a5a-ba26-987fe5a51ff6", "value": 512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711840248, "uuid": "ecddf8a2-37de-498e-9cea-2da2fd9f4e84", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711840248, "uuid": "8912a3a2-d9dd-4d0e-9b3c-795f1af44d86", "value": "bad-3-corrupt_lzma2.xz", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b16607a4-ee77-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711790833, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711790833, "uuid": "3e615ed7-e406-43f4-a9a6-4a68d737acd3", "comment": "Malware payload", "value": "c9e887a8ed0014744d5f59ef07327175", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711790833, "uuid": "85a40428-a2f6-4554-95ff-155da9942563", "comment": "Malware payload", "value": "eff129dc01f2292d4306c80c976e6bda34e08763497758b92d34b6cc1db0b667", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711790833, "uuid": "b03a180c-1553-44e0-a896-fbf74b6918ca", "comment": "Malware payload", "value": "2512323899ff57441937090182f896b9427a3506", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711790833, "uuid": "34539a12-d2af-4160-84d6-480b266d2904", "comment": "Malware payload", "value": "18147a300521129ac17ce010e651c075f9ebc6ac0cfcdb9273ab3eeeb93598daed8546b3a044e5ed5ff1508dd412f45c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711790833, "uuid": "68cac355-6e2f-4e55-8803-cfc2e44e737f", "value": "T14F97BE03B3A601A5E4B7D1388AA75103D7B2B8635731DACF325D02161FBBAE0967F365", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711790833, "uuid": "91a7eba9-e823-4967-bd09-83f747f6c234", "value": "f0486e7e054aa57188c99b0f71783b75", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711790833, "uuid": "d1df9b15-0329-49b7-a9e2-d0ab976de9bd", "value": "393216:wQgHDlanaGBXvDKtz+bhPWES4tiNQPNrIKc4gaPbUAgrO4mgh96l+ZArYsFRljSa:w3on1HvSzxAMNhFZArYs+dgCmxx5cs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711790833, "uuid": "47f11900-145d-4585-93e6-da252d5cde20", "value": 40351643, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711790833, "uuid": "4266297b-8a9e-4180-b776-c7a092612eac", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711790833, "uuid": "5d916289-3063-460e-9aa0-bcaded255aa2", "value": "SecuriteInfo.com.Trojan-PSW.Win64.Disco.fsq.28448.3329", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5760ae8-ee54-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711775915, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711775915, "uuid": "95758fa0-445f-45cb-bf30-712d2a222677", "comment": "Malware payload", "value": "e4f35a3efbe234e75b09d55d12b604e3", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711775915, "uuid": "7b2efb2d-f91c-4c53-b7f9-7b9f70e84624", "comment": "Malware payload", "value": "f1e4067874fb638f42313f79c6b2a28987aa4117358a2e5dcfdbcd1de794508d", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711775915, "uuid": "b9857246-ecde-4cf8-940a-e72684258ba9", "comment": "Malware payload", "value": "e73c9c0134bbcbf776cf7d852c2a8885f876192f", "object_relation": "sha1", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711775915, "uuid": "8bbec2b5-69bd-4e89-b4ac-e8d911efe202", "comment": "Malware payload", "value": "d34b4cc232a0cd8eca59c5d85edae43e1119d0b8a320397a87ba9294bfffe015f1d750515b6b562ef0c69ee94a1416f0", "object_relation": "sha3-384", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711775915, "uuid": "b4a82046-b9a2-4cac-af7f-e6565729f2c6", "value": "T11D12BFE63B71C98AE1E148FF3C81BD87821E573FEF8158BD179684E43E8A04B9C69441", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711775915, "uuid": "d6667de6-f5e2-4445-a604-c88dcae13aa1", "value": "192:WNbizfw2y2mPz+bBMXbjdAkW08pggnqB8Pw0S2/+h2ZPq6nhyl2M1yqtVZ+0JhE:S+wdXCyXbq08plnm0JK2ZP7hygaL+0JS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711775915, "uuid": "e0ba12c9-60f9-4588-a405-c1705c8916c2", "value": 9744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711775915, "uuid": "3d1115fc-e479-4885-8f4c-c3bb1bd2e358", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711775915, "uuid": "e5713fe8-5f28-44dc-8dce-b007c320b312", "value": "e4f35a3efbe234e75b09d55d12b604e3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b22ba02-ee4f-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1711773509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773509, "uuid": "eab43a92-7746-4246-abbd-2864ab8b3b98", "comment": "Malware payload (Mirai)", "value": "3b44c2edc6e041d3e789efdb6ef36ee3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773509, "uuid": "59fa62b7-be09-4df3-b43d-07e7a8779880", "comment": "Malware payload (Mirai)", "value": "f51bcb94ec1fa026ba82fe8394d8ae6ddab27b4f0ce55f66c64f202a031f1689", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773509, "uuid": "97663289-ce84-4eb3-bcb2-4e34329eb895", "comment": "Malware payload (Mirai)", "value": "d95649bf04bbca88a7d49b6ed0635f18ff852529", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711773509, "uuid": "0fd8b70b-ccc5-46d2-8484-232734bb85ed", "comment": "Malware payload (Mirai)", "value": "667947c039ccccb32bae8f59e317a015c182bae92d67f9be50b035aac471d2b96fb3393252c05ce16045dba7e9fbf70a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773509, "uuid": "70dfa301-e739-44b7-b9cc-6d8d9099118b", "value": "T125535A25B97A2E17C0E4A47A21F74B65B6F166CE22B4C61E7D720E8EFF205406503DF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773509, "uuid": "fa1a9639-8a01-4636-a491-7bce9afcbde6", "value": "1536:6mV06rbdPZ5+LvtsKyVBB2CeOJv30NjLcTlcouA:x77bpTJsNwRuA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711773509, "uuid": "20f15df0-cbb0-4ed6-a19d-f1d774a8bf33", "value": 63712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711773509, "uuid": "d7ded27a-129a-4f5f-a246-f37e296ef6f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711773509, "uuid": "01b8e2ad-8e54-4bd6-adfe-a8784ebbe330", "value": "3b44c2edc6e041d3e789efdb6ef36ee3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad79acc9-ee88-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711798128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798128, "uuid": "d2f6f533-fe04-4297-acbc-5d8c17eaf1c2", "comment": "Malware payload", "value": "457e6520670ceec2a7ff133e518142c0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798128, "uuid": "0c8d2e1b-dc6b-4a86-8ded-c905c4fd4ba0", "comment": "Malware payload", "value": "f717c1961613eca2311bfcd716f9a208b815a7d899bb55654d5b71edfbf8b197", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798128, "uuid": "63acd8d6-dca1-48c7-86a4-df7ee7ace360", "comment": "Malware payload", "value": "cb042b7c588d70249f4ba3117e20dde51a207de8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798128, "uuid": "fd78f8f2-c463-4f7d-8406-f23d0878f84e", "comment": "Malware payload", "value": "f98f3f30d59ee4a5a7c6b93e7e20a3521c895687a432102e64a069c4b1c37dd4b859d03c8659ce3b1ef9821369e7c782", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798128, "uuid": "5fdb920b-c0a1-43b4-a4cf-6914db7cce2a", "value": "T1CCA33BFCA2DD4054D6202A70CE3FE894C7A79F64906E560B1F86F4DC7F79E048A93926", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798128, "uuid": "51b291dc-498b-4838-816d-91f6d890dee5", "value": "1536:vgVTkKrtBBBqR00rkfifPHdoOh/32lw+Mn3xrIxz:vWPcuKXWOhuu9e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711798128, "uuid": "c4532f51-2bba-4c99-8ab5-705c66e97672", "value": 107008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711798128, "uuid": "ead9ceb6-9e06-4a50-bb06-fd21290ad0bd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798128, "uuid": "5d9304a7-c5b7-43d9-8092-64aaba7e7d45", "value": "SecuriteInfo.com.Win32.Evo-gen.12304.19909", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bc74072-eeb4-11ee-a120-42010a9c002e", "comment": "Malware payload (RedLineStealer)", "timestamp": 1711816809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711816809, "uuid": "ece2277e-4b26-4f30-90ce-0b3c2e9deb6e", "comment": "Malware payload (RedLineStealer)", "value": "25d00b8fac6383db0c942239eb59e2de", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711816809, "uuid": "d1081640-8561-4814-b8bb-fc4688a27df4", "comment": "Malware payload (RedLineStealer)", "value": "fa7eb70f7de0e6e0b9470352597b98a2b172127e496e525dc9db032d3f9263da", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711816809, "uuid": "99355cdf-473f-4b67-91ea-8156a7449f4d", "comment": "Malware payload (RedLineStealer)", "value": "f12314ec9fc1f758b31c5873933f6bb3769978e0", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711816809, "uuid": "7f3c869d-3238-42c5-86bd-2d658da17b62", "comment": "Malware payload (RedLineStealer)", "value": "26211eb481336acd50e2a4877167eddeb00b903dcaf84a6450df485beddd6dcdf9d2f8026a8b94e635eee0da6f8f77a9", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711816809, "uuid": "530d8711-ccff-4232-bdb3-465973238996", "value": "T1CAF39E5135CCC866E4298078D0BA8E7BDD677C339258858227CC192BFEB0786BB5F59C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711816809, "uuid": "13a404a9-01eb-4ca5-9cac-d885ac32a691", "value": "1dad3e8a25605e3da6c89bdbab10b2a1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711816809, "uuid": "71f99d3b-a114-435f-b02b-4124e92040e7", "value": "3072:MfWvNqmdXr3jPF1FyYs465uxWPIgrq2TaOAtIqsk:mW1qmdXrMtux6rXTaOAtIq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711816809, "uuid": "d6ae1319-6dfb-48f0-9b7d-5a79b0925c83", "value": 162304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711816809, "uuid": "8dca80ca-d27f-4a05-a76b-44cdcdfb0285", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711816809, "uuid": "ed41c4c1-faa4-4b8d-bbf2-ac275052f4e6", "value": "25d00b8fac6383db0c942239eb59e2de.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c473490-ee8a-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1711798717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798717, "uuid": "33888c53-d891-496f-97df-366d634628da", "comment": "Malware payload", "value": "859fcd7b6bd0dca7654a0d7b69bf4b98", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798717, "uuid": "09693e4c-22e1-4c43-b31d-f76829491462", "comment": "Malware payload", "value": "fd54954d1aed684d1ae92fa6ff8095afbe07bbce0fc2b17077abefe07da7ca59", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798717, "uuid": "df53695e-2d37-498f-8a79-8d2f750d4078", "comment": "Malware payload", "value": "2448089daea1ebf8045235f11f070f860b7f3788", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1711798717, "uuid": "017b0d64-1a13-45da-a010-905012c9375c", "comment": "Malware payload", "value": "d4b773d580ab59fd081e5f52c6760b9685dbb6b2900161121b3bf7f3ea19dbce730eeb0edac60ebd2f44df841d4e5eb1", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798717, "uuid": "99658070-c4cf-4a3a-9fba-4bf9c310efac", "value": "T151A5494BE6F710F0C17AE038B952722BF4317459873957E7ABD44B161BA27E0A9BE700", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798717, "uuid": "cd173cc0-7475-44f9-a3f9-1033c127b414", "value": "22339a51974680cedf4f07507b81d29c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798717, "uuid": "8808067c-ca88-4db6-b378-b5e577cd8290", "value": "49152:p1a81dO18XLsf6KQ0eMip+1gL1dHh5QcmYDWAv:py8X1+1gL1H5F8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1711798717, "uuid": "70f6d97b-6c5b-4314-af04-01dbae5082d2", "value": 2177024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1711798717, "uuid": "05b602aa-5273-41ba-94d8-fcee0ac6abf2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1711798717, "uuid": "3db4808d-337d-4869-91aa-0e8d70239043", "value": "SecuriteInfo.com.Win64.MalwareX-gen.12334.7967", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ] } }