{ "Event": { "published": true, "date": "2023-04-30", "threat_level_id": 2, "info": "MalwareBazaar malware samples for 2023-04-30", "timestamp": 1682899381, "analysis": 1, "event_creator_email": "bazaar@abuse.ch", "distribution": 3, "uuid": "be87e5ee-f071-4456-bd2a-1c725bde605e", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48c2618e-e6f3-11ed-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1682816809, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816809, "uuid": "2362117a-dd5e-4700-9dbd-30aaf77dcc1d", "comment": "Malware payload (RedLineStealer)", "value": "49a6593cfe2f013b61c4d7e055972458", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816809, "uuid": "8ab9dff0-14f5-4a4a-8ac7-ca064ca18d02", "comment": "Malware payload (RedLineStealer)", "value": "00062cb01088cea245cd5f3eb03f65a0e6b11a8126ce00034d87935a451cf99c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816809, "uuid": "7e5ffcb3-77fc-43ca-93da-be9c32342ba4", "comment": "Malware payload (RedLineStealer)", "value": "80c5e70b664c3174f2bace8f07b9ec7d982ee90c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816809, "uuid": "dc911494-807e-43d6-bff3-2eeac3d57f26", "comment": "Malware payload (RedLineStealer)", "value": "961298a53919adb4e983cff356a91fe8e15797988b8e4cf3a8ab0a125bcd8642652cbc484daf2b47ca54bcb5a544de37", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816809, "uuid": "446a28a4-a1a3-4960-a9d4-5107a40eb669", "value": "T1AA55235367EC20B2F5B51B7058FE11831B397C952AA5938F6291C9EFA8712C4383377A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816809, "uuid": "0add1ce1-93ca-4dbf-8444-712be7f4a558", "value": "1efe015ade03f54dd6d9b2ccea28b970", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816809, "uuid": "b056414b-6bd5-413e-bb96-78bd2b0ca237", "value": "24576:qy//GIXenWw63tQUi0hKT8S/0TUFB4dJAT6Pr8yCiF4Y59sX9:x//GIXeWwQQUi08hMIFBVQYWh59sX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682816809, "uuid": "96cf34f6-5afb-4ee0-96e5-b75c526c04d2", "value": 1285120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682816809, "uuid": "751361d6-e8ab-42ee-955b-6b9c6672fa09", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816809, "uuid": "a5b34da2-17aa-47fd-b42d-c2647543f352", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23241d16-e747-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682852823, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852823, "uuid": "c3e0d66a-0837-403c-986c-b68276fe2c21", "comment": "Malware payload (Mirai)", "value": "0b2994dabf88ca8449fb8afe694637f5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852823, "uuid": "978cd141-495d-41cb-9934-d90f214f1305", "comment": "Malware payload (Mirai)", "value": "00c2bc22cf1c5ad186082743b0a25a97651f62e89f9b98a05f28093c54ffb9d2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852823, "uuid": "2b464e3d-2402-41bf-98a4-05dcbc2af64b", "comment": "Malware payload (Mirai)", "value": "2c09d258193c9723185f50d268978c0f087edf2e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852823, "uuid": "65c16f66-f8b1-414e-8cde-e7899177ae81", "comment": "Malware payload (Mirai)", "value": "de8afd975c3c4c577375bda68225ab0362974199f46718bdd658821200c9b55d0a606602c2e66cacfccacfb705455aa5", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852823, "uuid": "e4727cb1-d2d3-4e2f-9890-5ca5198c4a38", "value": "T178435A51F8819A23C6D1127BF66E028D3B2613E8E2DB73079D229F2037D682B0D37E55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852823, "uuid": "dc032e6b-f8a0-4e7d-b32f-d17e038f3edf", "value": "1536:im24T1doxQlKXnBvkjgzDH9apyaiC6ravnn8r:R27n6joDd09Vnn8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682852823, "uuid": "3f1e49e0-7818-4ab1-b8f8-59f8e92daa33", "value": 59256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682852823, "uuid": "00245002-d14d-450a-a48f-f9dad5642872", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852823, "uuid": "b27615b6-069b-4bb2-a5a2-bb7e52dd5526", "value": "0b2994dabf88ca8449fb8afe694637f5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fba79de0-e799-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682888405, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682888405, "uuid": "8eb8c48e-30f4-4968-a905-2ff14b7de0b5", "comment": "Malware payload (Mirai)", "value": "98520685bcb57b1e7c903aa5b64e2d97", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682888405, "uuid": "4ffa5d30-7cb1-40d7-a7a8-62b10ceea708", "comment": "Malware payload (Mirai)", "value": "00d9fe0a6bb4c16c51af172afcd42df3da3ac918af723d4c89465c80b74824e5", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682888405, "uuid": "3584930d-4a9f-483f-861c-500e8c1acdf7", "comment": "Malware payload (Mirai)", "value": "6c7e69c20c02e498acd803863207646ef965a1fa", "object_relation": "sha1", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682888405, "uuid": "1cbe99b8-049c-4cbf-bf3c-4e964178793d", "comment": "Malware payload (Mirai)", "value": "468d76912ee7495aa065d0311b3966d1e60f4b44cf9e7e480b12809970c8f7155961a3b0ab24529bc5387bf1c75f4966", "object_relation": "sha3-384", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682888405, "uuid": "81472bdc-30e3-49ab-8e7c-6fa81ff213c1", "value": "T10C63023FF106C294AA0578BDE10B040F78923B3DA6EA6556537A09D41ED3F86CFC528B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682888405, "uuid": "4018debf-6588-4e6c-8ecf-2e608fe61044", "value": "1536:bmuRtG/R7HiIb+wkqER7/kpevPyJTD/Lh1mhIJXXwi1zqP:blw/sIWPt/+eva5bLh1mCJXX/hO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682888405, "uuid": "cdbb2c58-10d2-4b99-abd9-f162ce3c2e19", "value": 69988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682888405, "uuid": "ba169d83-34a6-457e-b147-1bda24498a50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682888405, "uuid": "181a335e-aab9-4829-9e5e-aaf3d1f1c1b3", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecefaadf-e755-11ed-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1682859175, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859175, "uuid": "25bf43c4-4d91-4d6e-a1f1-e38a3a1f4e17", "comment": "Malware payload (AgentTesla)", "value": "f97f89fd556cb1323dff616648412cfb", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859175, "uuid": "c0ed6e30-455d-4da9-8982-74ebc5daf6ae", "comment": "Malware payload (AgentTesla)", "value": "01b592beb540a0e0fea3e73ef1f3ec710b82111fc1afe416a0217811f18092c9", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859175, "uuid": "7813df9c-ada2-445e-9c4a-c5f7bb2c1f03", "comment": "Malware payload (AgentTesla)", "value": "0d841d115ef6ce2d9f1b6eec3ff73e779710c06a", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859175, "uuid": "e4ea31d9-a0ee-4bb9-9ba3-181e5e65257e", "comment": "Malware payload (AgentTesla)", "value": "ce6b7fc425a558ba7e034dc5b066a060e2a3fba6f877f9e4eb7b5adf42686bdb7ea0ede6d8aeb6ab3de8e36f1d6ab114", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859175, "uuid": "dae0f344-df66-4253-9f6a-8654e0988d3b", "value": "T1E89423C4F915E72EF59D2DEDE031461D8834BF293E684C6818EE2A988E93C105AA53B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859175, "uuid": "d8d431ce-ab72-4d6f-9655-3b58597418ff", "value": "12288:09E8RKVifMwVPIyG7F+54jWveF8F3fsCABMtCVw:09RKVi1BI17l6vk8FPs3MtCVw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682859175, "uuid": "fcd3750f-7f74-4b58-98da-e22e93cdad98", "value": 430025, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682859175, "uuid": "d7c4e61f-dad5-4d86-8da2-fb9774de9a4c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859175, "uuid": "2ce34087-b4bf-4284-b32e-174737d3ea7f", "value": "NOA.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "209c3af1-e6f4-11ed-b3cf-42010a9c0076", "comment": "Malware payload (njrat)", "timestamp": 1682817171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817171, "uuid": "fb49ef9c-8e6e-425f-93c7-8dee945287d3", "comment": "Malware payload (njrat)", "value": "e8d24f4753714f133efc09bf7897f2fc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817171, "uuid": "a6583df8-7110-449f-a340-b588c9f3928f", "comment": "Malware payload (njrat)", "value": "032cdbc99e1215fb5b23ff4aa322e21dafd32fd36f1147c5bb3880693b02e550", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817171, "uuid": "48e93abd-c1bd-4e59-a1ae-71698399097e", "comment": "Malware payload (njrat)", "value": "fda1916af29b7ae099fa4d0616720a6ee149d128", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817171, "uuid": "3c93c324-59d8-4393-9f78-a893a090f170", "comment": "Malware payload (njrat)", "value": "ed50e955448cbf8d82b0f27feda7802b5eadabb63e142681a2b91799f7333ed17f6d3c3fcf4b7409eb7508d5339eba92", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817171, "uuid": "3960dc97-6613-4345-a365-73f249da3217", "value": "T126032B4D7FE18168C5FD0A7B05B2D41207BAE04F6E23D91E8EF5649A3B636C18B50AF1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817171, "uuid": "f32a6076-9255-4649-81f1-c18d51eba509", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817171, "uuid": "5a77303c-df53-4d26-bd7f-e96dda8480b5", "value": "768:j6/TZ38fy8CLfMysIwrM+rMRa8NupgFt:j6TZsbCLfM2L+gRJNS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682817171, "uuid": "3ceee9e5-587c-4e3a-9b41-6339681762f7", "value": 37888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682817171, "uuid": "496ea5de-4f77-4913-ba4e-d491ef687eec", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817171, "uuid": "1d785094-587c-4fcb-b193-e587e25a68dc", "value": "file.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19349fc9-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866121, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866121, "uuid": "6fabeed6-991c-4cb2-bef4-5fb245a7f6ec", "comment": "Malware payload (Mirai)", "value": "5dff6c0ba92d8f0cde164ea7aadf8d6e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866121, "uuid": "0a75dce4-2438-41b0-ba12-612648e0f4d2", "comment": "Malware payload (Mirai)", "value": "03f804fcd157bb7a4bb1b05cc55bd57a659d5994361510d8ef3d252d1516f312", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866121, "uuid": "b11741d8-16e5-4101-945b-dfe7538eff82", "comment": "Malware payload (Mirai)", "value": "68472e9a91cc8700dfaca89067f083e225c4c6e2", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866121, "uuid": "110e9ce2-56ca-47d3-b487-0dd386bcc7cf", "comment": "Malware payload (Mirai)", "value": "0d301a9168f73c9436c2abfc000a3a288648af9904284f5609bb6bab9272beee9b36bb1444f9bf87eadfb76271220ceb", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866121, "uuid": "69840021-5715-418a-a986-fe764c178438", "value": "T1CD230271880E9EF125703C36EAD5E68376E12AB1C6673023D6280A382F747531E5BE4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866121, "uuid": "28b28a71-01a3-42b0-a255-558e04897733", "value": "768:D/TYCoIxdEk+AxoTZAZHFeq8b30Xaw9q3UELbUXfi6nVMQHI4vcGpvD:DECFd+A6YHAxIa5LRQZD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866121, "uuid": "d52200f6-f97a-4ba4-9ec2-93b0e7ea1991", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866121, "uuid": "2efa0ff7-a8eb-47ed-bbbb-57f656c03b93", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866121, "uuid": "e4751b7c-db1a-44ad-9be7-e5954a78bdf1", "value": "5dff6c0ba92d8f0cde164ea7aadf8d6e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e84a56f-e730-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682843044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843044, "uuid": "28b333a3-d133-4c28-b5d5-943502ddac0d", "comment": "Malware payload (Mirai)", "value": "b6502ff6da69829f0c49781e9c399c77", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843044, "uuid": "6968a09d-428c-41ac-9043-147c7950097d", "comment": "Malware payload (Mirai)", "value": "063be0032b3f226f166a1351cb6812c053e1fceab608a791ca4ea0e3a56d2b34", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843044, "uuid": "02101a70-17b9-4392-9915-0bfe36ed1cd5", "comment": "Malware payload (Mirai)", "value": "a64d5d6380ddc218ebeb39646739d78484bd1571", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843044, "uuid": "b722adf1-0236-4002-86d6-903e4d7504c7", "comment": "Malware payload (Mirai)", "value": "b9bc79e8bbe321c734fdc554a9c95763c37d34ba4160fa7fd280623ac94dae2bfdbafbb8f35b709453527c4aabde0b6f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682843044, "uuid": "138ae5d1-cd46-438e-aa1e-b8a4df2b6d17", "value": "T196633A95F9825A13C6C502B7FA6E428C3B2553E8D2DF7203DD216F217AC781B0DABE51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682843044, "uuid": "0eabba77-e9c6-4f9a-bef0-701b59b29b7a", "value": "1536:knforS4GNJ8ShGLW1QUQuA1xs326ytxdvygwbZnN:knTzhGcQ91xs3MBygwbZnN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682843044, "uuid": "59d2fc2d-3e97-4bfb-bed0-76f6b82d75d8", "value": 70972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682843044, "uuid": "9dc3a630-a6e6-4d1a-9d8f-40e530af58d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682843044, "uuid": "afe0aa58-ba17-4d0c-837a-dd5cf00a9cca", "value": "b6502ff6da69829f0c49781e9c399c77", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4797774c-e747-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682852884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852884, "uuid": "e7a950e4-d445-40a6-906e-3026083c9c12", "comment": "Malware payload (Mirai)", "value": "97deed27503a1bb637ae4341a94b4942", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852884, "uuid": "77fb39a2-3119-49ef-b1f3-b73640605590", "comment": "Malware payload (Mirai)", "value": "0645a82db1e24907518030771fb6bc27b887586f0fdbbbba73d7b536202f2d8c", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852884, "uuid": "a18de548-86b8-4a6a-aea3-a28e4c058787", "comment": "Malware payload (Mirai)", "value": "a6fb4e6264bda707f66b1c1ddc306a8b7b8c6f41", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852884, "uuid": "373bb134-6301-4417-b7e3-e6293c80431d", "comment": "Malware payload (Mirai)", "value": "5629ba003a20bd10bc06b9f8b14ab792f60d4f325a042a5df69e7ebb8262167008e1dc146eb7a1edbea9d980cb2f63bd", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852884, "uuid": "c6e25980-a88f-46b4-a12b-534c9e9b1ef7", "value": "T186331917B54180FDC09AC174865FBA3BAD3771FD0228B2A67BE4EB322E96E211D1DC45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852884, "uuid": "45221a8e-11fa-4770-9db1-4eb4b924135a", "value": "1536:EONfAqBlMEylfYZtR3DUptQbPskB66o/z7+SnCYQ:RfZBlMEwwZz3DgQbzro/+SnCYQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682852884, "uuid": "7eb6361a-3be1-4dbc-9b1f-2ecdb977cd4f", "value": 55104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682852884, "uuid": "68859933-c465-46a7-b3fc-7d752ac700c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852884, "uuid": "e80751af-2cd3-4fc8-9512-8098cb82c86b", "value": "97deed27503a1bb637ae4341a94b4942", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3dac6fe6-e768-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682867041, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867041, "uuid": "b33360d6-99c6-4836-abff-7afb00ec199e", "comment": "Malware payload (Mirai)", "value": "8b9850211b9e00bf6791c16275730d98", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867041, "uuid": "051c876c-bf5d-4857-b9a9-be6c2d983cd1", "comment": "Malware payload (Mirai)", "value": "065d94a4a3e4b4ed565d5badffc20c6aad905a9dc6ef0164bbf99ab652766542", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867041, "uuid": "8d46403b-ea91-4a10-8092-45406feadcc1", "comment": "Malware payload (Mirai)", "value": "7f4b7c5383138e418f20df6222c63d84e9b0e44b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867041, "uuid": "eb9da4f6-8fa3-4344-b97b-c318e2598c28", "comment": "Malware payload (Mirai)", "value": "c2ad9e9172e063e5014d530420d6492ceb685ba2512d7abe834a2de00295b568e725ead77bfdc8239f44c46e885aac1b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867041, "uuid": "e2328a12-afce-45c4-a97d-f338780809f1", "value": "T149632A21BA761E1BC4C1947661F74B25B6F143CE26E8CA0A3DB20D9EFF71A406543AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867041, "uuid": "49f40131-bf61-4997-8e8e-aa8d79ef779d", "value": "1536:lmxKjo2o1PhGIAsoX1xQVKQIYq75cvHtRtsF:lyKLJjxYqVayF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682867041, "uuid": "521c716f-d0cb-4f92-a1c1-435d74846da6", "value": 67304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682867041, "uuid": "94898a2e-b35d-45db-bc15-b7954ccd30dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867041, "uuid": "af0c26c5-e1cc-4a77-a022-c96cad829d25", "value": "8b9850211b9e00bf6791c16275730d98", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48f79fa8-e6f4-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Stop)", "timestamp": 1682817238, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817238, "uuid": "3af5533c-e60a-421f-9083-3967a0cbbbce", "comment": "Malware payload (Stop)", "value": "6b1b7ecb23d66f38315da2f0cdc7057f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stop", "colour": "#A68AE8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817238, "uuid": "7c4faf7d-671e-45f5-9497-3e9f6c052f43", "comment": "Malware payload (Stop)", "value": "089690d763a18004168a1be39150c089073738264c93a714ffb9d77072dffcb4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stop", "colour": "#A68AE8", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817238, "uuid": "ec3413dc-19e7-4f28-be18-1d0e986ba1b4", "comment": "Malware payload (Stop)", "value": "afe82e8aac191537565b962ab842f691af4f08c0", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stop", "colour": "#A68AE8", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817238, "uuid": "360f2102-96cb-436b-b0b6-5db505dd98ea", "comment": "Malware payload (Stop)", "value": "2ea984489a5d93118002efa798b9d61d4c9dc75698a374847efd1d43dbd53c68fc2551a0ac6a1f8257bbfd3bc0949a2f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stop", "colour": "#A68AE8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817238, "uuid": "b53a3900-f60b-4514-83b0-94a11d46deec", "value": "T1F105011332F12837E62346328E6EC6F4665EF4624F65BBDF1344E62F0AB51E281B5760", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817238, "uuid": "64ebea7f-dee6-46de-948e-8d2e9c1975e3", "value": "8e1291b1baddb8fcca0899ad3cc587e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817238, "uuid": "0a9d1623-2891-4d55-bf36-f29cda7c6245", "value": "12288:wUTtTfogOFF5SLXBrkB6Dc1IAGcqwY1T4y4A/3YcNEUCkrIHj7ylAtfZU5pyoW12:wOtVK4SB6DzAG+yWdWleC+O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682817238, "uuid": "f93244a9-9dc1-41f6-a530-d8efa53b22c6", "value": 871424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682817238, "uuid": "cb4e7e56-4298-44fa-8ae5-2eeb1fe3aa06", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817238, "uuid": "4e38f7b9-be4b-4826-81cf-2f548f0c54f7", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4aa7ba0a-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866204, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866204, "uuid": "e7e39db5-e0c4-4438-89be-8c2802586a1d", "comment": "Malware payload (Mirai)", "value": "2baaf082e8226c5c8587d06fd8d55682", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866204, "uuid": "922d6619-4760-437c-83a8-4760ac3776fc", "comment": "Malware payload (Mirai)", "value": "09ae6b3b28c856d5140d2e46bf97b1ef960084d6292ba5d660a6e0920e33f1a3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866204, "uuid": "da7fd63c-dc68-4400-b0d0-cfe78dca702d", "comment": "Malware payload (Mirai)", "value": "a3926138b6b6a6db6e3e6a9d957ab1d2ab563760", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866204, "uuid": "fbdb717d-e1bc-4dc2-babf-8e6fe2033825", "comment": "Malware payload (Mirai)", "value": "bb2540889da62d66eebd18a396bf40b8bc08cc5bd659881f930a3a520a1a1a7148a167be1c80647b0abcbbab9e6a4f2e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866204, "uuid": "2c573696-7cbb-43cb-9dc8-39dbf374e9c5", "value": "T11183D606BB510FF7DC6FCD370AE91702348C594A22A97B367634D828F65B24B59E3CA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866204, "uuid": "776e0cd7-28b5-4dab-9f4e-666f07c37e5d", "value": "1536:iVLymx1K/vkj752dCexuV/8UZlDwfkJ4MYfWg:iVLyIUiFezxu5VD1e9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866204, "uuid": "42beb3b8-cc28-443d-bd2b-e3b3a2d59e59", "value": 84780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866204, "uuid": "e9de3fd1-17f6-41ec-892d-a08d29fb104f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866204, "uuid": "50f1a420-2d79-4025-9996-397248f98333", "value": "2baaf082e8226c5c8587d06fd8d55682", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89f580b9-e722-11ed-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1682837104, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682837104, "uuid": "ee1866c5-0f53-43f3-99d6-a7fac296205e", "comment": "Malware payload (RedLineStealer)", "value": "b08b45f37705969eef91bee2f51b4d02", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682837104, "uuid": "fbdf9c6b-3e3e-4bdf-8a60-ee4a2319f70d", "comment": "Malware payload (RedLineStealer)", "value": "0a5c27f3dc055b1531b195f5ce59813b2f9980a0be8ce03de724a88b0a9f8905", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682837104, "uuid": "4041fe30-d153-4cc0-a69e-43e72dddf2fd", "comment": "Malware payload (RedLineStealer)", "value": "395a74ba715f286ee98e81043ab80914d0fda4c4", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682837104, "uuid": "d422f36d-bda8-4507-9836-83bc8370fdf4", "comment": "Malware payload (RedLineStealer)", "value": "dd61115c9371fed8301ca6b4c403060da91b28b899875cc26a769985d5ed1144004869d2b9cad30e22dad7e9b90a8122", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682837104, "uuid": "431ede61-fa5f-4420-982d-dc9748532c12", "value": "T13A849E166288D47EE42AA8BB4CF08FB5123C6B3A179F48C357D41B5E4D926F1FC72249", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682837104, "uuid": "d65cc581-8fc3-4038-b581-fb864d1024f7", "value": "6a6337ce6b49dbd232588f00332200e2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682837104, "uuid": "b1b3bdb8-8b77-4790-96da-e7f4ac6c22fc", "value": "6144:wY5jUKbRViAiG+w7NMBP5tGzFVCN5zIc0//KIiQ:w4AKbRc04P5tGziIc06Ii", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682837104, "uuid": "7b411f22-3ee1-40ec-ae4f-bc65c623edad", "value": 376992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682837104, "uuid": "81c865f3-6c95-447d-b326-c887122faedf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682837104, "uuid": "438defca-ecc4-4feb-940a-c407d9585ae4", "value": "b08b45f37705969eef91bee2f51b4d02.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6206973-e770-11ed-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1682870652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870652, "uuid": "4c24c34a-dc75-49a9-8cc6-4b6d1d130ba8", "comment": "Malware payload (AgentTesla)", "value": "5efba56b5d08d560f3be33e8696f4d0c", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870652, "uuid": "f5c9b7c1-1ccd-4da3-92f4-8c982ad493ba", "comment": "Malware payload (AgentTesla)", "value": "0aba674b0db534de4f52e8250710b173b697397cbbf0011a4a6a3e9127e77781", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870652, "uuid": "a95f00ad-bfe6-4617-8583-63f51adca8d6", "comment": "Malware payload (AgentTesla)", "value": "cf922d5be1cdb4686d3007faf906dd92737c8029", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870652, "uuid": "e4daa11d-02f0-46ef-bf97-7b6beb536c8f", "comment": "Malware payload (AgentTesla)", "value": "cd6b1c0108c04954ce5f89bf4b08611391f57d95dfc095dddb3cf739d49de2a2b7948d471b4f563f0c4fbdb0b5fc55d8", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870652, "uuid": "6c7e3922-09a9-4766-ade8-ea4340f2a98b", "value": "T1F5F48D3815B87727D17AD378D9E15413B3E0A45FB321EA99BCC603EA0746E8179D322E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870652, "uuid": "26fe67f6-c041-4de8-a3b2-ddcebd20a685", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870652, "uuid": "6ee31d5f-4b81-40c8-a4b2-528fb5e6f81b", "value": "12288:HLV1fcwV8IalVlcNY0F7VR1qbdUYFbczPALf0KEUYRoi+nbdLjGj:3k0ElVlcFF771CJFbczPALwUianBk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682870652, "uuid": "a9e56077-2e8e-4284-8963-f81308b84f89", "value": 724480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682870652, "uuid": "805a6396-4039-447e-aaad-5daefe28fe72", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870652, "uuid": "b1eb6a27-565e-4ec5-9777-843a42c9555d", "value": "Purchase Order.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33115ca3-e7b0-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682897947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682897947, "uuid": "3cf6d82f-194c-4c53-9081-c9512f4966c7", "comment": "Malware payload (Mirai)", "value": "ba9442a57c2bd1a80699cc3f2f521f1f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682897947, "uuid": "cda32d01-b2b6-4759-84d0-e36182ad0c75", "comment": "Malware payload (Mirai)", "value": "0c082bbcf7f3189477db4f2ffac1e89ecb154ccd03774fa77c6eecfd0c927bd9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682897947, "uuid": "8a00c40a-285a-4e1d-9ac1-da23ab6b8f7b", "comment": "Malware payload (Mirai)", "value": "0ce2f95e2c7efd238c6c09e1695f16f60880ea06", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682897947, "uuid": "353597c1-0e40-421d-9ddb-6fd91c7e3b17", "comment": "Malware payload (Mirai)", "value": "be464320192babfaa6929cab70e06b129f28dd6789a654c3c1750ad09991d248709e2e338c12a5a3972f4c69cfefc512", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682897947, "uuid": "9b7f66bd-ed98-4992-8f89-bfb4471ad1c7", "value": "T13113F12D5791A886D6C9DAF423B48B013F364B53E0061E80EAD6F583AE0E27C39496E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682897947, "uuid": "85d49ea6-e776-4dce-90ee-8291c29df868", "value": "768:H9cpVPp0msNbXuqmSjHvvS2+1ivSzhGlie5YQwtSiNDCYImTxV/D4NJgGlzDpbuN:HM1KiqmSjHvvS2JccsAU91PxJD4nVJuN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682897947, "uuid": "e3f0dc98-8f34-4b09-8869-4170ce15929d", "value": 45364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682897947, "uuid": "73ddde1a-511d-488a-80f4-9289451f8cca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682897947, "uuid": "5d319b2d-f395-41de-8a9b-750b1f348bbd", "value": "SecuriteInfo.com.Heur.20230430233121085673530", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8a8134f-e76c-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682868992, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868992, "uuid": "a87fbb48-7ae1-41c5-82dd-2675c5205d46", "comment": "Malware payload (Mirai)", "value": "1ccd3e660a566fc563a02b10b415b3a8", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868992, "uuid": "09ebe95b-c441-4191-878f-9b0815437366", "comment": "Malware payload (Mirai)", "value": "137d43cd0a20fe1642ba6e730dfe168470b6ffe62a0bcf70e39b2311b59c8b25", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868992, "uuid": "6d0de6d3-fecf-4b2a-ad4f-50e72c751482", "comment": "Malware payload (Mirai)", "value": "0ab29974496e5bd69607b105f4f4bf000632c311", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868992, "uuid": "389645c5-af74-4519-83db-f5397eb842d9", "comment": "Malware payload (Mirai)", "value": "2f6b56e839ed6593715ac7b4685eb470a2036267ffce96d2a6dc8c855b80e68f238e23e0d7bc53401c0c1495ff6db2f2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682868992, "uuid": "42e76bbf-bb3d-4ae8-a328-d997d838cc6e", "value": "T14BB319824610D573F1433EF402AFE62600B2EDFE1A57C566D3897DFC86364963781BAA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682868992, "uuid": "71231c59-7ff3-4798-809a-00146e983048", "value": "3072:UG8lqs3gvZepjPJa3sPuCYXzvElb3t+Z0Ua3hgp6W:ls3gvoRv16zvGb3t+Z0Ua3hgp6W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682868992, "uuid": "4f115410-2b33-4c7a-9ff7-5ca64c8ec4dc", "value": 116498, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682868992, "uuid": "1c87e7ff-c1fb-40df-acfd-fdec47a41ef7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682868992, "uuid": "a86761b0-97c7-488b-90fe-1167c3c1ffd7", "value": "1ccd3e660a566fc563a02b10b415b3a8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "da09aba8-e6f7-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682818770, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818770, "uuid": "6438b734-cb1e-4449-883e-0bc2e127f11d", "comment": "Malware payload (Mirai)", "value": "23fe127ba302bc6485065b6ede64bb00", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818770, "uuid": "9eb39d25-217b-4549-94cd-b577cd759f00", "comment": "Malware payload (Mirai)", "value": "184608031961f162c02a1be838e21fb084e44c82f7ebfc3a8754a08b109d3f09", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818770, "uuid": "df6b7c0a-da55-46cf-ae2b-be50fb2ea2b0", "comment": "Malware payload (Mirai)", "value": "b1fa136886d4f4f01156240fa8cf86dadf562a6d", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818770, "uuid": "71ed6c8d-d125-42cd-a6cd-a14abad21e60", "comment": "Malware payload (Mirai)", "value": "27da1952ac1223ab32765d6e533e746357837ac0796d307a58617af4e64080eb64ebc46c5e8a85449bc05bd29e8399ab", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818770, "uuid": "2406f269-0c02-4a3d-bb6d-ac2cfc7a0da9", "value": "T1DB93D506BF610FF7DC6BCD370AE91705358C594A22A87B3A7534D828F65B24B59E3CA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818770, "uuid": "aa21fa63-92fd-496f-9fbe-726ed8c9fa3e", "value": "1536:+F2K/iZmytnoGRL0Odrwa/zrEZfrQu80SUm6Wx:+F2HUNKL/waLgSp6Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682818770, "uuid": "7ae7dc24-3079-495a-8206-d31de5344269", "value": 88884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682818770, "uuid": "e875d2f6-2a76-4d9b-af00-f435c2022246", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818770, "uuid": "b8bcb862-14a4-44ee-a0c6-056935859d63", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "308a5d9e-e747-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682852846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852846, "uuid": "c18b2cb9-375b-4a9f-a2eb-34bcb3b16659", "comment": "Malware payload (Mirai)", "value": "87559afec0900cdc126906490066a34f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852846, "uuid": "80d03a5c-5434-4778-8127-5d6eff199f3c", "comment": "Malware payload (Mirai)", "value": "190551aea02a02612b1f714ea74ebcd3a11531400fa14238b8554ef25ee8e2f4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852846, "uuid": "ed3a94df-9dcd-499a-97b0-5df0697a2b8c", "comment": "Malware payload (Mirai)", "value": "51329947025f061526dbc9d3d6a68f955e7ac56e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852846, "uuid": "1fc56442-edf8-41ae-af0d-c63513932ad9", "comment": "Malware payload (Mirai)", "value": "ac9a62f98c6d650ebd5bb16b747a5a166cb68b7ad80a356359d5bba20cd66d4eb2411cedb2fc898f5743f0caef00eaf5", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852846, "uuid": "666bedf2-45ac-4eb8-a006-76d0c1f6dcea", "value": "T1D9F2D752F8825627C2E4237AB6AE5A8D373077ECD2CBB21BD9614B207B8151F1D23F45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852846, "uuid": "b9ea4481-8269-490b-b4b8-75cec2cffc0b", "value": "768:0LzdVtJX5qy4G5yqdZYX/jy2QGP2k6V3Gf9UQMGtq+2mslbnoX4wn:mzpq5G5yki/jyH2sEvMeqrN6n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682852846, "uuid": "4ffe8d20-7568-4d78-893c-9845acf29820", "value": 34472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682852846, "uuid": "8504b68a-35cb-419b-8d5f-4c8d8d8115ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852846, "uuid": "d87927df-b276-4f17-83c8-b9f582229fdb", "value": "87559afec0900cdc126906490066a34f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b1afa0f-e73a-11ed-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1682847307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682847307, "uuid": "5a094dd9-3d4f-42f2-8f1d-8fdb2ae4cceb", "comment": "Malware payload (RedLineStealer)", "value": "654461a0317681e5c0a066da1efc34e3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682847307, "uuid": "12a48ff9-b816-4609-ba38-211f434f12b3", "comment": "Malware payload (RedLineStealer)", "value": "1bf8638a91190e3d6107b1943fb70168db47f5ce320ca582217989bfd052d1ea", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682847307, "uuid": "6943429d-2591-4bf3-b66f-36e149c11017", "comment": "Malware payload (RedLineStealer)", "value": "c2a7b34cd8373147f958b14a4318c71169ba5818", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682847307, "uuid": "016dd7f2-2981-42b4-9170-87a918cb8a31", "comment": "Malware payload (RedLineStealer)", "value": "c3d2c6c97269b81047e23a843a27cd80882ec7bc8b9ec6a5d76751a3b4e8e195f9e80132396ae37bed1ce9fb65551bba", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682847307, "uuid": "1db9db8d-ecd2-43b4-b27f-2abc08bd6a57", "value": "T1A5552343F6CCA473D8B2133041F902DB0D32BDF06B646AAB2659A68D9D736857A34773", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682847307, "uuid": "b2795880-95b1-40b1-b240-1c21bee3c100", "value": "1efe015ade03f54dd6d9b2ccea28b970", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682847307, "uuid": "91a7fc45-1d67-435a-9d6e-8e267d9ef6e8", "value": "24576:cymytCFyttVF9OM2WtXc/WHtdbJUKfRFNRib0fn:LD1jZts/A9JUoRPRf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682847307, "uuid": "c6a5237d-ac46-46b2-a242-92d7a1b3943e", "value": 1398784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682847307, "uuid": "98d32f88-1323-47c6-ae81-60c9e18f3a5e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682847307, "uuid": "50c93a2d-30bd-45bb-a821-1aaed98b9319", "value": "654461a0317681e5c0a066da1efc34e3.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "baaadd9d-e7b1-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682898604, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682898604, "uuid": "6a0803a0-8127-4131-969f-08c39efb41f6", "comment": "Malware payload (Mirai)", "value": "61b9f54773b144bfa09c777709f04425", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682898604, "uuid": "f44d4fa6-7742-4e9f-8784-f2519bdbdae9", "comment": "Malware payload (Mirai)", "value": "1c06008acfe34b4f990fac92d82a7ec0a26703443adee63b73c257955bb22f24", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682898604, "uuid": "500f8eec-a87a-48d4-b5cd-d7358b9a5e3d", "comment": "Malware payload (Mirai)", "value": "c8d18f89de17d3cca3a75ad926b903e9a9dceead", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682898604, "uuid": "30bdbc88-2bed-4fc6-8aea-8628d28d6645", "comment": "Malware payload (Mirai)", "value": "deda5f6b4439db96b0a04a47f17e33688a9dbd82b03f02f177abf1f5a179fe6de26c391b10c289a12530fb0f7ca059e6", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682898604, "uuid": "638ce205-7dc0-4a88-a87a-9999a903aef9", "value": "T1AA432AC8E6D7E9F4EC090A313137EF32D6B6E13F252CD993D7A46963AD41642D4022AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682898604, "uuid": "252a6818-a2c8-4748-aa38-1e94ae96cbac", "value": "1536:CVKFOD7prJkaNup1COy7O/HgefDCsYey9i7EPZP8xO:XFOXprOfPTy7yHgefDCdd931Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682898604, "uuid": "974249b4-93e3-4f63-bf83-0f8924741790", "value": 58128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682898604, "uuid": "2ad0242a-4cf9-4f7c-86c2-d4468f671cc4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682898604, "uuid": "7ad0fd77-6da9-4b5a-aca3-99c61c097a5a", "value": "0xh0roxxnavebusyoo.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55ad2c8a-e784-11ed-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1682879107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682879107, "uuid": "9239188e-1eaa-4601-9926-8ce2a2e9be19", "comment": "Malware payload (RedLineStealer)", "value": "afa52c06e1b3c578d009bf0bff72abbc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682879107, "uuid": "73b9f5bb-f626-4caa-bbdb-65d59e5cb43e", "comment": "Malware payload (RedLineStealer)", "value": "1c1ff3eafbf775c8668565810fa31935585a114ad68bf2805d9b66e0cb2f448e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682879107, "uuid": "033f64d4-8444-4830-bd15-c4ea7ed2e98a", "comment": "Malware payload (RedLineStealer)", "value": "635e16489be85f73044b5d22554e20bb1b1d1158", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682879107, "uuid": "6043ea26-601e-4510-91e3-425574d1a7b6", "comment": "Malware payload (RedLineStealer)", "value": "614951cca5dad6301a9153e026f50acdaff53a3098481f5d8a0dc1ac31b0230e112f0d3faf36e678c2fe72b4b11c832f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682879107, "uuid": "f214cccf-7a7b-4271-af50-4ca629822fd0", "value": "T19AA36D2067AC9F19EAFD1B74B4B2012043F1E08A9091FB4B4DC154E71FA7B866957EF2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682879107, "uuid": "1720130d-17a0-4d56-b3f0-7d021a4e17f6", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682879107, "uuid": "8cd0b0c9-354e-494d-86a0-5e7acfca8aed", "value": "1536:OqseEqJ8lbG6jejoigI/43Ywzi0Zb78ivombfexv0ujXyyed25teulgS6pc:sjukY/+zi0ZbYe1g0ujyzdNc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682879107, "uuid": "b43dc733-f642-4612-80f3-7aaf200a2215", "value": 97792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682879107, "uuid": "79347383-7cfe-42cf-a43b-e7ce14090f7e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682879107, "uuid": "9cd69f6c-f4a4-4ef1-8d3f-26ffb90d3a75", "value": "afa52c06e1b3c578d009bf0bff72abbc.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "373288f4-e747-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682852857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852857, "uuid": "1756989d-59ac-4a35-9024-f969a52ca92b", "comment": "Malware payload (Mirai)", "value": "f02c5aa71783b2bb7c485f93d5fd6815", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852857, "uuid": "a658319c-8a03-401f-b11e-bf1e2f4ab1c8", "comment": "Malware payload (Mirai)", "value": "1d16aaa0ef13e58986a9caa792d6e038f196276510ad483a2ca0819fd17a19fc", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852857, "uuid": "346d8b66-0ce1-4940-8625-7b68abaaa539", "comment": "Malware payload (Mirai)", "value": "38f5ed1737c213d9c3274c145bd7869ce6617e27", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852857, "uuid": "4b6b4e2c-cf20-4511-95a5-6e1cbb312272", "comment": "Malware payload (Mirai)", "value": "6b7eaf9ff2120bf038ee7b29c5173370f6f90d7c256511fa3e48b447f86a7b5f047955c459559c1811c902633c32e45d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852857, "uuid": "42d2b2a2-6785-42b3-81e7-648288826f4e", "value": "T116532B9AF801CD7DF81BD77B44570909B671B3D152835B3623A7BAA3BC731A81D22E81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852857, "uuid": "c59d57be-ef50-4ec4-b863-7932ece3f20a", "value": "1536:oh9h2Sa6hRcih88HEb8++sRU7DHzEpoakj8Y8+:oh9hNaKuihBQ+CUfk48Y8+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682852857, "uuid": "2436bec1-80e6-4342-b8f5-156131732857", "value": 61276, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682852857, "uuid": "15dfe7f1-3399-4a4b-9e96-49a0953312c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852857, "uuid": "66ca7d4b-60b7-4d32-8b64-dba3dd62f620", "value": "f02c5aa71783b2bb7c485f93d5fd6815", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3dec9db3-e779-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682874343, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874343, "uuid": "f74da441-f45e-4cee-99fd-19e2b1e0b08b", "comment": "Malware payload (Mirai)", "value": "57d12a93a9db615f615579bb15028abf", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874343, "uuid": "4ee7a1be-e502-4eb4-b0bc-d6e65c274170", "comment": "Malware payload (Mirai)", "value": "1d4614b6ecd96247f638d5142ca42e8396f6b5eac56ec56051a8427b86db434e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874343, "uuid": "b6e4b5e5-eeb5-46ed-99cd-b9be973b255e", "comment": "Malware payload (Mirai)", "value": "0758603f60d398b84016cf2f20abbc9ba764e518", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874343, "uuid": "23895aed-53b3-40b7-b93d-c8dba5365e37", "comment": "Malware payload (Mirai)", "value": "273acdacb686feb05f3f257e56b6a85fed46349b8d6f2d69393f206d8f032f2ef96a8e48c87417c3cf6656b21952fed7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874343, "uuid": "404d36e7-54fb-46af-8c75-5947cf1c5d0f", "value": "T1B113E792A8829E26C2E0237ABAAE51CD3360B3E8D1DF7217CC111F447BC951F0D6BB51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874343, "uuid": "c11bc892-104a-4019-ae0f-44b214da9239", "value": "768:io5+gbIgiwB/m/prWJA7T6p2EoWGarlBmMH8YQxzmYCtDt4RtrbblUyxHyLPN:i6EgLpm9XWGaBBmTYQxSYCmrbbln", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682874343, "uuid": "34fbe2ca-c761-4a8d-be5c-33b3d55feef7", "value": 42252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682874343, "uuid": "393599a6-666e-4bc8-9198-5738aa5aa01c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874343, "uuid": "7fde0936-f93f-4140-838c-827cc6403e3a", "value": "57d12a93a9db615f615579bb15028abf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e6dce8e-e77a-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682874934, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874934, "uuid": "f67182a9-c6d3-4afa-a3e4-5cb3620244c0", "comment": "Malware payload (Mirai)", "value": "87df034a1dd270f4c0411ad162b3736d", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874934, "uuid": "ac734c83-3dcb-44b5-b4e9-eeb6d72b35de", "comment": "Malware payload (Mirai)", "value": "1d8856ba57116f9c18f86b4235ddad07717c7dc57252500b1323543598f64574", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874934, "uuid": "2e66b247-f18a-4512-b0a2-c2085bd2a736", "comment": "Malware payload (Mirai)", "value": "040fb6bc4dc0430b6f8e28ea94483a6b4d86cea6", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874934, "uuid": "7e993994-94b0-41ea-88af-9bfe82ada115", "comment": "Malware payload (Mirai)", "value": "72e02950b986db3c2428e5c08bf3873dd2bc995b4e1d02f680397ca85ab2710204813acb66e5bd2c7e8b4e4bfb9e056d", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874934, "uuid": "4b1c1b7b-02f1-4377-9326-536ad7b65d73", "value": "T175C309176693CDFAC0434B796B8EE05374B2FD3F073A61026782FE642F35AA5598A311", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874934, "uuid": "ba54fc7e-bf9a-4b43-b2ce-5f937cd3a8e6", "value": "3072:wVcF7W39zGB0q9pd8vCWmMh+zJaiJn1eRlVUncRSdws:wEMCBW+pn1eRlVUncRSdws", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682874934, "uuid": "d39cad4a-d951-4930-ba12-130cfda57abb", "value": 128713, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682874934, "uuid": "248d846e-ac84-4f5b-a6ca-c9e8e087a5c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874934, "uuid": "03f736a2-26ea-47af-8fed-cfaa25b96dc4", "value": "87df034a1dd270f4c0411ad162b3736d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23ddbc27-e78e-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682883319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883319, "uuid": "a642a656-5552-4732-a1ea-9b82721aba5a", "comment": "Malware payload", "value": "9c97067e345a73cb0ecd1ad210125b01", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883319, "uuid": "d11b0896-5c9d-4d85-a288-e9438a8d8091", "comment": "Malware payload", "value": "1e4c1544722a50c92870523a5689bfa06fa16032da175f0e763211a5effcb0c5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883319, "uuid": "81c44b49-1163-4311-a204-7bf5688f20a1", "comment": "Malware payload", "value": "c8cdd4b4f8f7af6568ebf0390698bbcac4ddcdae", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883319, "uuid": "0f02a13d-f52f-4c84-8899-4e2e15d05d03", "comment": "Malware payload", "value": "67ed7c9117276681befcbfb67e35512887edf3ed806f0beca9fdcdddeca4e2afe22e31471ac1fd2b9e890605349c1042", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883319, "uuid": "16d569a7-fce6-43e5-ae01-0c82c08971f4", "value": "T11484AE1372B16C62E72A5A318F2AC6E8761EF961BF153BDB1715662F0830CF2C572706", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883319, "uuid": "bb84619e-c26d-428b-8b56-28cc864da80f", "value": "5e64b31f8e5697ceea07ff3f5dcea4e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883319, "uuid": "89902048-3130-4019-8b25-c173705ced64", "value": "6144:9mrjFYQV8I8v6SYkQCPab3TeZhADcf2jSXKM1TqjQmMM1LyM/qO:9mrBYC8/vi3iZh0c6SaETqskN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682883319, "uuid": "cff3247f-3d9a-4a4a-a792-c421c48bb196", "value": 387072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682883319, "uuid": "026c1538-f957-4d26-a7e1-775a98e62b6f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883319, "uuid": "ba26e7f7-5b63-4412-ba64-7fb361171944", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa941513-e767-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866929, "uuid": "93998f08-1294-4825-835b-5e509c61f7a5", "comment": "Malware payload (Mirai)", "value": "98a5c8cff01326bbb6e0207d782515c6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866929, "uuid": "017f2127-96ce-43b4-8402-264957538ce4", "comment": "Malware payload (Mirai)", "value": "204c1de3d78976a5982a806902386ea27efe975ff809bb22af6729b98df3ce0f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866929, "uuid": "32b64c79-fefd-444e-901d-9a496301fda4", "comment": "Malware payload (Mirai)", "value": "ab3e1aad07275e340098d197ac7393e3ed659eb6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866929, "uuid": "bd929dfe-f050-461b-b518-55f419987118", "comment": "Malware payload (Mirai)", "value": "6397c0705ffc241e108f55145fccca1382b61b09582afe1cb4d8f0fd68311ef3cca8f8baf8f48adfcb5b4d88474263f0", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866929, "uuid": "ec42cdbc-594b-4386-94bb-14957211451a", "value": "T161A2D025D3456EF4DFEFACA452C1D2C276E547C6278AC8F240EEBF01650A442F788D49", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866929, "uuid": "a1c384d2-0ce9-4837-bc60-32697ca3a91f", "value": "384:9/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5XM4uVcqgw05VxJD:9RxsSVsMD6xiJJE5zRWNu4uVcqgw09p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866929, "uuid": "86365395-823d-4245-b739-6a9f5ab913eb", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866929, "uuid": "d6670395-64cd-4b39-8dfe-8db6f9d74554", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866929, "uuid": "40aa2cfa-6bf1-4285-b1a1-aa9eb3ce90f2", "value": "98a5c8cff01326bbb6e0207d782515c6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4663265-e724-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Gafgyt)", "timestamp": 1682838034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682838034, "uuid": "45749f85-6118-44c0-a2ff-99c2a49ecf72", "comment": "Malware payload (Gafgyt)", "value": "d46a1d1a4e161dd126806394fae45284", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682838034, "uuid": "2853b1b3-a865-45c5-b9e5-3a66d9f30ab8", "comment": "Malware payload (Gafgyt)", "value": "224cc49b73a2af7081023fea97b67fd1d9ba05094ef360e904fdb42286dcedd9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682838034, "uuid": "586bb238-9f5f-409b-9370-36163b52cdbd", "comment": "Malware payload (Gafgyt)", "value": "3f645bc57447c0787763168a3163842d7a657543", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682838034, "uuid": "27111a13-7c45-4cc7-9ddf-8fb66a832f36", "comment": "Malware payload (Gafgyt)", "value": "253200449d773d092d97a293d9f6fb9b52370e512cb5c7d59f47318101d1a92be8f1404356317f49d51601a798a0fb5f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682838034, "uuid": "740e1fc5-6609-4544-814e-f0c7a4e7efb3", "value": "T13FB31813B7B1DABEC08252B12BDB92F19423FD7D0732622B33957DA51B388D96D59302", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682838034, "uuid": "8f171441-1d11-4cf1-a7dc-148c6f4db7ae", "value": "3072:Ld0wlSAewzi+Xn+8Uhw6W+aPXJmDk1c8xF6KjW:jfO8IBiJmDk1c8xF6KjW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682838034, "uuid": "40ef0d69-a2e0-45ba-aefb-12a7a9b9b7db", "value": 114825, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682838034, "uuid": "226281c4-4779-4f23-bd28-112139a06ab8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682838034, "uuid": "e748d777-c5e3-4589-ab13-eb738472f905", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ec72495-e6f4-11ed-b3cf-42010a9c0076", "comment": "Malware payload (TeamBot)", "timestamp": 1682817382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817382, "uuid": "85ddb117-ee53-4fb3-8d76-b264cdeb4d8d", "comment": "Malware payload (TeamBot)", "value": "6f8b2a01252f20aced3db0ac9d1bc33f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "TeamBot", "colour": "#0020E9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817382, "uuid": "51126dd3-0c1b-46e4-a398-57a9926a7dd8", "comment": "Malware payload (TeamBot)", "value": "25412c76e0f7373a4032bd333263131bde088d4cd6615409fb68a790e905c2f4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "TeamBot", "colour": "#0020E9", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817382, "uuid": "e837b39e-1695-44e2-a5b4-3265daf53561", "comment": "Malware payload (TeamBot)", "value": "0e680bf1b3fb7fd592117923e5b879b2787ec423", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "TeamBot", "colour": "#0020E9", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817382, "uuid": "1227de0e-0f54-43a7-8626-2a5dce565131", "comment": "Malware payload (TeamBot)", "value": "ec61cd6ae03e952d977deb991dd53d33fd84fa92c3ecad3e03e61a89d1ecabb042cebe72a026ebb07ebff562ec688d54", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "TeamBot", "colour": "#0020E9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817382, "uuid": "dcfec3a3-2d99-4247-8f66-197cb5a6d1fe", "value": "T10B05F26272B57862E6324B718F6A96F4295DF4A24F14BBDB1319E62F09F21E1C532F00", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817382, "uuid": "112cd077-fc64-4832-952a-b2d348130e81", "value": "9d545fc5792b6e651ea15e3004061a16", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817382, "uuid": "195d19d6-b9a6-4143-87a4-17e7b6bff416", "value": "12288:CyKGOP7sYFRxsB0YvReNNLzAkoOBEVkiPeMxul9YBteCUXuMCejwK6Y:CNGOhFRsjReNNLEO2mJYWtBjwLY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682817382, "uuid": "6e206b85-2042-4cfc-9945-43b99c9c853d", "value": 870912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682817382, "uuid": "7dcc7e21-2bb0-47b2-a7c4-db62eeeef3b4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817382, "uuid": "f00261f3-59ee-4f26-a136-e852b3baa533", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bb6717e-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866206, "uuid": "70384330-dfcf-4542-849d-8fc146a10bd0", "comment": "Malware payload (Mirai)", "value": "3743c5bfcd9cef107ba2924f12d22ea4", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866206, "uuid": "3f58c4ca-9759-421c-820e-3430e1fc6e02", "comment": "Malware payload (Mirai)", "value": "25b685a7b90671e87241e98e7ef6a42f2579b8bf1f60a876f24947f03d26ec65", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866206, "uuid": "3f8cca78-ee3b-4d51-b843-c940d83fffd0", "comment": "Malware payload (Mirai)", "value": "ab36b813b2c27ba1ef784623ddd69186ae93fb90", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866206, "uuid": "7102fa63-de03-4f2c-9b20-b256b7a52f17", "comment": "Malware payload (Mirai)", "value": "12b7be46e673e6ec5d5d5b28347f2e4d05533654403e3c721963be57a7895e451cdb8e84f28fc83e6413f8245c45a034", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866206, "uuid": "1bf609f5-0920-4070-9074-f9ed63e29153", "value": "T10EA2D01472632DA6E3DC1C3DC96A835BF9A61BFCD0F6327679451620CD4D21A3E38A4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866206, "uuid": "403f6017-ac84-4c6b-9bcf-ee5e85ea7c63", "value": "384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjfvhymdGUop5hU3:vvQn4j+ZO5fKAlxbs3UozS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866206, "uuid": "2e805fde-f516-42b8-b18a-0484be889a07", "value": 22160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866206, "uuid": "d2e27d79-53b2-4bb5-a095-0e0f0c3faa26", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866206, "uuid": "8d06dabf-af4e-4893-9950-e17e1ee54672", "value": "boatnet.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c7b43be-e7a0-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682891252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891252, "uuid": "6d4cf2a9-351c-452d-bf3c-a5c6a2f9ddd9", "comment": "Malware payload (Mirai)", "value": "8264510459d6273026dccfdb29ea2460", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891252, "uuid": "72db27e5-9507-499e-9f3b-6015f86aaa73", "comment": "Malware payload (Mirai)", "value": "269085125a6c9a91ff1a2b3c3d57681e34daf75d67a62f7042708faf7ec72503", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891252, "uuid": "cc5b4647-f643-4042-8344-622a3ab6e391", "comment": "Malware payload (Mirai)", "value": "71fba255c75571d777436cd11377d92c09e18941", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891252, "uuid": "13351b6e-60d2-48c4-9987-8b4af5dde586", "comment": "Malware payload (Mirai)", "value": "45308d6fee4fb72befaa26b564c31e11cdec23493bc675e9b4842ca289e219d5d92f996e3dc1638d314e69f187b0319e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682891252, "uuid": "5fc5e744-929b-415d-b7f1-10162d03b937", "value": "T16D23F1D445012868FEA017A93718C24A7BC3CEF8C56E5047A917A7B47712A8247F77D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682891252, "uuid": "8994a032-6c52-462b-96a5-42cd5fcbc21b", "value": "768:XLj9uq73up+4+Bdxt4E2kczKl9XzysNURf6aY82Wj6Kld7Z5Wuf1v4xNrNpDLLRs:bj5LurqIKpNUN6aYBILetXRaWFLo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682891252, "uuid": "50a80aa5-f405-4f0f-81f8-a927c9051560", "value": 47616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682891252, "uuid": "fa921e04-3aec-461c-b753-669ce5e2539a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682891252, "uuid": "71750a89-1077-4490-9b47-e2e0b823aacf", "value": "8264510459d6273026dccfdb29ea2460", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ede1d6e7-e6f8-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682819233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819233, "uuid": "ea7f2a70-f317-4f69-abe0-3fb11a079c79", "comment": "Malware payload (Mirai)", "value": "2a1d6f19835287daa3096f6374426e02", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819233, "uuid": "2e1b878e-8f04-4e30-8c04-fb03eeb4998d", "comment": "Malware payload (Mirai)", "value": "296bad0fc04cbfebeef3af3c020a1971b5a52275ffb650742a3a12e74c1f134c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819233, "uuid": "059af3b8-de40-4038-82e8-e18bbfd550a1", "comment": "Malware payload (Mirai)", "value": "875f075c29e3270db876db67cbfb40ffc560a4db", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819233, "uuid": "e8532527-2fa3-4946-ad78-6aca54657c77", "comment": "Malware payload (Mirai)", "value": "c4f05401c46190c2df7464e084a454d7e88f5c80ae24878cddcf0d397b0c685a19ced15454533cceb3730bbfb8b50fcb", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819233, "uuid": "7224ccd6-cbb2-4106-a6b4-f96ef9a3ca9f", "value": "T1C5732A26B97A1E26C0D4B57E60FB8B11F6E1278E26B4C50A7D720E5EEF147006502AF7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819233, "uuid": "6b9453e4-6e09-4a97-8009-aa91ef35b504", "value": "1536:hD/B6f6UD5hAS7mo0DCCAXpSKV6v3G78nN9WQ:927jqCt8v3GI/r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682819233, "uuid": "5541d548-2a59-41f9-8efb-c0f6a149fd2b", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682819233, "uuid": "6871ea98-7c4c-433f-8937-8b47aec121b9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819233, "uuid": "362dc6af-564d-4d82-ad57-4df1778f1568", "value": "2a1d6f19835287daa3096f6374426e02", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd6c158c-e78b-11ed-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1682882315, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882315, "uuid": "ba65e635-7fd7-48ae-b121-6df93e4c2f8c", "comment": "Malware payload (AgentTesla)", "value": "e9c647fa4a72f64918cb2bac87f697b9", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882315, "uuid": "2bcd5a53-feb7-401d-adaa-80af88d276fd", "comment": "Malware payload (AgentTesla)", "value": "2a7e48298371dcdde2019795b2d0ad49d355b1a9593fce99a8a8a00ff84ff71d", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882315, "uuid": "a3135640-3f04-4059-a87b-24b27b683418", "comment": "Malware payload (AgentTesla)", "value": "a691e85a82fe7ee7ecb8f022f1aaf8ba100e4790", "object_relation": "sha1", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882315, "uuid": "34c07f46-350f-45a7-94fe-dab5dbe40c59", "comment": "Malware payload (AgentTesla)", "value": "727a4620d0ea2f54a2b602c8bcdb9211c752b48daa75e895f348e18c49429c07431674f358c69b546ff85c41eb1eabe7", "object_relation": "sha3-384", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882315, "uuid": "4c8c56fc-e7d1-4040-92fa-e881e6ed1c39", "value": "T1EEB423E25BA8CDCFC57F2A38F28EA52C5B68F36CC484F13550D771A440A22DECB55668", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882315, "uuid": "d4387a53-7541-4ff1-a84f-ec8ba533e4d6", "value": "12288:b94r06HLGO6Rju5zRFsrXhE/GzQWJgQUeY/wza:bm46v6Jq4rXJCes7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682882315, "uuid": "147e45f2-deb7-4bdd-9d54-7e8a1b157a9e", "value": 532395, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682882315, "uuid": "9247f4f4-4887-4df3-afda-d7df99fc1ecd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882315, "uuid": "d3a9551a-a90e-4457-8fb0-6ab316cba397", "value": "TT Trasnfer $89,483.12 against Bill INV-0076602, 76603, 76604, 76605 & 76606.pfd.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b29a6baa-e77a-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682874968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874968, "uuid": "b31487ae-9cae-43aa-a1f7-b298512bad2b", "comment": "Malware payload (Mirai)", "value": "b948611a55b2c22162f65632c169ecb6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874968, "uuid": "601e588d-32e4-4517-ad18-030ba723580b", "comment": "Malware payload (Mirai)", "value": "2a8adf4d4b81de586d73e4e06289aa552bed888f493f20238a136dbd4198a5c3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874968, "uuid": "ec3dc941-4cb1-4d3b-9c00-adee0d92b802", "comment": "Malware payload (Mirai)", "value": "df1099444f970e70486e7a2184c7a58c41faafdc", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874968, "uuid": "b91d3589-7eaa-454e-80b3-a195e75c4621", "comment": "Malware payload (Mirai)", "value": "38dcdadacd5b367bdc5692120f33172b99186d856ea8896361927d1718738ecda6e3ea925ef93b40f7b1ac1d44a59505", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874968, "uuid": "937d83b4-a798-4310-ae07-25478839808c", "value": "T115538409BF650FB7DC6FDC370AEA270628CD640A21A97B357D35D818F21B25B19E3864", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874968, "uuid": "1dd37abb-213e-439f-a44d-04ca38d626e0", "value": "768:NscgJbH5csKKNLFIfR7/eY5TdeSeq3evHDAvAXiLIQUOov:NTgpHys1Unj3r3UHDo7UF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682874968, "uuid": "2cde1785-8da5-4cfa-80d9-914dce00e6a2", "value": 64356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682874968, "uuid": "e8d0598a-0ec4-42ad-b993-61fe7327fc63", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874968, "uuid": "0d2ee18e-6983-49fd-8fa6-b949bec895a5", "value": "b948611a55b2c22162f65632c169ecb6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d67c1bdf-e706-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682825207, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825207, "uuid": "99d457a6-2a5c-47ac-8bdd-4d98f79044e0", "comment": "Malware payload (Mirai)", "value": "7c2bdcd8d7937ca7b5f7d978d698464a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825207, "uuid": "81c50bba-d750-4a6e-bfd2-00b5c01b550a", "comment": "Malware payload (Mirai)", "value": "2c7813046d741d7e71f8240d044259df87be6fc11c2c8f56e9b152bf0af0fc30", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825207, "uuid": "4d509050-8a46-40a3-a155-9288440b9add", "comment": "Malware payload (Mirai)", "value": "7900d417c9244dd712e775a43eaa0a903c2f6e2a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825207, "uuid": "9c49691f-650a-4a32-98b4-b8b48fec949c", "comment": "Malware payload (Mirai)", "value": "f84bb4e33d3e57365a885ec0cf465d20a803b3d29a00c840e346a90193c9b69ea710ccd073afc63370b1bbe1a8bbf719", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682825207, "uuid": "b03b56e0-ebb5-484a-97eb-ce0871992f7d", "value": "T1A6C2E0635222EC3AD0709CF0A5768B5342BA8BB891F638330B374F9495C6A0B977D5C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682825207, "uuid": "51702fc9-2bcf-41c3-ab84-907426a0d5b4", "value": "768:L7pp4QMLeLRXda9A2sjoudGpDZ3KFsLz+MIs3Uoz2:fpIeLTP2JD4FMz+Mz2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682825207, "uuid": "ed2d46a3-ff4e-40e1-b10d-6c08cdd231b3", "value": 28032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682825207, "uuid": "88b65fca-48cc-4cae-8ab5-c1eea70e66df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682825207, "uuid": "3be703a5-f567-4ad6-9efa-8735a0c682a9", "value": "SecuriteInfo.com.Linux.Siggen.9999.16464.16919", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5186c79-e77a-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682874946, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874946, "uuid": "4f2e2d9c-1cda-4038-ad17-0b64122b4bc9", "comment": "Malware payload (Mirai)", "value": "208a407d03da523aac91611f2348ce88", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874946, "uuid": "3dde0461-be7b-4b1e-ad92-3dcf65fd82ea", "comment": "Malware payload (Mirai)", "value": "2edc375d37e4788e0e818e58308ad1fdfc4e3700c4bd7717463f206f8ac1ccd2", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874946, "uuid": "2c10b6b1-efe8-48e0-ab72-6fa3a211c8dd", "comment": "Malware payload (Mirai)", "value": "723c9457afd4fb03479759a32d58c53289ff4bf6", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874946, "uuid": "7b9fdf83-ea1e-4775-94c2-26374da333d1", "comment": "Malware payload (Mirai)", "value": "85180286dafd510dfe167c40a8ec29186355703ef136ac0bb9419af2a172a586975d72a0bf32725d6ceb618ed87cbf71", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874946, "uuid": "248b6e58-af3f-44a1-ae6c-e47dcb7f0496", "value": "T1E2534B17B54280FDC09AC1744B2BBA3AD93775FD0378B2A67BD0EB262CA6D211E1DD44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874946, "uuid": "c8eb308d-4f02-46b3-bc80-96a4a47c439f", "value": "1536:dpmbSQ6U3q7cCBT/lZsK/0DiQwLiKimfFoktCe3fYRMz:WShU3q7cEDlCK/0DY9i8Fok06fYRU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682874946, "uuid": "adee2462-ad54-4ea2-841e-83e7527fb2ea", "value": 63296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682874946, "uuid": "2701a9a0-9e68-44c7-a9bc-1d3f92882ff1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874946, "uuid": "3855e4fd-b6a8-48b8-b7b7-11551ac83572", "value": "208a407d03da523aac91611f2348ce88", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "766b12b5-e76b-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Gafgyt)", "timestamp": 1682868425, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868425, "uuid": "71492837-60d8-4311-8581-b1f3846e54a3", "comment": "Malware payload (Gafgyt)", "value": "5a439f49f0c9e2441a06bbde8f13b247", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868425, "uuid": "8a947892-75cb-4bfb-bf37-a734ed3e7b8d", "comment": "Malware payload (Gafgyt)", "value": "2ee02ea841c68b22041b4bd5fa5c966d411401deec38ec9f40aa4c5ed1d21606", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868425, "uuid": "eb151d1d-40c7-4cfd-b0f2-2b06be9e24b0", "comment": "Malware payload (Gafgyt)", "value": "be3b047935bab989f9271de09b7e18dc43c1a70f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868425, "uuid": "adafa61a-c1c1-49e1-a0d8-3b2973283636", "comment": "Malware payload (Gafgyt)", "value": "0a7b18f50fc570e3d63f953ac735f222822775415afa392e246d04b9b2e1bf43c50789f74ee34b2074bc6980fceb22d9", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682868425, "uuid": "4011c6f5-414d-4185-8829-0462459c4aec", "value": "T189F3F70195508B5BC6C39BBEF745A2CE73726E986F873306C7197AB027D02AE5E3D201", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682868425, "uuid": "aca213ea-6720-4a74-bbaf-6a835691e9bf", "value": "3072:Sy5vlalsWQFtfo9S8pohPKkNDGPp1gFwqLM6rzH0aMjAw8E1WRATbqAob1uzO7mV:S6bO6rD0aW8RUbqBuzO7myotqauUr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682868425, "uuid": "d57f9c1c-8502-4d25-8913-40bc2e62a632", "value": 160615, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682868425, "uuid": "16949475-58a6-46d9-9afc-1d3b6414e3b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682868425, "uuid": "968b6061-381a-4ea1-af39-a6b19ba3ceb5", "value": "5a439f49f0c9e2441a06bbde8f13b247", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "249c61f7-e768-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866999, "uuid": "83255fc4-fc9e-47f5-8276-176d4a821204", "comment": "Malware payload (Mirai)", "value": "09b0a639324d79d6202a346ce22fb7d2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866999, "uuid": "037f177a-c141-4036-a5a9-674c9aca3c4f", "comment": "Malware payload (Mirai)", "value": "2f88baa5d39aea61d274fd2197c147675137de21a3a5b5f3383f7c8dd32d974a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866999, "uuid": "4d02c80e-e0b5-4123-a9b9-2a07486e1940", "comment": "Malware payload (Mirai)", "value": "518bb06d47e63f7846fb91505b9313e4409b168d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866999, "uuid": "8fc78b6b-2138-4ce0-b57c-02e643f9f3ce", "comment": "Malware payload (Mirai)", "value": "449f35a687a980f625e58d9a288bab1a5d6b78625514e2766207e44a038666a6f65da9be29f8d8ea0631ec81ebaec552", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866999, "uuid": "798e4ac8-a119-42a3-9216-1f3447f859d5", "value": "T164330A8EB8029D3CF91BE6BE54164E0DB93177C152830B2767BBFDA36C721945E02E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866999, "uuid": "9e44b431-aa6b-4077-8a28-1220ad89c899", "value": "768:gduPBFnHooqR8qOCKq2cH4Kg9e+TK806MMUVjzkfQXObHud2oGi:r/hqaJMDg9eqK806MHdkfQX6HuCi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866999, "uuid": "dd26e86f-0097-4d9f-a908-450825352771", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866999, "uuid": "308d03ed-31f2-4517-96fb-2fb27f12bba8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866999, "uuid": "532f9304-846f-4ffb-8262-8dcf8fb14d6e", "value": "09b0a639324d79d6202a346ce22fb7d2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "586c1681-e7a9-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682895003, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682895003, "uuid": "42799fa0-9ad9-4e9d-b7da-136e6bd80aee", "comment": "Malware payload (Mirai)", "value": "2b66bf0b13eeeb861e2e288198c1c1f9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682895003, "uuid": "5115f283-ff43-46c1-8017-4926c853cd5c", "comment": "Malware payload (Mirai)", "value": "31ea16ea8f0dff42c66b60821689d659aeef0df7f9939c130b8ebf8a33759cf7", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682895003, "uuid": "4b315374-05cb-46e9-91f9-79345ef63c17", "comment": "Malware payload (Mirai)", "value": "bf9c2ab1e14fc93f4c4ce1970006d2b54c69c90c", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682895003, "uuid": "aa6cc629-d4aa-4fee-888a-0f0e9d59d039", "comment": "Malware payload (Mirai)", "value": "245b7e374f59c98900ff502db20681aa27b89a56d3cbf28cd04c59ad28334a9e47ee17e33e4a0addaaead018634ac4ae", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682895003, "uuid": "bb744fc6-636a-4fa3-b781-85d334420f7a", "value": "T17AF23BC5E843D9F5EC5102712173F732AB76F93E216DDE93C7AAE1269892901E6032DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682895003, "uuid": "7c2780e5-2875-45de-a2b0-73829c11bbae", "value": "768:cHd6hliOrS1hcDcPVWrJpyx70zzZJXwSooYZ:ed6hlrrS1hcgPMrJpE0HzXwfoYZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682895003, "uuid": "5b69f095-f665-43e3-b289-7604dce51abf", "value": 37468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682895003, "uuid": "309dadd6-22ca-4fca-ae53-1d3cbd69beab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682895003, "uuid": "b7bafd54-9817-496f-b8d4-992ca81926c5", "value": "jew.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eef08f38-e767-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866909, "uuid": "c5122423-15ff-4af2-9058-ec228e31dbc1", "comment": "Malware payload (Mirai)", "value": "37e2dc14875cff72e2d40d1310ef6d43", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866909, "uuid": "180b22b0-2872-49e1-a245-d474bf300a10", "comment": "Malware payload (Mirai)", "value": "3305ddc843d3eef2a2a6f866385fd29ebef83581141f26d4b05f5dde5b156d79", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866909, "uuid": "3d60bac8-685e-47b7-af0d-c9c0148c9b0d", "comment": "Malware payload (Mirai)", "value": "39e92d6a7e8d52798e5d3f48d5c884ac7cf28a47", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866909, "uuid": "cc8c8623-4876-4215-94cd-7ee1f78a2a60", "comment": "Malware payload (Mirai)", "value": "764a01f3d14c46ed1b09000d913d3707577b3a2b4db8ba1a8b80f1cac86e537e8bb4d10268486ff48a6736e94b6aafca", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866909, "uuid": "e4e59660-2de3-48ee-9131-d70f11184f34", "value": "T1C5632851BC819A13C6D1127BFA6E028D3B2623E8E3DF73179D225F2037C696B0D27A55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866909, "uuid": "c4656355-261e-40de-870c-96cebebe774f", "value": "1536:iNSlxAmiik110lOO//kWUji0isI3AA8PNRu5AvbWG:iN/Cbkd20isI3/+VbL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866909, "uuid": "ded23c0c-f7a2-42ce-8a16-0193a700fcaa", "value": 66916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866909, "uuid": "d12f4510-52d5-4ccb-8bd0-d9d00b12b5b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866909, "uuid": "d7dfbb3b-d1f0-43c9-a37e-df167b444364", "value": "37e2dc14875cff72e2d40d1310ef6d43", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9fb2bf5-e77a-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682874954, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874954, "uuid": "d015f04d-352e-4e25-854c-4d87d4eea0b0", "comment": "Malware payload (Mirai)", "value": "c80917ee10b7c4b88325075535ff1d91", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874954, "uuid": "dc564974-c460-489d-b2f5-8b543dfb6852", "comment": "Malware payload (Mirai)", "value": "341bd14c0a3cf7277b6600598fc7627b35ef41a11c3c5a13f279e2a50d84aa71", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874954, "uuid": "5263bf35-3de9-4a62-b970-c7b47ce30b30", "comment": "Malware payload (Mirai)", "value": "2708001734ad47117b7e886d281102e5df7b6e35", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874954, "uuid": "3e207c11-33d9-4ab0-bfcc-c1994f1c44dd", "comment": "Malware payload (Mirai)", "value": "63237f24ff2e3b29dc1dd7c7c6176aba7d4d42b101e292dc78f2853287240e76e1e420a865300109449f41a275bf7f7d", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874954, "uuid": "53de2cfb-4308-4c31-bcde-8f6f41506f35", "value": "T19D534B17B58280FDC09AC1744B2BBA3AD93775FD0378B2A677D0EB262CA6D211E1DD44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874954, "uuid": "df22451c-8213-40f5-92a9-05263f3fa53b", "value": "1536:dpmbSQ6U3q7cCBT/lZsK/XDiQHLiKimfFoktCe3fYRM9:WShU3q7cEDlCK/XDv9i8Fok06fYRi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682874954, "uuid": "cd7ff6fd-a103-4c08-a36f-8662e597d78a", "value": 63296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682874954, "uuid": "0843ce61-e032-44ab-82d7-78e921235f2e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874954, "uuid": "ac04a779-8220-4679-bbad-a491acb9f942", "value": "c80917ee10b7c4b88325075535ff1d91", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edb54bc3-e756-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682859605, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859605, "uuid": "3e175694-86a0-4a72-94e6-0b4d9dcb496f", "comment": "Malware payload (Mirai)", "value": "d226b6c71d4dcc59cc148de17a775d54", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859605, "uuid": "58795fc7-d751-4f8c-a0fb-e87e57f2551c", "comment": "Malware payload (Mirai)", "value": "341e1d5f3aabae108f5a8fb3737add72c71fb70e3ee6a5bfd7c0ff24af46e063", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859605, "uuid": "e1015d03-cd59-4b11-891c-27d817318d31", "comment": "Malware payload (Mirai)", "value": "049c1124eacad1e7ba23107dc75767135a59ec30", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859605, "uuid": "3c94dd6e-2794-4760-a089-2bcef32141ca", "comment": "Malware payload (Mirai)", "value": "77c6aec66dde0c16cc148d82b8a104e79063918ec0e2a897fc63c0376ee06355a7dad22d8b7af145d299736a2cda9382", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859605, "uuid": "4c7c0619-fba0-4cbe-ac0e-44731d0a1ffb", "value": "T1C6A2D019BF18828BC836397945D9EAE22252FC71F29DDC493940C12FF1A33A95874F86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859605, "uuid": "ed6ccc81-5e61-488e-a21a-3622d4b245f3", "value": "384:M0sLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTH:k98o08kxofBE+ZkXaITbp2F2TWul0c5T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682859605, "uuid": "db6d4522-c51c-4380-a381-b03098089e83", "value": 21492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682859605, "uuid": "b35d996f-c9d0-4725-aae1-364ddc605ac3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859605, "uuid": "2871d460-f8c3-4483-a97b-4b32831325e9", "value": "boatnet.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c505af8-e743-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682851201, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682851201, "uuid": "1d93afa8-433b-4c10-a132-b616d1383047", "comment": "Malware payload (Mirai)", "value": "264e3515893fdf93444ae7235c5b2858", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682851201, "uuid": "a5400508-273a-4c52-beab-ca6245937f52", "comment": "Malware payload (Mirai)", "value": "3442d443c675d062f3f419b2afb1ca9afb8ca2569dfe6726ddcfa8c3b169b095", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682851201, "uuid": "f1b56c3b-f3a6-4cfa-bf43-47f57f7429a0", "comment": "Malware payload (Mirai)", "value": "5d35e266a0a20d32cccb38fb18d65f4ec0976782", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682851201, "uuid": "7a771f38-69b5-4954-8477-9bdf6775e98b", "comment": "Malware payload (Mirai)", "value": "88a4eeb8d4f2d02fbac8d676afc01cc171e23e85e9686b7cfd6f0ac2685269c18febdb11987f1f2f602e3dba9955475a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682851201, "uuid": "33317074-1e50-49f1-ab3d-e81507e90527", "value": "T148631956F8814B22C5C5027AF92E118E332317FCE3DEB2229D216F6077C696B0E7AD55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682851201, "uuid": "d51a2864-c49f-4aef-92d2-37575d30a6de", "value": "1536:hpnSzfzQZTJxP0CM9L8qRVC04F18avynAZzKIJoiCfAv+DfPp5mYonB:QfcZFuCohHajsfAv+DfPp0BnB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682851201, "uuid": "b6eb8f59-7d89-48da-bf24-e7615e7903e8", "value": 70964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682851201, "uuid": "6863446c-b068-45d6-a87f-b991669e7ae7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682851201, "uuid": "44656269-6189-4ebf-ad8c-6ccff3e5d947", "value": "264e3515893fdf93444ae7235c5b2858", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "911ef0cb-e6eb-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682813494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682813494, "uuid": "d53fddc0-dc52-42c7-8da8-0df2ccd4c4e1", "comment": "Malware payload (Mirai)", "value": "74e96b0d4c8a178175ba7ce7cfd182e8", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682813494, "uuid": "046877f9-bb4c-4a12-bbd9-71d990f38899", "comment": "Malware payload (Mirai)", "value": "3461c71878ac7a2e98d3e3a5f4c0c81028e0bc5b965c56307ee228cb860966d9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682813494, "uuid": "8f077cfc-b5fb-4520-938c-5d11ae1b6a19", "comment": "Malware payload (Mirai)", "value": "9445ec3f797a9606d94c8e927fb7a344851c160a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682813494, "uuid": "af4e11a4-5427-47cf-8a25-cb724c2898b9", "comment": "Malware payload (Mirai)", "value": "967670d09c925b0e9d052d86ce5dbab847ed2e8bb38ca9931a886dc7856fbd5e8e115355c2072310a1bec5a0e3429e95", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682813494, "uuid": "82d6d2ae-7145-49fd-97d7-a735e8a86645", "value": "T110E27DA38C3E2F54D6154675F424AF3D9B53FA28D6878EEA44268626D003ECCF8193F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682813494, "uuid": "f9a57715-40d1-4ae7-9ebc-71b4b0c27b28", "value": "768:AUcZZCTCrPshw+ZuYCZlS3Z4nB0Dwo67TUdChZUM:ADC2TsjZyZlAZiE6EdChZUM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682813494, "uuid": "f91b7b21-0da8-4ab5-94a2-644e03e39b89", "value": 33784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682813494, "uuid": "a3207a00-b9e4-49de-96cc-740e990a830f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682813494, "uuid": "0f41f58b-475a-44a1-964d-374841621f6f", "value": "74e96b0d4c8a178175ba7ce7cfd182e8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "856683cf-e759-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Formbook)", "timestamp": 1682860719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682860719, "uuid": "74761c60-d43e-4c3a-97ee-b1c438fcf091", "comment": "Malware payload (Formbook)", "value": "07ce9d81a17be98ee77a7401f6c71e9d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682860719, "uuid": "e285cbe9-cd91-42d8-bdb8-b2b1eede874f", "comment": "Malware payload (Formbook)", "value": "34a5fa7d85900b14812e17b83238dd9b6e8a4b65373d06c7274c2c03ab418e36", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682860719, "uuid": "49ed9a63-7b0c-489f-a2cf-bfd89a40cc56", "comment": "Malware payload (Formbook)", "value": "1de75a5147ed3eb954a7fd2968973cd217db7575", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682860719, "uuid": "8d77173e-28ab-4444-be89-454ce8efc664", "comment": "Malware payload (Formbook)", "value": "a36439a40ba807766183a4c87d551b9dcf1be5d300d114e994a6001405df75e3292ac19941787ff5e609794bda153b02", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682860719, "uuid": "1f6f19a5-0388-4e41-8a52-1ebdcc4a3ca7", "value": "T116F4AE3D257C2B37D179D3784BE05423B2E4D42BB211EEA96CD713A60752A4276E323E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682860719, "uuid": "8a051cc1-4c5b-450e-95eb-db1dabfd32d0", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682860719, "uuid": "fdd8b614-24fb-4a44-a7d8-fb59352f5106", "value": "12288:nalKbrlVlckfCfGozU9/44LRG9E3zv1EystCDWzCKVQHocEGljkAj6PD:nalKHlVlckPog9/44tG98zCyGYWzCuQ0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682860719, "uuid": "f6453c70-11ff-4bc7-9df0-f71dda52a39f", "value": 774656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682860719, "uuid": "07e7fb73-e831-4a2f-8529-3f7b0f340fae", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682860719, "uuid": "c76fab78-dfe2-4b7a-a55a-b1169f624954", "value": "PI.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "572b8689-e730-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682843032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843032, "uuid": "58ae0cf0-9852-4099-90be-308513264de2", "comment": "Malware payload (Mirai)", "value": "609988d19af228ebb97fb97cf5c04b97", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843032, "uuid": "6f799f6b-9a56-4e3a-9c7f-18277065ab0a", "comment": "Malware payload (Mirai)", "value": "34f1dc9c7766765b3c5ef908c89e40cd9558943a644b9ae7f437aef06ba79762", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843032, "uuid": "648449b6-9e10-4e22-b82d-cfa1840be4e3", "comment": "Malware payload (Mirai)", "value": "c11040e043a71fc7d6429ac5ccc6e0a550d409f1", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843032, "uuid": "fcc2c26c-b610-4c0b-983d-10094976428b", "comment": "Malware payload (Mirai)", "value": "b4e811bfe51c2a0d6eaf7a79dcac54dc7bf307c2787e1ae47f2ff2f0cb3e3330d10a45e0aea0f648c70c32d33481c068", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682843032, "uuid": "6b6ef3f8-6f60-47ec-bc5b-0c2d581a9a60", "value": "T1EB93C519BB511FF7D89FDD3746AC0B02388C958622A93BB67574D428F24B24F15E3CA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682843032, "uuid": "6a70c1e2-fb59-4046-9d3e-f3f9742cadf4", "value": "1536:dUYHi4GHWD+hVBNqG3N5yfh9WIZX31RQOwZRwbZnr:dUYHfG7hT5yfrWIBYRwbZnr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682843032, "uuid": "b496b925-6777-4e64-8c4e-84d8e1ea97a7", "value": 88844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682843032, "uuid": "04f0e2ea-7599-45d2-8e73-a1ebd8c05b90", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682843032, "uuid": "c1bd265a-a2a8-4992-bf7b-6ae6d65eeed4", "value": "609988d19af228ebb97fb97cf5c04b97", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b8d022c-e771-11ed-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1682870930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870930, "uuid": "d151445f-6d52-47ef-8e21-8531cb4a67bf", "comment": "Malware payload (AgentTesla)", "value": "6a426ea5dab9abb4a0442733925a8780", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870930, "uuid": "392bd18b-9a7f-4945-904a-4c0d4fc238d1", "comment": "Malware payload (AgentTesla)", "value": "38dfb1c6f7d5358a588842c27556d3b3eb3baa4a6e84286bc84ad10bf238f832", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870930, "uuid": "4aaa1a2d-95bf-4891-aba2-e2c8246f73df", "comment": "Malware payload (AgentTesla)", "value": "44aaa13d2b79175eed44980e1d1af1020d172d7e", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870930, "uuid": "a249f72b-34ac-40a8-a1d3-35d7bf9e4a49", "comment": "Malware payload (AgentTesla)", "value": "3ebb70450d6f6c534ec7f4995fa91d390e3aedcb5dbb38265b5886595f9d182083bb72dc4657126010c323bc3f040545", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870930, "uuid": "a07d135f-1b2f-4a43-8826-4ea51286935b", "value": "T18AF48D3915B86727D17AD37889E09403B3E1A85FB211EE987DC703EA1746E8179D322F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870930, "uuid": "843e061c-f214-4b3a-966e-db22e1a3f2cc", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870930, "uuid": "7f3a3042-0a11-4eeb-aa5d-7e12ee4c4f6c", "value": "12288:vL5oIsjxIlVlcfT1Luc0Zod8d3fYgktjUqzRWiuh1p3p:rKmlVlcf5qcFd8d3tkV8b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682870930, "uuid": "4478b627-82d3-44c6-9fec-28fecd137173", "value": 726528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682870930, "uuid": "fbaed91d-fb8d-4b73-90b3-5850560b82fc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870930, "uuid": "4d032381-2ccb-43d4-befa-db97f97a3dc4", "value": "SHIPPING DOCUMENT.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66787178-e72d-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682841769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841769, "uuid": "c2e5e697-7d3c-4927-a659-cec10659b56c", "comment": "Malware payload (Mirai)", "value": "b67e005b3de371459ddde8c2591b3666", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841769, "uuid": "266a168b-4012-4ebf-90b9-a86226564ea4", "comment": "Malware payload (Mirai)", "value": "397b86c39a4eb67936897ed671bd80d3fb832fd857a4fb0a28130fa3c73a83d5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841769, "uuid": "9bdba617-d5ef-4b97-888d-7d3e7afd8a22", "comment": "Malware payload (Mirai)", "value": "32adbcaad97704a89d85e7ef8d8cb17a7c685b43", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841769, "uuid": "416cf184-183a-48e7-930f-fa2d702f7b1e", "comment": "Malware payload (Mirai)", "value": "73c3fc0fca19affc1f4240f1a78ad5602bec365b159113789900e0868bdcdfb40f928eec5713502fcb7fd63c327103b7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841769, "uuid": "8eb05d6f-e265-449a-8fa4-ffb8f14f05cb", "value": "T1A0F2E0BE71E67A4ECA8E8D7AC489A3A10D95F0C4B08B1F9D53058CC0BB2B48F765C1D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841769, "uuid": "fa59a802-ccfd-47fb-93fd-ab58e93737c7", "value": "768:rd+qWVum1aI6tX80XanMX7H18r4ffxrLtnHDfTH3na2e7ZWMn:rd+qWVPII6tmnS7irEfdZnH33a2Y1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682841769, "uuid": "eb6e7cd5-6653-45a1-8c63-a0785d8cf8b6", "value": 34288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682841769, "uuid": "7ab8ccb6-fbc1-4170-910a-40d964f66c9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841769, "uuid": "2798f987-c64d-49da-b0f1-b599a13d5598", "value": "b67e005b3de371459ddde8c2591b3666", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d49ac327-e76c-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682869012, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682869012, "uuid": "74fa7c2c-4a57-48fd-bd76-c10de50f0ba9", "comment": "Malware payload", "value": "e1a29aee67694fe5661e52e38c973acb", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682869012, "uuid": "d1e777da-2d24-4ba4-881a-8f9f22a8a180", "comment": "Malware payload", "value": "3a04d755d795918ce09806d66a43c960ee037681bf5036fcd5d092fb713c9677", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682869012, "uuid": "26fcac52-0b5a-4d32-abb6-d7b049ed7fa7", "comment": "Malware payload", "value": "addfdf0ceb7a492bcd83f0ce903efd5ef26af33c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682869012, "uuid": "6c2e590c-47b7-4539-a5aa-b97d0bb01223", "comment": "Malware payload", "value": "31db71df8679ebece47fe94f3be844fef30734e5c607de62403c759f118406671a9c350f18d9050619c172fe32efe01f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682869012, "uuid": "978c1072-35b2-494b-91ff-df311ef70252", "value": "T1CF0476AA39606B6EE55487B10BF7AF70C2D4289721E2A753D26DE6045FB038D1C5F370", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682869012, "uuid": "44b1b457-d7ec-497a-8b40-914ac58d740b", "value": "1536:DVND7KGU8FTx0KVebbr4KaHHW9KZpc02clWUP2pQ/epQDi9kniZUCTQJSbsluXYA:f5+W4umlaqQiS7jXWHUyf+lsqDpyi88s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682869012, "uuid": "43efeceb-867f-4c8a-9791-832994894377", "value": 180305, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682869012, "uuid": "820d84eb-9631-4b97-ac14-2736c39b3c97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682869012, "uuid": "4857a32b-6d20-423e-ab75-ef99896d87cb", "value": "e1a29aee67694fe5661e52e38c973acb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10f292fb-e793-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682885434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885434, "uuid": "c077afc6-f4c0-4341-a6d4-d889c341a333", "comment": "Malware payload (Mirai)", "value": "bb0ab24f90cd0623620fea895a28b6f7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885434, "uuid": "947b217a-ebec-4456-9341-515905ad778f", "comment": "Malware payload (Mirai)", "value": "3a6f03bca67cc8260fb865a70825e90b89eb69e40dcff015ea95863163ac02eb", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885434, "uuid": "4fbf1968-05b2-44b5-8006-22190526c753", "comment": "Malware payload (Mirai)", "value": "d7340b79025652083d5117bb20e5f8f9b23a2981", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885434, "uuid": "c7824f48-1e23-4e3b-9885-e8fb7b1defbf", "comment": "Malware payload (Mirai)", "value": "adce7e4981d622d606a4ba299a778d5b83322a2312c507dade4f47bd89d26c7ef3aebe5688d267ec56a990d59ed0b4b9", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682885434, "uuid": "05740eda-2cf5-405e-806f-39970c10208f", "value": "T150B2D0A487949707C6B07476A27CCF921A3B15F4C6F73526262093BCDA824A633FD6C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682885434, "uuid": "6af06e03-ca24-457e-914c-0b0a9066a8c3", "value": "384:4GHKXlJIDFUS0Mggks3aIrokYVDoDDRRKj55N7LB9U+BKsILaNhymdGUop5hu7F:4GHKQFH0rs3zWoDDRsjt7LB9U+BKsILY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682885434, "uuid": "382484e2-8f97-4ab8-9082-b83fff2c96c7", "value": 24536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682885434, "uuid": "e590b164-a4a9-476d-ab4c-d90fd158bac3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682885434, "uuid": "a14a90d8-c173-418e-834f-3dc039543cb6", "value": "bb0ab24f90cd0623620fea895a28b6f7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64f601de-e794-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682886005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682886005, "uuid": "24fcdc6a-9533-4994-a9d0-8fd4d67e3254", "comment": "Malware payload (Mirai)", "value": "007947e00a3c8effd938405bfde8c684", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682886005, "uuid": "6d2b9937-d163-4eb9-b155-4779227fd908", "comment": "Malware payload (Mirai)", "value": "3a983917be3f7cdc9ca9d72e828010c918ba6c24863fa0fec6c0312d0404adf4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682886005, "uuid": "7b59227a-2f07-40d4-ac2e-82aa884cfdd8", "comment": "Malware payload (Mirai)", "value": "e9c1516bf81d6484bb58adc88ad3081b858a4a63", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682886005, "uuid": "21d99b10-fb88-4ac8-a503-4f98fba32ac7", "comment": "Malware payload (Mirai)", "value": "8c0a5e69e427873c512fa02040e3dd2ae69b341e255851a8c524a499451dd4c02897a1d8f82400a7baaf7f7baff7fad2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682886005, "uuid": "f26017af-411d-4c47-8151-f4b2fe9229f6", "value": "T1E4539FA5C5ACAE58C71441B8B654CD398723F408A5A76EFBD646C796800BEFCF0187F1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682886005, "uuid": "3a86410c-c096-4e1e-85d8-378d3e169369", "value": "1536:PaAtVnz1/mUUNztiYmW6ihiYLTofs3wfpWIDNEJ7JC7:P/tVz1eUUfwN0T0f+whWONEJ7J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682886005, "uuid": "ad35d86a-8286-45e9-b36a-09c5bf1229b4", "value": 63772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682886005, "uuid": "e5f0fee5-d593-4c62-b646-d22dd3f35b47", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682886005, "uuid": "40f245c1-f344-435d-81d6-370763001780", "value": "007947e00a3c8effd938405bfde8c684", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "594ae228-e7a9-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682895005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682895005, "uuid": "3cc73e14-d29f-4511-8b48-6030fe56c0f8", "comment": "Malware payload (Mirai)", "value": "1f6f7d193b7e622b2aa5d9fa52d9e7e0", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682895005, "uuid": "231ac926-33db-41a1-b3b5-57aad73ae678", "comment": "Malware payload (Mirai)", "value": "3c91b5a290eaa00040f16055812c82495df3ccaec59bfa1622b8f34dcdf29347", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682895005, "uuid": "9fef6608-119b-4f37-baf2-6178a4304066", "comment": "Malware payload (Mirai)", "value": "a81555990d0e48620ae82881fdacc16bc950e20b", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682895005, "uuid": "ab24e60e-4ca5-412e-93f7-12c2de388894", "comment": "Malware payload (Mirai)", "value": "e982822b852d306f9bea29a7f6175cfc17e8b81dea3c625169ad9c57ea01a504daa8d7e4c28dda0faff5d514f8c7772e", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682895005, "uuid": "19ea7832-263c-40d1-ae47-2229f16bbf26", "value": "T164B33B56EB408F03C4D51776BAEF424533239754A3EB73068A189FB83F867AE4E63506", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682895005, "uuid": "45b3ab08-b864-4efa-9502-9ee3f1d71607", "value": "1536:a/VnqGyNq0whbiVUhuRKyupvzW8Sllg2iL3jVgmj6AVt8zw/9RxTjy8:aty004OU6KyupvzVD3jumjdVOM/9HH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682895005, "uuid": "67e93b20-108e-4d27-9ed0-85f9fe2e0e22", "value": 110593, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682895005, "uuid": "d701f8ea-c3fd-4d26-bd2e-da9960823b4c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682895005, "uuid": "6898cda9-62a6-4286-b9ec-758b59dcdbb3", "value": "jew.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df2f9981-e6f7-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682818779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818779, "uuid": "0cdb491d-5a4b-4c59-84b5-8a9074e075f3", "comment": "Malware payload (Mirai)", "value": "5128e76e42f0b7b756e06470ec0c4c27", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818779, "uuid": "b14b0207-3542-4dad-b692-695264f4651b", "comment": "Malware payload (Mirai)", "value": "3cbfc00a67e301d5cb0520635120ca915285154e49bf750de5f2670e502d27fa", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818779, "uuid": "2078fe03-3b7c-424f-865e-09c7b1cc6686", "comment": "Malware payload (Mirai)", "value": "f70c6c708ada1335c9c8bfaeec3285a73adb5430", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818779, "uuid": "df50ff99-d2cd-4728-bdb1-b276e56b464c", "comment": "Malware payload (Mirai)", "value": "70591a012f695038a0144c8c82caaa6452f6e33fa552b054302a5971859206953793b72f2aacbacbf89e62a7ae63f197", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818779, "uuid": "7eac8d31-2d23-44f9-aca8-ad9c2054f2db", "value": "T133831956B8814B22C5D512BAF92E118E332317FCE3DEB2129E206F2477C696B0E37D55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818779, "uuid": "0354bd5b-2e11-4682-ba87-5844209a02e3", "value": "1536:EqnCzVdwLNDlXm3AhIpqsA28k2aRLPpcazh0PI9iZg3XvnTGPK5WYIWG:AdqNJWwhISk2uBcaKg3XvnqPKERr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682818779, "uuid": "db795068-9f78-4439-b2f3-e46e86b98354", "value": 81104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682818779, "uuid": "a313a1c7-0122-44c0-b52e-9c9877cbbcec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818779, "uuid": "f02ed2d7-5a37-49a8-b1b9-9dcbcdc25215", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "340d2e4d-e768-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682867025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867025, "uuid": "5be52121-ad50-480a-ac8b-4f150dd5fc59", "comment": "Malware payload (Mirai)", "value": "659b5684af951ce4ac6c25a2b80ea4e4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867025, "uuid": "f78237af-02f8-4d00-b06b-62e3ece8b745", "comment": "Malware payload (Mirai)", "value": "3d3964c0f79a3270d578692a74b24d283c8fa8892dd7a7e1f00afdc6168dfc1d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867025, "uuid": "a4aadbf5-44bc-4e8c-a81d-573eb3563ecb", "comment": "Malware payload (Mirai)", "value": "70b0c1a5f30a93e2b8ab0ba58c09e70fac77f4d3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867025, "uuid": "37d3474e-c989-4beb-93e4-fcea52569d8a", "comment": "Malware payload (Mirai)", "value": "4aa3ce434c3e00e180f1bdad69dfa94f262d0a52ca03fc509eec42035956e0db6fb27c64fd362a0a1393dd075c9993c9", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867025, "uuid": "04a80f85-137c-4e03-8496-62f4ea71bbad", "value": "T102532A9AF801DD7DF84BD77B04570909BA71A3D152831B3623A7B9A3BC731A81D23E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867025, "uuid": "501c95f7-0b56-4c64-a49c-dc0529d4dc0e", "value": "1536:K9xWq4aRcyPA8L8BEYM+4QZg7Dr/KNCIkv8Y12:K9xF4auyPx8Cm4Ggfu08Y12", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682867025, "uuid": "080624ba-7df4-449e-ba9c-fd6589a6f7cc", "value": 61272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682867025, "uuid": "368e3a47-4dcd-4405-9dc4-af611143034c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867025, "uuid": "cb9eb6fe-5517-40d1-b938-15bf119e0fed", "value": "659b5684af951ce4ac6c25a2b80ea4e4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de613e63-e6f7-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682818778, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818778, "uuid": "b76f316a-b605-4166-8b3a-5b44764dc725", "comment": "Malware payload (Mirai)", "value": "d375f3d903f3dc38dd87ebbb87ecfd6e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818778, "uuid": "a438a40d-c367-4ce8-ae60-d5f5a773f1fe", "comment": "Malware payload (Mirai)", "value": "3f07af80147345b38c4c5ea416fc94183b6ad5f55af4552ada72f95f6ba294bf", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818778, "uuid": "b752df2e-3219-4397-9d58-326fd0a962e2", "comment": "Malware payload (Mirai)", "value": "7aadde3e37beeef396f79ea01a57ad2051825ae6", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818778, "uuid": "09cfd0c0-a766-46dd-b142-cc97421a99d7", "comment": "Malware payload (Mirai)", "value": "0b55359536a857352d59b1240af7c244432884d02225bbd0d39e22d9ab78e6f6d17466a3faba386a562ee1ba4d2a07ad", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818778, "uuid": "7bfe698f-53f3-4a68-a61d-64158e5947e3", "value": "T1AAE32B46EA418B13C4D61779B6EF4245332397A493DB73069928BFB43F8279F0E63A05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818778, "uuid": "55231ada-4b91-4b51-91cf-5485b381f12c", "value": "3072:ToCMAQKOzu7oP/d7Eag0ybW1UZtwPGJd1aINXsAwM/9i1zX1:ToCM3vzAopEag0ybW18twkIINXsvM/9S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682818778, "uuid": "62dff73c-646b-4f51-a8f6-c7e6c4ac9e10", "value": 154820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682818778, "uuid": "aaae51c1-aed3-4ca7-92e4-d5f20a054c5a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818778, "uuid": "0e9cfdc5-5eec-4237-9644-e7a19e643542", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4c2b268-e7ad-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682896876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682896876, "uuid": "f7b22232-9081-4dcd-9885-6e2e75ba9d93", "comment": "Malware payload (Mirai)", "value": "276088fb6a86f93afa4a58e7789900ae", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682896876, "uuid": "334712c0-7da5-436c-bcee-d5fe9087bcb4", "comment": "Malware payload (Mirai)", "value": "432f3fde430e8aa9528977d7846aa007f3ffcc7f4f22f08de9fcf036c1e767e3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682896876, "uuid": "3f019f11-8dde-4028-84db-3b98d8ac2201", "comment": "Malware payload (Mirai)", "value": "8677d567fe1f2bccbfbc97382a35407ccde3f975", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682896876, "uuid": "25701bb3-178e-47b9-ab0f-db5565ef9cef", "comment": "Malware payload (Mirai)", "value": "84dd1bd35a21ab84af0fdfedbad163e92c20d18ada584d3504346049da495e739ed914da8a1818038812bf53a7d95e60", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682896876, "uuid": "9a1b954a-80ca-4d6d-912b-7f04a8a3ceba", "value": "T106D35C46EA408E03C4C61775BAAF41893322A755F3DB73068E186FB43F86B6E4E67106", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682896876, "uuid": "11750efd-c1c0-4068-a1f9-e45500fd9244", "value": "3072:Dq6kTgG9C2rrF95/GHAF2rcxWIrlEaN3HM/9BKmC:udgGVrF94HAF2rcgIiaNXM/9BKmC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682896876, "uuid": "bffb9d29-e555-412e-9a82-6d2d56a5c6af", "value": 137680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682896876, "uuid": "dee4b0dc-e433-4424-914c-d5610afb3cf7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682896876, "uuid": "8730066a-9990-4bb6-86d5-222d0e2feb63", "value": "276088fb6a86f93afa4a58e7789900ae", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b259ff9e-e6f3-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Vidar)", "timestamp": 1682816986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816986, "uuid": "906d7737-263c-460c-9105-6271021a5e22", "comment": "Malware payload (Vidar)", "value": "ebca96f092eaa6e786b4d08a79f23856", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816986, "uuid": "7b41c74e-730d-40e0-943c-8fb38e9cb3f9", "comment": "Malware payload (Vidar)", "value": "43b9908f18f1746055cc87dd678bcce4bf2134a059092a580b8c41653031f6fa", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816986, "uuid": "c4e06a8f-7b95-46f3-9f12-55fc62d0b50e", "comment": "Malware payload (Vidar)", "value": "5bc1880dac016060c5a71d40af6afa514a1fe3ce", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816986, "uuid": "61545b82-0081-4698-999f-034cbc36c45b", "comment": "Malware payload (Vidar)", "value": "95284bf8647fa54e56664f33d20a6694a0bfb36ffc8d6ececc05efee801750c1048f6744397e2ac7b62fe5d90de55e55", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816986, "uuid": "5ce4dc64-163e-4b49-b754-aa9abfb61ab6", "value": "T1B5A4CF1272F86871E6324A718E3EC6F8665EF8624F55BBDB1314DA2F09B12F2C572701", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816986, "uuid": "1a720e9a-0cbe-4e37-8171-c205aad9fab2", "value": "8e1291b1baddb8fcca0899ad3cc587e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816986, "uuid": "1173e054-8f16-4d71-ab5c-e22c1cdced59", "value": "6144:F1b7YOkZ4qC5PTJ2oYJqNU8rGYU81dsP9DQEslx/CWthV7fq:FZ7dkZ4q3oYJn8r3U87s9Q/fTtn7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682816986, "uuid": "85fa0655-9748-4243-90ac-607fd32df42c", "value": 476672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682816986, "uuid": "356ba2b9-1d4c-4a5d-87c6-884903c8b665", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816986, "uuid": "e420bd41-fb34-4af4-9cff-ce1d8317d59c", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cceac770-e77f-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1682877160, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682877160, "uuid": "1b76d8b1-9956-44ce-8c13-15b8666f167c", "comment": "Malware payload (Amadey)", "value": "68f4fffa0655da67fe4314d3a0108fe1", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682877160, "uuid": "68dd824a-7d14-4c22-8630-5841af784e5d", "comment": "Malware payload (Amadey)", "value": "440ca6ae933fb42123ed2368c8d725c51752a31210492a1c731bebc5e1b9a900", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682877160, "uuid": "d55b8ded-78f2-4e5a-b099-64aa8b228203", "comment": "Malware payload (Amadey)", "value": "0be190df38f794040fad8a79af7990c8fd15789c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682877160, "uuid": "dcef4e2c-c10e-4c54-bfb5-b2a97de2c4cb", "comment": "Malware payload (Amadey)", "value": "930cd70be04729832caa1a6d4a6a40b34781d3d8b0fcc3ee78da3d984fb9db420f6423360ed55e3edbdb3606cc8c210d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682877160, "uuid": "83b8a6d9-37e2-4fe0-a0d0-019828c17b63", "value": "T10C5523125EEC1533D9F64BB008F60287063E7DA19B7443EB6250AC5A9CF2BD8A935367", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682877160, "uuid": "5b977f9b-94ad-4b49-ae35-284e76094770", "value": "1efe015ade03f54dd6d9b2ccea28b970", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682877160, "uuid": "5d9c2749-4af7-411b-9c76-bbb0a71ced01", "value": "24576:sykFF3Y25qn+8drBh3UAQf/AQGHhRAZc8sS+1anUJTZ4:b4oWq+Oh9miKVianUJTZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682877160, "uuid": "a7d8a514-0cc1-4582-b643-8e4df210296e", "value": 1284608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682877160, "uuid": "7bf3cb9f-0472-4a1c-b278-6ab23daa9c02", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682877160, "uuid": "6dd470ed-4dc9-4b2d-bf14-332caf156492", "value": "68f4fffa0655da67fe4314d3a0108fe1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd7fede4-e6f2-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1682816629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816629, "uuid": "6a27938e-a2c0-4ee4-a350-f8db1811e392", "comment": "Malware payload (Amadey)", "value": "4b1f9357a0376bf94f621539bf6c6d3f", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816629, "uuid": "87fb0833-f8cf-4cd2-a274-124bebd225a2", "comment": "Malware payload (Amadey)", "value": "482211794587f7985f0027197ed0b69969d062034f6b1fdf67d563c27885871e", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816629, "uuid": "47a7f918-08ce-49d0-a48b-1df153700f55", "comment": "Malware payload (Amadey)", "value": "493cc2380174d392352ccfa8aef2a8457827f05d", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816629, "uuid": "364643a9-c5d4-428a-a8e9-fe68bf19618c", "comment": "Malware payload (Amadey)", "value": "dd7d0776aee29669a78999e5abb1a59f328ce602821b1a8a4d69cefb050b1cfa3d9deaf5704e69d3df59c68e8759a125", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816629, "uuid": "ed86b3f4-384d-463c-a7e1-adb2350938a2", "value": "T19555232BA6DD10B3DDF50770D8F622831F347D866F7492D72A4D588E8DB2AC458703AA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816629, "uuid": "dacd687d-48d9-4d1d-878f-a70059bbf6a9", "value": "1efe015ade03f54dd6d9b2ccea28b970", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816629, "uuid": "ad407c22-25bc-4308-9e08-84ba1f0fd571", "value": "24576:5ylYlpkP5eMMepTGz3fRxLN/KPd9/6kzVDpURH/KZSObitFmdimXPqVT2:slWUIMlGjfRxJibSgVDpUR2SQaIimih", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682816629, "uuid": "ff32e47e-aad2-439a-9490-32925d0472ce", "value": 1284608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682816629, "uuid": "d80febd3-1214-4779-a785-b941f1bbedc2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816629, "uuid": "2383b46b-eb91-430c-aff0-70e8f57a86d6", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "213488e2-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866134, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866134, "uuid": "2dd1e87d-3e91-414e-a6ee-af9ba0be9dc7", "comment": "Malware payload (Mirai)", "value": "398e451e5ae2c34e9f600bd52bb3b46b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866134, "uuid": "56fd7767-3762-4e75-a2c3-bd8fbedc14f4", "comment": "Malware payload (Mirai)", "value": "48252a11fe717cf4c43ba1f050e009eafa6fe7dd43c3c006ccce90a5636d6753", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866134, "uuid": "4b79fde6-6aee-4107-b08b-b881c7f6a9bc", "comment": "Malware payload (Mirai)", "value": "dac5434197c18ceda85712f1542d0d39fab12417", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866134, "uuid": "bceabe4d-903e-4b63-8b97-c9edbc52d865", "comment": "Malware payload (Mirai)", "value": "04f40a3185f5e6a06f5697d00281b069e4944834ace0282f21e594f230d0a7b152fd30a1e7129ead5fbb55dcb0ae25eb", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866134, "uuid": "234d345c-63bc-4acb-a1fa-d7aeac97c933", "value": "T1CDE32B56EA418B13C0D61779B6DF42453323ABA493DB73069928BFB43F8279E4E23905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866134, "uuid": "4d8c5af3-c9fb-4c01-b4cb-f62890d3e7ba", "value": "3072:qJLce3pCsH7ltaLHbz4NhCQJctYJ1Fn4mXkkTM/9UxMY:qJLc6bltaLHbz4NEQJJHnnXkYM/96MY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866134, "uuid": "b45d6f96-a450-4407-ae20-f397b5378426", "value": 150594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866134, "uuid": "ffce6057-c9bf-42ce-ac7c-3791b4b6a6b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866134, "uuid": "a22006ab-a54a-4766-ac01-43ed22b653cd", "value": "398e451e5ae2c34e9f600bd52bb3b46b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d2fd2c4-e78b-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682882046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882046, "uuid": "0972ab72-a62a-4096-9701-a30b0a41e275", "comment": "Malware payload", "value": "4091b26cdd06b7f6fa568c6a1f210be9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882046, "uuid": "66f7ae63-5555-44c3-9431-545bd453365b", "comment": "Malware payload", "value": "4867db66bd2eb4718d94a9e41e91f47a09b2e6130f9dab583319b079c9215ecc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882046, "uuid": "8e13187a-c82f-4574-a1c0-f2b8feaf1b7c", "comment": "Malware payload", "value": "c856d6d51e9854603a298f4f003190057af94898", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882046, "uuid": "136a9bc5-fcab-45ac-bf80-e63d2d8372e0", "comment": "Malware payload", "value": "be1425762bf56f51acd86b48b8e98b4828875645625acf90f658a0f492f55c42cd552f69f6f8743071e6bbe6d943a0e0", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882046, "uuid": "56bcd7d1-b768-4bd8-8075-9c189b3fe120", "value": "T1E3563381F34681F0D2364E3A0A718F60266CB5702F199DADB3CDBC5EDA25391E216DB7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882046, "uuid": "4907c210-3b97-446f-9206-1c54797bdf20", "value": "00be6e6c4f9e287672c8301b72bdabf3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882046, "uuid": "29dcc4b8-5efa-474c-a483-7e0e72feab2b", "value": "196608:Vi5tBgjX41S22qg4JuTTK2y51EcVo9BLPvisTz:Vi5tBgj/xqg4J92yDzngz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682882046, "uuid": "45eed247-d4ea-4bf5-8db5-ad4a09dd0ea2", "value": 6301102, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682882046, "uuid": "2c9836fd-c49d-4451-801e-234da87dd7ac", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882046, "uuid": "2f1106db-6d2d-4df1-baac-d9e34cea7471", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0a4601b-e762-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682864630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682864630, "uuid": "d3b30c4e-f9db-4a19-88d7-577a7777a76a", "comment": "Malware payload (Mirai)", "value": "cc1c9cbfa2599bbe52e3745023563484", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682864630, "uuid": "57063cf4-132a-42ad-a1b0-5e251aa1c688", "comment": "Malware payload (Mirai)", "value": "48a994b99c92db138ce161c6f12acf6997fa1486571729fa143bfdb058b3e34c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682864630, "uuid": "703fde76-1d3d-44ff-8a04-7275228deb3f", "comment": "Malware payload (Mirai)", "value": "ada5f3422dbac43bc3e96e8d1316592ef518bac3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682864630, "uuid": "50c91fdf-f637-4941-8a8d-100e2211be24", "comment": "Malware payload (Mirai)", "value": "381c9d694bae057864637f82b858f07eee3b27055875fffb0d83a3f4ee57c4e076843bd17b56cff60d932c32604d368e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682864630, "uuid": "fbb86dc6-3391-4c34-8e82-12bf4c3c3cd9", "value": "T19D436BC4F643D8F5EC8705702077FB379B72E1E922A8D647D3B4DA32AC52651E606A8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682864630, "uuid": "57c72c5f-7087-4138-9d6b-b6782fe19a25", "value": "1536:JeESt/basV2rcZhG6ySN7na6vlSR9zWOIaEjrqMas:JeESt/basVTgS7na6vQRVtXESJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682864630, "uuid": "3102bf21-2ab3-4150-946b-45d769dd39a0", "value": 55632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682864630, "uuid": "3dd467c1-d61d-414c-85e7-fa32fdb3be67", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682864630, "uuid": "661d50ea-0c59-4451-a254-6171e594552b", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9facaa4a-e78f-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682883956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883956, "uuid": "165600db-88d3-4791-8270-ed0e9173832f", "comment": "Malware payload", "value": "d536601399c054edf27c4b178ff2941f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883956, "uuid": "d4cf8f37-390b-49e8-8209-f73f6a23f9f3", "comment": "Malware payload", "value": "4919e0adf1440a5f00148e331ff63761048f786065dfb4658133d3e848e598fb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883956, "uuid": "597c8e67-30f3-433b-9f2f-512b4e6b5c38", "comment": "Malware payload", "value": "09f3c7e3dac225a076c66375d0cb2262ea8b161e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883956, "uuid": "8bee3988-4eff-458e-ae3c-24a173dd9433", "comment": "Malware payload", "value": "119f7ffc2ca0b795cf4b87a41fbda924de06371b20518ff68902b4877db6fba45b3cd453360b282d3495a0aefbe78c0c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883956, "uuid": "70c873fd-f0af-4616-95c4-4ef6df2a92ff", "value": "T11FF3D568364B65BEC96F887E5C604CD07A7CAC521242A7479C8FF0E8793B7819F161F2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883956, "uuid": "4027139a-b8c8-4a25-8698-9491f09d88cf", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883956, "uuid": "6785fa47-24d7-407a-9b3b-23378b4ec20c", "value": "1536:b62sB7KNS2/WqlVZRGW12MrDS9uOAN7uYEubWZFVJPTGqV8bunMbp1FpR+83wYks:e7JG5+u7gQqV0nnFpR+T8e8hR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682883956, "uuid": "d52846de-a4a0-4bbf-b166-a6e0d1f40f69", "value": 172544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682883956, "uuid": "487d793a-4ad3-4db1-8330-31fc59c07155", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883956, "uuid": "5aa6c397-e4a4-48f6-b32d-f3f5cf84c2c9", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80e5335d-e759-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Formbook)", "timestamp": 1682860711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682860711, "uuid": "debdf75d-928b-47e2-983d-6a1c48886d0c", "comment": "Malware payload (Formbook)", "value": "b58d4d4fd3d9773a7803b050f53fbe9d", "object_relation": "md5", "Tag": [ { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682860711, "uuid": "18e0694e-1993-478c-875d-3832289ab50e", "comment": "Malware payload (Formbook)", "value": "494b0e7829ea61fdbe87b5a4a50ff1a8c9ec46cb135726b6cd2aa0fc63dd4c0c", "object_relation": "sha256", "Tag": [ { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682860711, "uuid": "f879b631-35e0-4f37-9c2b-6f1b5226401a", "comment": "Malware payload (Formbook)", "value": "f0366a32ddd6e429525dd4106aa7943eff14b630", "object_relation": "sha1", "Tag": [ { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682860711, "uuid": "bbfaf435-cd96-41e9-b9ca-a13b31ddadbf", "comment": "Malware payload (Formbook)", "value": "47a803360579ccc26f7bdcaf8db0b153ea94fbc8d5891267057237b91aace3cb9d6a3d6c96d5b0caa5d5bb98792e9ffc", "object_relation": "sha3-384", "Tag": [ { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682860711, "uuid": "649d61e2-e1fa-4513-a9f8-52637f2e3f0a", "value": "T1AFD43321BEE2A803EA501D79D5C78120FCC59CD32C69EF910ED1F1D2AF36EC8B55A14A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682860711, "uuid": "14f639cd-6f5d-403d-b148-5f76815d9cca", "value": "12288:e81vZnMx1xQ2+9rZnozs3ghjYVSwz6p0np2Jg04efTje6k:eSEfeoIwm5jp2Jg04yTbk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682860711, "uuid": "7f70f944-5279-447d-85f6-d2b99ad88705", "value": 611943, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682860711, "uuid": "26c13c27-55df-4516-b77a-4b7eb7bdda7a", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682860711, "uuid": "26adfcff-9daf-4e8b-b0b5-5e8db6835faa", "value": "PI.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "708f69ef-e72d-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682841786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841786, "uuid": "b2c75526-97fa-4893-8f9b-f071fe9d2033", "comment": "Malware payload (Mirai)", "value": "85dbaf4ea1234cfd4376f6075fd4028c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841786, "uuid": "1bfca73c-651d-438b-9b1f-0b822e2e1ebb", "comment": "Malware payload (Mirai)", "value": "49fa79a0e73c2076794e752ae6b9ee5ccf0392bb20a9a0abf03f6dde394ad311", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841786, "uuid": "bc76d384-ece2-4770-8167-8ab2db5ef401", "comment": "Malware payload (Mirai)", "value": "278b8b59d39e70694ff1d82fc2891aa02997fe08", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841786, "uuid": "bcb67798-95cc-4f12-9b72-4804e323925c", "comment": "Malware payload (Mirai)", "value": "a646831d61510a82f3196f420b41fe78330ac18e5167a8db577a27585b47493ed771d6901052edf1cffac1f4543eed09", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841786, "uuid": "2015c576-9f82-4bc7-8c81-c5777ac2aa2c", "value": "T181430220E44344B018713D75F87B26032BE26E9CD9CE5D2667508313DBE2B6AD4AED79", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841786, "uuid": "9155dbe0-859c-419b-b82a-e6db3c8f3f96", "value": "1536:Op7vD4wCrktmZFYmt9zjVmloF8FDcM9Ec2L49B60Bzwwg/:Op77OktQJ3zjV0FD9/9B6ixi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682841786, "uuid": "08725712-b98f-449b-b4f8-1ad4fea65cb3", "value": 58832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682841786, "uuid": "a83a69e6-5e6e-458d-95d9-256e26d75b50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841786, "uuid": "51e0c4fd-49eb-4a34-a8c6-34e993391532", "value": "85dbaf4ea1234cfd4376f6075fd4028c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05b33f05-e768-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866947, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866947, "uuid": "0e55e696-3f77-4566-a6b5-50365c2cf685", "comment": "Malware payload (Mirai)", "value": "0ecb88bb057987e0c5c29198343890fe", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866947, "uuid": "1435f461-f4da-4ad1-89f8-9db2fed1845d", "comment": "Malware payload (Mirai)", "value": "4b1ac6231898c03484d62dd50ba7bd2b5127117e54e16dcf4420e0c086f59e08", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866947, "uuid": "2a00105b-2a69-4b30-9de8-feb288bfbf01", "comment": "Malware payload (Mirai)", "value": "be1c3bf309b9b6d1a105db8db59fe2083a82c62e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866947, "uuid": "79c4befb-5482-47c9-a9e0-5a3e0719ffd6", "comment": "Malware payload (Mirai)", "value": "34be4d2eae3dd74a10ed98c16685584437ca2875c6c9fbb6f9e90ddeecb4b229986fe5cf0429fc1f62d7ebf4e84d1735", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866947, "uuid": "a1524591-d1ab-4403-b842-38847bbe06da", "value": "T11283D606BB510FF7DC6FCD370AE91702348C594A22A97B367634D828F65B24B59E3CA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866947, "uuid": "d76e6451-159f-4440-bcd7-b05479d9e15a", "value": "1536:iVLyu95KZ7kj752dCexuV/8UZlDwfkJ4MYfWW:iVLyMgoFezxu5VD1ej", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866947, "uuid": "372e6f05-42bd-4cf8-950a-6d78d5dcc935", "value": 84780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866947, "uuid": "3f6220b8-f2ed-40c1-bfd4-73eb09aac2e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866947, "uuid": "3c29e64b-ad2b-43fe-9a62-567150890f24", "value": "0ecb88bb057987e0c5c29198343890fe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fab4bca5-e799-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682888404, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682888404, "uuid": "a8ea10dc-713d-4571-95f1-64f5e008a97b", "comment": "Malware payload (Mirai)", "value": "a0035af8d827c209a89cea5ae60d5110", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682888404, "uuid": "0f4f8eb1-4c1d-49f4-8288-d00f175eb358", "comment": "Malware payload (Mirai)", "value": "4beb12afef07d5bbe0049879a09a72309e63f75cf8f3d11bb9f092f7c56b0982", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682888404, "uuid": "44e9ea19-7efe-4766-ae9a-0b5a721a168f", "comment": "Malware payload (Mirai)", "value": "a25665b7268adcca0619acff19055053da6c64f0", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682888404, "uuid": "54e325b6-8462-467a-b437-bc1e4f1e9717", "comment": "Malware payload (Mirai)", "value": "6e0caef663f8d414d699375f65caaf573066d60c96b802f94781661423e070265291b12b3eef1575288fd12e46b158f5", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682888404, "uuid": "c2e148db-7bbe-4d41-a5a8-9fa6edee9f07", "value": "T1ECF2F142F0B5AB19817D81B5EFA7FC290500D95C9354C4BADEC0A5BB0CC8AA52F2DA5B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682888404, "uuid": "f07a7e1e-b4ea-475c-8a62-e1bf06c04a7d", "value": "768:dDHUts8wX6+D1UCjLVyghoa0m5Budg8OGbn5/QenbcuyD7UGQRjF:d4uCW1J3ogaCuOoz9Qenouy8Gy5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682888404, "uuid": "8007c4a5-9911-41be-9d62-42369a3b427e", "value": 34924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682888404, "uuid": "0a9bcb6f-8a43-4763-858d-b3ff16318e90", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682888404, "uuid": "a602d9e7-40b1-40da-9b36-cc27067ebbe0", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5089b59b-e764-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682865355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682865355, "uuid": "5e3c003a-481a-479d-a360-c67017cb35c4", "comment": "Malware payload (Mirai)", "value": "05d3f85ba6a02d4f8002c5b825448855", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682865355, "uuid": "f247e336-fe49-4ba1-9f0d-7d820a16f168", "comment": "Malware payload (Mirai)", "value": "4e2134164015034c7905224ba9ea70bcb645a780e0c634d4709a3e25c5e87903", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682865355, "uuid": "bffb400f-2fee-49c6-ac6b-ed8b7946b452", "comment": "Malware payload (Mirai)", "value": "9f22eb9413fd4f0d7714b2dcbcbd516b78b37712", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682865355, "uuid": "5e1fa5c8-0109-47c7-8aef-860b1f8c1b68", "comment": "Malware payload (Mirai)", "value": "d9986be2462c8dfa53fb0c2fb23867bd5fe943da13943baf2ca28c7ad36cb699d1b1f471b74d0535a739eb6f92019c01", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682865355, "uuid": "fa472b32-0eb4-43f6-9a48-022a8e6803d9", "value": "T18BD33B46EB418B13C0D61779B6EF4246332397A493D773069928BFF43F867AA0E63905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682865355, "uuid": "a0ad9107-2e9b-47d3-9bef-af3af9f3db17", "value": "3072:TNyTMSxpFW35JaOvJJpDYrcn8zlp2ipn/GH4s5KM/9aWY+744b:TNyTMepYJJaOvJJpcIn8ian/GH4IKM/R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682865355, "uuid": "a9a4aedf-3033-4428-8309-fd7cd9f68227", "value": 139944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682865355, "uuid": "22c436e5-f013-432e-b8af-eca3909de543", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682865355, "uuid": "1f43ba06-6b15-4397-97c4-629a1359747e", "value": "05d3f85ba6a02d4f8002c5b825448855", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1667e82-e6f0-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682815803, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682815803, "uuid": "f52aa2cf-102f-4048-acbe-d948896e9e37", "comment": "Malware payload (Mirai)", "value": "47e1f010d27d397afcde454f31865118", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682815803, "uuid": "17ccb5fd-eea7-4132-9449-c6e451f21ba6", "comment": "Malware payload (Mirai)", "value": "4ed2e0ee5a326881e37468f3829a32e34544ad08f99cffb290ef167869904d59", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682815803, "uuid": "9b88cf31-ec83-44d7-a344-275e61e13369", "comment": "Malware payload (Mirai)", "value": "7312777cc08a8aad37799e1a6b2d96f3a37d1cd1", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682815803, "uuid": "42f9fad8-fd0c-4490-86c4-e2bdc8048dc3", "comment": "Malware payload (Mirai)", "value": "001ab3817802a84565f5804cbb581260e777c6c61c9c2ac56b285d44828bcb5defb7ce4b6c22437f2bd8d3bc35bc1652", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682815803, "uuid": "7ac7d510-dfe4-4e70-8b6e-e14ceecef4b3", "value": "T1B9435BC4FA43D8F5DC9715702077FB379B72F1E522A8D643D3B49932AC52612E606A8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682815803, "uuid": "06f8c024-9f7b-48e5-9da1-a54b2635093d", "value": "1536:FEytfbaM12r8ZBG6eOBBuNhTwSoaEDrkM1L:FEytfbaM1zAYBwNRT3Esy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682815803, "uuid": "75970103-e49e-4e0c-8c5b-17c02fc375ec", "value": 55600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682815803, "uuid": "f9b1a908-89e2-4f6d-b28a-525eceab07fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682815803, "uuid": "f3bbe6d7-d408-4d52-aa82-cefad4af0825", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff06268f-e767-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866936, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866936, "uuid": "a8e5f92e-ec38-4397-8e52-d6049579dde9", "comment": "Malware payload (Mirai)", "value": "36448d32b33b5633ad209b929eab8ab8", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866936, "uuid": "3d68215c-4f94-48bf-96fa-65e90e380c13", "comment": "Malware payload (Mirai)", "value": "4f2ea34e9c659e20ac1e82b7e124a5cff580887bd6e3f087a454e7dcdd182423", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866936, "uuid": "eb6c9d6c-2c1b-4b58-92d9-6af0520fbea4", "comment": "Malware payload (Mirai)", "value": "a5390b873b93ecdf42dda72c4eb8ad35cde2fa75", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866936, "uuid": "8750b599-9c9a-44cf-b6dd-2e88533195b8", "comment": "Malware payload (Mirai)", "value": "7b1445dc77f8b27857c4585216c6e7214854f1c67e502f62981dbd135c42a6081aa1a503822f17e21f75e8c097c4b06d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866936, "uuid": "7ca89189-476e-4c9f-b8da-73f8b22288a6", "value": "T1BB534B02B31C0A07D1A31AB0253F5BD197BBEAD022F4F684751F979A96B5E361182FCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866936, "uuid": "9b7faa3f-69fb-4f12-b266-d9412e6c4e8e", "value": "768:qkaZjEoakZNRGHRnDmX7Xm+t/UGV8+BCpEMsw/J9KCrMvuBxANUr6FV+tMiwW9IC:MvolWm+phBgdPKCAWBxANee++bW9vF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866936, "uuid": "b15e418b-5aa9-45a0-9ca1-7146e0c4c408", "value": 62988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866936, "uuid": "03b72cd2-31ab-40cd-ae46-a2c4dbfcea39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866936, "uuid": "8285e19f-85a2-46d7-b769-b8a00e6c9fb6", "value": "36448d32b33b5633ad209b929eab8ab8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95089879-e6f2-11ed-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1682816507, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816507, "uuid": "02bd75d7-6b23-4f91-866c-ff992d623b63", "comment": "Malware payload (RedLineStealer)", "value": "22c79790d74b3191b3186e677df681df", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816507, "uuid": "5c1cf5a7-445e-47dd-864c-23fe2a910c3c", "comment": "Malware payload (RedLineStealer)", "value": "4fbf6459ee877ab1676f05932edb3ada0e119c63628e48f3c04550d5543e3395", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816507, "uuid": "9ddf46ae-ac4d-45a0-81ec-dfa959f09278", "comment": "Malware payload (RedLineStealer)", "value": "398ca5a3a5225d4fc86c2f901e51f1cadc1ba385", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816507, "uuid": "ebbcc927-afc0-45b8-a43a-f0d79212453d", "comment": "Malware payload (RedLineStealer)", "value": "9aaf8d409a63290f984fd22b1699d977552609727562e1d2822f32e0b1913b621c7b966f86ec33704835759f45060a65", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816507, "uuid": "5f7bde07-0c3f-42d1-8480-97d61b29db5d", "value": "T1145523235BEAE077D9A11B30D9F51A8315313CD21FB853AB514AA5CEADF14842CB236F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816507, "uuid": "18116e00-d8ee-44fe-a561-c9c90a60371f", "value": "1efe015ade03f54dd6d9b2ccea28b970", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816507, "uuid": "fcdecaad-a912-4388-b791-592aa89a826f", "value": "24576:5yRrEdtpjzvOPiBqObuImNNJpK0oe/NBPAo+OCc0p2lMbDlHZaPsjn:sRrMvnvOqGe41FAoeSmbDlHZaPI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682816507, "uuid": "c5e67cb7-4155-4b43-be2c-a650d698b18c", "value": 1283072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682816507, "uuid": "90c85504-0153-4b8a-a54b-137baf185a06", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816507, "uuid": "871e6313-ea58-41ce-8726-aefc89556e88", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d11448df-e76c-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682869006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682869006, "uuid": "870f4775-f892-4a32-8be6-78168acfa34e", "comment": "Malware payload (Mirai)", "value": "2e19dbd7651b281596af4c3ee0921c33", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682869006, "uuid": "b9a19437-1b6b-4698-a7b9-31516cae7fd9", "comment": "Malware payload (Mirai)", "value": "5076409951dfd7471dcd5dec020305a3477c561e286e5aeea0d2c794a3d1e8b5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682869006, "uuid": "98522dcf-41fe-4aef-9c50-b921673cc85a", "comment": "Malware payload (Mirai)", "value": "366a1d5045519e7149ca9a05515e5825d51c2b06", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682869006, "uuid": "ba44a9df-0afe-4d6f-ab63-8f65064cd630", "comment": "Malware payload (Mirai)", "value": "e78d7e6a40b9f6113b7edf7e9bea528e59ddc3e55a90a1bc5b4376762113ffe0bde1a24cf14a949a883ff387795939dd", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682869006, "uuid": "1ee1c764-eae0-4dd4-a46d-52c2eb8c0f37", "value": "T1ADC3E9834A20DEB7C053AA7177765564B395BE690B1F06867E1EB6A00F3B4CEB41F620", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682869006, "uuid": "3aeff99c-77b7-4379-898e-b209f15a18e5", "value": "1536:UqAdl7hbawGMffKVy62JA5lWYPw7W/Ci3kVPZfwAK4FRRT0IAf1BgeJ8:dWOwtqVAA5lWm//I84FLT0IA9BgeJ8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682869006, "uuid": "48a6b881-ba5f-4f4f-9f36-4f0a18da75da", "value": 125111, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682869006, "uuid": "ea8afd2b-188e-4bd9-a505-e312742bb115", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682869006, "uuid": "406f69bc-99a8-48c5-beb4-11fce7d0b889", "value": "2e19dbd7651b281596af4c3ee0921c33", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f32d710-e6f9-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682819289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819289, "uuid": "8c317923-54b4-4b36-88c6-c30cb163e101", "comment": "Malware payload (Mirai)", "value": "391e8e02e57be0649a1d6733b3789191", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819289, "uuid": "9fc16ed2-be5c-4548-8036-56bccdb3c035", "comment": "Malware payload (Mirai)", "value": "50e9ad464ebb67c0e620dd475bdebef16cc6d735764a43c2eeb2e35c0aaadec3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819289, "uuid": "e4255e1c-20fa-44e5-a9ca-850cd5deb32c", "comment": "Malware payload (Mirai)", "value": "d21099fffd9f7f5055456435bd8a82540f7fd661", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819289, "uuid": "acda8f33-c8a0-4278-a71a-2f25dabf40a2", "comment": "Malware payload (Mirai)", "value": "35590a55a7440ac86a5876b73875ab29b0ee2929ac01ba5bba3dfd04e45c389e523fecfbb15adbc50154b0ec19958ac3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819289, "uuid": "f2568a21-c0e6-4f25-b775-769610d97443", "value": "T11D73D51AFB550FF7DCAFCD3306A91B01349C554A22E87B367534D828BA4B64B49E3CA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819289, "uuid": "45536935-fe2a-4832-963c-d92c960cbba7", "value": "1536:VftN6hrXJMTzPTk2du/JZE0FVRV27A4IbEFnD:VftN6iPAvgFFnD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682819289, "uuid": "4731c39f-dc16-42c0-8af8-5a771d8a0e45", "value": 76416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682819289, "uuid": "1bf7f897-87f0-49b9-b73c-ffdaeb088dc8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819289, "uuid": "fe16f0c5-1afd-4e3a-aa58-a176c6dce5da", "value": "391e8e02e57be0649a1d6733b3789191", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "909a9cb8-e7a0-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682891232, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891232, "uuid": "fdab3217-dd4d-429c-a3da-20ff1ea05a74", "comment": "Malware payload (Mirai)", "value": "ebe01a3274d98061a86550aa1c14741b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891232, "uuid": "61d6becb-156b-4204-b66c-e6caf338047c", "comment": "Malware payload (Mirai)", "value": "510c90e5268c731ce137aa8d3e440652effd45be0cbe30e2f75d8d109ddf1cf9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891232, "uuid": "ef7ebb59-e5b0-4b40-a6a6-e5cb0c67aaa3", "comment": "Malware payload (Mirai)", "value": "34bdafc10d0ddc0ed0cbe028cd1a0fb6262735e3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891232, "uuid": "7a1a4aae-e54f-4cc2-ba7d-0776f200e34c", "comment": "Malware payload (Mirai)", "value": "9b532523b901385e001556f685508b09ca33f1582df2249c25fdc540b0897c4f60ed19d058a00d8ddb880252b662c204", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682891232, "uuid": "8bc5e005-726f-43d3-b6df-2c09b685bc9a", "value": "T19F839D73C8791D44C1048A7171B49F369773E90685C73EFA9254CBA6A843EEDF12ABE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682891232, "uuid": "ba92d8c8-4fb5-4ddc-9feb-89d733a3415d", "value": "1536:GkfEJKFFnfxB9yyTd48hjztihr1b9C1mN5CPK1vtU6dT5ht:mkzfgyTd4Uyr1b9x1/T5ht", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682891232, "uuid": "e28b4d00-1b51-459b-b0ca-676658ecf7bd", "value": 87476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682891232, "uuid": "5d734e68-908a-478f-9ee4-a15d70441372", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682891232, "uuid": "dbd62bf2-9c63-4611-8c02-73644faf5610", "value": "ebe01a3274d98061a86550aa1c14741b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f62d783-e747-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682852790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852790, "uuid": "42373ff1-9ce7-46de-929b-bf13d1d50b85", "comment": "Malware payload (Mirai)", "value": "f487789a4c3fda7d898daea15fe1df42", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852790, "uuid": "c15748e5-4941-4898-a643-9d8e0f3cb7eb", "comment": "Malware payload (Mirai)", "value": "53eb35f622809a28db6dd7b9ce1270a84fefd109d7ef1478e3453dd4edec182a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852790, "uuid": "911b6806-2292-4d31-9b1e-eaa63eebe71d", "comment": "Malware payload (Mirai)", "value": "8cfb4383371da76f108cf9655fab020ce7029e05", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852790, "uuid": "2ed86b8e-5ad0-4107-9397-c03ce2ce10f0", "comment": "Malware payload (Mirai)", "value": "f0a6b3afc21d788b74f72690dd8ff1dc4938dee5b8da14396f94b6c0e8f646c01c0be987752f3c0a5614fb0dafc6b6f5", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852790, "uuid": "40cb4593-589f-4db9-b47d-69e30a49d789", "value": "T171334B02B31C0E57C0A35AB0253F5BD097BEEAD022E4F689351E979A9671E375482FCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852790, "uuid": "3928f706-6b72-442b-ab9f-0d1c3f40836f", "value": "768:pO7HKtChgliRuLR/QPNIHG612oCSylNEhs9am0oLojItAgOYIFRxtKSownQIo0:89c7G+dl0mgamLTtAgz8xgMnQ4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682852790, "uuid": "7ab745e1-95df-461c-88a6-5f9a7a764bdb", "value": 54792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682852790, "uuid": "bf9358c7-be3c-4cbc-90ef-096e98db5e09", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852790, "uuid": "d38044f7-d97f-4d66-9994-d14bb2899a92", "value": "f487789a4c3fda7d898daea15fe1df42", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46f8e129-e764-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682865339, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682865339, "uuid": "3b669999-fc2f-4609-ade4-218e0b51750a", "comment": "Malware payload (Mirai)", "value": "8891522781ac1dcf5318f9515ac7b0dc", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682865339, "uuid": "a99e8fe5-8601-4e94-af3d-617be56bf250", "comment": "Malware payload (Mirai)", "value": "558995359f7b89711c0329084b4135bf516383b706942cfb93db496dedba27be", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682865339, "uuid": "9d387a12-887d-4c91-ba3f-1bd03f35d2ed", "comment": "Malware payload (Mirai)", "value": "76ba89359fa0c39e1d75005458da4dbadfda89ac", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682865339, "uuid": "421a6de9-acef-458e-b530-460414e61c33", "comment": "Malware payload (Mirai)", "value": "49694d545f3145c5753f4001ad5c7f7e9b52c6c720a318f9e18b4f35c0139df38af6d37792795cd53b2773366d8cb137", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682865339, "uuid": "7f3c0aab-d41e-4cf5-815d-6c05abb3e579", "value": "T1D8438C36E96E1E74C04641B074748EB56F23E5C883972EB61AA9C2795483E9CF504FF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682865339, "uuid": "98e94795-7e21-4ed2-8efb-24557f50ebcb", "value": "1536:1aa0brW/Od9hlCR/e0tKoXA6Ep/DCMt2+W4:1v0brWGd9Xd00oyp/DE+V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682865339, "uuid": "f394d6be-d881-41b7-9c7a-3ebae602de25", "value": 58740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682865339, "uuid": "14899416-30ea-4dee-87cf-d5c81ea1808c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682865339, "uuid": "75f7e411-a2b7-446b-ba0b-ebd63c23c814", "value": "8891522781ac1dcf5318f9515ac7b0dc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "392f8daa-e754-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682858444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682858444, "uuid": "e02521db-6e93-4c79-a1c2-68211b2b614d", "comment": "Malware payload", "value": "3b120e2245eeede053155207120d4d76", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#473107", "exportable": true, "hide_tag": false }, { "name": "RFQ", "colour": "#3BFA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682858444, "uuid": "43f3671f-fe4b-4d64-8864-30260fa75006", "comment": "Malware payload", "value": "5a871295622bea32691842566b766735dd3b5db7b6afa599f0ecfdf951b05657", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#473107", "exportable": true, "hide_tag": false }, { "name": "RFQ", "colour": "#3BFA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682858444, "uuid": "6630621c-b697-495e-9d01-efd51d41bc06", "comment": "Malware payload", "value": "4e1606e260b98972ebd7c3ff78c0f4bde59a3b80", "object_relation": "sha1", "Tag": [ { "name": "doc", "colour": "#473107", "exportable": true, "hide_tag": false }, { "name": "RFQ", "colour": "#3BFA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682858444, "uuid": "2b0ff640-40e3-4d58-b9cf-5052649477cb", "comment": "Malware payload", "value": "db3eabb494776522a0102fc848f6c85fdbaa92c348cc90a2ef872064dcae0f23584040a4ac36b9f93cb960feeebc4c3e", "object_relation": "sha3-384", "Tag": [ { "name": "doc", "colour": "#473107", "exportable": true, "hide_tag": false }, { "name": "RFQ", "colour": "#3BFA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682858444, "uuid": "58364413-fdd8-4b91-88ed-bcba5d49ec01", "value": "T170512AA57F0424E5E727503AED85B8DC836A358705C27B76402FFD201FA7A2EC514C54", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682858444, "uuid": "10386514-de8c-46e0-b3e4-6cda9ad1c342", "value": "48:4dnV1AW0tmLxMcHKTnfWg3Ky6w9Y+1YZzGruTc0CDSK2VNBtCRZTFzX5:4FV1A9EOjrmCY66rqp2VntSRFl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682858444, "uuid": "57cfde1d-6ab1-409a-8e16-a07f5aa9c533", "value": 2949, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682858444, "uuid": "8348a6af-2fbf-4382-8c3e-fbaa83e1450c", "value": "text/rtf", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682858444, "uuid": "71983b7d-e318-4268-a3af-b5c9eb8714ac", "value": "RFQ-L-CCCRC-T-235-2023.doc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e52e061-e6f2-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1682816308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816308, "uuid": "a9e2ae77-57a1-4376-b0c9-f466427174bf", "comment": "Malware payload (Amadey)", "value": "8baba9f71070bcdfd468a74b7f7eafc1", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816308, "uuid": "ef222076-89a2-488e-b821-aee3785324c5", "comment": "Malware payload (Amadey)", "value": "5c3fac8232556a1019977e05b02665b342ad523a9f11882468b9de6207bd241f", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816308, "uuid": "58c342db-7630-4e28-b018-953a24baa1e4", "comment": "Malware payload (Amadey)", "value": "274bd5c3c32b447d020e287f7e875e3d03db8090", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816308, "uuid": "3f3e1fc5-b377-4f8d-ac9c-91d45a209d1e", "comment": "Malware payload (Amadey)", "value": "3e77f4b3ac3255c30b811c382d408b1ea08f75a35669af40c95d0a19533be3f5816307ad53d0d4507115e518a1af8da2", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816308, "uuid": "28a12dfa-50e5-4ede-8e58-14f5dc2ead0c", "value": "T12026EF2E17D1E44BB003DB5EF2F592A946B9BE8E51094E0F79E846B764373C8BD205B0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816308, "uuid": "4c2b6204-6124-4f92-83f3-bce586b4da00", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816308, "uuid": "e08d9fdb-1dde-4d4e-a1ff-216f548b4580", "value": "49152:iK+6Pqckv5TX7v/2fKRUHtr4jYjlb6XMDv36hgz8xQ4/8CQfex9PDGRH0kCKKVx4:ir6s57/2fKRyr4wZIA3wm8v7fyt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682816308, "uuid": "f855c995-983d-46cf-878e-c1a439691bb9", "value": 4469760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682816308, "uuid": "0eca89a6-f0a5-446e-a0e5-71987dfc52f1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816308, "uuid": "e3fe0f41-f0e7-4936-9c27-f7dfd47d5b2a", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34ba5728-e790-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682884206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682884206, "uuid": "090d21bb-7e28-4a81-99b1-f666742437e9", "comment": "Malware payload (Mirai)", "value": "83118bc90a4b840fab56241b56c76381", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682884206, "uuid": "d5937090-8ca6-47c7-833c-64b5d6c2de42", "comment": "Malware payload (Mirai)", "value": "5ce93c5ebcf9d2cc7415604fcb67bdd8c7787671fab7c5927b6f8b5eb831ef90", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682884206, "uuid": "61513dc7-f2ec-4f3d-9f86-f686dcd8f175", "comment": "Malware payload (Mirai)", "value": "55cbcd8d0d2656dbab24cd112fc9f2e7516b3ed6", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682884206, "uuid": "0ab3afe0-9acd-4b91-bd3c-8352493cf864", "comment": "Malware payload (Mirai)", "value": "39b54c43dd143ee3d293301298071859b8c61bf1a4cc18d6196fb8b414448c1bcff4984eedf6df65d5965d20272f5711", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682884206, "uuid": "927c2dc1-b2b6-444d-92d5-aeb6b55aec3d", "value": "T166C2E1E63FB739ABDE25103D245D8E3782B4F451D7AE6B53A240824820171A8B772DED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682884206, "uuid": "6d3bfcf1-841d-4b35-99b8-d08bdafc8a44", "value": "384:Mg1DMwk8JPyGYhDZREXVZVBy6sIye1iWLRYh4Sw4cGJYeRzOFGBzd8Qc/i+KGMr3:RMwKDZOFbBy6sSHRYfeAxdd8RhWX0N4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682884206, "uuid": "ae6b22fa-3993-4225-9247-dbbb7bd55ade", "value": 28048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682884206, "uuid": "3cfb4383-8a6f-491a-b7d9-69f55caf8fd6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682884206, "uuid": "0ea55ad5-554c-471a-8bfb-16b721046663", "value": "sora.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61138369-e72d-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682841760, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841760, "uuid": "38431bd9-52f0-467a-9678-55b3eca2a4eb", "comment": "Malware payload (Mirai)", "value": "5043965583733d04df27f9a24c442e3f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841760, "uuid": "3bb192ec-9c98-40c1-ac1c-59024e5dae7c", "comment": "Malware payload (Mirai)", "value": "5d1b2fd1547c38ed9a73f348501ef23d8b96f1ddecf21d9ad9ffe33d85350ce8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841760, "uuid": "26acd036-2ece-4979-b232-a33841987b5b", "comment": "Malware payload (Mirai)", "value": "a585d9d547acb510cf27e1b023123e0325da7e48", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841760, "uuid": "a729415d-1907-4d58-ac5a-73bacc57c983", "comment": "Malware payload (Mirai)", "value": "665e8a1dd32a471f6e058590ad2dd616fea71f270f6b4650d462f8fbeefedd3f6667574343b0b4bffa339672553bdab6", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841760, "uuid": "12c03cdf-e3b4-4587-bc35-b79226532640", "value": "T1D3E2E001DA5A59B3CAF42871A1598DA616182F7890F7B4CB1EF5393CACD34223DFD62C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841760, "uuid": "cc6936b1-defc-49e8-b717-e01f6ef474d2", "value": "768:7+nI4ZbkL1RcEzVpRAMzjkQmuviH3zotm4fOB7lUtia+KmN3Uy:7KIOkL12uRAMzjDmu6jo4B7IixP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682841760, "uuid": "17664ad1-f7a9-4870-bba2-7b3c5ac3a2f0", "value": 31692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682841760, "uuid": "6fc21e38-98b3-48b0-a3ed-56067e2e8a96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841760, "uuid": "6442f445-1e31-40e4-8a6e-f10ce8e47bb3", "value": "5043965583733d04df27f9a24c442e3f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7a7b910f-e770-11ed-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1682870579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870579, "uuid": "e2692d1d-6b75-42e8-a8b9-6c2c1f73f5d8", "comment": "Malware payload (AgentTesla)", "value": "cbc29fa8f68311bc63fc62d7cb53db86", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QUOTATION", "colour": "#75C1ED", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870579, "uuid": "a7714b19-31e2-43d1-aee8-a4ee9795e3a1", "comment": "Malware payload (AgentTesla)", "value": "5dc9cbf0d5c02ac2e00ca8b14cf3a1965372ffad4618c806cf31fb7887aa08d2", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QUOTATION", "colour": "#75C1ED", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870579, "uuid": "93c633e1-548e-4b37-a057-990640e5ea04", "comment": "Malware payload (AgentTesla)", "value": "7ffd3f3aa7aed7d0ba8c9ec2a6a79b08c9db33f0", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QUOTATION", "colour": "#75C1ED", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870579, "uuid": "3e437c63-6dc4-4812-82af-48ab78538616", "comment": "Malware payload (AgentTesla)", "value": "dd3a3be45f8cbbbc89b56c42ea93b35c81860e03a6743822c59350da75137775240d50f2b8053618e490ade512010163", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "QUOTATION", "colour": "#75C1ED", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870579, "uuid": "b210dcd3-58b1-47c0-bfe5-835244d58647", "value": "T1F2F48D3915B86727D17AD37996E19413F3E0A85FB211EA987CC603EA0742E8176D323F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870579, "uuid": "257a86d8-f58e-462a-b920-bfd1b753f09d", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870579, "uuid": "057e6cc8-218a-4ee7-b8d4-848c60d061c9", "value": "12288:uL1+cpMLL4hqgBxyrN4JxATOQuOC1gtmzC5JdvkQ5IQOBHfEolVlcVOh:QRVBkrNKxYOQygtmzWkQ2QMHsolVlcy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682870579, "uuid": "be3b2b1a-c91e-4682-811a-339b0234aba6", "value": 743936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682870579, "uuid": "64d68ac6-8e0f-47b6-9b92-dce9902f5317", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870579, "uuid": "ad9a181b-6f75-4e9c-877c-fe83440e8f6a", "value": "Purchase Orders.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4f774cd-e78b-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682882354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882354, "uuid": "e4b3d7de-2a03-4222-ac2f-2f1c7ab80450", "comment": "Malware payload", "value": "daf3108790446ea61533ed86e4c501bd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882354, "uuid": "8304e7f0-9915-49de-9298-1ffe263a4094", "comment": "Malware payload", "value": "5e453043fd7e3d92e0af7bec7e9d304dfc8c501cc19ffd783bd6a2a4bdded1da", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882354, "uuid": "ac2969a1-9ee3-4d40-ad20-71277c0e72a9", "comment": "Malware payload", "value": "54a5172a2a367986b20af937a02e37d4ea1e6fe3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882354, "uuid": "ff5fefec-af21-45da-b32e-7554781eb60a", "comment": "Malware payload", "value": "3c69494f4eadf738f3f1a11b2774107843d7199dc22850172dad4bd6be41be464af847a392788f84e9722e7c9435e620", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882354, "uuid": "3e564927-91c9-4451-bc0f-9413e41979a4", "value": "T1FA255B1297A1C43BE39185B8DCB9E7764E397A381FD68112BEB0EDCD7678B907C21112", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882354, "uuid": "d8e3ac5a-e0fc-496f-9e38-95f27daa580a", "value": "04d0ca797ee29b2596b16e1dfbe97d1a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882354, "uuid": "6483cbc2-a858-47e1-a8b9-5a140ac158f0", "value": "12288:2mwFZmbnMtWLiHb4lTVDqoTgZU6sfdBXeXFUC888888888888W88888888888Vs:2mwFYbMsL8b4vzgZ+wXC+s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682882354, "uuid": "0f6c94ad-6633-4c97-b471-2e09bc8bbf8f", "value": 1021568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682882354, "uuid": "cac0b221-88fb-4f0a-b1d4-ce24c684dc8e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882354, "uuid": "923df1b9-e56e-4e96-8c4b-76d2eb3a9931", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9933622-e6f0-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682815817, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682815817, "uuid": "8a2e52b5-5956-4c80-a794-7467390bfcbc", "comment": "Malware payload (Mirai)", "value": "1220d8ca35c3201b36f5921ef498e5d6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682815817, "uuid": "e6f33284-605a-4af6-bb31-956bb3cae6bd", "comment": "Malware payload (Mirai)", "value": "5f22891e8451abb3e1b823a307f2abde08519089616bb29166f76c655c5c5293", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682815817, "uuid": "7273fd24-7b65-4848-92dc-629b2e85323e", "comment": "Malware payload (Mirai)", "value": "6991f3cadeec1a089b110e2feaa9a7c58d67d010", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682815817, "uuid": "e237ceb7-ee18-429d-92b8-804775e8bce1", "comment": "Malware payload (Mirai)", "value": "70b92c2ddfd582f913efd6ef3431045ecc4ab692f7d821de551a679b869d5ca221268191c40d51d49b8a42b58060a164", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682815817, "uuid": "f059c724-29bf-4da9-b805-d4c8c24542a3", "value": "T1D4632851BC819A13C6D1127BFA6E028D3B2613E8E3DF72179D225F2037C696B0D37A55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682815817, "uuid": "b91648ce-af13-4a3b-afa6-5b4e09016e6c", "value": "1536:nN/lxzmiid6LXLxd/59dCptsBNJqWQafw/2vTWd:nN1HpbMsBNJqxI/TU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682815817, "uuid": "d602b068-9899-4dc6-819c-7587e11435fa", "value": 66908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682815817, "uuid": "4e42c202-7bed-4de8-9841-d620adaa5384", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682815817, "uuid": "85459103-3d6c-4319-99e3-f35af976d2a9", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e1e79cb-e6f9-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682819314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819314, "uuid": "9de0722d-c425-4be3-8de4-ec02092d95d1", "comment": "Malware payload (Mirai)", "value": "ec07f814439d3b3371f50755ca0d6624", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819314, "uuid": "91324ece-78e9-42b7-abe2-c9eb94ba6d11", "comment": "Malware payload (Mirai)", "value": "601597a0f525c8decdc022896a2bbf298528da25c6cdbf7462a2d804408195a0", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819314, "uuid": "af2bac22-74f9-4104-94ce-114558950ea0", "comment": "Malware payload (Mirai)", "value": "f6aae0bb58ff27b11a338c36ab5654663c738e4a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819314, "uuid": "dc84c5c8-8017-4402-b994-902b1303e018", "comment": "Malware payload (Mirai)", "value": "f9c3e85da4dc30033c6ffd65e37ab6998d9368626949a3f59ab6206547dca3cf4c4745141f82d939947fde4ac5ffeb07", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819314, "uuid": "b4a591e5-24de-4c84-bb9e-52a9e78b5d52", "value": "T1BCA3B60E7E118F7EFB99C23847F74A21A25833D63BE1D585D16CEA015E7028E641FBA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819314, "uuid": "fc78d2c1-82bd-4ad1-a035-82ab505cb551", "value": "1536:IUwNcN6Qi5vnpULx9UKsbovCvFhTQ5O5lLi2CKZ9eOc28uBPeQjgPX51tL33I7L:bycmpUEsCvLpiC/eOc28uBTYI7L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682819314, "uuid": "a4ed9a74-dd53-4219-ac2a-897af3e5dfa0", "value": 106348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682819314, "uuid": "88690900-3e4c-4d04-ad6a-446809293836", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819314, "uuid": "93146f9d-8c5b-46d8-a3a3-5402b70c73e7", "value": "ec07f814439d3b3371f50755ca0d6624", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d93306d7-e6f7-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682818769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818769, "uuid": "91658c98-943a-4f85-874c-6d86add625ed", "comment": "Malware payload (Mirai)", "value": "793077879fce926a58d4e3d0b5409df5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818769, "uuid": "46110984-a784-4f90-b2d1-cd9d0aad4d66", "comment": "Malware payload (Mirai)", "value": "60d8e0c25ad810cd359d3bee52ced31417710c8e01798dfdac511df0a6119799", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818769, "uuid": "af9a7b70-eb0d-4dd9-8b1a-200e87c744d0", "comment": "Malware payload (Mirai)", "value": "bec88d272716dc5f00c02c8f608ead73bff13e07", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818769, "uuid": "7bb15418-6bf2-4d62-addc-5f1bb93cfe80", "comment": "Malware payload (Mirai)", "value": "5ceed97772074b9b8867358cb09e2e29dc73aedc85f5185bfbed3303e201a5df304643c19f561f5951d31aacd6ca0aff", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818769, "uuid": "49b2c434-9afe-417b-818c-4e40f9f04d80", "value": "T15A631891BC819623C6D1127BF66E02CD372623E8E2DF721B9D225F2037C691F0E67A55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818769, "uuid": "b6f0b5cb-7d57-4d4a-9a99-59420009e2b6", "value": "1536:rNHAbY8KxdIcYvS2vixX/SUZzm8iEg/Qy/83NRuWgvbWQ:rNxMua8iEg/rWybZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682818769, "uuid": "37447b65-1598-4a87-ad40-c9bbb5b57a6c", "value": 70972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682818769, "uuid": "b73e6581-543c-4f67-8f78-043f4541d615", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818769, "uuid": "462a16da-71d9-4588-9af7-2c402234af04", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a12409f2-e736-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682845733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682845733, "uuid": "8b2394f4-22dd-42cc-b976-a1431e7b4683", "comment": "Malware payload (Mirai)", "value": "1d68c0e609fc7ce81ee681787f3f473a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682845733, "uuid": "3e9fdcb4-12c0-45aa-a6e4-1104a14ec46c", "comment": "Malware payload (Mirai)", "value": "61a6c4f3c792fcad56ab07f94f2dfe22239a0ffea23055e98fc5d1fd06c364a5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682845733, "uuid": "896fc1ec-3123-4223-a839-93d582e392cf", "comment": "Malware payload (Mirai)", "value": "f5aa1f4cee55f7bd12788fc1b979de75adb0c2ef", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682845733, "uuid": "4f73b780-de83-4efd-b273-3c029229c59b", "comment": "Malware payload (Mirai)", "value": "c361faface277c8e209692b53753506912adeb96a68198be21df936746d6956548c10c45a9519d5e1ad92b5ce7c2ea74", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682845733, "uuid": "1834e1b5-e090-4326-91f8-307036774343", "value": "T1B8E33A56FB804F13C0D61776BAAF4249332397E493EB730699287FB43F8669A0E53905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682845733, "uuid": "d87d990c-d82b-4192-8842-11495f9fa42d", "value": "3072:IVtbnlWIHfFXoKazTWSn8+xayeCXM95bwbZnIgXi0yM/9YFIC:IVtblB94KazTWSn82aykjbwRIgXiBM/S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682845733, "uuid": "1d0f99da-6f6d-45c5-9019-5627ff4ab8c9", "value": 154968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682845733, "uuid": "c4b3a0bb-6b6f-4446-b4ab-c7a154e29728", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682845733, "uuid": "3596c24e-6b53-4912-bf6a-9677eed97724", "value": "1d68c0e609fc7ce81ee681787f3f473a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "236e2e5d-e778-11ed-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1682873869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682873869, "uuid": "07ecede7-e796-465e-bad7-5f52a2d35a4f", "comment": "Malware payload (RedLineStealer)", "value": "ac0468a66c01b94acea51e441bfe0e64", "object_relation": "md5", "Tag": [ { "name": "188-116-26-42", "colour": "#78BBF7", "exportable": true, "hide_tag": false }, { "name": "a12-yeyeyoyo-net", "colour": "#6D9CE1", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FakeBlastRoyale", "colour": "#F11208", "exportable": true, "hide_tag": false }, { "name": "FlareRoyale", "colour": "#3D386D", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682873869, "uuid": "dfe44516-e418-4c31-b734-d2d716c3f15b", "comment": "Malware payload (RedLineStealer)", "value": "62b70885135322f966652bed767a573287592bf584a25ff3ece5db815c37ccf6", "object_relation": "sha256", "Tag": [ { "name": "188-116-26-42", "colour": "#78BBF7", "exportable": true, "hide_tag": false }, { "name": "a12-yeyeyoyo-net", "colour": "#6D9CE1", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FakeBlastRoyale", "colour": "#F11208", "exportable": true, "hide_tag": false }, { "name": "FlareRoyale", "colour": "#3D386D", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682873869, "uuid": "84e187e3-5086-45fa-8545-a56f41cde55a", "comment": "Malware payload (RedLineStealer)", "value": "a4f45a50cdcf28b8e6be2da6a7244a177717b398", "object_relation": "sha1", "Tag": [ { "name": "188-116-26-42", "colour": "#78BBF7", "exportable": true, "hide_tag": false }, { "name": "a12-yeyeyoyo-net", "colour": "#6D9CE1", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FakeBlastRoyale", "colour": "#F11208", "exportable": true, "hide_tag": false }, { "name": "FlareRoyale", "colour": "#3D386D", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682873869, "uuid": "014d4c6b-f2da-4a43-87fb-3bc867215a92", "comment": "Malware payload (RedLineStealer)", "value": "a73ddae2144294e90f4bddf8aec8242746ce66f46eb0cbead5709fff0a3a785b67eec2faf68b6f88998939a3cf595c60", "object_relation": "sha3-384", "Tag": [ { "name": "188-116-26-42", "colour": "#78BBF7", "exportable": true, "hide_tag": false }, { "name": "a12-yeyeyoyo-net", "colour": "#6D9CE1", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FakeBlastRoyale", "colour": "#F11208", "exportable": true, "hide_tag": false }, { "name": "FlareRoyale", "colour": "#3D386D", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682873869, "uuid": "c87dbe66-0521-4868-9bbe-f4854e5ff891", "value": "T1D524F1275A9B86F0F88B4C73F2F348387B1285F54E0BEB97998C40547A91F6E458F089", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682873869, "uuid": "c03c8e99-bb14-4ba7-b021-a567e5c1987b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682873869, "uuid": "e7a80722-3b7b-4681-bfcd-537d109c0898", "value": "3072:bIiY84w92P1aDdeYGBAmoM50FLsMp0hFf6qeqPkKBERmypp8z2yatapbPp:VF99deY6dFf6MPcp8z2yatapbh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682873869, "uuid": "3f75b3d6-e524-4851-aeeb-e7304e7629a9", "value": 209920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682873869, "uuid": "48c2397b-8861-4563-bdc3-d4367b791774", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682873869, "uuid": "428e4d37-d8d0-4874-800c-da55cafbae8e", "value": "FlareRoyale.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45faf983-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866196, "uuid": "0bdeec43-b8db-4b7a-bf26-5bfb09b7dcd6", "comment": "Malware payload (Mirai)", "value": "a22772974af618ddd6b1ddc2958d7e57", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866196, "uuid": "b4d6f2fb-4ed2-40b9-a5f7-a2f36eaef688", "comment": "Malware payload (Mirai)", "value": "65f71a731a5b6fb3dcb4444b361b780966851554b759949c9d9eaeac8a4d9286", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866196, "uuid": "1387e275-988c-46bc-967e-6f3c11f5a3cf", "comment": "Malware payload (Mirai)", "value": "7d0390b3c18136f31f3db9729b445d5a7820f413", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866196, "uuid": "09148a01-1d36-4572-8913-480bc7c2b1ec", "comment": "Malware payload (Mirai)", "value": "42e313901cee4c13b98426538fc61292645e684348572a9647d9e6e6086cb250caa32ce70be4dbd985b8db8219cdd38b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866196, "uuid": "ff4d91c3-553c-427b-bdc4-8ddc2f4ebe3d", "value": "T12E63D715FF550FB7DCABCD3746A81B0239CC554A22E87B3A3534D828B65B24B49E3C68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866196, "uuid": "bd905fce-8ddf-42eb-a7bc-20f486dda788", "value": "768:ID59zclowooHV6gcKbW4e9JQgOTe9/BekPSl0Sw+uo0iZ5qqXizwX7+e2kWI//wo:I1wogdNevqA/BTPxq9Z5qO7+BkWbnbU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866196, "uuid": "7d7e3509-da27-4616-b86f-caa7f7773d1b", "value": 73228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866196, "uuid": "428b50ae-5098-4af2-a590-08c1248224f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866196, "uuid": "74e55281-c061-4236-baa1-16a1587c8788", "value": "a22772974af618ddd6b1ddc2958d7e57", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6162749b-e794-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682885999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885999, "uuid": "1988c8e1-9866-4941-a363-e79238cdc0bc", "comment": "Malware payload (Mirai)", "value": "a93bb1ce7be73859b5802acefa44e2a9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885999, "uuid": "30041ca7-c847-4a99-89ba-1709057dff4f", "comment": "Malware payload (Mirai)", "value": "68786b67f4fb907876abb4e27ce6900de2e911d429ce4419e10454e94fa5719d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885999, "uuid": "754af25a-9377-46ae-a294-129a8e0f088f", "comment": "Malware payload (Mirai)", "value": "b48593adcd6e1444d13dc1081d3a32acd0e9f422", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885999, "uuid": "fbdeb247-f51c-4b79-9276-313b4e1cf8c2", "comment": "Malware payload (Mirai)", "value": "19d1766c0a7b1195590ee9780e0a9e80515ba8f720d614e31d854c12ad710c17c07a8d9cce9322e5e2690b96345ab8c7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682885999, "uuid": "9653195a-96b0-4f4d-8fc0-7547467ba849", "value": "T1A6E2F1A7D3726052DE7C6BB1E96D81CF6BBD4AACC23770A3190157182E960835F3C893", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682885999, "uuid": "2b11bfff-958f-411a-a8f0-52136fc91845", "value": "768:1oiWiO031vpAPbrVWZK3XVGxm9XjAIi9q3UEL5In:1orm1vpALgUJHXLI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682885999, "uuid": "2a5b7933-3349-429e-a178-df28515a1965", "value": 33028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682885999, "uuid": "8752c7ad-3a1b-4474-b425-1f5824aeba45", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682885999, "uuid": "726d1ad8-2c8c-44f0-a3a1-bdc886c5d4a0", "value": "a93bb1ce7be73859b5802acefa44e2a9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "752c70de-e72d-11ed-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1682841794, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841794, "uuid": "019215d7-1b31-4e80-961f-cd2f4a2a1834", "comment": "Malware payload (RedLineStealer)", "value": "8301e85673bb1b59950b127634a9f209", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841794, "uuid": "8bfe0847-1b2f-48b0-9719-d9bd653c1970", "comment": "Malware payload (RedLineStealer)", "value": "68c40cd6a4a8fda04e4fb403b9519ae31f7f3055762636914e54549eb3d6a171", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841794, "uuid": "86810906-ef0c-49bd-a00f-eef6111ff062", "comment": "Malware payload (RedLineStealer)", "value": "136caa8cc96d39751fe297d8bb3ddde1e69888e3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841794, "uuid": "0c1894bd-e84e-490f-81a6-588bdacb432a", "comment": "Malware payload (RedLineStealer)", "value": "3d188aedb1b9a3b8885837f471c3088f58ed82016b24d41f751d40fa8dca8e0e41785724810d94ddacbfef3befd7553b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841794, "uuid": "f55b508e-26a5-4b62-8528-946ae9520140", "value": "T14EA4AE1272B16832EB3257718E2E86F866AEF5614F15BBDB1354DA2F0AB11F2C573301", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841794, "uuid": "6b55a7ce-556b-432a-9300-8c6133a675d7", "value": "8e1291b1baddb8fcca0899ad3cc587e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841794, "uuid": "ab020366-a4c7-48eb-95f1-8190fe59e0f7", "value": "6144:qLDTUg5uExKnbpPLvSIKquy0hSFQ40IjBK6e/hNtzZfqynJ:q/TX5uExebtLvx0h4a6ghFpJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682841794, "uuid": "14fd5b83-bd34-41df-9281-b5a734520f08", "value": 491008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682841794, "uuid": "73212a12-a5c0-4190-a7a7-94cb2aa937b8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841794, "uuid": "1e96112b-4bfd-4880-8f8d-36b6fa55d781", "value": "8301e85673bb1b59950b127634a9f209", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed350e35-e7a1-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682891817, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891817, "uuid": "b6c7f96c-48f4-4943-9997-452612acb329", "comment": "Malware payload (Mirai)", "value": "b061fa126ca852d3743b84351d7248bf", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891817, "uuid": "ebefa12b-9f87-486f-9d46-0915131c3bd3", "comment": "Malware payload (Mirai)", "value": "6cde175e5cc6b8ea899a82ba41eb49e1b18a797abe7837e70a5b1c7dddd66b79", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891817, "uuid": "03ab0c30-0897-4058-bcff-1b9eb43fc989", "comment": "Malware payload (Mirai)", "value": "83da22858c5e44fcf66403fe919562ed4facb60f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891817, "uuid": "9030f763-5bd3-4abb-99cb-2e880956924c", "comment": "Malware payload (Mirai)", "value": "1e58df2e61ff9a5463bb874214ff4bec0933444c5000c5479f4c13b4bb8521a8678d9981be18229c5402ac4b62948953", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682891817, "uuid": "d4ba9b84-f89d-458c-8407-c05c0fdcab71", "value": "T15E13F111F916DAF1DFFB5EB00895CBD937B2CB2B1653408537C2D6926226430A7C6EE1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682891817, "uuid": "306fb19e-2ef8-412d-ac1d-e16f87c8ee92", "value": "768:GG5SHThjWRnpk0aCJN8LezSLUjjKvLRtQEDd3sL3T/cZ2m+NCMw4uVcqgw091:WHZWDugjUltbxQDY+NCB4u+qgw091", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682891817, "uuid": "363abdb5-c65d-496e-9a28-b2cd7dc04b53", "value": 42136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682891817, "uuid": "4154de2a-4781-46b7-a22f-378bb03796b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682891817, "uuid": "d58b9b22-0af1-4e96-be9d-6481d7c9401e", "value": "b061fa126ca852d3743b84351d7248bf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8578d15-e6f7-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682818767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818767, "uuid": "96fee06d-da0a-4593-8b74-70ee0ca4fa97", "comment": "Malware payload (Mirai)", "value": "1f17a7166aa5e334857e8e7f96688b12", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818767, "uuid": "fd39c8be-8740-44f2-92fd-b81a3b279f96", "comment": "Malware payload (Mirai)", "value": "6d3c0b3059050c792066acfabaaaa61b1bddfd09d4f0435dee4ad35a38060924", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818767, "uuid": "743225c8-1cfe-41ad-8fbd-12ed97f31382", "comment": "Malware payload (Mirai)", "value": "287217865bcd1aa5d81359678469fc847e406e25", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818767, "uuid": "5ad8407b-fece-44e4-a6b5-ec91680cda55", "comment": "Malware payload (Mirai)", "value": "3a0d4ad04f28e4f6892c3a9ef5b8a9e30d2cf56a70728c65d4b25412f4b5e842608aadc93858416f0f8fe19468aba767", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818767, "uuid": "3f7a92a1-91bd-43ab-a9ad-f99aed3fcfd7", "value": "T1B9434AC1FA43D8F6DD5705701077EB368B32F0F5225DD683D7A59A32BC62602EA52A8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818767, "uuid": "97a74456-465d-4bf3-90bf-09fd4957f41d", "value": "1536:eFnRnVEI342TK5xZYdUrGCI3PlqVmPEkr8SkKELrMMG:eFnRnVEI34kKfZSUrGJPlqkPxXjEMt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682818767, "uuid": "3b5d49aa-13ed-4958-98af-aa706ef5c315", "value": 58672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682818767, "uuid": "2ee1599e-a549-4692-b90e-e7745106776e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818767, "uuid": "04fba9cd-a330-4c4e-abe9-4990c1571569", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad36d79d-e6f2-11ed-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1682816548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816548, "uuid": "aabda71c-85c0-45a3-8788-5b78592ef25e", "comment": "Malware payload (RedLineStealer)", "value": "49ba4cc09a0108c676fcc820acfa14c0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816548, "uuid": "57ccc6fd-e705-4585-a53b-0fb019a6ffdc", "comment": "Malware payload (RedLineStealer)", "value": "6d7ea4c30059878e650cf86cb44fb644dc1e46329f1f4031f50cd6b05346f3d6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816548, "uuid": "7096dd05-01ba-48fa-916d-e776f252eb09", "comment": "Malware payload (RedLineStealer)", "value": "0a5e94b39b05eea0f6f4ea0c0cd8fa1ec9d301f9", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816548, "uuid": "0fb248b2-79dc-4fc2-92f0-452bc0f500b8", "comment": "Malware payload (RedLineStealer)", "value": "51d88f43644e4b96fee26c7e1cba3c69285bdff090169069385ee5d08dbcd9ab43efd2f8a83696a709d48a09d7ceb1a9", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816548, "uuid": "85c7392b-561e-4900-90c4-7d75be12dd21", "value": "T1ED55238336D94033D9B917F088F9069305F9FE92BF3482EB1716D98A9D721C2A435B67", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816548, "uuid": "7c9c2c5b-91ed-406d-99ed-b9c96e2396be", "value": "1efe015ade03f54dd6d9b2ccea28b970", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816548, "uuid": "6c615234-6ba0-4444-9703-0a45f3fe5aea", "value": "24576:wybech4av27p2dmqjm9WvTdbrivKxWE/l5zEryBMdfk/Og2ciITTIIePVizY6b:31qav27UdlbeyfN5MeMs2UTBePa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682816548, "uuid": "98167988-b8d8-4116-8138-886de7c9b86c", "value": 1284608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682816548, "uuid": "3b7c508b-932b-46d9-8175-d34f63092793", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816548, "uuid": "eb05922b-d989-4028-8e06-50bf1110144e", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2961451-e78d-11ed-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1682883182, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883182, "uuid": "38287c05-3512-471c-bc17-1933c9a218a2", "comment": "Malware payload (AgentTesla)", "value": "4eb6592b14426d668a528688c0c615ac", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883182, "uuid": "e3113584-c788-42a7-abf4-5b69608994e0", "comment": "Malware payload (AgentTesla)", "value": "6f661b49b6b38585c93365e01f17a50c585ac3ce7400f582c5c4541658cfe4f6", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883182, "uuid": "9e6f4489-d9df-4b52-a259-4e99e314e9c8", "comment": "Malware payload (AgentTesla)", "value": "d9bc90927fd7b905aa565f0155acef13237cdce0", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883182, "uuid": "9b68e85a-8ee3-4eb0-bb12-fa7a0a4ca899", "comment": "Malware payload (AgentTesla)", "value": "b35a383ac068e62b266c6d3f962a118bdb0f10283bc23d573c1789f1ade9506d0518ecd045203a06e7a9af3dabc290ca", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883182, "uuid": "f0d1be01-5ec9-436f-b459-34e7fb3619fb", "value": "T1C9F47D63B025CADBDD7137B4815DE3756E61DC16E140F0A07AC93C8BFAB63E11E8816A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883182, "uuid": "65134ccc-4bf3-4a6d-8bb1-78d5443bcfd9", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883182, "uuid": "0b56c732-4ee2-4fed-8eb9-acf5d856ca4c", "value": "12288:AOaIsCGzr+7+kQa6W1yS5jjhckxXYqI4tk4fUlb/Xse2:TwW7+PxGt7ZJZK/Xse", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682883182, "uuid": "3e0fe083-47d9-417e-b6dc-157c106189f8", "value": 739840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682883182, "uuid": "6d9a1e6a-5d6d-464f-afbb-a5512ae0101b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883182, "uuid": "0a1ce41b-d660-4968-878f-06964101dfde", "value": "SecuriteInfo.com.Win32.RATX-gen.14055.31447", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15d42847-e747-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682852801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852801, "uuid": "d3349a1a-cc41-4269-bb88-efcfbdcba051", "comment": "Malware payload (Mirai)", "value": "28b839b58dc9b20c3c424360b1f18ffa", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852801, "uuid": "3aa9644a-f873-4894-9b2f-d3f98352cc8f", "comment": "Malware payload (Mirai)", "value": "700cc453219f25e0d2ea6a10a8a32a5a903484d9e07a4387fa7eb77f2d405cfa", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852801, "uuid": "d0646e68-b5de-4a68-91e8-85906a2449e7", "comment": "Malware payload (Mirai)", "value": "0e0db812c33a2b4b28a03252e0e9cfc603cd3c9c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852801, "uuid": "53f581d7-6793-4723-a81b-91052372773b", "comment": "Malware payload (Mirai)", "value": "e223377f4c51134fe946370a57850c889e1f5a5f78056aa791af53ebbd56a380ec5ef18b1f4fe47445daa9c92444bb92", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852801, "uuid": "53513894-3bf4-490a-8c46-b4118f501d64", "value": "T1A4433B21BA760E17C0D1A4B621F74B25B6B147DE26E8C60B3DB10E9EBF71A406543AF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852801, "uuid": "6aea2f7a-d815-4851-b572-bbd611820326", "value": "1536:tilA/JV3p2kCWDbTg2SSQsY75jt9VyNeX:wl2tVJYV8NeX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682852801, "uuid": "17ca6fcb-81eb-4865-9d99-8ddd72ab493b", "value": 59464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682852801, "uuid": "210ecf6d-a267-4470-89d4-a2072ef6e455", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852801, "uuid": "0352ce99-d7b4-485e-a5e8-36222591a393", "value": "28b839b58dc9b20c3c424360b1f18ffa", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13280d94-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866111, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866111, "uuid": "1a9f318d-d997-4fc7-b365-0b58101d1571", "comment": "Malware payload (Mirai)", "value": "130c48c02a9ac1fd95f2b9dae7a462ca", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866111, "uuid": "65b4511b-e292-409f-87bf-0bd6b4578d6c", "comment": "Malware payload (Mirai)", "value": "701e7b1bfa04d06863af5c91d7845b98bc2475374833162e538f0c5a2781fa4a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866111, "uuid": "8c8466d9-4778-41f1-807f-ee7d5278ef43", "comment": "Malware payload (Mirai)", "value": "c9febded7580784bcd6a2331a9409fcd8867a145", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866111, "uuid": "ea343ec4-5790-4ce0-b35b-0bf7b2777461", "comment": "Malware payload (Mirai)", "value": "6b49189d2ca9f63f77e15521285c041560c9b991b3ce6d71f3c295e00180ea2e02192709501188d8bb084922d0c7da84", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866111, "uuid": "c3f4b015-501f-43f0-b35e-e31591d673e0", "value": "T1D183A51E7E228FADF76D823147B74E25A69833C627E1D641E16CD6012E6034E641FFE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866111, "uuid": "823a4ba9-3321-4e7a-8834-c28c53cdc2c4", "value": "768:2ty6IP7M/kq0INRhfuN2Eo9tl/de2YIwHKRH0I84EH6UTUB7ZDYovZ73x/nL8y8O:Rakdn2Eo3ePu5GT+RYo99Be037Wq/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866111, "uuid": "4d1ac63a-3a80-43dc-9d92-2a81a5874009", "value": 84780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866111, "uuid": "2e1503b7-2385-47e7-9365-842f168e3f7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866111, "uuid": "575cf1d4-5207-45bf-864c-c0dea33b90b6", "value": "130c48c02a9ac1fd95f2b9dae7a462ca", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29548a67-e747-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682852834, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852834, "uuid": "8214b2f0-b520-4e48-b00b-a8ab98fc7782", "comment": "Malware payload (Mirai)", "value": "0c9a5c4b6eb23b270b0ace3146817fa5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852834, "uuid": "a3515759-ce2d-4e86-aed9-e2a21d57c9af", "comment": "Malware payload (Mirai)", "value": "72624bf72e9757e3ca562cb57ab6651f1cac5d23ba8f7a2c1f7aea1aa6de05bf", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852834, "uuid": "1059c785-0e83-4a64-a8bb-8af8005672d2", "comment": "Malware payload (Mirai)", "value": "48d51b223b5bf88800ee622d14dbc682882b5fd1", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852834, "uuid": "b63c0a2c-4f13-45f0-8be5-808b7d9681e5", "comment": "Malware payload (Mirai)", "value": "e2c5ca340aa4c48bdd754eaf058141f24bddcfeb81e21bd6afde1cda3082437533009fb0554a4f67b23e7dc76f242f6a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852834, "uuid": "9c24ee5e-3784-442f-b084-53861cd987b9", "value": "T1DC338C77E46A5E94C08605B075649F705F23A0C493C31EBB29EAC2756493DACF909FF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852834, "uuid": "44f63373-9d4f-424f-bd70-dc5aad4ba3f8", "value": "768:I4aHfAe7YyVfMBNLr/yrS2DLCjG7K0et3yayouxo0jCi9C1sfnrdUwn8I:na/Ai/BMBV2HnjK0et31Fu/jCinr7n8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682852834, "uuid": "c746efd1-f2c3-4dce-b197-0f5babcdba75", "value": 50484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682852834, "uuid": "3d6fb019-122d-4472-87b7-4b6cda292689", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852834, "uuid": "33573e0e-c8a3-4359-ba78-6ed82c7f44a7", "value": "0c9a5c4b6eb23b270b0ace3146817fa5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d074730-e6f3-11ed-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1682816843, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816843, "uuid": "15a7ce57-f4c2-4a66-bf16-2a9cda06ec2b", "comment": "Malware payload (RedLineStealer)", "value": "345473ba37cff9f271416ef957446351", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816843, "uuid": "afba8469-5feb-4e73-9c96-84a326c4aa8f", "comment": "Malware payload (RedLineStealer)", "value": "737b37ca53014d7685fd7f20c8b8e704b550835203598dcc3882fec5a88924c0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816843, "uuid": "008f3ef6-f944-45f1-a3f8-db44911b53ce", "comment": "Malware payload (RedLineStealer)", "value": "d035094b258ee218f911c5ca16dd2c8d24a50ccf", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816843, "uuid": "222e4d63-cf01-4876-8670-b6da9099fcef", "comment": "Malware payload (RedLineStealer)", "value": "e38a6892d9f032fe147b6f977ab43fbe331154322c0f3f7fa8a6e2d6506690531715117beb276a145c0a31a0a13aef10", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816843, "uuid": "25d233d3-52d5-4561-8472-ad8390253986", "value": "T16C552352F7CD5073D9F427B416FB17830A70BC916A68836B6286D95E1C728C0BD327AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816843, "uuid": "5bee48e3-b01e-470f-ae52-68e0b1c41d76", "value": "1efe015ade03f54dd6d9b2ccea28b970", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816843, "uuid": "7fc8ace5-69cc-4ca3-ac8a-f9d5f30fc26c", "value": "24576:7yBAMoCVp2+b8wFdWK48A/EKVu+8EFjRnH00ybW79nmBF:uORcpDb8w1WM6u+dRHcKRn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682816843, "uuid": "5e86775d-ca04-43b4-aed7-0d2dc4db2893", "value": 1283584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682816843, "uuid": "0f03fecb-f46e-4082-a5d9-59db500a2bfa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816843, "uuid": "826bd899-e660-4d1e-8c44-1a421e68e54e", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4cbe9056-e7af-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682897561, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682897561, "uuid": "95a684d1-e3f4-491e-a371-861163142811", "comment": "Malware payload (Mirai)", "value": "2a0410837e8de86aecd581c61b3143ea", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682897561, "uuid": "192bf903-326f-4303-90f3-48add667c9a7", "comment": "Malware payload (Mirai)", "value": "778dc451bad159e9640139720d02c91918127cb7a28b6799147ffefa3d36bcca", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682897561, "uuid": "69a1aaae-c143-49bb-8c57-29ee56c70fd8", "comment": "Malware payload (Mirai)", "value": "36e8f9389e4d4f457f5661390d19fa03e87c1072", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682897561, "uuid": "0bdec316-d987-4667-afe7-0e2e9a3f8209", "comment": "Malware payload (Mirai)", "value": "cf3e979044dc06ac3e18823a2b1c5825601ba12999cf4cdec9f3900ab3a14c2440b689212fec5b2a8aec493a523bd4d1", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682897561, "uuid": "0576b355-46cc-473f-bd65-01f3a085cdd9", "value": "T162531782FC81D902DAD4137ABA6E51DE33253399E1DE7207DD126F503BCA91F0DAB152", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682897561, "uuid": "6a942137-9ac0-48a9-8b41-bc6ebe45e8e8", "value": "1536:8RvYsn4tQHe+k2BcOiGVqBtV1NNPGNJ7J:8RwsnQ2SJJcJ7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682897561, "uuid": "2d0168b7-91aa-4e6f-b7f0-d531473b45ef", "value": 64052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682897561, "uuid": "d3fda69f-a201-4b87-ac7b-ada0762a5c5e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682897561, "uuid": "45d3ba34-7465-4878-8e33-28a9b6d38a48", "value": "2a0410837e8de86aecd581c61b3143ea", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f245abcb-e6f0-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682815804, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682815804, "uuid": "f17edc9a-e57c-473f-8a00-da7fdd540bc8", "comment": "Malware payload (Mirai)", "value": "b17e5a3b6e90b5dc809f3cbb06968fb0", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682815804, "uuid": "46ac88c1-92db-4b67-8576-daca0aaab6e4", "comment": "Malware payload (Mirai)", "value": "782dc8de46280dbbe368d9474365432cf36fc236cb035feeb4b4d6454e0a3434", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682815804, "uuid": "64b351f0-c1a9-4023-a651-19b73f359168", "comment": "Malware payload (Mirai)", "value": "7ded3e769f734f4980c084ecbc2f67107e577978", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682815804, "uuid": "9c8aab1b-90d5-4cc2-9956-90f7738c947b", "comment": "Malware payload (Mirai)", "value": "91761f598c6be27570d7f59b51633d7d8cb651f9ce608ee3126e2477c52d2d5e3480cf9303055cd30c2f7f300279a71c", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682815804, "uuid": "88dde788-45a6-4492-9347-1006bb59e0ba", "value": "T178E32C56EA418B13C0D61779B6DF42453323ABA493DB73069928BFB43F8279F4E23905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682815804, "uuid": "ea5da509-239e-407e-b9cf-f0041f355f14", "value": "3072:mJLce5p05d9SkaCHbz4N3ZTJ1NYQ1F2YmXMk/M/9nNkY:mJLcnKkaCHbz4NJTJ3H2nXMcM/9NkY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682815804, "uuid": "488816e2-67fa-4775-9e0f-8c3a4e0f2d4d", "value": 150594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682815804, "uuid": "62a939b6-b2b5-41dc-a484-e37e613b519a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682815804, "uuid": "cfa1aaba-02a0-47f2-b13d-f199a07c6987", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a2ff03d-e72d-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682841749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841749, "uuid": "b4628259-5133-4b6e-a1dd-af0152348270", "comment": "Malware payload (Mirai)", "value": "e23ff87d7e277b75a75781d06df39466", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841749, "uuid": "b6236124-ed4a-4bd3-8974-cf0f93aa81dc", "comment": "Malware payload (Mirai)", "value": "7942f335619b29730ea7621822778b2220d2bb03f957f008c7ba16df5ec1e96e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841749, "uuid": "fdfb5e1e-307b-4c4d-8c5d-ce8baee9d1d1", "comment": "Malware payload (Mirai)", "value": "0eebedd278231a4572ab7d1a8292205e11d1be7f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841749, "uuid": "f512fea9-39ea-472f-a0ce-e3c994f82ed3", "comment": "Malware payload (Mirai)", "value": "e96f1219b1d84bd98feda9144d83110e873ebc4ac90f06d7b15b730feb8e03c51504824e612d14956c513dcb8dd3f138", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841749, "uuid": "cec57314-9383-4903-8962-7f02fc75ebe4", "value": "T11492C091539AC4A6C014843BDFFE898B759743F99C9170B9B61408F8ABC90C30EFE983", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841749, "uuid": "35e07ab6-ebc0-4979-9042-e4f693557912", "value": "384:FSX+5MOS0ztZxgtjU3yYI5o64KOAPmpAtzOr6EM32nmmMYL024umdGU5Elo:cZVsgjUUbjLorZq2GYL024u3Uqo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682841749, "uuid": "8e792057-5b38-4cf0-baf1-025d5dfe929e", "value": 20576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682841749, "uuid": "24ea5ae7-494c-4d85-a2c4-14547e4d13f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841749, "uuid": "922a80a2-c27b-4dbc-9534-a889975eae1d", "value": "e23ff87d7e277b75a75781d06df39466", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51d3db89-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866216, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866216, "uuid": "c857bcbb-4c2d-494a-864d-df207734fafb", "comment": "Malware payload (Mirai)", "value": "3eddebea857f4d4e60f88d39ad55941a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866216, "uuid": "704d970d-591c-4168-a4fe-dde307dfa702", "comment": "Malware payload (Mirai)", "value": "79dd85c77f5ac3d121ff11570a9ff2b2b4b7ca74bcb503b5a91b2588b6bf7d18", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866216, "uuid": "e2fed8a4-59ce-44b5-93d1-9f135a1e4b87", "comment": "Malware payload (Mirai)", "value": "df8adc3c0ef517bb622a7254c97f890bbe904ff9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866216, "uuid": "9c6bc182-6ba2-4a54-9d67-106f5120ec3c", "comment": "Malware payload (Mirai)", "value": "da0976e4bb4ef18e20eeebd92ca8b74e9221690d450491f26e031c124f5563d079b7c1fd2b553028c77f5a63bb295ff5", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866216, "uuid": "864b4456-a0bb-47d2-9a09-09d9e23f3df5", "value": "T120730856B8814B12C5C512BAFA2E118E332317FCE3DFB2129E206B2477C696B0E37D55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866216, "uuid": "18084ab0-e54e-42c7-bd89-c2aa1085b7bb", "value": "1536:mln25xPBXk1wnnkL7+KEw077dZ86aSd0TIqidNzsvHTGsV5GYIW5:rxpXCMkMTHjaUNzsvHqsVER8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866216, "uuid": "7ce8f094-3aba-4e44-809f-62f54a9c8104", "value": 79160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866216, "uuid": "353f2a0a-7577-4644-81f7-2bdd7373d253", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866216, "uuid": "53c2ab6c-c5ec-4992-9cdd-f62c76c57ed7", "value": "3eddebea857f4d4e60f88d39ad55941a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5dc16567-e794-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682885993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885993, "uuid": "ce11d55e-a603-4a8c-a874-00065e5ffd61", "comment": "Malware payload (Mirai)", "value": "90aec3ec377c97adcbe657d31c767003", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885993, "uuid": "8d297b39-90c3-40cc-9f89-617d56deb295", "comment": "Malware payload (Mirai)", "value": "7aaee9b91dfca90225db8672e21ca68737852ae798b41134f372680da86690c7", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885993, "uuid": "43a8b7ec-8280-4e0b-933f-560eac6f3f19", "comment": "Malware payload (Mirai)", "value": "59a4fc0fecade1c35ff1dd8a766f7316c92ac30e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885993, "uuid": "895f9e9a-6cee-4c6e-bb3f-909a032ee65a", "comment": "Malware payload (Mirai)", "value": "85d14cb25fa4a9e376b2d529e24e7492c3ac4fbed66f5cbcd681d71958ccea2e424ecaa9f4f07a6fd998a9ff3ba538d6", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682885993, "uuid": "c37c622a-0945-42ab-95be-f8d31d30a0b4", "value": "T169535DC6B4119E7DF5CBE7BE44220D0EB821626150931B27BB6FFC83BD721A48956E07", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682885993, "uuid": "d80f7103-79ba-4eb9-a343-f9b3ad767e15", "value": "1536:kPqRg0FZTbSX5xZLepSGossFpxhOx2X/ZOqc/yA8M:p5ofF8I9cKS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682885993, "uuid": "e82febce-c88e-4001-a7fc-544edd50a70c", "value": 66508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682885993, "uuid": "ae44a652-3f29-4c32-b5ea-cb7297e4c6f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682885993, "uuid": "2818b696-4369-4ee8-9b34-ac5d49774958", "value": "90aec3ec377c97adcbe657d31c767003", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dadffe30-e6f7-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682818772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818772, "uuid": "604f3691-2b50-409a-81af-7f3d847d00fe", "comment": "Malware payload (Mirai)", "value": "e6ed4fdd29ca598512b4288e55ceefd2", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818772, "uuid": "c92b8778-61f8-4fc7-b78f-c9aa360e3df6", "comment": "Malware payload (Mirai)", "value": "7b520f1228cb5bc14d6e6d90281df088a2a2d26bdfe2f777a0c661e15ccace6f", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818772, "uuid": "a6bfb3ea-5344-4170-887a-6d2b697eeea8", "comment": "Malware payload (Mirai)", "value": "f92be86b64678835a7d695d54609809e664cc97a", "object_relation": "sha1", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818772, "uuid": "b66b571d-0ec0-438d-a4ff-eb201e5f7907", "comment": "Malware payload (Mirai)", "value": "9dfed895231ce55ad87812cafa243478b55d49f7ce7d4d427be7a384b3f5c1f624aad83ac754765c8f5e461ba2d81f86", "object_relation": "sha3-384", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818772, "uuid": "35f08e97-3da7-4b7a-b87f-74a8017cb3b7", "value": "T1AD632907F54281FDC48AC1741B2BBA3A993271FE0229F2E67BD0FA226C56D615E2DD44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818772, "uuid": "77cbda60-2f67-492d-9ed7-e4f8f5d660a1", "value": "1536:Wd42Pur3dMJChAMIViqqpdE9BPiYp+paaXbfRdVhaMb:m42Wr3deQAf4bpKviYAHXfVhak", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682818772, "uuid": "bcf16e0a-29fb-493c-96fd-920bed727665", "value": 67392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682818772, "uuid": "70fb7276-405e-4cbe-a8c8-a82b989ecfb8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818772, "uuid": "a12b8cfd-092e-459a-afd6-678f84641640", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3032aa10-e768-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682867018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867018, "uuid": "ccb857d2-b63c-40cd-b3be-ad5feafdd891", "comment": "Malware payload (Mirai)", "value": "442f58b99f2ec57f867114e425e1cd04", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867018, "uuid": "936ce39e-9204-439f-8502-44b5e0282d02", "comment": "Malware payload (Mirai)", "value": "7bdfc23d681355135964d9e19fa41ac371d999c3d8445b97c68627a6979a780b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867018, "uuid": "f3531340-eb07-474d-93d4-3d158e226be7", "comment": "Malware payload (Mirai)", "value": "030668cb14fa347e8a4510fbb2f63abae2ab0e26", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867018, "uuid": "1897a967-4dc7-447e-9296-9f24bf3af691", "comment": "Malware payload (Mirai)", "value": "3727c21715d4dfde1b815e1541094a0548a9eefb5917b3854e7aed16352fe178e00ba604b61d08d0b5f514945fa7a23b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867018, "uuid": "e6676708-cc0c-40fd-988f-27e1f7f6ccf0", "value": "T12A438D37E96E1E74C08641B074748EB56F23B5C883972EB61AA9C2795483E9CF504FF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867018, "uuid": "b54e8852-fa27-492b-a655-9e2887b3a5c1", "value": "1536:9aa0brW/Od9hlCRjKK1KQXACspfDCMx2+WW:9v0brWGd9XlKcQqpfDQ+T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682867018, "uuid": "19aca096-94d8-4cca-8511-0334b2fd7104", "value": 58740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682867018, "uuid": "023be4ea-6391-456d-8f00-91dc623b1894", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867018, "uuid": "c7c77b22-88d1-47a0-bc57-80c32278cb0c", "value": "442f58b99f2ec57f867114e425e1cd04", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b053ca5-e755-11ed-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1682858796, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682858796, "uuid": "de028c8f-b399-42a2-9038-084e777fc8fd", "comment": "Malware payload (AgentTesla)", "value": "93cec7744d42d7c520127a44a6f18f5a", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "DHL", "colour": "#57272F", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682858796, "uuid": "38708704-899e-40b1-ab8c-1a3f9689a14e", "comment": "Malware payload (AgentTesla)", "value": "7beb9c6b7fea37dd439b7770934b34de8964229ba5e88879db42164864e4859f", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "DHL", "colour": "#57272F", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682858796, "uuid": "c0611dcc-2a05-4bcf-8133-ebd90160df65", "comment": "Malware payload (AgentTesla)", "value": "1705c5932193585a48153b14697764d909273dad", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "DHL", "colour": "#57272F", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682858796, "uuid": "0d7eb94a-8582-4cd4-8bad-028bae1f4588", "comment": "Malware payload (AgentTesla)", "value": "d0d8800f21c9c9e31538dd4a13a70c255175ba0bd15ee406a79ef98f34b4bba6bd69091e703c8be9971187da0c45c88b", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "DHL", "colour": "#57272F", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682858796, "uuid": "49656a55-3291-4429-b450-b846b34e2d7b", "value": "T1D2B43365E9378E5325C15E35C2418EEDF02F3E68CB37708EE823A499392E14A7496273", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682858796, "uuid": "e7bf71a5-a547-406d-96f0-c662f0d1845d", "value": "12288:Rvz0saOvUz1o/NEVBJb+tTP3Fa8r+cZYKIl+aI70qz:RvvIz1o/O0tptd++BAqz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682858796, "uuid": "dee211c5-cc19-41ca-919e-35dc2a643b06", "value": 534196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682858796, "uuid": "317fc72b-9ec8-4d50-8564-7a3c2d54be74", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682858796, "uuid": "fe912562-bcfc-4e99-ac7a-1ba5708bad86", "value": "DHL-AWB 4532189.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e080fd2c-e799-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682888360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682888360, "uuid": "f87c765b-53c6-4b19-b83c-6a7ed1010b15", "comment": "Malware payload", "value": "108b6b171d8799614a35aea8e1b9f67c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682888360, "uuid": "9fc2abe9-9da5-4f70-b82d-4d9750182db7", "comment": "Malware payload", "value": "7d7c7d4b8bc8e8ddc5b91f63ea08816bde55ff83359437fdb0e924bcecff6665", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682888360, "uuid": "e272c9d5-416d-4a3e-9315-0ac53559eac0", "comment": "Malware payload", "value": "6168de6db5194642abde07a593fd1cf44e4f908e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682888360, "uuid": "e0b2c261-badc-4db6-8e9c-938647363b34", "comment": "Malware payload", "value": "4bd434918a43d0d8fa6688132dde4c42673bc702efd9d6b74a9db1755792e806567f19150f4c1c16805a29a1facbbbc5", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682888360, "uuid": "b355e639-ded5-448e-81f0-bab78632a7fc", "value": "T19F35AEA153760AE9F0B7A83448911D07CDA07DB1667066D7DBE3224B4A3DBF12639F0B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682888360, "uuid": "1865de1a-4f6e-461f-a065-bca08acc136a", "value": "6e5b4470bb07363e7246d3742da10555", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682888360, "uuid": "54bd2c9e-acbe-45d0-801a-c9a5a2354cde", "value": "12288:0b5LVDHYt7wbHjzqi8XWp1eyMe1r+hfo87cwlC1BFGuLkFo9WlFDCyk7ryI0y5tO:6Ymvqi8XWPPMe1rmDo1B3l0lFTkS3us", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682888360, "uuid": "89501972-3747-4a56-984a-2057cb9c869a", "value": 1072640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682888360, "uuid": "1abdc276-68e7-46da-8f44-539ca3ab659b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682888360, "uuid": "eac8e215-d047-4a76-a90f-d532c686c755", "value": "7d7c7d4b8bc8e8ddc5b91f63ea08816bde55ff83359437fdb0e924bcecff6665", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d37d9748-e706-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682825202, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825202, "uuid": "40eb13da-c473-4d7e-aba1-49efc8f0a296", "comment": "Malware payload (Mirai)", "value": "d0a268f9df5a2fb00dc98569ecc5ed59", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825202, "uuid": "4dc8c40b-1bee-4700-8cb8-106900d50172", "comment": "Malware payload (Mirai)", "value": "7dc4e163ef46dddd9d92566d737a531ad484e71a9defd9ef4fe3748f20dfa84b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825202, "uuid": "ca876ff6-20bd-4e0b-9d1f-39acd62c00b3", "comment": "Malware payload (Mirai)", "value": "6743dc3f503b1bb4e5de326d3572536bf5c9d3d6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825202, "uuid": "4047b9ce-627b-42cb-a395-e4eb3e028f48", "comment": "Malware payload (Mirai)", "value": "86d52c67f6a3c9bf250ced2b80c2525814817370b98b32643a008e398e73e4a1b32ab3515e1da126ff14f8c35f2b2191", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682825202, "uuid": "9707e8ea-0a56-41a1-afeb-e1b5a5fe169f", "value": "T1CAE2E165C17159B3DE7032BAA8FD0E867E5292B883FF3422039443786D91D9F1DAB126", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682825202, "uuid": "9eee1dd7-4cd2-479a-98fb-0c2e98d7048e", "value": "768:cLbu4t2Chu8AXCVnX/1KbrWOX2DQa4gHJUHC9q3UELS4:cLbu4Mqu8nXtKnRX2Dl9JWLD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682825202, "uuid": "39cd3467-028d-454e-8fb8-421be6221a8e", "value": 33240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682825202, "uuid": "3fbe7446-6596-48e6-8a5d-181496c26b03", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682825202, "uuid": "2bffbe7a-6fbd-4631-93c9-3fea3b624002", "value": "SecuriteInfo.com.Trojan.Linux.Mirai.1.8473.19504", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f27b1f3d-e75e-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682863049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682863049, "uuid": "ccf267da-10d4-45f4-922a-c450ed8144b0", "comment": "Malware payload (Mirai)", "value": "8424e56afe27d883b25647c15002334c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682863049, "uuid": "f061e57a-ce04-4aa5-957c-f1a346f23e61", "comment": "Malware payload (Mirai)", "value": "7f9fe7558de46cd7ce109568c52fdbd5e339af85ec3777ce6bfa30fb08732ace", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682863049, "uuid": "80d8304a-4e5c-4ee6-bb9c-d8c33e17994e", "comment": "Malware payload (Mirai)", "value": "c7a0f0b6ec2e5023114901b576b364a646c5b8e3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682863049, "uuid": "72fbe77d-2b37-4348-a428-980ed28495cc", "comment": "Malware payload (Mirai)", "value": "4bd5e656c4482b7404e8f8720e7ee2689bf4ba8a680ccb261b581dc2b13c481f307f353cb08a3f82bcca4aad4bb86815", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682863049, "uuid": "401e2d12-f579-4ddc-9728-e6fab24edfb3", "value": "T1F0334AC8F543D4F9EC4715B01137FB379A36F5E91229E743D3A8DA32AC52A01A906ADC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682863049, "uuid": "757b149f-e5e8-485e-a6cc-184f6b4f0f11", "value": "1536:XNBX9Z/DtwiLaiAl4zgGVyBSNWb0PyBSLCY9:XNBX9ZbtEVkgiaCccyQCY9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682863049, "uuid": "4ab4678e-67fa-48e0-8e3b-e8910c4654cc", "value": 50256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682863049, "uuid": "513d871e-3140-4f17-b287-e7912c31f100", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682863049, "uuid": "dfec755d-6d91-4876-a626-e2e52621fa87", "value": "xzx86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbf315b2-e6f2-11ed-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1682816680, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816680, "uuid": "4d970de9-cd3d-4b11-8f6f-418811358ad3", "comment": "Malware payload (RedLineStealer)", "value": "0eb0ad5e6f18c0087909fe7678740d51", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816680, "uuid": "c9ede2e2-f2cd-4734-a2ce-4591e15dc51c", "comment": "Malware payload (RedLineStealer)", "value": "81146d49bf015b9202eb30a45d224553f08ec936b25d5e3d21b4ad611b36d112", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816680, "uuid": "f81814d3-c003-4485-9f4c-cde5f21e7507", "comment": "Malware payload (RedLineStealer)", "value": "863a17bce10f621bb2b21687db52b6876b4807e1", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816680, "uuid": "b21795e8-7e8e-4506-bb18-1b1cd8018a5e", "comment": "Malware payload (RedLineStealer)", "value": "c534373644fa32e636213b79cb2bc274d28609e87ecd44624a17e8c0237b01cc0a27fdb3c9144a8ded80e8d3df573ad1", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816680, "uuid": "238d7ae3-54db-45de-ab53-b6c45f0e307b", "value": "T193552353B7E85073E1B52BB09DF952830635FDC55B3883EB2248AD9E18729C8743276E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816680, "uuid": "27ee110a-cc25-4fde-a150-59fe1e7bdb2a", "value": "1efe015ade03f54dd6d9b2ccea28b970", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816680, "uuid": "a31ca0e2-a3f3-4ba0-82a0-c45dcf181836", "value": "24576:4y8EifeuCepTFwLwdZ2v77FaT2RK30w/VK9GcLMnFHKUiVTB8axz3Ta:/UmAwLwdZuo2Mt9oGZqjVTyu3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682816680, "uuid": "26570752-a1ad-451a-8514-51f350eb7572", "value": 1284096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682816680, "uuid": "3d1bb5e3-defc-420b-90a5-9325aabed76d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816680, "uuid": "99b51995-9937-4303-b426-18e8530f4089", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e18bfbd-e78d-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682883014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883014, "uuid": "e04f77fe-2601-4150-b1c3-2ee1ffd58174", "comment": "Malware payload", "value": "8b6f38865c45b992aefe3988813d908a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883014, "uuid": "0997cf38-9f74-45cf-a20f-1a95f5b1d7c6", "comment": "Malware payload", "value": "83c17cee1126133f3fa7ebb6b8de7ca408dd717fb2d7d743ba1ec9c5333bc951", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883014, "uuid": "10f42f49-2673-4ffc-9c13-abb4e18986cb", "comment": "Malware payload", "value": "5d54b803fe0b42d8bf429950fcaef644f9ae689e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883014, "uuid": "5ceea98c-f640-44a1-a41d-12a40a928f45", "comment": "Malware payload", "value": "bd49807e2cb787a5f0e7b0b87d711a9a5ba5619f508eb1ec82d018433bfa113fb44b65ff430665361c805e57743c9b86", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883014, "uuid": "339811fd-03d4-42a0-bfd7-b885d62c6431", "value": "T1B4445B1332F16C70E72A5A328E6AC6E4661EF951BF557BD72324AA1F0971DF2C272301", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883014, "uuid": "5889696d-f266-4853-80ca-6204392a9a7b", "value": "5e64b31f8e5697ceea07ff3f5dcea4e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883014, "uuid": "b1bac9ff-50ba-41f7-87e4-c0a26a48a3a7", "value": "3072:7WgQC0XXZTlO5GNiZ28T5ttgGFK7T8dMM9f9xRtxvmwsRaovqOsP8fq:qmSd056iZ2OtgGObMN9jtxX8/qOsP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682883014, "uuid": "6c49f8e4-ae45-4b7f-934e-4ffc5b791cef", "value": 259072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682883014, "uuid": "3f521b6e-1b2e-4c1f-a97e-8b38dbe17d5f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883014, "uuid": "7251041a-e1de-4676-81f0-2ebb2c2f0336", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b925fd3a-e77a-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682874979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874979, "uuid": "c8671e69-b300-4243-ac11-db3fa46c06cd", "comment": "Malware payload (Mirai)", "value": "2f25bba74e8475b1e1d37820142af516", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874979, "uuid": "6dd314ab-fd12-40cf-9fd5-dbde637e55ff", "comment": "Malware payload (Mirai)", "value": "85b7c729a9563ea8fd3ba89563f756faf73861aea9559ff6f2f158db897bbcf9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874979, "uuid": "2f6d1d74-d600-43e1-915a-fb5f610e2ee5", "comment": "Malware payload (Mirai)", "value": "2aef1390346156d052a80379efc196beabcf5071", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874979, "uuid": "314fa04e-f0f9-4131-a671-80e767ab9ced", "comment": "Malware payload (Mirai)", "value": "58e33a67288c8a6f9598160c50b70dbaa9edc3063d691cd2f071cd3ef9cc4637cdcae96d0fb23e0b59323176cb6fde3a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874979, "uuid": "15aeca04-57bd-4b97-a436-a01a16c5b826", "value": "T18D53971E2E119FBCFB9C873547B74E21968C339626E2C645E15CEA012E7034E741FBA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874979, "uuid": "18b9190a-f721-4db9-b141-1b31bafb2290", "value": "768:ruVBQl7KPLz+X/rZTnsrZThdUrcOZUehcjxV/IOVJlbplhy7dA+V/z7JcbiB0QRM:QQRKPLz+XdnMwrcOUjLbDI7pZ9R/W/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682874979, "uuid": "c1e532f7-931a-41c3-996d-ad59c54f45fe", "value": 63364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682874979, "uuid": "d4136ac0-c9e9-4692-a65d-9988bef67d74", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874979, "uuid": "73c62332-0188-4f1d-82ca-069886d1f5da", "value": "2f25bba74e8475b1e1d37820142af516", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4deaacb5-e7a3-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682892409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682892409, "uuid": "6ff04924-e350-4c05-997a-480486f0a9e6", "comment": "Malware payload", "value": "8d37fffac977f24cd238dfa2ab28df01", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682892409, "uuid": "ed57ace5-21eb-4e30-b8f9-a445455f92ac", "comment": "Malware payload", "value": "85c593fe375ea0a94292482f945a1e9e7fcb3fb75f5663acb6fe0ad3524bb80e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682892409, "uuid": "552ccd97-5b1f-423a-bea6-23501291bd8f", "comment": "Malware payload", "value": "08adae9a731ce6c6a2b5aa2730cc09192f0a2983", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682892409, "uuid": "7c4cc8ce-2c0a-4f1c-b8bd-aca0b054ad04", "comment": "Malware payload", "value": "1903d4c28459b1b98b4c25815c36deed52ac4ab9048ab315c6292b5da120cc4a5560792287926497201846756f2afc87", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682892409, "uuid": "cbb6538f-7fe2-4d05-8b4a-7fdc69f93128", "value": "T107D1C70F971009AECEAFC37A9D574826E7B5B1005961061F66788EDE2FB3527323AB44", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682892409, "uuid": "6a49e5f6-c31c-4052-b3d4-c044ce0cb9a4", "value": "613d56f9ae8f9890c49dcf4e9c890e6c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682892409, "uuid": "1effd178-3105-4749-af11-5bbff4ebb9e2", "value": "96:C+npSvbQMtOvL7fzO0YQrrBsp0Q8DI6Qp0eJbb:C+npObQQOv3zvh280nxhb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682892409, "uuid": "8de93b92-f0dc-434b-8511-897ea64d3f8c", "value": 6247, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682892409, "uuid": "69adf5b3-d8c8-4131-a2dd-0016ce8684d3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682892409, "uuid": "a2d5a25c-5477-4bf4-9f61-fe97d10a9dfb", "value": "85c593fe375ea0a94292482f945a1e9e7fcb3fb75f5663acb6fe0ad3524bb80e.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76124ab0-e7b2-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682898918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682898918, "uuid": "06daafb0-c725-42b5-8ec4-e4a6f30934ad", "comment": "Malware payload", "value": "86725fab299e8c95fe17634aab775bc5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682898918, "uuid": "1253422d-b269-4b79-a89c-c9befca68695", "comment": "Malware payload", "value": "85f560faef36e2e4f62469599952a8757125682de1520950a07a8dd6c1bbb8bd", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682898918, "uuid": "1bd11436-8727-4798-9954-bc36a7a9cdf9", "comment": "Malware payload", "value": "2f24bbca7865b6204481832d867597f8a5a4a65b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682898918, "uuid": "5569395a-5a01-41ba-b87a-23d1bd026564", "comment": "Malware payload", "value": "ae759d37ccdcf691c07d347c9512254c7e1db1548268ea3c5ed5cbe2963994681caadf08856fc8650b4a02f6c6821be4", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682898918, "uuid": "18d6f19b-b317-48a6-a4ab-b3e136a9d3d7", "value": "T12CD48D539064CD4FFE66EB70D5B4FF89A6F2F07324E190241B792189CAA5F011E8D62E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682898918, "uuid": "8add2a55-30fc-4d1d-98f1-34fa120cd4d7", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682898918, "uuid": "90b498e9-e95d-4b3d-a15c-9bc12d44b894", "value": "12288:AAbXegQVt17urnyY+JqUUiBy1yFoz1NDEWxF:AaryJsAbFOXDEgF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682898918, "uuid": "113eeb64-3109-4068-835c-370d18ede5c9", "value": 603648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682898918, "uuid": "70c79a57-f705-4c45-9a62-651378cd8194", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682898918, "uuid": "83cff1ba-2716-44ed-8942-771df067e522", "value": "hesaphareketi-01.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c501b669-e6f2-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1682816588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816588, "uuid": "f8f1104c-3898-475b-b6cd-188310436b35", "comment": "Malware payload (Amadey)", "value": "904df735913b806b0d08ed348cc4a64e", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816588, "uuid": "16625189-9703-49bb-b949-16dedff0ea98", "comment": "Malware payload (Amadey)", "value": "878ec26100fae85a47ead5efd4c2a3e8b87ed4d216bb61db244f902d609592d9", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816588, "uuid": "df4b97ac-f778-43e2-acd5-db638dbd39a0", "comment": "Malware payload (Amadey)", "value": "c0e9fade64793a62ad76c78997f60c5b3dc1846d", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816588, "uuid": "329e30a0-2d25-4e4d-aae3-04db8e30a673", "comment": "Malware payload (Amadey)", "value": "283ce52f6c68ed130eafcad90d2993ee71cb9a9bd066628854eec3ad77f318a894b2f16ae4039ab5cc95f75a0a9a9524", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816588, "uuid": "e5fe5da8-cf36-46d2-8e4f-ed1db851d2b4", "value": "T193552310A6ED90B3E5B607B0EDF602930AB53CCA3966E3A7374895DA1C325C5B13177B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816588, "uuid": "f760cd4b-346e-41a3-b77f-cbea0c4480c3", "value": "1efe015ade03f54dd6d9b2ccea28b970", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816588, "uuid": "1a8dc4f4-9aae-4c46-9fa2-e42a06dd7783", "value": "24576:yyPb6rB2FhYXuW9CK07P/kE7+BC9nup8ezP3VnQy+zpvWqFJsxKFT:ZPb6AFJWXucA+QuOe73VEzpvWqFJsx8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682816588, "uuid": "bfffdb05-86f6-4cf4-89ae-b844a5870cb8", "value": 1284608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682816588, "uuid": "c39f7d8d-0b3e-4978-b2dc-6cda2a69deb0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816588, "uuid": "8d69f505-590e-4d16-b07a-4ada81d279a5", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d077da99-e768-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682867287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867287, "uuid": "43fc5ad8-f38b-4747-95c9-ccd49ba12f6b", "comment": "Malware payload", "value": "b677f6a3ab354347016003233c8bc171", "object_relation": "md5", "Tag": [ { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#ED4E86", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867287, "uuid": "1ef21aef-3ac8-4fb8-bd89-d0c560943cab", "comment": "Malware payload", "value": "8c02f565c89ff0c5bdaadd8d386e915f138c5e090cce9770ce23edfb4f7beefa", "object_relation": "sha256", "Tag": [ { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#ED4E86", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867287, "uuid": "1122d465-b4a4-4ab9-bf33-bdfe0220db04", "comment": "Malware payload", "value": "3379d246c71696485b2a952ad86e6b43e0b847fa", "object_relation": "sha1", "Tag": [ { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#ED4E86", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867287, "uuid": "2ff1d400-b2b3-49d3-b5b4-3bf2486a0ce0", "comment": "Malware payload", "value": "7e06a5a5ef82a8285f5b5391535ab3f0480fb22b8296466575c1e5158187550399f72b5edfd2795190545718b2fd49f2", "object_relation": "sha3-384", "Tag": [ { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false }, { "name": "iso", "colour": "#ED4E86", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867287, "uuid": "e89de33e-e912-4dc6-977c-a5972dc3c4cb", "value": "T1AA15537F5968BE02F61A993A02C839BD617C652B532E9DDA3EB0CB450C14A6C4431BFD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867287, "uuid": "5418c1c8-d717-4e4b-b4af-feab2565fbac", "value": "96:b1nBg9TrnqP9T80GvuGwHquGTjk/uG7+uGAQm4luGQHquGTjk/uG7+uGj:bUM/GW/jujkGufbQLQfjujkGufm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682867287, "uuid": "03aef45e-2294-4b72-8550-bbb5aa597188", "value": 919552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682867287, "uuid": "8b03271e-370e-424b-92c4-4c0392a95afb", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867287, "uuid": "3f10d2fd-9658-45b3-8a73-6cb9cd3b6ffd", "value": "invoice-payment-d87727766626.iso", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2dad10d-e78b-11ed-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1682882324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882324, "uuid": "11551862-0dcf-4c47-84b8-8448f4c93c40", "comment": "Malware payload (AgentTesla)", "value": "ebb23acd1389a8ed584abb763f740f0a", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882324, "uuid": "5eb1194f-f345-4866-bbc2-1eda64a2eafd", "comment": "Malware payload (AgentTesla)", "value": "8d41a5c262bd9bcdde87d6ee9322abebe831a18a143089576b7be05b985aff0e", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882324, "uuid": "e0cd058f-4b5b-4546-828e-e347d1c98fab", "comment": "Malware payload (AgentTesla)", "value": "e45ea17d010f43d28943df540bb1a2e4c0b09e4a", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882324, "uuid": "5fbf369b-928b-4bdc-aae6-97ebd9de1bfa", "comment": "Malware payload (AgentTesla)", "value": "d6a40a7e1d98e7e9370af4b6f2b8144d7f46e5182cc408066528e607e6a58c452694cdd922e1513924855a7146fe1aa7", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882324, "uuid": "c5ff4363-25e7-4d29-a94b-5ef88a121cff", "value": "T1E6D49D535065CD5FFE2AEBB0D1B4FF55A6F1F07360D190242BB82189CAA9F021E8D52E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882324, "uuid": "c1e6d298-a422-431c-84e4-0cb6d43f976a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882324, "uuid": "7917d2a7-31cb-4127-b479-ad9f31fffb3c", "value": "12288:Iz6uV8NA2eTDZlCOHpoZQuW+ai5gZEDFJ3HSegQVtg:Iz6u6UlVpRbY5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682882324, "uuid": "21d171ce-3d7a-4832-86dc-bcf4bec3f617", "value": 650240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682882324, "uuid": "1183c6cb-872a-4d15-b8b9-cd8f81a0ace3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882324, "uuid": "b6e43a1f-f86f-47c0-b42a-2b2cb44faf62", "value": "TT Trasnfer $89,483.12 against Bill INV-0076602, 76603, 76604, 76605 & 76606.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74c5b232-e770-11ed-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1682870569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870569, "uuid": "da461628-907d-4006-92a4-322d98721e19", "comment": "Malware payload (AgentTesla)", "value": "d1a988ee709b126f9557c2ac0ba56ebb", "object_relation": "md5", "Tag": [ { "name": "QUOTATION", "colour": "#75C1ED", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870569, "uuid": "5f16d750-c54e-4695-b07a-a80372e23910", "comment": "Malware payload (AgentTesla)", "value": "8f39f518682138b95b00781ab7c808c4ea813f441847aeb837cb840e9f42a94a", "object_relation": "sha256", "Tag": [ { "name": "QUOTATION", "colour": "#75C1ED", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870569, "uuid": "677abe07-687b-4bc3-b12c-6205f66fcec7", "comment": "Malware payload (AgentTesla)", "value": "4dbcf51e97c544dc3cbed42884f7094b4b57197b", "object_relation": "sha1", "Tag": [ { "name": "QUOTATION", "colour": "#75C1ED", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870569, "uuid": "912994f4-502e-4aa0-b0a4-e8db29eb7e37", "comment": "Malware payload (AgentTesla)", "value": "8e68977e0c6d48097f70d12519e320e78d26b282b8e6974817323021cd3876590263c5c0921da12b4a476b5f2eda7964", "object_relation": "sha3-384", "Tag": [ { "name": "QUOTATION", "colour": "#75C1ED", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870569, "uuid": "88eb2ecd-0e98-4d00-b298-1d4650f67437", "value": "T1E7C423D96929DCE2183D5EB732BE87CDAA3D34C91DB39163E1C9430B4DC266044ED6B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870569, "uuid": "7ce33283-9659-45cc-83e6-7d911570b425", "value": "12288:+wyhmO/a4hw4BxKrV49xWTOyuOW1gt4zU5J7XkQxIeOBHHEnUomdLB:+wygwJ1BArV4xeOyCgt4zCkQOeMHkzmD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682870569, "uuid": "c0faf1b0-87dd-48b2-abfb-f5e4b1f485b7", "value": 571128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682870569, "uuid": "1fd48401-870f-4824-9a67-50d04d1ec5a9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870569, "uuid": "7d5b4a20-6b6e-481d-9a75-d90698dbaaad", "value": "Purchase Orders.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "822b1978-e71b-11ed-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1682834085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682834085, "uuid": "fe16056c-132a-43cc-9b7b-f1ef910c7a30", "comment": "Malware payload (RedLineStealer)", "value": "8a61e10948c23a9a5c353d28b8738490", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682834085, "uuid": "2d39c17c-ab49-463e-b47a-5188be6df119", "comment": "Malware payload (RedLineStealer)", "value": "90961c5d548207db7c1695ffe82ef9cad529e6f1d987de9bfc67da9a045f67ff", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682834085, "uuid": "aa353bd6-f739-4e5c-8d5f-15dd2ddfc431", "comment": "Malware payload (RedLineStealer)", "value": "b9b01463db4a6bbaf85ccfbb02bac28a047026e7", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682834085, "uuid": "7a94a72b-e472-443e-bdc5-6da4c59157ea", "comment": "Malware payload (RedLineStealer)", "value": "99ffe09abe2dcd6014d908149b644cb460911398d0ad9f4972e23aac16733775593cf89d9d3dc8f322d0859012c26a54", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682834085, "uuid": "35e0ab03-194f-47bd-876f-745859e3387b", "value": "T152A4BF1232F07871E6324A728E2BC6F466AEF8628F55ABDB2354D62F0DB11F1C572741", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682834085, "uuid": "0468dbe4-2d84-4957-9987-679f8ddaf684", "value": "8e1291b1baddb8fcca0899ad3cc587e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682834085, "uuid": "11ce2948-d0e3-4c4b-981d-d19413edc56b", "value": "6144:WPTUg5uEhK4FngWLUFhqHTpkqqZytGyrFYfThLl9DNSdPudCjZfqR:WPTX5uEhpglFa/RyVZ9DEF7Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682834085, "uuid": "b2e49098-91f8-4379-a170-61a66a335206", "value": 484352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682834085, "uuid": "e6b3bd6a-c29a-486a-acf2-3d92669dff6e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682834085, "uuid": "d79709ba-c6ae-46d7-8b61-97f71aeddbe6", "value": "8a61e10948c23a9a5c353d28b8738490", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "645afa56-e730-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682843054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843054, "uuid": "808653b5-bcea-4708-b369-3009c319e953", "comment": "Malware payload (Mirai)", "value": "3e13d31e003f0056d16974d5438434f1", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843054, "uuid": "f64a0389-12aa-4788-a2fb-ff32cad39592", "comment": "Malware payload (Mirai)", "value": "91802f1efa861f7897192cef12261a43dda2a9b23968513295d05ab78fa8cad4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843054, "uuid": "113956e0-803f-46e7-9af3-dc9b6bb1703d", "comment": "Malware payload (Mirai)", "value": "a4e522a32014c6dd62d7f0bc14d27d6ce2bc14c0", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843054, "uuid": "ac60204c-9dce-4181-84b0-f163bb6674c8", "comment": "Malware payload (Mirai)", "value": "e6bce269ed2257fc9b854d7e352501227185ec5ffc203d72a6655a70ea7409f10514ba17d709c4fcd88e0825efafdcd5", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682843054, "uuid": "844cce8b-6e4c-4068-8357-52b14ecd58aa", "value": "T11983B40A7E218FADFB9D823547F74E21B75833C527E1D285E1ACE9015E6024E641FBB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682843054, "uuid": "8276f824-5793-4338-82cd-dd023b81681a", "value": "1536:WxXB8hHjc2OGaLCrUbqnuhfvRzeHU5LwbZnrAr:WxXB8hDc2OGaEUbqnuhfvRH5LwbZnrk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682843054, "uuid": "259ddd30-6572-4f5c-aa67-c5b7df8204dc", "value": 85692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682843054, "uuid": "5f6d41a4-7fc2-4d6d-b610-a54cd52e4164", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682843054, "uuid": "a25db1b1-a21e-44c3-a18b-7547f9a87696", "value": "3e13d31e003f0056d16974d5438434f1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62547cbd-e73c-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682848205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682848205, "uuid": "779a9137-5cee-4c71-88a7-599f29669034", "comment": "Malware payload (Mirai)", "value": "a8853a30744345c4fc75d6de9deccd37", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682848205, "uuid": "ed56075f-629e-4315-9254-3f4e53b281e4", "comment": "Malware payload (Mirai)", "value": "92b4840ee42754a78fd57f50fc16e2892e5b9944b468167348d899f7727c1403", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682848205, "uuid": "df9e2e66-b237-4176-ac0b-93e71929b964", "comment": "Malware payload (Mirai)", "value": "5337ec7daa81adafcdf10721a47fe052e2b4e037", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682848205, "uuid": "9f4f6504-0434-49b1-81da-71ef8b539090", "comment": "Malware payload (Mirai)", "value": "19bc1944d6e1bb5493e7475feadf257b677b256d5f7ae5d026473498665f56ad4c66d7bd578afc673623d87178d41196", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682848205, "uuid": "fdbd387b-5be5-4fbf-9be0-f365bd1a3f90", "value": "T17A044B46FB808B17C0D2177ABAAF42453323D764D3EB73069928ABB43F8765E4E63505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682848205, "uuid": "df1637e3-e39a-419b-8eb9-60e6bf836c72", "value": "3072:0fjYM9rf+OiPsaY+rQIk7qWNe3SP2WCZ5L3wL/KNG1Gw:0fjRrGpsaY+rQIkmW7PHCZ5LgL/KA1Gw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682848205, "uuid": "5e742229-f431-4593-bf85-971e721b2259", "value": 174049, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682848205, "uuid": "60ccfaeb-ad25-4eba-a8d9-e40ca13aa638", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682848205, "uuid": "d2014f56-4aaf-47d1-bf31-a33a6df9171d", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3dd2b510-e747-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682852868, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852868, "uuid": "9598bf26-3fbd-4cb9-938d-d1424fd582ae", "comment": "Malware payload (Mirai)", "value": "93e16999cd07b3dcf15d3a5409f725de", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852868, "uuid": "f170e266-a765-4638-a91d-960e1303a4e2", "comment": "Malware payload (Mirai)", "value": "93a7b0cb286d43c004e3785cdbe7d9b2f919dabc702b07777b47d49859e7790a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852868, "uuid": "a445e6df-c4a0-4b05-a032-1a8247d44655", "comment": "Malware payload (Mirai)", "value": "7c26fbb95c8e05c07d8dd7100bb276b8cca7b7b1", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852868, "uuid": "bc580e92-6821-4aaf-a581-f5dc0561c972", "comment": "Malware payload (Mirai)", "value": "914d74635604f3666e032d9dff25eb85e8f10d1f3f309fcaa031e232282a8a8f6029b2ed1730b34a45e1f4e429522793", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852868, "uuid": "eb51d62a-63b1-49f3-97aa-166f66214947", "value": "T16A63D715FF550FB7DCABCD3746A81B0239CC554A22E87B3A3534D828B65B24B49E3C68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852868, "uuid": "66034ffc-117b-49f3-bb71-0def6a6537a5", "value": "768:ID59zclowooHX6gcKbW4e9JQxOTe9/BekPSl0Sw+uo0iZ5qqXizwX7+e2kWI//wB:I1wog7NeaqA/BTPxq9Z5qO7+BkWbnsU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682852868, "uuid": "d3c959c0-d18f-45fe-8e4c-36b842b374b8", "value": 73228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682852868, "uuid": "2b1f1610-f0c5-4596-9633-286605fe95b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852868, "uuid": "7f161cd1-223e-4cff-854c-ae37f1c01dd9", "value": "93e16999cd07b3dcf15d3a5409f725de", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "545bde45-e72d-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682841739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841739, "uuid": "0c61ea9e-0e05-4efb-986b-bdeea1861336", "comment": "Malware payload (Mirai)", "value": "9240eb9145d361e0340e2735338f3d7d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841739, "uuid": "3ee86122-b049-4119-a37b-2cd8f4ec7294", "comment": "Malware payload (Mirai)", "value": "942690cb4b09c290978e090446689d770508cefe833c8702070be5d5b9d54be2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841739, "uuid": "90bed320-b523-4160-8bfa-918c7e455189", "comment": "Malware payload (Mirai)", "value": "624ce4b63e66eee668578a2eafd5e691a60f1903", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841739, "uuid": "6c68f485-8bc5-41df-a6f8-39ca99a9f9b5", "comment": "Malware payload (Mirai)", "value": "5d303c27da4195e7bd34fb7c9ddf74dc39d723402f7cc1b314806694732bd81cd6ebb08399cffdea815d02e189474b3b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841739, "uuid": "e79ab468-4d9c-48fc-a003-95bd1d90d874", "value": "T1FBE2D0B42487C945E5ABEFB8BCDC9FD037B107D633A1C9B212C0AA950595D37DB028D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841739, "uuid": "f31df231-d180-4750-a6e0-fb3b9026cdf5", "value": "768:rjkuYWogRIAIL8es6O/FfyOhxCuYnv4oI4uVcqgw0RNWXow:r6B4IL8QwVQnv04u+qgw0bWXow", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682841739, "uuid": "e2fde09d-41a7-4cb2-ab00-ce2a45405d96", "value": 31124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682841739, "uuid": "4441f890-0a8e-4499-8b08-a88f88823b29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841739, "uuid": "121dcf36-f025-40e4-a2a2-a04090ab672f", "value": "9240eb9145d361e0340e2735338f3d7d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e93b0667-e7a4-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682893099, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682893099, "uuid": "4caeb57e-7e95-4422-9e65-5e8cdbd0a6aa", "comment": "Malware payload", "value": "1d6bfcbb168aca79a5917468117d0c31", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682893099, "uuid": "4523fb95-b713-44ca-8d74-7577568f6332", "comment": "Malware payload", "value": "961b1a6a707722ebd4632d0ca3ea6b3b7f42143bc8ae946f99d8c1ac1b91c490", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682893099, "uuid": "0835f772-55aa-406e-8586-1af45abe42db", "comment": "Malware payload", "value": "24786e5000670ac8b51a7292d3d384f39c466880", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682893099, "uuid": "2c3c978d-77c6-4ecf-a854-d66763b05638", "comment": "Malware payload", "value": "01cccbb87c47ae11c85525c226ed14d5b756496fc5d53e6aaf12728b437098fde72dce397bf557bea087ee3f16a9f9c9", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682893099, "uuid": "a1d1525d-b209-44b4-a192-7857a0ba1cf7", "value": "T11D828D03A7A65E88D53FC1B2E0A78E07CBB4B406251C263F6734844D7F7B7932626B80", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682893099, "uuid": "3e290ea3-9636-437d-9047-52e5c5dde39c", "value": "c1d1febbe45a60da209c85a2f3720ca0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682893099, "uuid": "df47bf68-c743-4f60-bcc1-fb6d42626870", "value": "384:xjfEPMV17amFDkApwFtSC5xx7jwaIYeBD7cN4erFlIaIKTY/:NE417amJkztT53DIYWcN48lIaISY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682893099, "uuid": "46a2ef8c-d75e-4dca-b431-bd21055a1a6d", "value": 18441, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682893099, "uuid": "1b29c853-e6f4-4496-8ac0-c3eb1b0cffb6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682893099, "uuid": "d089a0db-d488-41ee-8e30-7dbed2275edd", "value": "out.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33a12be2-e790-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682884204, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682884204, "uuid": "96393b4d-d9be-4361-8dca-e0e40cd9864c", "comment": "Malware payload (Mirai)", "value": "3758a1b73e6149c81c831526f2a8c08f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682884204, "uuid": "12aaeaa6-1c06-48b6-b3f2-04ccda56cb5f", "comment": "Malware payload (Mirai)", "value": "96af74ab3021985949fe2ebbfaab0775a62b8af4d09dd8ca7192c17ea6fb6959", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682884204, "uuid": "5702bf55-05c8-48ad-8f4c-4a4e4872a7ad", "comment": "Malware payload (Mirai)", "value": "55c228398087ed133d123e4c75820c773d90a1ac", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682884204, "uuid": "215fa370-03bd-4d53-96fe-f0eeb45bb5f3", "comment": "Malware payload (Mirai)", "value": "d7da13abeb765b5d9597be534aa74f14b0477e61c4a4c466dd87bddf9f391eca0a8c1ed38f2aff6b7a1ac163bb3d28fd", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682884204, "uuid": "12ba4d14-5ff0-447c-9a71-b8ff5ee1fcba", "value": "T14F330271676E29E251B09333FC33FC16A69C17F9986730DA28F0A61677C18024EF2686", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682884204, "uuid": "b6b87c39-9c10-42b4-9838-ba99cdfd1275", "value": "1536:99O/ZMAXIxNUk0b8LcPqF1aBexo4opKZb1:99O/ZNKysLGqFUFg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682884204, "uuid": "63914dd3-2bba-4ca9-a67d-1d57094af9a2", "value": 52520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682884204, "uuid": "f8adbbed-85a7-4e26-8c04-a5f595d36d9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682884204, "uuid": "d631cc03-71c1-4801-94b3-238349672b05", "value": "sora.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc314e26-e6f7-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682818774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818774, "uuid": "c0b07662-86b1-441c-86a7-1883c1c78e51", "comment": "Malware payload (Mirai)", "value": "599a8e26fdc8ce6b8054f1446fae8344", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818774, "uuid": "a699b0f5-ff0f-428a-9412-50dc683d3658", "comment": "Malware payload (Mirai)", "value": "976c66454ee30de4c2cf935c64b04be960c8449eee9350280221ca2bba0a9e12", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818774, "uuid": "5b7163d5-1cda-41df-8088-dcac324ee676", "comment": "Malware payload (Mirai)", "value": "cfc88fd30c93a80b7a44447676fa9e905e396458", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818774, "uuid": "d396b4cc-d5e9-4fe5-a9ca-e4fe2a508748", "comment": "Malware payload (Mirai)", "value": "b5cc1e9af3e6fac47457e8d32bfe37b057914705b8ceb15e3fea668285cfacf2a21a89870bd6022d2892a26db6e7b338", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818774, "uuid": "3fddd5e2-92f3-44ba-a0c2-1b6530514f6f", "value": "T1CD93A81E7E219FBDF76A833047B78E25A69833C63B91D645D16CD6002E6034E641FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818774, "uuid": "009fbe60-985c-4c04-bdfe-c2d7896dcbb7", "value": "768:Jk+l8R/V2T88wwEAxlf5MzY1Plx/Alqb6lMDOOnjZHGBp7FlJnXR3jtnjYtH6syF:oMTPpzMYlANp7NnXVOkqeIdOW0Ww", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682818774, "uuid": "8aafc11a-74d4-42ab-9276-e600d02b6d38", "value": 88884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682818774, "uuid": "9545f683-55a9-438a-a62f-0489a821a861", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818774, "uuid": "00aa7e9e-365c-4aec-bf0a-c4c737e7de31", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "076c84b3-e747-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682852777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852777, "uuid": "9dce0ece-ad68-4748-998d-596fdbfbab56", "comment": "Malware payload (Mirai)", "value": "407955d8245021202dd3cf425c61cae4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852777, "uuid": "8108c4a7-ce34-403d-a272-4e87d578f3c0", "comment": "Malware payload (Mirai)", "value": "9816ad9f3e979451105552726a26f9a62ec9a2d91f2bda4c2fcbe50f3a5ecbb5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852777, "uuid": "e56d894a-d4ba-4238-8ee0-2c4b7399ff00", "comment": "Malware payload (Mirai)", "value": "efe48a085d36a9b8f745f1361f3999cd58570d1d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852777, "uuid": "2a1a00d6-fb9a-45f3-a4ee-109217a00ed2", "comment": "Malware payload (Mirai)", "value": "ea3f61a886b810b0f846c5b308e58bb7bf306b317afe174ae8d8d0a9b0a916cfec98a524048f26fd89e5a6fc6d448bf3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852777, "uuid": "5433987c-196b-4a49-be17-86d0b460323c", "value": "T1A963A51A6E628FEDF759833447B78E21AB5823D527D1D681E26CD6002F6034E641FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852777, "uuid": "6ca059a0-d102-4227-b411-6d10e32e4f6c", "value": "768:YaDrpAYA0od2i+mbXFd0gPG4Xom7QaQ2t4HtJWsbrH7IX1y/uFe3fCdwnAIG1:Y/GGpNPQDNHtVbPgVevCWnAd1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682852777, "uuid": "89ba5836-c10f-406d-a046-8d10261e4964", "value": 72284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682852777, "uuid": "bcc5daeb-96b8-4654-a680-b60b5bb854c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852777, "uuid": "df6872c0-4476-4994-8a11-63aeb9937bcb", "value": "407955d8245021202dd3cf425c61cae4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71cf5555-e720-11ed-b3cf-42010a9c0076", "comment": "Malware payload (njrat)", "timestamp": 1682836205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682836205, "uuid": "24a7f717-a50a-42dd-8f2d-d588e74bab6e", "comment": "Malware payload (njrat)", "value": "b17414d6949c2e013de14fdc268cfc89", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682836205, "uuid": "2fb9d5b6-a680-494d-88a7-ed59db58174d", "comment": "Malware payload (njrat)", "value": "99219aa34910a8c28a6bfc96a6a58247fb1aa6c0cd0abd4af5445aa0ba359525", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682836205, "uuid": "9dc84dc0-f430-4263-8020-6631ab6c2c19", "comment": "Malware payload (njrat)", "value": "21f52aadfe9691ed8d28415ec0f31c8507cc6e32", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682836205, "uuid": "ab98ded6-5a55-41d5-a1af-f246e405b126", "comment": "Malware payload (njrat)", "value": "084fe91873c62f50b1865d0b9699c7c2a685a94c28839061e00291f8300be321e7097c8823f9dde89c2f283e654598aa", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682836205, "uuid": "c3b4c359-8141-499c-8227-40fc483ef644", "value": "T190033B4D7FE18168C5FD057705B2E41207BBE04B6E23D91E8EF164AA37636C58B90AF2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682836205, "uuid": "5ad71692-10e1-472c-8882-ddc888299e34", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682836205, "uuid": "d96e6100-1d4c-4d9b-b1ac-4aef13596699", "value": "768:5YdqHpR9EfZnuCCFMXsrM+rMRa8NugUOt:isHpRyBnA6X/+gRJNHU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682836205, "uuid": "841354c5-5b03-4b89-ae72-2c3c31cd8146", "value": 37888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682836205, "uuid": "20d43459-dbcb-465f-85c3-b42274221996", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682836205, "uuid": "d3a6479e-9a26-4774-9718-d54e0bcfc37b", "value": "b17414d6949c2e013de14fdc268cfc89.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a8eb84a-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866150, "uuid": "e43f04fc-c98d-4a09-8c37-a74a034689b1", "comment": "Malware payload (Mirai)", "value": "6e30f8423981372ac3b9813e5ae59069", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866150, "uuid": "02210957-a5ca-4965-a4ad-1ecfe962c8bd", "comment": "Malware payload (Mirai)", "value": "9b4e81e447a469450755e3cb501baec03b41334fa391240544b254ce12cd4ade", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866150, "uuid": "ac3e0624-33be-481c-ae9c-be48bccae27a", "comment": "Malware payload (Mirai)", "value": "3b9792a97525931ff1e1cedcd08a397b2c80930e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866150, "uuid": "6a596be2-4b8b-4f75-a61d-2f786bbd1d36", "comment": "Malware payload (Mirai)", "value": "ddfd11d14ef390eb4671d45bf6a523e703d3051c09b39608c58dcbecfb8e1d08fa7fbd6a4ccd9db7fd4afa5aaa8f544a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866150, "uuid": "1924c94a-6f62-472b-bb78-744fb64a8088", "value": "T18E03F751BC829A37C2E1137ABA6E4A8D336167E8D2CF7217DD204B207AD651F0D23F85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866150, "uuid": "a72e1b28-6b01-4a15-b5e8-24ecf25fc51c", "value": "768:kg4QCbvsG5f0OlnlUlQOBFdApwAUb9z/W56v+b8O7LDUXoTV/NwwW:kRbEG5fXlUlbH4aScv+/USLW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866150, "uuid": "3fb56974-a756-426b-89f3-ef7067bc7d8a", "value": 40748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866150, "uuid": "9cc4b9ee-f885-463f-9b83-20a5e1250649", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866150, "uuid": "a6389122-619c-43cc-8783-13cb313a74b6", "value": "6e30f8423981372ac3b9813e5ae59069", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71baff5f-e76b-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Gafgyt)", "timestamp": 1682868417, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868417, "uuid": "bac19223-63c3-40a6-bbc5-adc96bdea628", "comment": "Malware payload (Gafgyt)", "value": "b373feb2ec2c69bae6053e7f8d05352e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868417, "uuid": "71c3ced1-a0c9-48cd-9f0f-8f9662a243a5", "comment": "Malware payload (Gafgyt)", "value": "9b52701e2a08af8c944ada1acdfedf45e088184aabd70fb2aa85853f108b93ad", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868417, "uuid": "b988d631-8b3c-44b0-be76-041493956d50", "comment": "Malware payload (Gafgyt)", "value": "8137352c282152243aa4173bf46fa9cf43b2c4d1", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868417, "uuid": "b7bd6d47-956c-45b8-9a8b-890f941f845d", "comment": "Malware payload (Gafgyt)", "value": "dd4930d09a0e63c5f61c8133673f9e1a3da45c22f22a16dbc0384af7cee85869b953feb6c1a1621e42e71e92d7130fa7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682868417, "uuid": "80e3f6b8-d67f-4aa9-b369-9b2f90c7de65", "value": "T142E3F801E9504B6BC7D3ABBEF74562CE77719D982F833306C71A79B027D06A96E2D210", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682868417, "uuid": "3c47d1ce-153b-406a-929d-d58e8bbbc544", "value": "3072:x/f1bl++t0OTbLa+zOvIvVu3E9cQ2BCpvUKSLvmeVa5ts20PPYuAI/lsrYXA+QXF:x/dbl2zVys2MPYuWMXA+QXfEPQA5s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682868417, "uuid": "613fffd9-f4c7-42c3-853d-dc1508c23dc4", "value": 146059, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682868417, "uuid": "29c756f4-d4a2-4394-ba4f-7632485131fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682868417, "uuid": "0ed481c4-c1e4-46cb-8df5-2496b52f97a3", "value": "b373feb2ec2c69bae6053e7f8d05352e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a1ab8761-e789-11ed-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1682881382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682881382, "uuid": "4ebdd7e0-46bc-43c9-b042-8e74e6c38c8a", "comment": "Malware payload (RedLineStealer)", "value": "ca3a02fe9d62fe2e4c1fe87993254163", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682881382, "uuid": "df559a50-641d-43f6-8a7e-94247d435f8c", "comment": "Malware payload (RedLineStealer)", "value": "9d95eee47ec29d250eeac035360b7d5ed210294b71179cb0853d85940c27d8fc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682881382, "uuid": "be18b9f8-2259-4680-b2a6-20d2b359e697", "comment": "Malware payload (RedLineStealer)", "value": "5d9f04ec8468491072895acf7a75b5dc082cdc92", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682881382, "uuid": "e46ef4a9-401e-463b-ac95-caad3e34ce81", "comment": "Malware payload (RedLineStealer)", "value": "a2679636ce0c93cf87d1ad73998ab6da4f466ce6885b48fba5245058f9d8ed84cabcab4b4636d7e8d460b617dd5592bc", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682881382, "uuid": "16295b7e-3008-40ae-acd0-ded409777483", "value": "T129748D03530EC9BEEE9BA079FCC4C2657B1890B97B6FA287BBD41E14452F190769072D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682881382, "uuid": "80977d57-b9f4-405a-baa0-e9b4b5826abe", "value": "d03a32a9d6119786dea4a25b734d4a33", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682881382, "uuid": "d500c802-16ec-4b31-9df1-4188f491ef56", "value": "6144:JRR9YZ5JHpc89QAFngKZh30uhTTJq0nB8jS/Izo/:HR9YzJH1OAxgKNvVNPV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682881382, "uuid": "e0ea924b-a030-491d-b999-a5cce355ea97", "value": 349520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682881382, "uuid": "cb96839d-d9ca-4e57-a6b9-87f6d9cda5c7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682881382, "uuid": "bea38276-98ff-4eef-aa35-fb7fac345069", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f68be60e-e770-11ed-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1682870787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870787, "uuid": "eb10b619-24cf-4899-9280-b352e5fb3bfa", "comment": "Malware payload (AgentTesla)", "value": "ea8f849a0855cdf36e345187dede5ffd", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870787, "uuid": "67581a72-fb6f-48bb-8ab5-c022539783d5", "comment": "Malware payload (AgentTesla)", "value": "9e54735587d676005268e199096436303044c7dc57f01060dffb7e21d6ab2758", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870787, "uuid": "55ed2b8c-c845-4588-a43c-53d29a9902a2", "comment": "Malware payload (AgentTesla)", "value": "9dd4d407ba8d5265e2f7479a97e27567511d83eb", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870787, "uuid": "5537a37b-ff1d-4ce5-8bae-1b4d743390f1", "comment": "Malware payload (AgentTesla)", "value": "ec568e52da43b5af13bbcfa816af166680f977549db8d4923a9802609ef06ec99a52fa796303e9e0d1d9961a37e281cb", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870787, "uuid": "820de257-73bb-4113-bc06-71354260b020", "value": "T187F48D3915B83727D17AD3789AE19813B3E0A45FB310EA987CC603E61756E8176D323E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870787, "uuid": "a6a6b0f0-f5ce-49a8-90d1-3ac1b3c19fc4", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870787, "uuid": "6d46effb-816c-4301-a1c9-3fb9f624d302", "value": "12288:BL5oIsqckV/KbpkV3AXgn02E/3dh4H4ejpUZrlClVlc8:RJ/KbeVCg02E/3TQ4ejpcpClVlc8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682870787, "uuid": "d9fc4cb2-870a-4d22-890e-42f363bfd1b2", "value": 760320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682870787, "uuid": "1474c1c0-4fe8-41a1-88ad-192023be4ca5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870787, "uuid": "68e2d6d5-9c08-4a0e-94e4-0235771d3d37", "value": "SHIPPING DOC.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c549a22-e747-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682852812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852812, "uuid": "16a5262b-ceed-445e-a2f9-b73c1e208368", "comment": "Malware payload (Mirai)", "value": "1e47a469ed9dacc4cc85335cfb239ce7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852812, "uuid": "452fe80a-840f-4b20-9be4-650bd37f3c7b", "comment": "Malware payload (Mirai)", "value": "a11acd02629c2ac9783fc4f706999d387ffdab2350ff2ebeb4750bcc649d4218", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852812, "uuid": "81d205f4-fa57-4400-80cc-221d4fa174e8", "comment": "Malware payload (Mirai)", "value": "0c6a9c2955957b0d839284459356f79944d3bfb6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852812, "uuid": "c1fcc653-dd33-40eb-9c84-08792b7820d7", "comment": "Malware payload (Mirai)", "value": "66ff2b0d45248cd4d8c39376c096f9efbce37d4147ebac3a85c532730af483deddecd7f660dc9570d79f57dc0e6bde5a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852812, "uuid": "2cbe8610-4050-4326-ab74-5b00244b6bf0", "value": "T13CD33B46EB418B13C0D61779B6EF4246332397A493D773069928BFF43F867AA0E63905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852812, "uuid": "adc8a528-a304-4107-b6bb-ad3b59d39173", "value": "3072:TNyTMSxpFrm5JaOvJJpDYrcn8zlp2ipngGH4s5KM/9aWY+744b:TNyTMepFQJaOvJJpcIn8iangGH4IKM/R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682852812, "uuid": "b263ee70-98ab-4cee-a7a7-e4923c36ac27", "value": 139944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682852812, "uuid": "a3ee7d25-125c-42f7-8c31-7640299eb6cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852812, "uuid": "57c90e21-a495-48aa-b76f-61c048f03538", "value": "1e47a469ed9dacc4cc85335cfb239ce7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7e4ada2-e756-11ed-b3cf-42010a9c0076", "comment": "Malware payload (AveMariaRAT)", "timestamp": 1682859569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859569, "uuid": "e929bcb6-3b84-4cab-890f-e7bf5e6f8875", "comment": "Malware payload (AveMariaRAT)", "value": "7856f25113c14d334d04466688b07635", "object_relation": "md5", "Tag": [ { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "QUOTATION", "colour": "#75C1ED", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859569, "uuid": "091c7e83-1bee-4d9c-937a-31362c4ef74f", "comment": "Malware payload (AveMariaRAT)", "value": "a1e925d61900b06c378b1d71cc0aaebb81fa2a4c91fe555d1460fc869c35f1ce", "object_relation": "sha256", "Tag": [ { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "QUOTATION", "colour": "#75C1ED", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859569, "uuid": "4fc13607-099c-4d10-a6bd-692f92a38b91", "comment": "Malware payload (AveMariaRAT)", "value": "0fe970661b2bfa0628e0819ee6c61f79465cfa8e", "object_relation": "sha1", "Tag": [ { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "QUOTATION", "colour": "#75C1ED", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859569, "uuid": "82498dd2-719d-42d3-a0cc-9bfdb55e4457", "comment": "Malware payload (AveMariaRAT)", "value": "6aada9f0c78dc143ea78309d2baeda065817ebe741553a91b16b630e502ce85405ef868ba9a947049f62cfc15b924623", "object_relation": "sha3-384", "Tag": [ { "name": "7z", "colour": "#63EB83", "exportable": true, "hide_tag": false }, { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "QUOTATION", "colour": "#75C1ED", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859569, "uuid": "948ef95d-330d-42a8-93a2-2230eedc51b2", "value": "T137B423632DC88B335C8F95744DCC25794EA39F1AB9267AC5E0C6A3BD25DF6740AE6C00", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859569, "uuid": "eb91b23a-2bbc-4314-aa56-8539689e5d17", "value": "6144:i09L7jPr/xcSkvdeUMbYLeCbBPs84odkk9SSS3FDaUJTLrwSDl1WBx7qeHET1jjP:i0F12khMs8NdcHrw4l1Wv7qe0g3U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682859569, "uuid": "0432a744-468a-4f44-a66c-937423f67d71", "value": 537147, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682859569, "uuid": "2d32be16-f6fb-46d4-95c5-128d672aac1a", "value": "application/x-7z-compressed", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859569, "uuid": "5b849571-092c-4a5b-aeb5-ade5e9e923f6", "value": "Quotation Ref. # IRQ2804799.7z", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86923437-e726-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682838817, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682838817, "uuid": "54008f62-7473-4434-a861-9a94d6ba81d0", "comment": "Malware payload (Mirai)", "value": "9db237a8fa88efd998a76948ca8749de", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682838817, "uuid": "26bbc91d-668e-4ff1-b8c6-fbaab72c3610", "comment": "Malware payload (Mirai)", "value": "a238c8ec483197b1b8a34c5f86287e2645d2debf0f84caee483b093e0d123dc5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682838817, "uuid": "c32bfa2c-6b52-4068-843f-ce6f7b300412", "comment": "Malware payload (Mirai)", "value": "3637012f70340fa695ea6c1ea3b857d24c70faf7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682838817, "uuid": "2678b5ef-5464-4e65-b1e5-13f3494c4078", "comment": "Malware payload (Mirai)", "value": "bf70b7939cabd3df338d21fa7bf37af02be6e6634de0a1ac0747ddac5cb62e15658ce6cddf3636f478322c2c720320e1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682838817, "uuid": "fa515cff-84aa-4e5b-9d4b-ae005a53e043", "value": "T16DD2E100018701AEDA40E3BFDBC3609AF695B5682B679E9377C2EB62445133553BE8F3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682838817, "uuid": "40c1f9c7-8b06-4a56-9610-000a8a497835", "value": "768:lF3IIQ1I/pZn25UMEDIS0nRiS06qvwYkRayFGiGNKZ:rPesnwEUBE6NwyxwO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682838817, "uuid": "87f3c384-aa99-4f40-92b6-4612f52b345d", "value": 29980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682838817, "uuid": "c34973d9-c50e-4eab-bc10-d6789c040325", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682838817, "uuid": "746ddb7d-c031-40d5-a75d-ef48ef2b829b", "value": "skid.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c89b80a-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866100, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866100, "uuid": "66771b85-3f07-4fab-ac26-1a3f1841ced3", "comment": "Malware payload (Mirai)", "value": "e077fecfd7777cffc884b9c4eb277366", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866100, "uuid": "4d332655-94c6-433d-a604-28713c18702c", "comment": "Malware payload (Mirai)", "value": "a41955176432092b2881ea8f8c2538902cea9c536a03dbf26f6a45dcff1cf9af", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866100, "uuid": "1aed5d3f-9c9b-450a-b1fc-a882952580d0", "comment": "Malware payload (Mirai)", "value": "f5cd3f551d5360b8c77ff1e6348dbeabcae761f2", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866100, "uuid": "ca798c76-02aa-423e-8814-a5ebc7ffc536", "comment": "Malware payload (Mirai)", "value": "9f8179f98682871d6d5a2c735e711324d0136d0c381b743a4d7ed20977a18abc7d6b8d27cce84f485450d853a6ebe781", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866100, "uuid": "fa6c57e9-b800-4a7d-ad91-2138df331d05", "value": "T110433B21BA760E17C0D1A4B621F74B25B6B147DE26E8C60B3DB10E9EBF71A406503EF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866100, "uuid": "8b6a0646-dabd-4457-89da-61e1ebf50810", "value": "1536:tilA/JV3p2kCWDbTN2SXQsY75jt9VyNVX:wl2t0KYV8NVX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866100, "uuid": "cf3753cd-eb13-42a0-b27e-b77520abebc6", "value": 59464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866100, "uuid": "7398f75e-4f77-4102-a261-85c79b524201", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866100, "uuid": "722cdd46-9502-4c7b-81d7-edd3225fd94b", "value": "e077fecfd7777cffc884b9c4eb277366", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32220aa1-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866163, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866163, "uuid": "ea2cb14b-5d49-44d5-bec9-46ab53262a06", "comment": "Malware payload (Mirai)", "value": "898f21eeef6ec313d85871820f3fb793", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866163, "uuid": "f6147d87-2799-46b0-b23e-5056f6c46464", "comment": "Malware payload (Mirai)", "value": "a64650541627b27508146dd82b49809925fa406c6cde75cf731dc4310ee4393d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866163, "uuid": "5ac496ab-8b44-4684-a98e-c9ca45a602ac", "comment": "Malware payload (Mirai)", "value": "6f7138764e540cc8f0139637aa533b328245360f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866163, "uuid": "5ce510e9-28b8-4cbc-b050-735aeae70bcc", "comment": "Malware payload (Mirai)", "value": "3e9a2c3d7f3c42cda93f66043afef1bdf456a2b3f31ed4b510c6888d642afd56cafa339262614448eaf10ac631a5517a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866163, "uuid": "79439278-2f5b-4615-8e7c-6ba8abe94cbc", "value": "T1DA338C77E46A5E94C08605B075649F705F23A0C493C31EBB29EAC2B56493DACF909FF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866163, "uuid": "8ddb2253-3a88-436c-b742-4724826027fb", "value": "768:I4aHfAe7YyVfMBNLr/ylS2DKCjG7K0et3yayouxo0jCi9C1sfnrdUwnbI:na/Ai/BMBV2tWjK0et31Fu/jCinr7nb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866163, "uuid": "c59fd657-a532-4573-b3fe-3f55c7ea7e37", "value": 50484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866163, "uuid": "432f49ff-b486-4353-9315-ca49ab49a048", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866163, "uuid": "1471f4bc-f100-40c8-ad7c-9243c977c980", "value": "898f21eeef6ec313d85871820f3fb793", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c1445e9-e754-11ed-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1682858610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682858610, "uuid": "6d780794-d3e0-4725-a4cb-4e9b8052ac8c", "comment": "Malware payload (AgentTesla)", "value": "bf57146fabcf404f70ea3f48316a2057", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682858610, "uuid": "e9a744f8-5de1-41bd-8dd4-284847549bfb", "comment": "Malware payload (AgentTesla)", "value": "a6d227dde6c0444f8b4c15d1599cef04107813015fcf4d6c9134c2f3e4ca7ea2", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682858610, "uuid": "2fe0ad03-9a52-4ba4-8b85-df1a89b49320", "comment": "Malware payload (AgentTesla)", "value": "1453e5435c34d6a21a1605539dfbd575b4a90b0e", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682858610, "uuid": "155903bb-1179-4831-acce-97fb23d97619", "comment": "Malware payload (AgentTesla)", "value": "f34e23279552e783c967a8180c2f31b9e873b4bb892177e9eb65104aab68439d15d4b2668cc557b755b72410a3bea465", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682858610, "uuid": "74f2c470-9874-4dd7-9953-a77ed6b23be3", "value": "T1F6C47C3D29BA5627C1B6C3798BE49423F150AD6B3011EEA954D333A64353B8339D327E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682858610, "uuid": "bdd7b6af-07b1-4e8b-a652-7d963122b0fd", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682858610, "uuid": "0dad1cf1-f9cb-4af1-9845-4d5ad6edd577", "value": "12288:mzzXGKqnAoM/3ETrL1S4r76hoMywmkNT6zTLPGl:mzLynAczxrOW2Yf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682858610, "uuid": "5063b662-4476-4279-98c1-5a300b087bed", "value": 592896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682858610, "uuid": "80e6ee7a-80ea-43a8-b1ba-191aef25fd93", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682858610, "uuid": "a9f26cc9-947a-4ed2-8462-20c5710bd536", "value": "Payment_advice.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d8f9061-e768-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866960, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866960, "uuid": "df586c04-e0af-4210-b955-917dcdf231db", "comment": "Malware payload (Mirai)", "value": "a0b52acbe95ada4fbe93c5443fbb3466", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866960, "uuid": "d0a7c584-bf78-41ec-bf7c-d7f0f6a606c2", "comment": "Malware payload (Mirai)", "value": "a72cf45d607b3ad85a77d90d4fdc5c58185fe023689d33170115fd5bc358941b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866960, "uuid": "59d6adb5-b920-485f-9e6a-dcf16a57200c", "comment": "Malware payload (Mirai)", "value": "d9caf51a87c51fc0ec01bfed5e8f44b03c8730f7", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866960, "uuid": "3f1153a5-8f83-42e0-967d-dbf2f424d2a9", "comment": "Malware payload (Mirai)", "value": "abef6a1a40e8a2a39bc73476d08947d3a2f293170e1f42f9a5bec43c72476facf73d154297b9d55a0b30d2e682fd4999", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866960, "uuid": "19df753e-2aa6-4392-81f1-52416702f673", "value": "T161631956F8814B22C5C5027AF92E118E332317FCE3DEB2229D216F6077C696B0E7AD55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866960, "uuid": "97a9c608-923f-4562-8263-6305412a6011", "value": "1536:hpnSzfzQZTJxP0CM9L8qRYC04018avynAZzKIJoiCfAv+DfPp5mYon2:QfcZFuCo0yajsfAv+DfPp0Bn2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866960, "uuid": "e66aa3d4-a6c3-4d6e-97cb-ac3f5033c892", "value": 70964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866960, "uuid": "3cabf0ff-5652-4b6b-857d-8a3628e275dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866960, "uuid": "b765a29c-9dc7-4e27-a9a8-9d65554e149b", "value": "a0b52acbe95ada4fbe93c5443fbb3466", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "581378b6-e794-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682885983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885983, "uuid": "4fa11bf7-dfc3-4367-a59f-e34181fb50aa", "comment": "Malware payload (Mirai)", "value": "7dbbb5b55cca6269e7b3d35870654b7c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885983, "uuid": "635e8dd5-fc62-4004-b1a6-28aaddd41df5", "comment": "Malware payload (Mirai)", "value": "a82ab16b5810d4a3a58257ba45c56e4d74a213dbcbed6bb599ed766972ea5f1d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885983, "uuid": "631128aa-03a7-49c0-b56c-4449a61fa972", "comment": "Malware payload (Mirai)", "value": "2a140021f28a7d5838c9ffad0ad303a4424c018b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885983, "uuid": "11c1422f-da6e-4927-84e7-9efbd6438b3a", "comment": "Malware payload (Mirai)", "value": "09e2354cc68f9fbbc85a857b05dc381a1d17a21cb8cfe822f3fe632afa75e5780168f55bdeffa918946aebac1c79489d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682885983, "uuid": "8934c147-fa31-43b0-8138-cd0892c7e59a", "value": "T12CC2D144F141CE05DFFA28B03D44DADABBA02F5FA6628E4162A063C15F5D7778305EC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682885983, "uuid": "1e3c1fbd-a4f1-4f18-b551-ef650810f78e", "value": "768:CVdafO76jpmNJJKehmA7trpfIX9KeA7PCmwP4uVcqgw09n:mam+AnKehPRa9as4u+qgw09n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682885983, "uuid": "e68b3e0e-263c-42b0-b2b5-5e6e87a92fea", "value": 27048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682885983, "uuid": "f890314b-cf3f-4f09-851f-f082a6d11dbe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682885983, "uuid": "ae5e0851-6098-4ae0-a642-8a485c484aef", "value": "7dbbb5b55cca6269e7b3d35870654b7c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "940b8415-e731-11ed-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1682843564, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843564, "uuid": "d6efa498-e257-4979-8169-6c60ff2dbead", "comment": "Malware payload (RedLineStealer)", "value": "af297efd4249eb031755bccfde6fddbf", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843564, "uuid": "b7fe93b6-6264-4000-bf45-caada77288c7", "comment": "Malware payload (RedLineStealer)", "value": "a8a5f188fc1d0231f5aac47ed1c65d4f66b5276646029ad7a33cd85ed2e05593", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843564, "uuid": "45643961-bd2d-4cd0-9a48-bfe6844a44f1", "comment": "Malware payload (RedLineStealer)", "value": "ebd0fd7042945fb9be9386d52e960517d5fae1cd", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843564, "uuid": "1142e2f3-6cad-4ac5-92da-852f2b1f1696", "comment": "Malware payload (RedLineStealer)", "value": "1a191be6950f1c5b604d117ac55a96978c6d9a12ae5890a9d3f72142cfd273cd1079441bca0f103721f8d37cfd3bf71a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682843564, "uuid": "35f2a484-decc-4308-a113-85235777aefb", "value": "T1B83523635BC85832ED5927B028FA16C70E76BCE14F354BDB2A50C89D0C728D4E93A75B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682843564, "uuid": "162d9c09-8184-4781-b607-31c42d8952ba", "value": "1efe015ade03f54dd6d9b2ccea28b970", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682843564, "uuid": "04f88bd0-3746-4656-933d-1e8a39f218f8", "value": "24576:lyqeRCDLOU06rgVJuYWgYrG/hK6FsL8bR8H3J8:AqeEPp0QgVJuv+/jsQlo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682843564, "uuid": "df35ae8c-78bd-417f-87b7-a719a5ef46f5", "value": 1109504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682843564, "uuid": "7f438571-448d-4462-a6bb-ec9e446f514a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682843564, "uuid": "44203aff-c36a-4785-99a8-9d4db48bd674", "value": "af297efd4249eb031755bccfde6fddbf.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38cf10e1-e779-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682874334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874334, "uuid": "0edfb121-c66c-40c7-ba3e-02b80cd93ec7", "comment": "Malware payload (Mirai)", "value": "64986d2f7acb98ce230e88bec798334a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874334, "uuid": "d1b6c460-4d18-4827-a718-288fbbb2828f", "comment": "Malware payload (Mirai)", "value": "a95ce7fa3372f341e5d381aab1f478498e7ee53d7a9f59749f43cad9fbddc049", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874334, "uuid": "b5acbc23-795e-486d-9978-e3f84d4e84e5", "comment": "Malware payload (Mirai)", "value": "36c2a0a3f53a6f85ed5bbca5b02a5379204d8bbc", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874334, "uuid": "7d3044a3-8846-48b0-94dc-436fed230a7c", "comment": "Malware payload (Mirai)", "value": "3bab47bc4d56127df5a6facea9ee1ff61df22f6747eb09cdb9c38853496719f99b765ec3cc92e6ed7ebd4a150ff8aad1", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874334, "uuid": "f390f422-148b-4649-8a99-0a9b03d8fb97", "value": "T187134BC8A943EDF5EC1102B02136EB36BB77F43B212DE997C75BD523A892601D50729E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874334, "uuid": "8edd2b91-0667-4539-9f33-2dd26b1194cb", "value": "768:Wn6rgUc06KEpQhnqCgKrkIh+z6mbZ4JI3/W0H8mE3MCFQNGVXUIvucjV+f5E8fVr:Wn6rgUD6KEpQhnqhKrkIh+zpbZ4JI3/p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682874334, "uuid": "57b7e274-93f6-403a-8c4f-1df46ac5038a", "value": 42588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682874334, "uuid": "c3f22c6a-80be-4abe-93bf-e3d82968cafe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874334, "uuid": "bfbc8cc4-1690-4726-8d6b-3d91b487af05", "value": "64986d2f7acb98ce230e88bec798334a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ed84f8c-e727-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682839179, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682839179, "uuid": "a8bf4bb9-3694-467e-897f-5510ff5d76ed", "comment": "Malware payload (Mirai)", "value": "fd4587e26e5ef813a2f4c7892978f485", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682839179, "uuid": "60723dfc-cd7c-4852-be2d-94284e8ebf72", "comment": "Malware payload (Mirai)", "value": "aaa9bd1607478666f241ce01afa9030c19c65cba5cb2e0db9ef1710f4e7bbea4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682839179, "uuid": "5c41ede0-872d-4209-9fa7-16ae5655d052", "comment": "Malware payload (Mirai)", "value": "e23bae3703ef23dec369c6dce75f61f13dd3d2f8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682839179, "uuid": "ba1cffa6-6681-4b4c-9da1-aec69b750fe4", "comment": "Malware payload (Mirai)", "value": "f3fe4a36c89f376ecbd2c48b7c765fd990f4507a78095123f2c3cee1aded572bdfe20295063bdbb4dec256e8dcabb57c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682839179, "uuid": "15c9dc30-7078-43f6-860d-937736dc398b", "value": "T1C7436B84E643DCB2D8171670147BAF37BA76E2E91224E746D3A8A736EC41702E017EDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682839179, "uuid": "3a1b5c13-8ec5-40ba-ab7c-774f9931529e", "value": "1536:BF14yTUx6Ahc/IOROPBnIzVKSblcMUiBVFrVFBwbZnG:B/4yTUxd2IOgPBIzV95cMlrHPwbZnG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682839179, "uuid": "75ac1c85-0172-40f6-bd3c-9fe228dc998a", "value": 59088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682839179, "uuid": "71a9dede-e16c-4416-bb40-17347485cfb4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682839179, "uuid": "7aacefd0-9421-4528-b487-bacd2674d157", "value": "skid.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "361656a9-e790-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682884208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682884208, "uuid": "45ba4fe2-9450-4dac-a27f-2d4d4049d407", "comment": "Malware payload (Mirai)", "value": "741937fdc61c4e6d118b6c0507316c5e", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682884208, "uuid": "db45f67c-91f2-4707-90ca-72b5714a6499", "comment": "Malware payload (Mirai)", "value": "ab10fdba290379e465500a43fbfa3386362e3a87df76a316e697d56cd4a38343", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682884208, "uuid": "b51dbb7a-65b7-4e29-b527-be735e4844d8", "comment": "Malware payload (Mirai)", "value": "074af733096c86d654ecf54eb56dc25d2cba4fc6", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682884208, "uuid": "54131455-f1c2-4197-bc42-4eff1b7bc728", "comment": "Malware payload (Mirai)", "value": "d4f3bac9d294bfa693208fcc89e4eeadf46693d16b5bcd6595596641156f635413ebe136ef1d836e0a169b635c5db93f", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682884208, "uuid": "2b01849b-6058-4bb2-b0dc-dd06bc990155", "value": "T1FDC2E134A6A92CB2C6600532F7B855C9BE530F7DF9FA3880524057BB7C419092DEA9C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682884208, "uuid": "9b2295b5-bef6-4152-87e7-78c44a3c6204", "value": "384:Aot/koxisa34beDtZwuaCBsk+G9lLSsLYSTFs9u8OtqlrNEsguDohymdGUop5hE:A8soTAZ3alkXLvFh8nNEDu8s3UozK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682884208, "uuid": "0e601702-3a0e-4173-90be-04d25ae86043", "value": 28176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682884208, "uuid": "bfcccab2-8537-4a69-995d-eaec7690c9c0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682884208, "uuid": "6b229ad3-3d88-40b5-8766-b906ff6f997d", "value": "sora.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f18efdd0-e77e-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1682876792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682876792, "uuid": "dde1e0ed-0186-49ce-844b-e076a2a6b855", "comment": "Malware payload (Amadey)", "value": "bd4dc0cf8ed8e06f4fb6bc06b62aecd1", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682876792, "uuid": "af60f1d6-7462-41e0-b84d-4616ef0c6f65", "comment": "Malware payload (Amadey)", "value": "ab61f8eec6552709a30b7be2680b637c649e711394fc55bb607d919efb9c3c0c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682876792, "uuid": "2574af94-4816-47f7-b822-cd9230feb5a1", "comment": "Malware payload (Amadey)", "value": "6aa23b176fa7f8544422121d976e228a16b48d2d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682876792, "uuid": "174ff073-2645-4002-8b61-3012e0c4b1d5", "comment": "Malware payload (Amadey)", "value": "0e37f7a41a917d2fb90e5d0da40a31b02b0fa77b1cd09bac96340566543b78ead4e0a4ba3f5a1c9d4efb9f612019ad07", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682876792, "uuid": "b10709d8-3535-42cb-a01d-704576c692fa", "value": "T11A552382ACC45273D5BA13B018FD26C70436FCE137B487EB5655995A0CB36D8E23636B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682876792, "uuid": "15e1c37e-34ca-47fa-abfd-ff75a20100e1", "value": "1efe015ade03f54dd6d9b2ccea28b970", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682876792, "uuid": "8f325244-ecef-4564-a5b2-9217fc90c91a", "value": "24576:iyhaBb6G1K0zChckgEotr6cDxRy4pvCIr23egMWTpLjnsQ6:JYBbb1K0mhcPx7lvCIFeTlAQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682876792, "uuid": "bbb7a80a-8cc3-4a70-a6de-5b5289049c16", "value": 1284096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682876792, "uuid": "cdcaf6d9-0ea3-4b91-9055-497e8d9e24df", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682876792, "uuid": "d49a82e6-6a10-4ae2-bdf3-43c3531bf9d3", "value": "bd4dc0cf8ed8e06f4fb6bc06b62aecd1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c5e67f7-e768-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682867012, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867012, "uuid": "d2a585df-48ce-4904-984e-da225fb51a40", "comment": "Malware payload (Mirai)", "value": "76f187e33ff316cbc7605272f5fdd0ab", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867012, "uuid": "854d9628-ca06-4b77-b0e9-ea4aa7766ca3", "comment": "Malware payload (Mirai)", "value": "ac898bf17342c23dd9762b1a606fe2bc7407bf026f74c7943693275ce9faedd8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867012, "uuid": "4f8644b6-1dbf-433a-ab1b-c89ee7eac7be", "comment": "Malware payload (Mirai)", "value": "3c3af1585b3128783f58ef026fbd2a1333e09b60", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867012, "uuid": "09fd2312-443a-426a-9c84-d8a637b05542", "comment": "Malware payload (Mirai)", "value": "8faa346e45a72a4aca1a0e2d785eb5a6b48dbe3f7a852d0f04521a43e695d5eef380b07b5931e5abdce527035b5502ce", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867012, "uuid": "6c6f4316-596c-4d09-8df7-8d08a8d6275e", "value": "T1D2435951F8819A23C6D1127BF66E028D3B2613E8E2DB73079D229F2137D682B0D37E55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867012, "uuid": "aa066a31-0256-4894-b135-b7c31a2d7629", "value": "1536:im24T1doxQlKXnBvDjgYDH9apyaiC6ravnnbr:R27npjjDd09Vnnb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682867012, "uuid": "ae884023-882e-4204-9fa3-1df7b39440b0", "value": 59256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682867012, "uuid": "89d43e0a-8a43-4ae8-a645-781c01016ecc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867012, "uuid": "90672db8-6165-42f5-a0eb-19bbe8dcaedc", "value": "76f187e33ff316cbc7605272f5fdd0ab", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f819215-e6f7-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682818618, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818618, "uuid": "1fa35daa-ac6e-4032-8b58-d120c14d7d21", "comment": "Malware payload", "value": "9bfecbb0fabfaa8cd4d4f83fe5e11c9a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818618, "uuid": "d69fc019-2ca5-4875-bc8d-b0230af95f12", "comment": "Malware payload", "value": "ad28bbb99354fbdc5912b497c26f6c2013574c879ea720640000011b44dc41c9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818618, "uuid": "0472d737-5643-4ea6-8f3a-f064783df370", "comment": "Malware payload", "value": "35e60952b42297d85904178946bfcb90d4ca32a5", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818618, "uuid": "f7c83ad0-1540-4d77-be9e-d150164a2095", "comment": "Malware payload", "value": "c952c697e466d0fdec3fd20a7fb25064cd9b83d1de2793fe10fbc883de8cfd9a1a7857c8241060d9b81077259b662f9c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818618, "uuid": "29b246ec-a58b-4544-aab1-516f50ccdc39", "value": "T1D2B49E8279E14476C4B284F0295B9129BFEEF071416E3412FED498C9B6ED2F05A3A773", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818618, "uuid": "ae23a154-b1b2-48d7-ac50-5372a1860b8f", "value": "12288:CZ3VGgxv4mBsc1YVa37PucxVFhqBla8b4wuN:CVVRxv4DcWOLNw6w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682818618, "uuid": "c4da6fba-52b2-42e0-9777-eed4544877a4", "value": 503808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682818618, "uuid": "377cc757-9c2b-406b-9034-280e90e51ee7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818618, "uuid": "f45fc233-f09b-4d05-811f-71083ca5f099", "value": "SecuriteInfo.com.Win32.Evo-gen.4789.2244", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1797c33-e737-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682846190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682846190, "uuid": "5b57778e-e505-4c1e-bbe6-bf1754805d6b", "comment": "Malware payload (Mirai)", "value": "4019448b2d2496e6dcefdf646cb81347", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682846190, "uuid": "076bd4ce-e845-4dff-9757-ffd6951cd8ae", "comment": "Malware payload (Mirai)", "value": "ae59ae1d44be8632d3bdbf478d736fa94f496752a5dd2ab74cb4c6f3ed7e480c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682846190, "uuid": "5e6240a0-ab6d-445e-8afd-a6f4690a6279", "comment": "Malware payload (Mirai)", "value": "e0b502b6105811cb4f2ddc2784834011a3e22b81", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682846190, "uuid": "b4c82a2d-ea79-49bd-aff3-8e81299764b8", "comment": "Malware payload (Mirai)", "value": "f3215b98910a236eb156271750e2262dd47a6f66e13d07dc833071adae731ea7c8159201d6a1c080698ee6b76db76752", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682846190, "uuid": "4ea3b53b-c9a9-4cf5-97e6-8569350de615", "value": "T168633A02B3080D03D1A71EB0263F1BD1B7AAD9C123F0F685695FAB96C675E334585EE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682846190, "uuid": "bc1c1745-8efe-4b80-8c93-5dc4e3628cf0", "value": "1536:LgCqkCBp3xaFThUFRSmn29oNjgOnX6wbZnlhN:LqJBpehGd29oNjg06wbZnl7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682846190, "uuid": "b8de572f-b658-4469-9246-00bb2d5a8f2c", "value": 66972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682846190, "uuid": "64675457-b214-4e57-b357-b6206e27fac9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682846190, "uuid": "90f48c75-a38a-43a8-a60c-ab88efbfa369", "value": "4019448b2d2496e6dcefdf646cb81347", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f22962a6-e7a1-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682891825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891825, "uuid": "ca3b8408-9443-4ea6-8896-e168b15e358f", "comment": "Malware payload (Mirai)", "value": "cd0405922872fe755477abecbf28f462", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891825, "uuid": "692c12c5-418d-4831-9651-d286c052a70c", "comment": "Malware payload (Mirai)", "value": "ae6296dfbc01bbe712e32fada59a5841d97ffc421a29582ae4afdff7ba68c9ff", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891825, "uuid": "b99ef89a-7b11-4c6d-939a-a2482ef30baa", "comment": "Malware payload (Mirai)", "value": "09afd6f583041f4b22a8d68d4e9aefc32da7ad92", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891825, "uuid": "1fbd06f7-54db-4f39-89b9-1ce0942c1a82", "comment": "Malware payload (Mirai)", "value": "d9c0a28dac03742b94421aa0932f198c324272dc39a5431d2180d95e09dd3725082b6084a798dec1123778bd0b699c4a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682891825, "uuid": "afcc259b-5eee-4c1d-b953-db9b2e8b7329", "value": "T15FA34997FC00EEBDF809D63780670A06B231A3A24E921B73B2536C57AD751E45937EC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682891825, "uuid": "608847e3-888d-4d96-a2f2-71eabd227618", "value": "3072:FmR9Xn+SzlfcpEym8FpxnyaAYpTdRfJ3QG:A+G2EymkyaPTd9J3QG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682891825, "uuid": "96184f1b-99f4-42d4-af87-f7088a4bcdf4", "value": 102028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682891825, "uuid": "67a7e02d-bec9-49f4-9483-20d4c6d92c99", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682891825, "uuid": "d4acd9e6-b5ca-4af4-a650-cbc29282043f", "value": "cd0405922872fe755477abecbf28f462", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cf74c7f-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866127, "uuid": "768d8571-ccd6-4fbe-9b38-e97b1ed23f04", "comment": "Malware payload (Mirai)", "value": "1c5dd1568a926378135b22329b488b4b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866127, "uuid": "a79859e7-88b0-4d1d-b82b-7142ed9358eb", "comment": "Malware payload (Mirai)", "value": "af02c2b0300b8a1b853175cca3986a5e36af87f5b57ada1c2e8449acc6c68e03", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866127, "uuid": "af14c913-9c9a-46db-a585-1887f02c657c", "comment": "Malware payload (Mirai)", "value": "52faf1bb7626bcaf9c3b7d02fc1357f12d95ebce", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866127, "uuid": "fd2ab639-30f9-4d12-b656-14c679afb930", "comment": "Malware payload (Mirai)", "value": "6e98c798d4273a6ac2c62a546e546f0f4d6ab896e9e5392a99ad5ef702cd5367c2048dee1c4f560872e86f39280e1dab", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866127, "uuid": "476443de-764e-4442-a22d-d71c1dd5a653", "value": "T1E1730856B8814B12C5D512BAFA2E118E332317FCE3DFB2129E206B2477C696B0E37D55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866127, "uuid": "73a93a2e-f274-4abc-b234-9926c6263264", "value": "1536:2ln25xPBXk1wnnkL7+KE007sbdEya6t0bIeiNNfsvHTGcV5GYIWb3:7xpXCMkM/kza4NfsvHqcVER2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866127, "uuid": "c34f5fd7-8b61-43ad-a49e-3364d71f481b", "value": 79160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866127, "uuid": "8918b996-90a8-4c93-a7c1-0809e8542517", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866127, "uuid": "cf563d85-29e0-4c39-9f88-4d99c3ea6bfd", "value": "1c5dd1568a926378135b22329b488b4b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d69c767-e746-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Pony)", "timestamp": 1682852411, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852411, "uuid": "08c4daac-f871-4c55-b5a6-fb82ff0bc063", "comment": "Malware payload (Pony)", "value": "aafff539597334410c592b28f4a521c7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Pony", "colour": "#E64094", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852411, "uuid": "cbee18b7-3158-4069-b53c-0336c35a0cc1", "comment": "Malware payload (Pony)", "value": "afdf78e26e10793941ceeec156433348f6b050d79f86e46b88f5755bc9c3d148", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Pony", "colour": "#E64094", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852411, "uuid": "863f4708-d762-46a6-9c53-ba8c2c6176f2", "comment": "Malware payload (Pony)", "value": "a887c69811cf126e17a3f4cf0c241daa65365be6", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Pony", "colour": "#E64094", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852411, "uuid": "38ff8c79-39e5-45ec-a30e-17ecfe4ce68e", "comment": "Malware payload (Pony)", "value": "dea224da6908d76b4c21e9ff9ba85f60a63e1cefe5da685bf41a28758237df061f054732e834e559534e08a7a79c1f34", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Pony", "colour": "#E64094", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852411, "uuid": "c571b787-7477-4f60-999e-54ebb07088fc", "value": "T19834AE41ECD4E022D523D17E5E2B46E514E36C354F2EE7463222BADBF46ACC7A2ADD01", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852411, "uuid": "42e6a46a-a546-4233-91a8-f0fdb03de1c5", "value": "97f04e360350a96024827db89e6c2d32", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852411, "uuid": "acedc48f-46a6-408a-aa3c-911f87f3860c", "value": "6144:WSZrtUbaNpKEHcqoh5Iwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww2VD3L:8eKE2h5RhTp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682852411, "uuid": "c72dbf1e-0daa-4ceb-9c4b-95af8b31e34d", "value": 237568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682852411, "uuid": "5d2af2a9-1887-4e7d-99ea-1cca750c5180", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852411, "uuid": "2e0d12b0-9315-4b10-8ea4-d2ddba96cd7d", "value": "AFDF78E26E10793941CEEEC156433348F6B050D79F86E.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee95310c-e756-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682859607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859607, "uuid": "c1e81f97-65a3-49bc-bb6c-16a27e329aec", "comment": "Malware payload (Mirai)", "value": "777899dcb746e3f56b7729ef75780708", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859607, "uuid": "9c3da0d2-4de3-4d60-8bf5-46d0c3242f60", "comment": "Malware payload (Mirai)", "value": "aff014f936c8c4459610c63f985e97bcca66b2a4a19cdb65543d362c43d63ad8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859607, "uuid": "c15e942c-02c4-4425-bb57-826b330f2576", "comment": "Malware payload (Mirai)", "value": "25f2e07a745ff0ca20863f27817c2684e067159a", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859607, "uuid": "150f1dd9-9dbe-4962-b8d1-ead20d106a31", "comment": "Malware payload (Mirai)", "value": "1c30405b1d40626f00369d1abdd973cedb09866d11c3ffe6542796edba001848468c3a372c7de2cf9c1c07f6e48be11a", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859607, "uuid": "600ab090-6aa8-428f-80c8-495b797e9f55", "value": "T197A2E11572632D66F3EC1C3DC96A8317B9A70BFC90F6327669415620C94D24A3E39A4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859607, "uuid": "5952da0a-d66d-4f59-9866-149d8b5f5c76", "value": "384:UvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjZhymdGUop5hQ:UvQn4j+ZO5fKAlxds3UozS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682859607, "uuid": "9ee4d1dd-053e-489a-903f-09c7d2413620", "value": 22160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682859607, "uuid": "f65580ee-a3ec-41ee-a890-0dc7463a22ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859607, "uuid": "ca216c3a-edd3-47fd-9b8e-102d8d7507e0", "value": "boatnet.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fae0dd7f-e7b1-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682898712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682898712, "uuid": "28e16e86-67e0-4521-96ea-3c8725d166f1", "comment": "Malware payload", "value": "cf9ba92b050619797363f163b0606499", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682898712, "uuid": "4b31ac1f-c824-4b7c-9ff4-718a91fc8771", "comment": "Malware payload", "value": "b00b40c7ac573bb276450271e73d9c30ba49a7378f5c991fd518c9d3870f6823", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682898712, "uuid": "236efd88-1814-4192-9e50-3d5b394be34a", "comment": "Malware payload", "value": "017c0ec5bb28cf585091a325bbeb5e7a1b5c4a78", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682898712, "uuid": "97696832-9c66-44b5-8d33-f3ca46b01be7", "comment": "Malware payload", "value": "61e14bde9d240a7349602f9e2b06846c226b7d97ee07e1fd240e8ad46427cda84d3c0b14207fa465b2d3e757b10d1de0", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682898712, "uuid": "08be777c-e4ff-4595-a2ab-7d11a56248d3", "value": "T1AAF4AE3D257D1B37D079D3788AE04423B2E4E41BB211EDA96DD753B60352A827AD323E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682898712, "uuid": "a55db432-fabf-4c18-9c32-6d46b08019b0", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682898712, "uuid": "6797d034-f88b-4730-b8d6-77ff6a3809a2", "value": "12288:aqbOX4ttcMyurIGQPYDcqRC08AWbKiP6Jx7fYqJKBD3LB8lVlc:aq2wtTyuAYYqyVPI7gMKJt8lVlc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682898712, "uuid": "a1786f9e-6321-4313-b3f5-0d2db4d4453b", "value": 794624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682898712, "uuid": "dc4c18ab-33fe-42b7-a8f2-9ab448755b91", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682898712, "uuid": "ca964ad4-7750-44a0-b886-8c84d0ae7de3", "value": "new orde.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a42143f-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866203, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866203, "uuid": "35ac1936-84af-4069-a624-67b0f25e7f43", "comment": "Malware payload (Mirai)", "value": "14970f1d712b7530fef3890e29dd1446", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866203, "uuid": "a25e72fa-08b0-4737-9284-cdd5660e5ae0", "comment": "Malware payload (Mirai)", "value": "b06fd6af7bfab631c101e53c3bcf89b09a6e52f3203732c550ead9ae4795d31e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866203, "uuid": "7bee6e91-bd2b-4fe5-9e86-c85472d00e40", "comment": "Malware payload (Mirai)", "value": "1e8c028ddcdaea946152c4642290b470f4bb5c22", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866203, "uuid": "37256fc1-5e23-4178-8083-1020ae78b1f9", "comment": "Malware payload (Mirai)", "value": "e533ac6f430bb9d31674e2c22a5292e2ee0d2234c0212ffdf930b39d04cdd636de98efa6b7c255007cccf54fa696dc08", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866203, "uuid": "50bb03f8-8262-4d5e-90f1-9ee1574a2750", "value": "T13AA2E019BF18818BC832393955E9E5D21357FCA2F2DDDC496940C16FB0B33A95830E8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866203, "uuid": "e761a110-5927-45ab-b230-ff6ca4ed9a72", "value": "384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTH:798o08kxofBE+ZkXaITbp2F2TWul0c5b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866203, "uuid": "ac32cd83-de0c-4a33-b2cb-938275a8e3dd", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866203, "uuid": "eb485ff1-1252-4c1f-8ea3-f0e7ba05d826", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866203, "uuid": "80be2b53-d09a-4df3-81be-39ad0edc0e6b", "value": "boatnet.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3225be27-e779-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682874323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874323, "uuid": "79562cc0-a528-4290-b0e5-023f1178baac", "comment": "Malware payload (Mirai)", "value": "2592351a6ba8552a08a6efff21f21520", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874323, "uuid": "dc5b2908-a794-4d19-a67b-a70b60b8ccf6", "comment": "Malware payload (Mirai)", "value": "b1741e8a0793b8e0008e0ca425fde90ec7403e52f8954bb20d66629f02e33014", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874323, "uuid": "e4bf56c0-2cb0-4cd9-a6e8-07ddad034896", "comment": "Malware payload (Mirai)", "value": "831070ccaece608e0794d541d615e5f5fb37fc3e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874323, "uuid": "4751a623-4ef4-4e51-86ce-caa943bfd7b1", "comment": "Malware payload (Mirai)", "value": "5edbf174de5ffa30a9f262e3537f5266cf266d048602e994829baf7dd5d3af59c10ef6f87effeaf3ec980dd7a2026108", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874323, "uuid": "fcd6251d-1f7e-4d74-9931-9040d8b74056", "value": "T100C34C46EB418B13C4D5177ABAEF42493323A755A3DB730689186FB43F8276F0E63606", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874323, "uuid": "d37603fe-2bc6-4766-af76-735256232b32", "value": "3072:xmYJNDTL7QWhWS5tf2s7xUqYUXNhHsHI8M/9AYt:rJNDTL7QWhWY2s7xUHUnHso8M/9tt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682874323, "uuid": "cf1a6922-f3f4-4111-8efc-5b64897b5671", "value": 119486, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682874323, "uuid": "5782e042-7f82-4835-9e41-08cacd66cf42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874323, "uuid": "e914ccd9-3d78-4c44-93e6-65c042c04a6c", "value": "2592351a6ba8552a08a6efff21f21520", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c283c83-e76b-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682868434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868434, "uuid": "8c0b1ef2-6656-4797-8069-8f2502454148", "comment": "Malware payload (Mirai)", "value": "041580ea929827154c00347dfadee57b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868434, "uuid": "8414d737-b8cc-421b-9d4c-9ae36f4cfc56", "comment": "Malware payload (Mirai)", "value": "b1b5258247fe64d047e98e55872c9d1867da3c85f6ba2449fdecc621d5579fb4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868434, "uuid": "0d206ea6-afc1-407c-9ec0-302b2f3bacdc", "comment": "Malware payload (Mirai)", "value": "c6bcdb8a6fe458df3300e73264d2172ed3fbb521", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868434, "uuid": "2f50b851-4927-4b2f-bcd7-87648854b1a2", "comment": "Malware payload (Mirai)", "value": "a7cd569617d29bde84e7f58a8d952383e121c4d9652f8ad0f820c5517d2b7b4f5d601a9e67abca0a481d320a6fee5981", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682868434, "uuid": "4b6f8017-4e60-480a-9cab-f832682c8548", "value": "T146D3C687B851CF57E84B9A364ACB4731B7B5FF1D1A4202327723B9529A371D13AB2B40", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682868434, "uuid": "b7f7acfa-5184-4762-ade8-f1307aedb44a", "value": "3072:cbBkfMcUuw38V3byl4/zUrRy2HYDRG9BrRtDmLc0IZcHgeQs:nVUuzul4/z6y24DRiBlJmLc0IZcHgeQs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682868434, "uuid": "cdbbac83-b8ff-4c7c-9c07-ac83a699c863", "value": 135970, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682868434, "uuid": "9b70a6ec-30c7-4a13-ae6b-eb41e46ac02f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682868434, "uuid": "e8a5a490-43de-4f6e-8664-cc07288741c1", "value": "041580ea929827154c00347dfadee57b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61a34615-e790-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682884281, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682884281, "uuid": "cc881666-f0ec-4cc2-ad67-51a829496f80", "comment": "Malware payload", "value": "6e9538653ab7f9800a1d09363f66a16c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682884281, "uuid": "725961be-370a-4441-bd0c-8470e70baa47", "comment": "Malware payload", "value": "b2a3081ac464d94655bbf1565951150b09658089504d5f43ad20c501e04a440f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682884281, "uuid": "8fe45e2e-430d-4cac-a7c2-34c0fba28fb3", "comment": "Malware payload", "value": "31672673780e37d46c8e8a9f83568e2a77600fec", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682884281, "uuid": "00232186-0cc0-43c1-9898-2bd7bfba81b6", "comment": "Malware payload", "value": "fd82d1022f7355724fefe5cdc506eeb7b196b59fe9519b815d3212347147fdb45ea8657f2f4ac487c1fdb4ab2c3fbf8b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682884281, "uuid": "473a95a9-04e5-4606-96ec-7c7e6167d89a", "value": "T11F25E0C4B2C6B2B0C55E577E06927D128EE4AF7108EBC34A2D417BAB1A73329D7019F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682884281, "uuid": "b1ac3896-8cdf-4fd9-a8ea-46b390eb83fa", "value": "24576:rWwsCQLbYXFSxN/wRsWaKnr9rhD85O/f6CDruxp6/XjtjA:rWwsCQLM1SURsWa2hd85mSCDrCp6/K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682884281, "uuid": "65075a66-a9dc-49c0-a003-6c98c399c7d4", "value": 1057672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682884281, "uuid": "fc3fc077-3fbf-4be5-bf57-82c8ff800938", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682884281, "uuid": "de95fd10-d657-49b3-870c-86b94c8ff762", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f74428c-e768-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866990, "uuid": "71cc0458-dd6f-48fd-91f6-ee6752cfc6da", "comment": "Malware payload (Mirai)", "value": "65f960d2020bb7f5fee379d0a51592cf", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866990, "uuid": "d2864581-4717-4d41-9af7-0f41b014d0ca", "comment": "Malware payload (Mirai)", "value": "b315132dcc93c55c4c3b8cf91ac94d61824fb876e56432e599aa55f53fd19f5d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866990, "uuid": "c1b3771c-3cf8-419a-8fa2-04b3fed90a7f", "comment": "Malware payload (Mirai)", "value": "121e2254002a934b7771eae3e5986072cceb099f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866990, "uuid": "8b15d8d3-bded-4e72-98a8-794aa3067a3f", "comment": "Malware payload (Mirai)", "value": "e15e6ea79773bbaadc82fceb466329d1555ff4f3f002283a8a49bf6c685ff337d584401f4620d8d1112872bdc6e20b6e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866990, "uuid": "e7592800-60e1-4a09-b2ea-6b396406c8ec", "value": "T18C336C36E029DED0C6560234A4E88F751F03F1C883536EBB2AE546B2645396CFA19FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866990, "uuid": "e47b9999-dccf-4032-b904-01c35ce9fff1", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866990, "uuid": "83fd983a-358d-42e4-9e08-2ac00c643f4b", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866990, "uuid": "c0f4c5e3-f654-47d4-93b5-8740600eb01b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866990, "uuid": "231c38b0-2b77-4106-804f-e1858209d7ef", "value": "65f960d2020bb7f5fee379d0a51592cf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "268bc83b-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866143, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866143, "uuid": "9ce084d0-94d1-4474-949b-ae54179d3c90", "comment": "Malware payload (Mirai)", "value": "6005daae0bf860c5b4d2dbe38212357d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866143, "uuid": "4e5eea79-48ba-4b80-b9b5-22a5907a37fc", "comment": "Malware payload (Mirai)", "value": "b5f5a537c183c113d7e15d351f1ca002c5d7d2b8f3407814275297d94dba062a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866143, "uuid": "25b64959-bd05-4cd7-8c86-9a67737eea37", "comment": "Malware payload (Mirai)", "value": "9bc62f9d61c3e77683c90d839e31cd5467b3655c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866143, "uuid": "2e3f3a1e-930b-4566-ac22-115069df4de0", "comment": "Malware payload (Mirai)", "value": "7914905bbad9ebedf44a822864e37c39416da4270bfa5e728abb0d8bc998aac9ccd9f35ccdd96a2dfa022328c6a13312", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866143, "uuid": "448cf4f1-09f3-4d55-b86d-864d55401002", "value": "T1E803F751BC829A77C2E1137AB66E4A8D336163E9C2CF7217DD214B207AD651F0D23F85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866143, "uuid": "884feed9-c497-4e52-8e30-0f9bf3352ab5", "value": "768:YglxkCbXsG5f0OhnlUl0O9FRA1wAob9/7WVuv+bky7X3kXoTZN/NkwW:YyZb8G5fDlUlXjwmqkv+rk0vW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866143, "uuid": "d6ce1dfa-5c1d-42c4-82cf-925a63a56f9c", "value": 40744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866143, "uuid": "e2aea4e0-a22b-4945-9fdb-3517136653da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866143, "uuid": "2dbe152a-d94c-44ce-81c7-6f7f107eefe6", "value": "6005daae0bf860c5b4d2dbe38212357d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2eaffa57-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866157, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866157, "uuid": "0514ce8c-da65-4cce-bcee-c37bf11de616", "comment": "Malware payload (Mirai)", "value": "10448ae8b51d72d5b5f3569e19341850", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866157, "uuid": "0404048b-ad93-4f42-a6e8-e4e053b943a2", "comment": "Malware payload (Mirai)", "value": "b6d826d11b3ac60fcf618011c87fccc02b8a7ac3b22a4554c82648130308db6e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866157, "uuid": "69af02ed-486c-40f4-8ca3-637f65ddbe4c", "comment": "Malware payload (Mirai)", "value": "d4515ce27145bca39f1cf816c236b4e84b2cd6e7", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866157, "uuid": "3a351215-ce87-409f-ac45-bbe4cccdf575", "comment": "Malware payload (Mirai)", "value": "320a86d1b78b5c03181166e53c4f95e8065c6a6da29ce9969f60aed9bbe9a7f8ed5ac1d65898c5ae699513729e720b50", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866157, "uuid": "6f917207-a19e-47d1-a555-ccc2c1e3bb69", "value": "T145C2D0E0B726F931C420AC3DE53A4D8A3A51067C90FF383764259D398EC165A77B88F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866157, "uuid": "09ae020e-6d8f-4207-bf1e-820885ced874", "value": "768:JMKyhegCCMqfizjoNpd2vJdX6vwrw9q3UELui:OKy4qfqoeJdXWg5LD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866157, "uuid": "c87a04ee-86cf-4d15-8459-2b8a0ebb8479", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866157, "uuid": "a2ac6b01-8af5-4982-a16e-e3d2faf604b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866157, "uuid": "1183ad70-0dfc-4822-9812-49205a8030bd", "value": "10448ae8b51d72d5b5f3569e19341850", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dadea93c-e78e-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682883626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883626, "uuid": "5d7f587c-0345-41bf-95fb-835320b5836e", "comment": "Malware payload", "value": "c10b32e6d72dcb99ad563dc7ddc75d50", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883626, "uuid": "1d11a02c-9c6e-4039-bd6b-d6a2e6894a6d", "comment": "Malware payload", "value": "b7de63497de8448062539f0db1066f9fc52d1aa4a8e46cfa09c9808dae394de5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883626, "uuid": "0426b97e-d4ed-47dd-8e33-fc5cd65db273", "comment": "Malware payload", "value": "4129a1a0f80b9d5d1f3bc7f10e9797964ada6074", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682883626, "uuid": "4627a423-058a-45ba-8822-615af8fc00c5", "comment": "Malware payload", "value": "4c9774effd6b861518c245d08636465837f106b76c2e32dffcb5ce59d64e974e55164e00eba2e8bb179ca6ddfc164cd4", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883626, "uuid": "a2a5584c-91eb-41e0-912d-ebe05a3ad4cb", "value": "T1ED747D03530EC9BEEEABA079FCC4C2A56B18A0B97B5FA187BBD41E14056F1E0765071D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883626, "uuid": "88c9155b-55ed-4712-b175-9240cbfba5b8", "value": "d03a32a9d6119786dea4a25b734d4a33", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883626, "uuid": "224cf20a-30b2-41d5-ac07-a26c9e39fa3b", "value": "6144:uz5o/55Hpoh9QHtS2YcQvsek0llC6C7Lyt125Iz4P:05oR5HIuHt9JtH0PC682t12V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682883626, "uuid": "62420c34-6dd0-4ac3-9484-eaec1373f9cf", "value": 349520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682883626, "uuid": "7e352ed8-77c9-4cff-a8ea-a9f0924b0eb7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682883626, "uuid": "d0dbedad-aa72-40bb-9145-4f87f5208ea0", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61538321-e73c-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682848203, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682848203, "uuid": "50242b7e-7a74-4baf-9f17-d97ab2edcb55", "comment": "Malware payload (Mirai)", "value": "66b2e4259cffdaef7601da0e1d387e82", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682848203, "uuid": "d879c9e4-d706-4f6b-8073-eadc507e1fff", "comment": "Malware payload (Mirai)", "value": "b84f6b43826d78cb869449c5debfce65a6f7fad752285a260e6996f6a0ce8602", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682848203, "uuid": "2f77f645-2d02-4fe6-ad8e-3330cdfd4ee1", "comment": "Malware payload (Mirai)", "value": "de7e357a069443aaed9b845bae72b44c2c487f8e", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682848203, "uuid": "3aa37b3f-c13a-46fe-8020-f09e06c6d3a2", "comment": "Malware payload (Mirai)", "value": "fcca56dcc6239efcb90f18c2ce5a43eee8711ecbc82e7b1c6c111096f4d4d745644be7cacd6047a8de07c5436b77b477", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682848203, "uuid": "f72268f7-9e5d-4744-bd6c-751e9971d9d3", "value": "T1A9535CC49783E4F6E9161575207BAB338B33E43A506ADEC7D765B532AC03601A71B39C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682848203, "uuid": "734783e6-0c7b-44d1-ac21-eb323c14007a", "value": "1536:K0hkqvkQDsvWt9+mEpA2gVLrNcmExExQFtLtCFZY:K0ugkQDB9+mEpAJnNnEx2KLP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682848203, "uuid": "17a2217b-c4a9-4930-886c-5857f85fa179", "value": 64500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682848203, "uuid": "10aaedf6-7fe9-441d-8950-2ea6ee769341", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682848203, "uuid": "f213a850-e94d-4861-9cfa-f41ce967d511", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "447aa947-e779-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682874354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874354, "uuid": "482765f0-7b50-4fcd-898a-3d067112444f", "comment": "Malware payload (Mirai)", "value": "50d4c7d35244e1fea8ea232d8b03f49f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874354, "uuid": "c5454609-9538-4014-a6d9-755ae008bbf8", "comment": "Malware payload (Mirai)", "value": "b8ee036221c8ae785d0b29ae18b5c30c94cb740a3370099fb00fce8698932082", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874354, "uuid": "f3083bc4-5bfd-4368-95be-d9e324d70fdc", "comment": "Malware payload (Mirai)", "value": "d7701157f8cc7f4070c92bff7de95304068f4531", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874354, "uuid": "23afad12-bc99-4806-82d0-7aa17367195e", "comment": "Malware payload (Mirai)", "value": "ac028c2b04d902fbb2d04950233fc26c73951c5024c4f5e064f43981f154f541d394a4dbd4dcd71f1d3aba1d75b6a11a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874354, "uuid": "3b2bc536-f395-44ed-b55e-fdf6aa088ca6", "value": "T15B430845B8818A12C5D4137EFE3E128D33126778E2DFB2129D116F147BC6A2F0E7BA56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874354, "uuid": "8440824c-c692-48bd-8077-640cd1d008b3", "value": "1536:p9ndvNnjHlKpWdKWhwU98jJW3CtCBUYgkuL7IbxiHsiNQc:dpjHQUdphiWytimsiNQc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682874354, "uuid": "dabf772a-c71c-42b0-b8f3-d6283d314f11", "value": 58704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682874354, "uuid": "91ecadb3-ad3f-42c9-8077-d1220a58aa63", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874354, "uuid": "1e6580e2-cb0b-46c1-9e45-2bbb6e7e19f5", "value": "50d4c7d35244e1fea8ea232d8b03f49f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a295e0d6-e770-11ed-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1682870646, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870646, "uuid": "61a8520e-d9a7-4d82-9acb-3e8a3395eab8", "comment": "Malware payload (AgentTesla)", "value": "9f25ae12481d5c2b92a846a69dc673b2", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870646, "uuid": "728e5a9f-4421-41bc-a697-a0a291dc1223", "comment": "Malware payload (AgentTesla)", "value": "bbf755f7b047e982ad828f9646a16aa10786fbd51e2d9a785d5851e057208043", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870646, "uuid": "f79ef3e8-572c-4329-a251-e29d537d7669", "comment": "Malware payload (AgentTesla)", "value": "f50ff51cc2900bb1024b4a2ee9a52a8a2a3cdc2b", "object_relation": "sha1", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870646, "uuid": "53d799f3-d8fd-440e-8d22-8d2cfd7911d5", "comment": "Malware payload (AgentTesla)", "value": "25b191c900ef35de6e413f7d49ce06610c677298c8c9ab7b5f22c2f33f7d636f5bd3fff3e971268a5f2abe62ceaf236d", "object_relation": "sha3-384", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870646, "uuid": "2d864b7d-991c-4cf2-b035-2fc39e179c63", "value": "T110C423678017DF325D35B179B08B1A190A7BB2AFDE3961BBC5464FAD84C011D4EE0EE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870646, "uuid": "b082946c-bcd5-4741-b579-a59ea1fcba97", "value": "12288:XLyLNgvnDSwEEW5YkT7HR1obbUkFXqz3uLf0eoUYRoicnbnXk:79n2CWjT7x1wvFXqz3uL6UEInT0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682870646, "uuid": "e6093af8-690b-4a52-bb3f-225bf2fea91e", "value": 551235, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682870646, "uuid": "97b9e2a3-7574-401f-a842-00e7c0c74f76", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870646, "uuid": "5c43f1a2-7fe6-4c06-98f1-f7a8ed703a2b", "value": "Purchase Order.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88d781f5-e6f4-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Vidar)", "timestamp": 1682817346, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817346, "uuid": "e3f0c82c-da63-48ad-a747-2a6f4134eba3", "comment": "Malware payload (Vidar)", "value": "b7810ccf8a876901dfcb4e3cc7d84a99", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817346, "uuid": "65a08fdb-3f4b-478d-b0b2-dbc85e8bb50a", "comment": "Malware payload (Vidar)", "value": "bf129cec049c6d60b5a2ee6d2b99786e537f13d37a5a8464f0c6c6ef3df64cc3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817346, "uuid": "304efa26-1c7c-41db-bc36-259c2ad6dade", "comment": "Malware payload (Vidar)", "value": "50b84def52fd89ea9ddd89504d1a11b577d78421", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817346, "uuid": "e4a88207-90c8-4fb6-a25d-fa1709f661ea", "comment": "Malware payload (Vidar)", "value": "fc4d73a8cc3ea076fa04514b17f174b1a7ff4a76a8d13974be8ff50c7e3721f29d1f2ba4c9536d38e82e12b238665b15", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817346, "uuid": "75ffddd8-dd80-4b2c-91fc-1714d45d7e7b", "value": "T149A4BE1372F1A832E73246719E2AC6F46A6EF8914F25EBDB1354DA2F09B11F2C172741", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817346, "uuid": "b26eed37-eacc-474f-bb5c-84672fbaa284", "value": "8e1291b1baddb8fcca0899ad3cc587e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817346, "uuid": "7c7974d2-5982-430e-aea1-bcfab6185f19", "value": "6144:Kx78YUL4fohghld1eaQauWnZl1wIJRxqC/sleuLfq4:Kx7vUL4fTj5QaZ9HZ/s/LX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682817346, "uuid": "4d46a623-c12c-4cf7-be1c-5209292ba13f", "value": 476672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682817346, "uuid": "b61ae18a-dfd5-4654-bfae-56b02c5e733f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817346, "uuid": "79156a1f-581d-4608-9844-d8978c84ed03", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b67b4a5-e78a-11ed-b3cf-42010a9c0076", "comment": "Malware payload (GCleaner)", "timestamp": 1682881721, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682881721, "uuid": "f85912c9-5378-4e7e-8e74-9a68adc91789", "comment": "Malware payload (GCleaner)", "value": "1b0faf6df0915ce8437ce2f76493fea3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682881721, "uuid": "80b6a76c-eec5-4b7c-8d40-725e339f6773", "comment": "Malware payload (GCleaner)", "value": "bf7d9b82ff0c3842fbd1dff7ffa94389d376af2b5d01ce504072f7985b556325", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682881721, "uuid": "c78a3243-b8e9-4814-865a-b712e1400af8", "comment": "Malware payload (GCleaner)", "value": "0a816f0ca5f9e5be1e4f14f1c2bb3b5be97593e8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682881721, "uuid": "8d3f359c-38ac-4c28-b92a-6821d4760a96", "comment": "Malware payload (GCleaner)", "value": "9e5852aa422ee92568c47cfa13d80849ff8aa67975aebe7b3c0a15a554efc0ac15a28aa8c56d3b29a855e6417fa247ae", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#6323B2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682881721, "uuid": "9cd2fcfa-9f98-461f-be56-75125438a931", "value": "T128C5332153A1877DF58BF7B2CD5BEB21513B6A0A24B0D512FDBE0858E9782405D10FBB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682881721, "uuid": "056d9bd3-6985-4e03-98b1-01080ecf0cd6", "value": "da86ff6d22d7419ae7f10724a403dffd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682881721, "uuid": "0bc176ff-4c9c-44ec-81a2-005106632032", "value": "49152:AquziiJto6rFnYdfwArsZ24ieB9+HfCplY9o9AG5cu:AHziKi6rFnifre2duPYIXcu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682881721, "uuid": "cc389087-13d1-4b25-a499-713011dcaabe", "value": 2546265, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682881721, "uuid": "420ec7eb-83c7-4ba3-a85b-f121cdb4de01", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682881721, "uuid": "a8317ee0-8301-4297-807b-413b9f84e9cc", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6c265b8d-e76b-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682868408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868408, "uuid": "5461d66a-4ea5-438d-a867-6092051c805d", "comment": "Malware payload (Mirai)", "value": "f4702f606917dd0fdbf984c554a41865", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868408, "uuid": "bce30277-2d84-4ab7-a99f-ded7749c42f8", "comment": "Malware payload (Mirai)", "value": "c005529dd413d184cc87c062877be8638b13f787ce94ce9380f99911150e0259", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868408, "uuid": "8b864eae-f2da-4f0c-a6b2-d93f69810943", "comment": "Malware payload (Mirai)", "value": "0c15cbe46cc7f3cf5de0da0ddab80adf9ce7d815", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868408, "uuid": "ae51e039-4eae-44d9-9bca-b4e0e4d84208", "comment": "Malware payload (Mirai)", "value": "5d6ce2d950822882176f8ac3788f5063b38845d7a4db2351136c418da8db06ea4ee6c4aae434b2b039cd65dc4c3f74e8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682868408, "uuid": "b4974640-807d-409b-95f9-1955e4c7a317", "value": "T16804612B7761AEB7E90ECE370289461110CC8D8916DE2B6F7369E668F35E54F50E3C90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682868408, "uuid": "e12c9952-41da-4b31-8b49-e6151621a743", "value": "3072:UuF1wCmzLwaZfRIhSqeYo1oLzgHHzDODAg8upyf+lsqDpyi88s:UuTwCWLwaFRIhSWo1oLzgHXng86yf+lW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682868408, "uuid": "1bb07e8e-6b68-48b3-9c8e-d12b4f801b0d", "value": 180417, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682868408, "uuid": "2e7d762e-d1b0-46b3-9a20-693b62561526", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682868408, "uuid": "8f535aa1-a06e-4c6b-96ab-cba799258a64", "value": "f4702f606917dd0fdbf984c554a41865", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "999e1fc3-e6eb-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682813508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682813508, "uuid": "80d7d19f-891d-4330-b50b-3698508d9aea", "comment": "Malware payload (Mirai)", "value": "e8a79de316176f75d88feb7c83a4d451", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682813508, "uuid": "6522b069-e615-4114-8ec4-19ae48daa788", "comment": "Malware payload (Mirai)", "value": "c088711e14302b8eed98e612890208616f616fc98afc3a39514b40fa70f6f5f7", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682813508, "uuid": "9100f907-458b-46d0-8c80-12879b20484d", "comment": "Malware payload (Mirai)", "value": "98411753aedcbf4a626eb034be82be0f5fdb5a76", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682813508, "uuid": "77b160e7-778f-468a-9d8a-c47d5f698038", "comment": "Malware payload (Mirai)", "value": "852eda08d2e44fababc088aaa07c76de9e430e2f8951f8d58c6180ac52aed3b52e3e15ac5a96bbff23be26b5868070e1", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682813508, "uuid": "2b03d769-7a22-43ff-8508-1a82cdbc79e5", "value": "T1A7C2E1981B8929D9C1F9C13D43B81B6C1DA40FAAF809DC8178F9F7619D8E4793027ED9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682813508, "uuid": "38a3a983-1718-4186-bc06-7ba36d60b921", "value": "768:I2G214DFyosXqgvV9o1ndB08+JgGlzDpbuR1JF:I2GdDgosaaO1ndEVJun", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682813508, "uuid": "6b44c49c-504a-4340-acfd-85ca408826be", "value": 26184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682813508, "uuid": "ca1ea67b-4d81-41fa-8842-dcdca14cf762", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682813508, "uuid": "da331af8-e809-471e-b755-6faf42c419d2", "value": "e8a79de316176f75d88feb7c83a4d451", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a5e28e6-e793-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682885423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885423, "uuid": "723bc81a-2976-4d3d-9e2a-686f898cc438", "comment": "Malware payload (Mirai)", "value": "4f948b7b80d812cff378a8ed14027466", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885423, "uuid": "a303ef1c-2029-40c4-8d5b-222425158b7b", "comment": "Malware payload (Mirai)", "value": "c0b1db1c8bd1b35ebdebea7e0bb6a76e0c21eabb82894ab3b9a5d58661cddedb", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885423, "uuid": "cbe8c244-1389-4849-9934-2fe26dd5bf4a", "comment": "Malware payload (Mirai)", "value": "ba7f984512a36556486c9c3b45141435a9f260bf", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682885423, "uuid": "5443b0d3-7a73-490a-a837-a5e5eca87a65", "comment": "Malware payload (Mirai)", "value": "0eb3cf1e2c47af1f75853006b4418fa7ff2d465afad6dc70da3894fde06cd1a416f96ff73d968009f5f181ff9c669488", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682885423, "uuid": "b86b0073-92e5-4bcf-8ad0-389209bbfb72", "value": "T19ED2E12CD95DBD05CAAD3EBE50CE96B5398C70C0635DE6CE17128448BA1BA8BFC070B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682885423, "uuid": "a4a3b135-7136-4a2c-8e03-01689c6d20be", "value": "768:a1uUtLrVDsAp6tLkF4FuetwEub4sU/M9g36KN+Y1iJbsWU9:abDs06t4BEub4sU/MbU+YAg9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682885423, "uuid": "a6f7a223-9c44-48db-adf8-6618e387308a", "value": 30324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682885423, "uuid": "f55cf293-823e-4bbe-a892-f3c0fde64f64", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682885423, "uuid": "24c36c64-536a-45ff-8242-f5da169481f1", "value": "4f948b7b80d812cff378a8ed14027466", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1d3fce1-e770-11ed-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1682870779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870779, "uuid": "1d3dec28-4686-4a79-be15-4b4431a25a1f", "comment": "Malware payload (AgentTesla)", "value": "416f5c0e0bcf2620c459693eca8026f0", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870779, "uuid": "71cf088c-fa27-422c-9eaf-f551de7dbdc7", "comment": "Malware payload (AgentTesla)", "value": "c10987bfd7474d0af328759d3e1917b54f3e0a831fdefb721421a49cc88ab8b4", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870779, "uuid": "2c76ef24-c6e4-4726-8297-1f694fc461e3", "comment": "Malware payload (AgentTesla)", "value": "8af0cd3b2facbe09c101bce4b15963b63cf7e288", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870779, "uuid": "8651a5f8-fba4-430b-be2e-1a7bd0919290", "comment": "Malware payload (AgentTesla)", "value": "ab3afe4615388790c92d9f4857a1585394b772f04d482b26b20b2dea29d747ac27c1fb6fa6a471bb93a500d0ccae5997", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870779, "uuid": "88119096-1319-47de-97d7-1afa680b0408", "value": "T1CAC423B2C08213A05E4BC7DE8D0DF85AA0AC78BE43B876FB891871FB396B455B5C1457", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870779, "uuid": "1f5ca23d-9223-4e5e-aa46-4e0a59f83072", "value": "12288:ezZWurkolRKvRKVToXAnQ2M/tdnuH2gjpkZrXG6mF7:e1LBRKvwVuAQ2M/tdi2gjpsL8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682870779, "uuid": "70222cd1-fcd6-4cfd-98c1-61333f247541", "value": 587344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682870779, "uuid": "836e5a50-3f9b-4386-8e98-2495cde99f06", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870779, "uuid": "2a2b2e42-5aa6-4b05-8f14-ff23c5d1c2dd", "value": "SHIPPING DOC.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fba4f2d1-e746-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682852757, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852757, "uuid": "e6e7c95e-b6f2-4758-a2e3-23545f20c69c", "comment": "Malware payload (Mirai)", "value": "76453333c2cc598fb5296ccdcbd23f7f", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852757, "uuid": "b5ff153d-6eb0-4b85-ad7e-bdfcb0af5d6d", "comment": "Malware payload (Mirai)", "value": "c1e9f36f5effbe4f017714d64e19c13bbdce2825f98f616004788f81087b2377", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852757, "uuid": "44600ea9-4144-4817-a794-c4afa9f59d4a", "comment": "Malware payload (Mirai)", "value": "e3e1556a20c9355f4f8e5574be24aea5c2c3bcc2", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682852757, "uuid": "182b7d4a-96aa-4ca0-80c3-55c69ee0ba42", "comment": "Malware payload (Mirai)", "value": "0b3f90e7a21d97169a187e4c359e5b8dc1db00d49c96b60ed39ed384c665a7beecc76fd52e9e4661b1d0b12948181c32", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852757, "uuid": "536dcbca-0f56-428c-8d74-4c10b9cc90d8", "value": "T14CA2E148843C40BFF44A02BD991901B778B76A11478B8DC7E915A7DB2ED2439C1B9F6F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852757, "uuid": "12668508-2150-4e5c-8c5f-69ac59d37122", "value": "384:qZRb4hXnbGjJHxtbHHg1A+giifPCHJjWkiaIuIejsCPzUoMPotiBK7s1cliFqcJS:qZRUbGjJrM1U1CH5BItY4oMtue8sk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682852757, "uuid": "ed86cdcf-7626-4545-bec3-92d0a5367da5", "value": 23084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682852757, "uuid": "4bbb4723-1d23-4dde-88a4-0fac4d699b57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682852757, "uuid": "32fc78e7-ce7b-42a0-81cc-b7ec3b711df5", "value": "76453333c2cc598fb5296ccdcbd23f7f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b97f7a7-e6f3-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1682816760, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816760, "uuid": "5a60fdc0-4600-4491-be98-7fd76a7b4beb", "comment": "Malware payload (Amadey)", "value": "02d03ae36069b971df04ac11550cc22f", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816760, "uuid": "fd4d00d8-48b1-4c39-aa46-ed2b7c84312e", "comment": "Malware payload (Amadey)", "value": "c3839b633f21352702166f574f09962974fc30bbae72fb8ec0557c8c89a3342a", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816760, "uuid": "fa53a45e-c697-4959-801b-b7335e846591", "comment": "Malware payload (Amadey)", "value": "84ec96b83c2ed70f1277790201d96eb69185bf9d", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816760, "uuid": "1d6e828b-26a1-4afd-a974-e38355bf5b22", "comment": "Malware payload (Amadey)", "value": "c9e7533a72551252d7eb517bdf4fee1ed798b41c8ec490a940649e3e4e272608a703122585b8a6263c6f9210f5ad2e15", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816760, "uuid": "37430a4f-d2a7-413d-80c2-90f58407133a", "value": "T1C6552303E2D960B3CDB9237048FB52570735BCA1AB64D3BB4A459CCE1972BD46832B67", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816760, "uuid": "4ae8d13e-569b-4c2c-9483-6ab363421529", "value": "1efe015ade03f54dd6d9b2ccea28b970", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816760, "uuid": "992542fd-301a-42b4-a12c-80d3f4f2ac55", "value": "24576:6yfwlNZmka+KvlNbKUd3/eU8BYzbr2Y2GOVH/f:BfANZ2HW82tBwXnXiH/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682816760, "uuid": "8511fd4b-0335-41a4-af99-5c27a8012a85", "value": 1284608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682816760, "uuid": "3e1f028b-9e1b-4950-aa77-e7e4cab3a2cd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816760, "uuid": "8887522b-cc07-4734-a7e0-570345f40b34", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4cd994ac-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (DCRat)", "timestamp": 1682866208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866208, "uuid": "7478db94-f8eb-4676-a5cd-28c80875d943", "comment": "Malware payload (DCRat)", "value": "c04f6e5100bcad9b3fae095a555b71df", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866208, "uuid": "250115c9-7e00-4a23-8fd2-d4587493cb69", "comment": "Malware payload (DCRat)", "value": "c39e981d483e749a856115383cebb8680b218415969deabb77660ce15e7f3afe", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866208, "uuid": "7ec8fe41-4b9b-4f75-bfcc-01ec0c2f8a64", "comment": "Malware payload (DCRat)", "value": "24694a5c169162c13b915f269dd29a2f44becc3e", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866208, "uuid": "ce5a5ef5-d6b9-4516-8eb8-ffeb192b238e", "comment": "Malware payload (DCRat)", "value": "7c9808f3b5e077186d5cf3a45a3d78fa7a6600c46e7d56d60d28fc88d3a6e0241bae1f542ec4556ea480372b2a3b5415", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866208, "uuid": "b53ee903-431a-4da9-83ba-c5ec83881428", "value": "T14AA533D65DDDF6DAF0A11C723639028CF378DF985F6DB6A1C10879845A6EEA6B0C8D00", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866208, "uuid": "895e906a-d068-4942-8837-373b6af9bc6d", "value": "140094f13383e9ae168c4b35b6af3356", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866208, "uuid": "ea70b179-f489-4fb0-8893-2da573cecdfc", "value": "24576:hVxuZIgdE4FMACjte8CzbLAZUMM6fRYEQoo+kAXaDEx6x7sP3XmvkRgDXdP8TVYo:hbu3KTiooAqwbH+BDXtPlTHl+h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866208, "uuid": "b241767e-2a03-43bf-aa3f-588ea859ac9e", "value": 2085888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866208, "uuid": "691cd45b-58cb-49e8-8bd7-deb422c4a82d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866208, "uuid": "ba3a62e4-dd43-45f4-b61d-d6029afdf25c", "value": "c04f6e5100bcad9b3fae095a555b71df.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afd39818-e78c-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682882694, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882694, "uuid": "d623472e-5988-43ad-ab46-a4520630206d", "comment": "Malware payload", "value": "647aa8fc16ce612f6fc6588668a573eb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882694, "uuid": "91e63b3e-5ef8-4fea-acba-ce0ce9c50a72", "comment": "Malware payload", "value": "c4250ccabb3d62c075af65f5048650150120b5d6c5da45f843bc27a86ce22850", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882694, "uuid": "8b351f84-985f-44e4-a290-0f548895d8cf", "comment": "Malware payload", "value": "36f463979922b7d4aeb09c09c02ff1ff9d8060d5", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682882694, "uuid": "917c6f9f-5acf-49b6-8d4b-cf428f788e31", "comment": "Malware payload", "value": "8167b5333a569c4613085859c43289a78b576742b086a0628c86970726ed0494e4abf6e8edff15a8a08b5d73268fdcbb", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882694, "uuid": "530ce09c-5d20-4c48-bc8a-565b4b6b58ee", "value": "T113652313D9E406A3DDB927B118F7124303367CE68F79438B730598E54DB2BC59A3636A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882694, "uuid": "69c7e3ac-5f41-4ffd-be96-57cdff16997c", "value": "1efe015ade03f54dd6d9b2ccea28b970", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882694, "uuid": "596bfdcd-5641-4f4c-8d0b-c6a8cfd07681", "value": "24576:Uy2wXWdhEXZQxuFdGabKv8ymZrUaRc3dkR13+5spEoNCr1i6SVs443zF:j2UWdGJhdWDmZIoc3iR13AMOkHsz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682882694, "uuid": "70562fc1-758c-4537-a980-20cfc77f3a08", "value": 1473536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682882694, "uuid": "b75fb246-e549-416f-9801-c9a51d4981b8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682882694, "uuid": "46034f8c-d7cd-4197-9b33-79eba2d8662d", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63d67cf0-e786-11ed-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1682879990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682879990, "uuid": "4bb81c80-3b55-499c-8d1f-b112728087fc", "comment": "Malware payload (RedLineStealer)", "value": "d00e1c54ba8238d808564c0a904aced3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682879990, "uuid": "b01aec15-d4d2-4cd0-8348-3c4f44010784", "comment": "Malware payload (RedLineStealer)", "value": "c425f2c5cf5eb638930dcb74d944678438e091bb40f3947924b8a0236181e21b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682879990, "uuid": "8b586a35-7e9a-47b7-9206-3a8935072974", "comment": "Malware payload (RedLineStealer)", "value": "c985c37098dbd7ddba0ed32b0aaf5e37b6bf13eb", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682879990, "uuid": "f157f2b9-0b9b-49a2-8c37-bd6031c61231", "comment": "Malware payload (RedLineStealer)", "value": "eb1b64a07d05cfd9781872a507de9a9fe7285d1ad1e910583b900ecee1d95e39513d539fa4065803f312ddb48afcb20c", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682879990, "uuid": "34c0c84c-da2e-411c-a0e1-4a02f137de2a", "value": "T1CD5523559FCD80A3EEB553F0A8FD17830A347C74973046DB2B85A46A1CB27C4AA36357", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682879990, "uuid": "50acb97c-18d5-4387-8fc7-9b3266de0e5b", "value": "1efe015ade03f54dd6d9b2ccea28b970", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682879990, "uuid": "09bb6b1b-97ba-4d7f-a4b2-a1192567552f", "value": "24576:0ywznHgPwP5kcbCwN+kUpuwnrSF6dWjvVBIn/9DmW6BKiPwCAcyHf1Z:DCG0/2zkIui5aBIFDmW6BHYbf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682879990, "uuid": "ad81606f-5344-451c-bd1c-4573363d9e40", "value": 1280512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682879990, "uuid": "53f01991-a0a3-4b7b-88ea-61848174bb30", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682879990, "uuid": "d303e2cc-8921-4086-adbe-6c607b9ca67f", "value": "d00e1c54ba8238d808564c0a904aced3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b2778b5-e72d-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682841777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841777, "uuid": "252e4210-8de5-4a65-8f77-67f8cffc8acf", "comment": "Malware payload (Mirai)", "value": "5b693d06959ce60c89ab3ce56f65872b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841777, "uuid": "dc264530-36e5-4d1b-8948-a17ae0bbec7f", "comment": "Malware payload (Mirai)", "value": "c58e2b417a9e8aa8350dc977f1b47d0f846c23ce038716a9568c5f9546e93b8e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841777, "uuid": "39f60696-3cad-4e3c-a07e-7ff8a1428e87", "comment": "Malware payload (Mirai)", "value": "9fb89429a1948c2a7acbfd79017c0cc9eaec6eba", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841777, "uuid": "038cf885-33e8-4182-89e3-d25854c2a20a", "comment": "Malware payload (Mirai)", "value": "cdd385562c7c6a87624abbe1a29812c4642d067cb3e93951cbc1707853a5419cc456b6d5e53ba3572b5c36e53bb2305f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841777, "uuid": "eda00d70-555b-4117-b6bb-5c764b3f12ed", "value": "T1B3F2F1685008A573E6F92D71EEA285427B11FBFCE3AAFC1E27B69B8904C710311184E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841777, "uuid": "e86beae3-fb70-49c3-8ab8-3dcfd821b0ca", "value": "768:0OeFfWYy8jO04sEOppDebxg6lNvkPieVYC06VtGPq3UIx5:0OeFfqDOpiDkq6ugj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682841777, "uuid": "ad6b8de3-9509-474e-96a8-dc6aa554cf92", "value": 36984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682841777, "uuid": "4903c845-729d-4b22-bbb6-689539a23797", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841777, "uuid": "58fdfe26-6acb-489d-9289-0eeabebdd6f3", "value": "5b693d06959ce60c89ab3ce56f65872b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64d929c8-e6f4-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Stop)", "timestamp": 1682817285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817285, "uuid": "435c6f48-bb80-4658-b029-fa76f1a040f7", "comment": "Malware payload (Stop)", "value": "8d1dceb6e1dc1e77d8efcd02499e7849", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stop", "colour": "#A68AE8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817285, "uuid": "be128c82-8541-4399-8745-e5d7efb7defe", "comment": "Malware payload (Stop)", "value": "c645a9302882d7d917d94ee47a75395d276e66809f6d0c0caf7c3fd8a8cf04ec", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stop", "colour": "#A68AE8", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817285, "uuid": "c2c1a374-de4d-4196-907a-9bc2cd89482c", "comment": "Malware payload (Stop)", "value": "c1a2bbb4e5e8b164d146480ead700a8497339511", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stop", "colour": "#A68AE8", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817285, "uuid": "7600d75b-f1fd-4140-a8a9-cca220faaea4", "comment": "Malware payload (Stop)", "value": "961bcabe9b77945f07c70620e2fe7fedab1fdf05db06cd993ab475bc59bbcb2f79b49eba7367eefbfbdc0db9bb371b27", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stop", "colour": "#A68AE8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817285, "uuid": "8e295ec9-d46a-487c-b8ff-c27da1a5069e", "value": "T10705F113A2F13871E63246318E1ED6F8269EF9628F55BBDB1314DA2F0AB51F2C172711", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817285, "uuid": "d6ad3791-8bbc-4175-b9b2-f1df7e4fe3f6", "value": "8e1291b1baddb8fcca0899ad3cc587e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817285, "uuid": "2af8e034-b6ba-4b68-af12-8c41b068f868", "value": "12288:pOTaiFqR/S+nL+tkd9xitwZlwvKZQ6N7pP3R+Z+lKafCRCOyvF4R:pwaph3DZzZHN7lROMv2R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682817285, "uuid": "944440d9-3dcf-45ce-8c78-cccfedd1e055", "value": 871424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682817285, "uuid": "855e3553-7a41-4463-b445-32eaf6c86b72", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817285, "uuid": "4d5d5594-1538-4c91-ba70-0ecd04712263", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1aec42f1-e768-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866983, "uuid": "620c2464-bde9-4afe-b0a1-ea8dd5da3c50", "comment": "Malware payload (Mirai)", "value": "2ec73519ebb91023c2dfcbf60d38f53e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866983, "uuid": "1295f697-e08c-4ec8-9ee6-5af98ba912f6", "comment": "Malware payload (Mirai)", "value": "c736ea01ff4d5db5f0d9129646517939f7fdeee706551eaa175c9acf24d4d4b2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866983, "uuid": "ba4f4d04-4753-4116-8fa2-6921acf78bcc", "comment": "Malware payload (Mirai)", "value": "4943c9eed3b6b72af6fb766e901a3d28c4f7dba0", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866983, "uuid": "c1fa6d55-ef9d-45af-9565-2bfe7353a809", "comment": "Malware payload (Mirai)", "value": "a820eb5c1cd663c5fbda027edcc2391139d5cd11bb768929c25def8623cc0cfec22d6d4fd47ab311d8a0ff196acf68a0", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866983, "uuid": "b62114c0-3223-4110-9136-927185808244", "value": "T193637EC9E287D8F6FC1705702036E73BAE71E0AA221CE656C778D5B1FC86941A117ADC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866983, "uuid": "f4f8814e-06e2-4212-b708-b74932bc6e08", "value": "1536:pnUQJZdRlDAXO6QyQUK6+QyVxehlD/J7RvsuIr5bh28z:pnUQJ7RlUXTQpUK6+Q4xefDF+uW/z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866983, "uuid": "bbb7a007-b29d-4910-be85-85a4a1278051", "value": 70736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866983, "uuid": "ce2a3cbd-7b02-4691-b762-5f09f2eaa3ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866983, "uuid": "b335e9e2-5f2f-44de-a3ef-dc6f8f0f6550", "value": "2ec73519ebb91023c2dfcbf60d38f53e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecc36980-e756-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682859604, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859604, "uuid": "c8fe5d95-8b43-462e-850d-50742238d839", "comment": "Malware payload (Mirai)", "value": "39538b97164d98dda87e9750f4b1b8cd", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859604, "uuid": "2a1d9415-1cf8-4169-9e3e-3678da23e9d8", "comment": "Malware payload (Mirai)", "value": "cc3beaeb44cbee910191794a6ecebb120c2f69f319e1ef40e6f08c14918e4be3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859604, "uuid": "3c2581ab-29c1-406a-84f1-61b563dd3e3f", "comment": "Malware payload (Mirai)", "value": "495529a172d648a4aca0fe35c167f24f6f09f324", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859604, "uuid": "fca13c98-67f4-4ac4-bf0e-e2f7cc882a87", "comment": "Malware payload (Mirai)", "value": "2d029b1f0c51f5677957a386ae04f6cb11cc11269c7082db4e542843f24d1957f6d5c6e0855acb7937e34f4a3f770be1", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859604, "uuid": "46a3463e-8b5f-4af9-9530-d990e59b13c9", "value": "T1FA230271890E9EF524303C76EB95D783B6E01AB2C5673023D62C0A386F797631E57E4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859604, "uuid": "cb59a7c4-c60a-407c-9681-77c27a6fbafe", "value": "768:5/TYCoIxdEk+AxoTZAZHFeq8b3NQ9q3UELbUXfi6nVMQHI4vcGpvB:5ECFd+A6YHAx/LRQZB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682859604, "uuid": "a74e3f6d-05cc-4191-b2fe-cdb3bcc74abd", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682859604, "uuid": "ed991704-d20e-4109-add1-cc31735f5595", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859604, "uuid": "99c33e41-c1e2-4b4a-98a9-30c63e1e6294", "value": "boatnet.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08969068-e726-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Stealc)", "timestamp": 1682838605, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682838605, "uuid": "1fafc47d-9bf8-404f-b044-edb0a0e7baef", "comment": "Malware payload (Stealc)", "value": "cea30f806e644cebe48399eefa345e51", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682838605, "uuid": "e5d172ac-7a4c-4357-a25a-2bd1af9faa96", "comment": "Malware payload (Stealc)", "value": "cd44f8371731aa66124f2e11abcbe7cba476625920f1a9e5123e02e5d2aad62f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682838605, "uuid": "cdacbe8b-3942-4679-9d73-9f1544960bd0", "comment": "Malware payload (Stealc)", "value": "7930b038cde88c38ca3f76b0be16ad8aee1ea9af", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682838605, "uuid": "506d8673-7844-4978-95b3-6f97cce68846", "comment": "Malware payload (Stealc)", "value": "60443205e1583fbc9ae29ad8b69da0bd25d6192f538e20f34a9d5aae3ede1aa50ea5296c2279f61ce28c93d69af335a5", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682838605, "uuid": "fd4c1563-e0a7-4e4e-a3c9-ea6557b90bf5", "value": "T186745B1372F16872E63246718E2EC6F46A6EF8624F15BBDB1364DE2F09B11E2C572701", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682838605, "uuid": "59f18e8b-8e63-47d2-9971-d5b674e808ca", "value": "afedb4c5b690c8e216820b8f6a797114", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682838605, "uuid": "4f594e99-a1e6-416e-ae5a-54a7a4509795", "value": "6144:cQjDuxWPcIxg+NSL1IDayW+yzjUG4Gfqt:cQj6wPcSIL1mayFyzjUa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682838605, "uuid": "56565037-3fe3-45be-9356-b42b6c52fa97", "value": 348160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682838605, "uuid": "d29719fa-65da-4717-986b-9d2bed53d570", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682838605, "uuid": "c7167edf-420d-4544-adaa-67b3a841624e", "value": "cea30f806e644cebe48399eefa345e51.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a20d5ee-e7a9-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682895006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682895006, "uuid": "7cf40902-7edc-4feb-9ad3-58398e6ab9f6", "comment": "Malware payload (Mirai)", "value": "718af0d6734fa8c66d309da47e002c5c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682895006, "uuid": "c44f87c3-d66f-4ec1-b880-76d27ccb4178", "comment": "Malware payload (Mirai)", "value": "cec1caf1bf6e550f463014f8341ea3d8c13d6be6bf3bda559beb1a11b08569b8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682895006, "uuid": "50f52124-f613-43f3-88f6-de1b546ea289", "comment": "Malware payload (Mirai)", "value": "ef5139d0cfce798918fefce08dc25c80f59f11d8", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682895006, "uuid": "5e5ea142-5e43-4b25-a814-b1cb10b53019", "comment": "Malware payload (Mirai)", "value": "c6dbe3bf4f6d563a86134f3264cdc96f89c9d1ec8469504e101ad2aceab64d9a4ce8ec5edeb0d9161b65f79bb97becf7", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682895006, "uuid": "be19ec12-f174-45cd-8a9f-e4c6f484fc11", "value": "T1D8E2E792AC829A2BC5D4237AB6AE018D3331B3ACD1DF3627CC119B147B8551F0DA7B85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682895006, "uuid": "d8b762a4-c0bf-4631-b223-75f45adb0465", "value": "768:akqMyzNFI74UVdyAYRMuuNBP9cXTHbkecmSZfN:a/Ni7q2uuv9gW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682895006, "uuid": "1537dcd4-9076-4c83-8b3c-d66c58dcc93c", "value": 32952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682895006, "uuid": "b82a3d7d-2dfe-451e-83bf-41e3dca89aab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682895006, "uuid": "3bceae13-1d8d-4a0e-bb79-a4b55ea23cac", "value": "jew.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "008017bb-e6f9-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682819264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819264, "uuid": "42542a60-8271-47bf-85d5-d19607a77553", "comment": "Malware payload (Mirai)", "value": "a82cf65405b8aa8e4156ac2ae165f25d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819264, "uuid": "f1e86e25-c6e8-4522-ac5d-80292f9d140a", "comment": "Malware payload (Mirai)", "value": "d0396b583b9aec97db5d07552006af9e57f1cead0c11e30a8e60af27e4e7b482", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819264, "uuid": "f9aeaff9-cdc2-44df-a48f-0fb65bb4affa", "comment": "Malware payload (Mirai)", "value": "4478fe26ca69f319c2ddf0637478940285be17aa", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819264, "uuid": "4ad83657-095f-4f9b-ac80-a55a7a2e9de9", "comment": "Malware payload (Mirai)", "value": "2bfade4a6da96ae5e612afa031cf0cc5cb669fc24c31eca921fd672be5c43d6bcf16abcb81d38d9623637f5348d3724c", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819264, "uuid": "17460e80-7a04-46fb-bfa2-6cb65356590f", "value": "T1ED73871A7E228FEDF759823447BB8E21A75833D527E1D685E25CD5002F6034E641FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819264, "uuid": "7fe35b02-b327-4678-8332-09fb601e30a1", "value": "768:Lkv5RHPsJSzM48j6P/aP/E9yT64k3PE03SQS93Gnoyi37HEy/ejKycr5eNdNIwnW:sJbVaavfSknOY94efNJn7TQD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682819264, "uuid": "431c31ed-2327-41f9-915c-473d1f46b2dd", "value": 76416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682819264, "uuid": "112d7e66-23e5-4705-9320-51efcfc02b3d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819264, "uuid": "cbed98ef-e916-4244-b1fa-072f09e63ff4", "value": "a82cf65405b8aa8e4156ac2ae165f25d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38bb2bec-e768-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682867033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867033, "uuid": "668dfd3c-051f-415a-9d43-41eb8efec685", "comment": "Malware payload (Mirai)", "value": "916ce11a4937961e26469eea821412ff", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867033, "uuid": "54e50a0d-c651-4379-95e4-cc45c9119802", "comment": "Malware payload (Mirai)", "value": "d09f6fe630e2d1e7b829fbcb0db6b415b8593f75e9871c3e5b8416ae083eb38e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867033, "uuid": "68ecd32f-cf3c-47d1-ba94-b33e888f6ac1", "comment": "Malware payload (Mirai)", "value": "8bef9c6544ed55590be190333e3b38766f6da005", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867033, "uuid": "a6cdde53-3871-4412-a0a8-81fe94508fae", "comment": "Malware payload (Mirai)", "value": "6959b1533c9547c076da5a987c91efaf50b0bae4d40a0269174cdda171752063b840796296e94d936b241a8d5f6a5f08", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867033, "uuid": "3032887b-fb49-4b8a-ac51-4a469cb9ea8c", "value": "T1BBF2D752F8825627C2E4237AB6AE5A8D373077ECD2CBB21BD9614B207B8151F1D23F45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867033, "uuid": "fcb39c76-4020-4479-b036-741f809d29f0", "value": "768:0LzdVtJX5qy4G5yqdZYX/jy2QGP2k6V3Gf9UQMGtq+5mslbnoXLHwn:mzpq5G5yki/jyH2sEvMeq0NLn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682867033, "uuid": "2327ce5b-79f7-4789-b804-70951b77a4dc", "value": 34472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682867033, "uuid": "08821d24-1eff-43d3-9131-4961156b3439", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867033, "uuid": "b5d6342d-d096-4d70-9706-1d51e206378e", "value": "916ce11a4937961e26469eea821412ff", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eacd3200-e769-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Gafgyt)", "timestamp": 1682867761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867761, "uuid": "57765cf3-035c-48b5-b26a-79d30b3d9fa6", "comment": "Malware payload (Gafgyt)", "value": "701359362c5b4702b6de41992963a2e2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867761, "uuid": "88618489-db74-45cc-8981-4c6b56ebe62e", "comment": "Malware payload (Gafgyt)", "value": "d0a05e975203af4a23aec04ebed090b3ba19140e9eb7dc6067c1805b9a9d0206", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867761, "uuid": "820cb3eb-84d6-4e68-876c-04acd48eec09", "comment": "Malware payload (Gafgyt)", "value": "89b9109fb6964a3bac5e700bf87782ba17e61674", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867761, "uuid": "6561f0e4-0ea7-4cba-a9f7-70c82688da78", "comment": "Malware payload (Gafgyt)", "value": "ff70b3ce7b498e8546e30e0cad813b6305c976745215f0281b2fdd3f0b0b152cbe896a63e55dd307b42fb608b1596f10", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867761, "uuid": "740e9c84-3256-4a94-9af9-dad94a777197", "value": "T16DB3E749E845C1F2D4931BB312ABF93B00F4AE29662B5A67B71AFDB4C7734433211396", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867761, "uuid": "3e1c1017-91a8-4397-935d-50459f119572", "value": "3072:BiYBIu/ZiwtNQkOcwwpu9maZ7Q6lxg+Z0Ua3hgp6W:BiYBIuLtBYlZ7Txg+Z0Ua3hgp6W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682867761, "uuid": "a4feffe6-0bf4-4472-b8b9-5317022e1d6d", "value": 117650, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682867761, "uuid": "d4ab5848-c959-4f4a-a9a3-71497f55ee2b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867761, "uuid": "fd18b24f-bbf5-4666-a4d7-63989ad496aa", "value": "wget", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c388808a-e76c-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682868984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868984, "uuid": "0ab46046-3022-439c-974e-bdf79ce6732d", "comment": "Malware payload (Mirai)", "value": "344182a392646e518a5dd6a1383721a4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868984, "uuid": "278d0f5a-dbec-4b42-81d4-9d7030c60756", "comment": "Malware payload (Mirai)", "value": "d0d27c97690e12d4514bf274433a0bfea46389d9745d2c0c73eb6f691b28d53a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868984, "uuid": "415778dd-0c50-4edd-88c3-2fa5c2426baf", "comment": "Malware payload (Mirai)", "value": "1dcc0ee5c84f2804bb30ebf19fc47f946662a328", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682868984, "uuid": "780e9ae0-ecd0-46c0-94f4-669680759417", "comment": "Malware payload (Mirai)", "value": "0cb108b639e34f31346f12e892b9fb78ea84eac7fc60a4d1d6c7f6d2b080f7ff9d1048c39e58e4f8ce806bf169b4afb2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682868984, "uuid": "04b875fd-79c8-4563-b51f-aae215fd0e49", "value": "T123D394AF7F280397C48786B0396B73F00FEA9D611391A1C6A15ABE406F721747D267B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682868984, "uuid": "97dc0ef9-bc02-42a8-82e0-6d3cb9b62193", "value": "3072:+5YzVdfzfBD4DqOxEA9Fu4UmUWi60c0IZrRgeQs:WYzVdfzpD4DqkEAaOi60c0IZrRgeQs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682868984, "uuid": "21a48538-8d8e-418d-9690-752c9b5d8d0d", "value": 141079, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682868984, "uuid": "762363a7-352c-4429-b2ae-341a6eaa1a7c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682868984, "uuid": "3b23cf13-662c-40dc-8bed-b4e4b328d14f", "value": "344182a392646e518a5dd6a1383721a4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9c7bb12-e73d-11ed-b3cf-42010a9c0076", "comment": "Malware payload (RedLineStealer)", "timestamp": 1682848808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682848808, "uuid": "eb09628d-cdca-4e98-8695-68d372a74bfa", "comment": "Malware payload (RedLineStealer)", "value": "4157270d828329018f818e3c519d7150", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682848808, "uuid": "8cd1e3f0-80ea-4b21-9846-55dac06aef08", "comment": "Malware payload (RedLineStealer)", "value": "d0f470055d6767fa43541ef4fa50e90d93292d0203f5b189561961075cd46d56", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682848808, "uuid": "3a756cdd-bea6-4105-9f72-19a39b21a65e", "comment": "Malware payload (RedLineStealer)", "value": "2261dee178be1f25935364252204f35074b91fa0", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682848808, "uuid": "fcb1c473-3ce6-4b84-8dab-061c1d84d87c", "comment": "Malware payload (RedLineStealer)", "value": "55bdbfc0ca6b31dc6054a62289aee0bb95b69f4b0da9211f10f62cdcca3dfce165bcf888f720c02c5716d9cffc2eca8a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682848808, "uuid": "4cfbb54c-c711-48a7-a2fe-6ba441702a70", "value": "T156A35D3067AC9F19EAFD1B75B4B2012043F0E08A9091FB4B4DC164E61FA7B865957EF2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682848808, "uuid": "808cfa40-307e-4f90-b93f-b4237cbe0ed2", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682848808, "uuid": "e77dc141-70b2-4714-8bc2-0d467f36af40", "value": "1536:BqsgWqm2lbG6jejoigI743Ywzi0Zb78ivombfexv0ujXyyed2xteulgS6pUl:vTB+Y7+zi0ZbYe1g0ujyzdFU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682848808, "uuid": "eb289427-d284-4c51-bfe6-6616c36a8016", "value": 97792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682848808, "uuid": "d47ca2da-435b-4fdf-8140-402bd0831654", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682848808, "uuid": "e6f3a709-04c7-44c3-ba50-ede4606e2c9d", "value": "d0f470055d6767fa43541ef4fa50e90d93292d0203f5b.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "179e6bf4-e768-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866977, "uuid": "51f0bb55-9f75-422a-a711-a6f17ec1d832", "comment": "Malware payload (Mirai)", "value": "2657563102510978ebb393fc9914804f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866977, "uuid": "08ec46ff-a41d-4212-bb5b-de7ee851dec7", "comment": "Malware payload (Mirai)", "value": "d2069aae0b240947be9c2c0b88846774f8cef52e2a2e53983bd1ab59fd4ee12b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866977, "uuid": "4e1ef3a8-8885-4a99-ac4a-cce9b89a0566", "comment": "Malware payload (Mirai)", "value": "fdea9137630a54cd32527b9aa680eea0033f7ca3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866977, "uuid": "983e3f0f-9382-4dc5-93c7-024552949d90", "comment": "Malware payload (Mirai)", "value": "38272e50c6032fb0e99866462caedae6eafb8612a1b6f5088a5eda6958df9a9887971acdd9dc5331c1e8745c26ef62ae", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866977, "uuid": "76cf0683-f228-41b6-83ed-721bb095c3bb", "value": "T102334B02B31C0A57C0A35AB0253F5BD097BEEAD022E4F689351E979A9671E375482FCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866977, "uuid": "14fb3a3c-9ee5-4480-a89b-663af2bb4b7c", "value": "768:pO7HKtChgliRuLR/QPNIHGs12oCSylNEus9am0oLojItAgOYIFRxtKSownLIo0:89c7GYdl0m9amLTtAgz8xgMnL4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866977, "uuid": "f1474e81-4761-4723-8bac-377d66fc1f51", "value": 54792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866977, "uuid": "d80bafb3-dafd-4173-b6f3-5638774ae6a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866977, "uuid": "9d0dfca8-fbaa-413e-965c-309b529f6dda", "value": "2657563102510978ebb393fc9914804f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9777e391-e754-11ed-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1682858602, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682858602, "uuid": "e08ad608-cfc1-4e05-8482-bc261616f38e", "comment": "Malware payload (AgentTesla)", "value": "b14b63c3128eff65b083b5753ad0d36d", "object_relation": "md5", "Tag": [ { "name": "HSBC", "colour": "#21B471", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682858602, "uuid": "0de7edbd-dbbf-4bd0-826a-7a945194002b", "comment": "Malware payload (AgentTesla)", "value": "d24cb835d46c00c63c465cb32c7d62a85ff3a36670a5f6cc2d7e7363027b799e", "object_relation": "sha256", "Tag": [ { "name": "HSBC", "colour": "#21B471", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682858602, "uuid": "2ba1555b-adc9-4f12-bd9f-12b947c05776", "comment": "Malware payload (AgentTesla)", "value": "638e71588b76a8e7d4b097023a993ec35ab938cc", "object_relation": "sha1", "Tag": [ { "name": "HSBC", "colour": "#21B471", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682858602, "uuid": "a7ad4ad6-a75b-4459-b9d2-051f87024fbd", "comment": "Malware payload (AgentTesla)", "value": "63796a6ff032f09d7a8826745352fff37a08e75f631deab15c19737bc14f4afcf2d97ad0d7a869081d100935003624ed", "object_relation": "sha3-384", "Tag": [ { "name": "HSBC", "colour": "#21B471", "exportable": true, "hide_tag": false }, { "name": "payment", "colour": "#E8DAD3", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682858602, "uuid": "091d721b-beaf-45fa-a185-c68a2c88ee14", "value": "T1109423A6D024C932528C4CCA3C756B465CAC3E4996BED45BE7D7F8D80C91E743A88F1E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682858602, "uuid": "be91c5fb-bbac-43b5-a65e-80a5536fd453", "value": "12288:BdylSq2EcGoXmAvWYcn5136pv7bwADNUA99J03LljrjQro:BdESqBcGjAe/516wA5jD0NQro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682858602, "uuid": "5a948649-23a0-44fc-b6ee-f0537e873685", "value": 438680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682858602, "uuid": "c3638634-b3c6-458b-b6db-bcbde6c95bf1", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682858602, "uuid": "f19822a9-91b7-44e6-ab2a-6cec73a2fb4a", "value": "Payment_advice.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5f15335-e77a-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682874974, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874974, "uuid": "54885c9d-7f83-4a37-81da-b2a897043f89", "comment": "Malware payload (Mirai)", "value": "cf1db399bc2a4088c526f7c5833b8958", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874974, "uuid": "6eb51912-909d-4f0b-9269-b97d468635c0", "comment": "Malware payload (Mirai)", "value": "d2c1441044888c8c2b2c43fb1ed1d6050bbea90122af790a1a0a7c097382a472", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874974, "uuid": "11581c03-6cbe-488a-ad20-2b3add5cef46", "comment": "Malware payload (Mirai)", "value": "1213b3edadd90f179fbd0043506d833a83617f64", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874974, "uuid": "958bce09-795a-4f5c-8b40-5e055541e25c", "comment": "Malware payload (Mirai)", "value": "fa70cc36382770a52cb24821be980e1262aceafde0766ee4c57e5f48e95ed794d4a1e17119dda04baaa3f3ce85e823de", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874974, "uuid": "bea83b6a-bfec-467e-9870-222c0cec00c6", "value": "T1C6131B42312C0E5BC6A25AB0253F17E083FFE9A024F4B589691F9B5A4A75E3710C2FDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874974, "uuid": "d7054ee9-a9ef-4d29-a9e8-c7ab53a51d59", "value": "768:sYUvo6gTJ1GshCgR/O34NRs5KRJ0IGwblmHaJVM8RbwXJA0ZqN1S:0jgl1GuDlO+cKQIfmH/ZA0gNQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682874974, "uuid": "164f35dd-3ea0-4e00-9011-55a3e0b54411", "value": 45012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682874974, "uuid": "f14a9390-b5fd-4f9a-9f84-8bbb5a0ac378", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874974, "uuid": "db4e7f77-a384-4255-aff6-5a5aca6898ee", "value": "cf1db399bc2a4088c526f7c5833b8958", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6579288a-e6f2-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1682816427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816427, "uuid": "baa9c366-b079-4655-a218-bae804bd96dc", "comment": "Malware payload (Amadey)", "value": "47a1d6eb4607ddf0fc48106277d46cf4", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816427, "uuid": "ea52826b-7599-4277-9d2a-3d5f23e6066a", "comment": "Malware payload (Amadey)", "value": "d49b2dfc53dd60a3c225aa578f09c14a1ea9a69d0471c6098f083c63adce7c54", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816427, "uuid": "4a693cef-0988-4a85-8f67-37442f523cf0", "comment": "Malware payload (Amadey)", "value": "a84b90341266199569cc209545966467feb22aa5", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816427, "uuid": "8be155dc-3361-4c3c-bfa8-f7c3268b1097", "comment": "Malware payload (Amadey)", "value": "302fe47b9cdd2a46d3646dc298f3f62a250a5038f7600c9bd055e0d4e4dd73be9a0b17e64f1078bafb73bbf5af5bf592", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816427, "uuid": "193896e9-ce81-4819-b4f3-838fa02d729f", "value": "T12326EF2E17D1E44BB003DB5EF2F592A946B9BE8E51094E0F79E846B764373C8BD205B0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816427, "uuid": "2f6cda03-ca92-45da-940f-79858dd5170e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816427, "uuid": "ad36a6a0-33ec-4d15-809d-851f5e471951", "value": "49152:4K+6Pqckv5TX7v/2fKRUHtr4jYjlb6XMDv36hgz8xQ4/8CQfex9PDGRH0kCKKVx4:4r6s57/2fKRyr4wZIA3wm8v7fyt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682816427, "uuid": "7c86762b-4282-4c87-9af5-9c726de009e1", "value": 4469760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682816427, "uuid": "a2490651-84d3-4cc3-8033-af3e45e44a4f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816427, "uuid": "533a6ead-c8d3-4a4f-9fe6-19e8cac853d3", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47174067-e771-11ed-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1682870922, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870922, "uuid": "b5c291fd-338e-4ddd-a301-813a90a79d54", "comment": "Malware payload (AgentTesla)", "value": "ba832ec0b3a6b4902c00ae6e6d976dae", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "Maersk", "colour": "#38D08C", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870922, "uuid": "5398cdc5-ba3d-4dcb-a8d0-acba672ec4c7", "comment": "Malware payload (AgentTesla)", "value": "d54ea5cb1114b8839c54403b0c75b3311e0b00723d9783df60f18d466eee81ec", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "Maersk", "colour": "#38D08C", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870922, "uuid": "a8e20496-e375-4598-a4a9-2f0c48ae26e6", "comment": "Malware payload (AgentTesla)", "value": "0f35dedf245bbd080166dc73b6fa8bcf8450e119", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "Maersk", "colour": "#38D08C", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682870922, "uuid": "81e7d7ed-d3ca-42d5-985b-ae5806bc5eb1", "comment": "Malware payload (AgentTesla)", "value": "7e44be6db36da08d88c8086c2c67a7379411da42ed8119157bcaeb177540e07e6b28ad1d1eac97d70876215fc13678f4", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "Maersk", "colour": "#38D08C", "exportable": true, "hide_tag": false }, { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870922, "uuid": "e00d6c99-5a06-4377-b0bc-189abce11264", "value": "T1E5C423D3B0B95091974B4B38A0C21C0E48F39DD21E9F6F6B1B20F55E3DAA4F5B15AA43", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870922, "uuid": "8c6d21ca-ff11-4928-9e73-61c64df2e211", "value": "12288:oIHE4JxxvnT1LuK0ZadA1/fYcIt/6CNRAighLrEj3d:3H9n5qKhdA1/nIjSojN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682870922, "uuid": "c46ba646-87b1-4a28-8db4-eaa92eaac4f6", "value": 553715, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682870922, "uuid": "7351dcf2-34f6-414f-af7f-d61994b32884", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682870922, "uuid": "ec192300-da3a-4ee2-b368-157b96f51b4f", "value": "SHIPPING DOCUMENT.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5e6395b-e706-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682825206, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825206, "uuid": "77536dea-0843-4e60-a7f2-e4d64a36317c", "comment": "Malware payload (Mirai)", "value": "2c66dab56cfeae80f7e3efc3f4948106", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825206, "uuid": "0372393d-e8ac-4767-8d18-0434d05febc2", "comment": "Malware payload (Mirai)", "value": "d59b3f02e2b8e00b17a820c452a4c25369e458b6098a3409ad242f7391adc7c2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825206, "uuid": "4e7ea245-3973-4f9d-84d8-e46775606924", "comment": "Malware payload (Mirai)", "value": "757e4554a719291cb0ddf3afbce07373ed584337", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825206, "uuid": "c8271b31-e75d-4d65-9231-b61261bc4c9a", "comment": "Malware payload (Mirai)", "value": "b8c9eb7e600d44bdd562364dc5fc6663e1815d78055702270741aa6db0e18d338ed8e77c8d58893b4b7e43e22f7b46d8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682825206, "uuid": "50d6b354-27b0-46a4-b0e1-5586ca90ddb7", "value": "T187D2D088B1E4EA91CEBD1CBCA66B21F55D91B29422CF7F0913218DD5BEA250F39081B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682825206, "uuid": "6c761d96-cb5c-4c5b-9174-0643a6841cbb", "value": "768:06hHc3EIx19yLO/pApaVlZRZ5QFp4pEpOaNN3lW2:KUWqLOWIPZRZgp4pEpO0p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682825206, "uuid": "d908cb4f-d3ec-454d-af21-b4be73de9ef4", "value": 30892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682825206, "uuid": "609379b7-9f32-4129-8639-287908e93798", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682825206, "uuid": "c2c0ffea-afe9-4082-b529-bceb7e49ebf8", "value": "SecuriteInfo.com.Linux.Siggen.9999.27852.31696", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ed42973-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866184, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866184, "uuid": "7688a35e-f1b6-4089-b80e-1872e5eaa0b3", "comment": "Malware payload (Mirai)", "value": "f345520b4641bd6f165faef2e21bb017", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866184, "uuid": "afab6ad4-d93f-40a6-8429-15a195538833", "comment": "Malware payload (Mirai)", "value": "d6681af1ce73f97a63208c382a3fdfc2afa69262e9f1a2b7b4ca1460f0229958", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866184, "uuid": "3892e051-b836-4079-8e20-9624044cf745", "comment": "Malware payload (Mirai)", "value": "15aed922356b5ddf66a9f2a6cd3672564e3d50e3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866184, "uuid": "83719969-6c3d-4b23-887d-825aaee3a2ef", "comment": "Malware payload (Mirai)", "value": "3d551a5e90ac388f5a6f5936d0ef30a9c6a403fac2c42cc6b7daa522de850f7ed81a2d2e6841f178239e1bdf9d38becc", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866184, "uuid": "72f0a3ba-0407-41b4-a5e9-1a6c0bad7a3c", "value": "T10CB2D0CD61943184CA8D7C7C178D4A664F6CA1C0BAED8B26E350CDE8B3BDA8F3459078", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866184, "uuid": "0a6ac5f4-df97-41eb-ba03-7297dad9b0d5", "value": "768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBp5ZqEWv7:/QlS07FUXqIYSXQKquvq9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866184, "uuid": "9be64f18-022f-42ef-acdb-3b43360ddf4a", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866184, "uuid": "937deeb6-3609-4028-8551-a3797a6352b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866184, "uuid": "83399d6b-0648-4b66-95f0-fc8d2d40a088", "value": "f345520b4641bd6f165faef2e21bb017", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42671c38-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866190, "uuid": "2e177b19-da2a-44c8-8379-98b05b1c8516", "comment": "Malware payload (Mirai)", "value": "42e21899990dc2ca9c0f3fb4bbea3852", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866190, "uuid": "cc903a91-c9e0-4259-8ef0-be54c0f612e8", "comment": "Malware payload (Mirai)", "value": "d6a57885cf6a1c2026812dc79aa50e846a2634bd8e70faff330fd87406b37149", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866190, "uuid": "5f22453f-365e-439e-b8e8-09cccdec47b4", "comment": "Malware payload (Mirai)", "value": "06fe697adc2d47c8dd1a3dadeaa920f6262b44b8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866190, "uuid": "9f06c730-5782-4f1e-9225-c0922a11f71b", "comment": "Malware payload (Mirai)", "value": "07f2895302694ed709078257818812ac9f77a3f02cc6d4150906165b69eff839f5a74337955df716420442e17e46f79f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866190, "uuid": "01c85ee6-b0f3-43b1-9a83-215ea718b429", "value": "T1D2534A02B31C0E07D1A31AB0253F5BD197BBEAD022E4F684751F979A96B5E361182FCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866190, "uuid": "be746cea-d060-45d2-a770-3bff3bae0770", "value": "768:qkaZjEoakZNRGHRnDmX7Xm+t/Myx8SpXCpEMCo/p9WirYvq1xcNor6FV+tMiwWP9:MvolWm+lxpXgdNWiUC1xcNae++bWPPF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866190, "uuid": "1fa2b730-87f7-46db-bfd6-05ba6f83255c", "value": 62988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866190, "uuid": "0873fded-0df0-4767-af8f-07749bd4202e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866190, "uuid": "33742107-90b9-4fbe-a346-a51128096e24", "value": "42e21899990dc2ca9c0f3fb4bbea3852", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e11070a8-e6fc-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682820930, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682820930, "uuid": "c0f0e30c-ee76-45fb-b464-68b569f45241", "comment": "Malware payload (Mirai)", "value": "419b9b098cbdf0bddec294a6bef820af", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682820930, "uuid": "68a17cf3-710f-4ee3-9903-7906837c5b30", "comment": "Malware payload (Mirai)", "value": "d7232e1f5b122cb1c1f39ebd62fad65fec80be33d9a06713ff1b3584c74af925", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682820930, "uuid": "4f906235-8d11-4e32-b7d1-de261f4b82f7", "comment": "Malware payload (Mirai)", "value": "277c4c42f37c00ed8793184119c24f2562e2ccf5", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682820930, "uuid": "a6d1256f-9fbd-47c1-bf25-a720c4c94739", "comment": "Malware payload (Mirai)", "value": "c8a1655b30a55afb67c21d07621bb9dcb8e48feb6b76d7ae36754770f3be137defe2563e40cec0e281add39bd0ffbe14", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682820930, "uuid": "2bc6446a-b91d-4786-adec-a8b88dca3dc3", "value": "T133735D24A97D2E26C0D4A17B61FB8361F2F6230E25B0965D7C760F8FFF2464468162B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682820930, "uuid": "7de8f296-b783-4825-b69c-e146c608c5a5", "value": "1536:5ms+geQfvznpCR8ee84cNsAUiAvFI7IlNnws8r:YwfdNu4cmZvFqI3w7r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682820930, "uuid": "abb12a4d-fe08-40ef-8776-20e5b22da3c1", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682820930, "uuid": "b08ceabb-ad65-4c67-aa64-b9ffb0738472", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682820930, "uuid": "fd78dcdb-9316-4029-a01b-3aa6be2cae3e", "value": "419b9b098cbdf0bddec294a6bef820af", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09c73c73-e768-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866954, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866954, "uuid": "5645a397-b071-4b7b-8928-f340ed3548a7", "comment": "Malware payload (Mirai)", "value": "31e6138307c5601730e1e59dd971ce59", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866954, "uuid": "524dd1ff-3a58-4c45-b19a-13a6c9069b66", "comment": "Malware payload (Mirai)", "value": "d78f651d8e83093fd676b27f0d2515daceea6ab72d33399a3345889fcb0ffe6b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866954, "uuid": "673f2730-161a-4814-acbb-5a215a167717", "comment": "Malware payload (Mirai)", "value": "6652e326e5c7f3f1e6390ee6a598a7a488962452", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866954, "uuid": "96bc94a3-4f9b-4e9d-a280-383445d9cbfe", "comment": "Malware payload (Mirai)", "value": "34d9fe4e89b6d3453048e389b439b745fbc969acbbf91f76af5e2171f404e24496327ed25a34c3396d3abec5b486d339", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866954, "uuid": "2ac0dbfa-3155-40eb-a9b9-226fd3b30ade", "value": "T1F782CF3051AB35E4DBE14831EAED8EC6972A0BB8D1FC369316486B38C94640251F82DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866954, "uuid": "1c832669-10a9-46f2-a526-010ea047b356", "value": "384:MjWzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMa+hymdGUop5h5ly:6GV0P6+kom0tVAoNvm+to1+s3Uoznly", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866954, "uuid": "039e957a-0f77-4902-9e46-acf80c2ac09d", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866954, "uuid": "dfad69ea-99eb-4d25-81e6-d17297ff3821", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866954, "uuid": "240afe4c-0976-44d9-ad43-5db00e3f4e64", "value": "31e6138307c5601730e1e59dd971ce59", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52b6f4dc-e72c-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Pony)", "timestamp": 1682841307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841307, "uuid": "71679b86-252b-4476-b973-3bc5a078eec1", "comment": "Malware payload (Pony)", "value": "ab468a5b5cd9470c0895097efa2a687f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Pony", "colour": "#E64094", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841307, "uuid": "0fc8565d-695d-4f2e-8e40-97050623a7ff", "comment": "Malware payload (Pony)", "value": "d9e0be40db0545d6150990074f3c3409093c458e0416ed81f6d01bd5151c8501", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Pony", "colour": "#E64094", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841307, "uuid": "09ca9baf-fc37-47f1-9702-20fc8e53d925", "comment": "Malware payload (Pony)", "value": "cfc1453e3c7c7dd991d6ce775dc8b75b44924f0e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Pony", "colour": "#E64094", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682841307, "uuid": "c308a269-fca5-4a2b-9e94-0fdba7da4c1f", "comment": "Malware payload (Pony)", "value": "722bb37d9c91733e7b9a3a65f903d84f24ef2b80878e9f138990db800a4232c318afe037a7e5e43122822274420fa1f8", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Pony", "colour": "#E64094", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841307, "uuid": "21359b49-c333-46ce-a1dd-92cb929cd41c", "value": "T112E39D433E8C3BE2E9144EF1FE61469C3DA9BDA635304A376658663D18F138D4580BEB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841307, "uuid": "50915599-9ca2-4f33-9fd0-c5bc202175b5", "value": "a4639ddd9c246c7cae894db44e6e95db", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841307, "uuid": "7237643c-519a-4fcd-b0fd-db9262e2fa4b", "value": "3072:wFjojAOl6xZVIT3zF4AceNwcmlV84b7PiqmqcEjTh/Y6SeXOxDL/w1lV/:onxZececlzbjivqL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682841307, "uuid": "b6b9937d-a42c-467b-b99f-747fc8c3fcf8", "value": 147456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682841307, "uuid": "65b76f06-1b9d-4994-9b18-750ad1d7c9ef", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682841307, "uuid": "a799c6ac-7d26-40d3-8557-a99490a45885", "value": "D9E0BE40DB0545D6150990074F3C3409093C458E0416E.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d41e1bb4-e706-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682825203, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825203, "uuid": "c104e34e-cbf3-4459-819c-84d8b2cb7473", "comment": "Malware payload (Mirai)", "value": "b03e2150d6fc9c256b4fad1f644ba3fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825203, "uuid": "36b33fbc-ddca-4a52-aef3-cca5b4843e10", "comment": "Malware payload (Mirai)", "value": "da56797ce94edb327d27a38350f1ac81edc00e755c423064464c07d1c58f564c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825203, "uuid": "ff709a42-a552-4205-9170-f7b9775aa2bc", "comment": "Malware payload (Mirai)", "value": "65466e5cd9cc1f3dbb0f47354258d6bea8f907de", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825203, "uuid": "48808132-3156-432e-aa71-5dfb56f4e7e5", "comment": "Malware payload (Mirai)", "value": "62c7038ec64ad5a480e9adf7cb8a0663d056d4686b9edbe90040d9078de414442bc61d720c4f2fc3e5f99c94faa775b5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682825203, "uuid": "64a7c777-cacd-4fce-94a4-60427b1dcd1b", "value": "T1CC330151FB355D78C308113AF60F8AC4BDAFBFB812EFE0E162B5017067A51A20976C89", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682825203, "uuid": "e5a64637-2f0b-4d80-9967-d04a0df331bc", "value": "768:Jc5/VxsZBk6vdoxs3cEWkui8FTAI27PvbhTsr9iOFfyPGKX9q3UELah/dKZ5JF6e:u/VxOBRB3c5kumDza5iOp1LoKWl/giED", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682825203, "uuid": "0745ee5d-d771-4e0c-87fc-df1eb2da55b9", "value": 52768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682825203, "uuid": "5eca75e3-093a-464e-8891-d72d334159dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682825203, "uuid": "300c3840-029e-4883-b6c8-ffc3c4d7d01e", "value": "SecuriteInfo.com.Gen.Variant.Trojan.Linux.Gafgyt.8.30058.6070", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd729662-e76c-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682869000, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682869000, "uuid": "80f8020b-55a6-4fa3-86c3-d1452f01ec6d", "comment": "Malware payload (Mirai)", "value": "7a68cdab6730f0526dd9e3c52010e158", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682869000, "uuid": "c2114134-2142-4b93-98f4-41f08dd9d0da", "comment": "Malware payload (Mirai)", "value": "dac91a774fe2008f4dedf00a5b57907ef4301605f32878ef2d4c02340ce0b434", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682869000, "uuid": "de8b41d8-bce9-411f-90cb-2914c0fd5c00", "comment": "Malware payload (Mirai)", "value": "b602b62226ea0f670b925798754c859658c9df0c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682869000, "uuid": "f11a5878-3e39-4435-a5d3-b2a749557d8b", "comment": "Malware payload (Mirai)", "value": "8ff84a499506a93cb0ed3dca3cd86492fb3036888a9593a22a76f3827182cfb241905b87782406fd4b5b4b0fc0b66198", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682869000, "uuid": "764f99c4-f208-4966-b21c-57e16844e6a9", "value": "T16AD3D701F9104B6BC7D2ABBEF745A2CE77719D982F933306D71D79B027D06A96E29200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682869000, "uuid": "3ef89714-19a2-45fe-86dd-db2fc3ef3550", "value": "3072:M9bKi+t0OTbLa+zOvIvJu3E9cQ2BCp7UKVLKiqAY99y7RM3RuTt8mXVHDLd/kQcM:M9bKGiqUNkRuBXVHDLd/kQcHs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682869000, "uuid": "d8e49b0d-22b0-4894-86ee-5657a45e8f93", "value": 139481, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682869000, "uuid": "f87b08fc-d28d-485e-b0b0-d4c0789e7ae9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682869000, "uuid": "6a6b9b7f-70a9-4edd-a62d-5e709e6b7817", "value": "7a68cdab6730f0526dd9e3c52010e158", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a0122d9-e6f3-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1682816945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816945, "uuid": "a6a88e24-72bf-41aa-a9bd-5a3ff71e98ea", "comment": "Malware payload (Amadey)", "value": "c270cb7a18b165e9728969a2463afad9", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816945, "uuid": "590e904f-ae6e-4529-b830-eca26118fd08", "comment": "Malware payload (Amadey)", "value": "dbb85aad99b7c16233015e2672a5bbcb3c21858652ff72e781766c0851d78d32", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816945, "uuid": "bdf6cbaa-5e1e-4a6b-a12b-e3a55a522cc8", "comment": "Malware payload (Amadey)", "value": "7e118411f98ad8a6488dcf5246e5b3d7eeecb46b", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816945, "uuid": "37d67237-1481-4e57-9708-87e19efc5b5d", "comment": "Malware payload (Amadey)", "value": "9972dccf7809e5994fd882acb0271a06ad4725fa81df2c0a15ef79c9a91dfeaa391e8e102708dc8a351fdb63df341504", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816945, "uuid": "bf6c9a3a-df51-4a08-ae85-cdb4d8a2ff2b", "value": "T10C5523B272ECB0B3D6A507708CF916431236BC929BB597A725489C9E6C721C8187773B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816945, "uuid": "3a437c84-4bcf-49d9-936f-35b13e7ece81", "value": "1efe015ade03f54dd6d9b2ccea28b970", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816945, "uuid": "40f0b557-d2ae-4aec-b4b5-8ab2ec6fc48f", "value": "24576:9y5M1ak1bnuFwCP+BhqK8qJ/O4Bfieog6JeHEPDUMIRzGn:Yi1ak1bvC4vWoqeoXekY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682816945, "uuid": "b63dd035-7664-4cd9-8a23-c2d50199ed42", "value": 1284608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682816945, "uuid": "4a69e5ea-7978-424c-96bf-6c1398dba42e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816945, "uuid": "69b408e7-b061-42b7-b3bb-5535467a4130", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcffa416-e6f7-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682818775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818775, "uuid": "c5bbdb16-2091-4a71-b952-a36f3af687e8", "comment": "Malware payload (Mirai)", "value": "afbfc74af54bcb4bca9fd41fed317a5f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818775, "uuid": "83f880d5-977e-420a-b720-62a3da01f39e", "comment": "Malware payload (Mirai)", "value": "dc9daebcb2a7d50e304919352cc03e50d9e371b0d620e490df61d0d811cec675", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818775, "uuid": "d8dfc42c-d41e-45b4-8bad-216081508edd", "comment": "Malware payload (Mirai)", "value": "63481067474be64c9aa28a2fac207bf1d7f8db78", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818775, "uuid": "60cc89d8-78af-4e2f-83a3-08a2d871400b", "comment": "Malware payload (Mirai)", "value": "471489e2bd4330238b5294dfb1546fdeff886516a4fcc94a03b23f66456eb97ec371902f203a61b8cc67d5fe9b749ad6", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818775, "uuid": "6f41746e-1a88-46b1-a596-dcfc47daff14", "value": "T16713D695B8819A37C2E0137ABAAE568D332077E9D3CFB21BDD211B507A8551F0D27F81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818775, "uuid": "fc343c01-f4b7-4b59-84d2-b8b9aeeffd6d", "value": "768:sgIElb+LgK81XfK1efAi753gc1y99LNpemLsxNTKTaTYHMH8mqooen/NMwW6:s6b8gKYfKgYBpNem4/TK9HCqu/W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682818775, "uuid": "d0c78a1c-aa69-41ee-9681-24de97f54d06", "value": 44788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682818775, "uuid": "c4aee8db-4415-442a-881c-51041ffd2714", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818775, "uuid": "b32b31f5-e2b1-41b2-980f-c21ed8ef319b", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ac0b98e-e739-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682846823, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682846823, "uuid": "9eccd708-15d7-44bd-a287-8e915d86e5a7", "comment": "Malware payload (Mirai)", "value": "b8eb94de7c605fa850f7f14ac210baf1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682846823, "uuid": "1b77acc6-02ad-4940-8893-bb646c07477b", "comment": "Malware payload (Mirai)", "value": "dd3dedd2db6962cd9115c82424059aaf37fa375aab211f745b239361fc85d009", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682846823, "uuid": "5509c0df-597c-408f-a4b8-14492c080246", "comment": "Malware payload (Mirai)", "value": "5b3264d88ef4157233a1cef24744c381a300b2d0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682846823, "uuid": "c9e7ead0-d416-46eb-a755-497d5f204b9c", "comment": "Malware payload (Mirai)", "value": "ad4517ed46c7f1563783aa5e67ccc695dca4ac39114d7571db5753c1ad8a0a81435c84e79c2cd94b8441bb428af0f0c5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682846823, "uuid": "f8afd408-a8c3-449d-8734-24254685c111", "value": "T154E2D134420690DDEC9696B551DE27B12FB40FA9B5A7F9CE6462E293CD014F42CC38F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682846823, "uuid": "db66b194-bdc1-45fe-9d34-7944bdeb625d", "value": "768:sh/ObNYoOAAWK1EvJZOrHYveSw+eT8JgGlzDpUYsy:sh/O6+AWW0WSwp4VqYl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682846823, "uuid": "1c721977-d1bb-4dad-9c27-7fbd7cdc3e17", "value": 33488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682846823, "uuid": "8a662be3-71f0-409e-929c-703aaaa6ed6d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682846823, "uuid": "be96ee70-bf6a-4461-bf48-d90f23f471b5", "value": "SecuriteInfo.com.Linux.Siggen.9999.10199.30984", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10b7160d-e768-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866966, "uuid": "cff9d6ab-8cef-4055-824b-50b949c9284d", "comment": "Malware payload (Mirai)", "value": "8c1959363dd79d28d59791e8f024f262", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866966, "uuid": "77e6fac4-25ca-4ef6-8131-448b7513f4f6", "comment": "Malware payload (Mirai)", "value": "ded19b93e0c9307ea927823c4750a354fff36f8534526618aa59bc401621d29d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866966, "uuid": "bd101fbf-6e09-4539-835b-9c4090eb9e15", "comment": "Malware payload (Mirai)", "value": "660593a205790764826a2b35c7d31dffafd4035f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866966, "uuid": "da981dde-bb16-4c6d-8c08-6b169bd10941", "comment": "Malware payload (Mirai)", "value": "56e76aeba6fff5ae6b91f26f4d917ad6fcd8c40d09de8dbd36e6b633da1aebc3f147ae6199d8423aedca6cdc0faf904f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866966, "uuid": "653aa65c-8de9-4a84-ae25-e43fe048e891", "value": "T142E33C56EA408B13C0D61779B6DF42453333ABA493DB73069928BFB43F8279B4E23905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866966, "uuid": "4206acb6-9e91-4ad2-8d70-1789f990457c", "value": "3072:CJLce3pC5m97naLHbz4N9GUJURIJ1FtEXkkTM/9oIMY:CJLceZnaLHbz4NMUJdHtEXkYM/9LMY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866966, "uuid": "769aa614-6507-494c-901a-400ce2e10f5c", "value": 150594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866966, "uuid": "440b7e22-412d-4da5-9410-c17a5b87c567", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866966, "uuid": "ba981e40-5bd5-4608-b11e-f583013f705c", "value": "8c1959363dd79d28d59791e8f024f262", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9800963f-e7a0-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682891244, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891244, "uuid": "000ece59-b458-4369-bc5b-299bc229c451", "comment": "Malware payload (Mirai)", "value": "42eca5af3ea9b13d88404974c1720197", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891244, "uuid": "42f59957-a591-4850-89d1-3e06d2f67874", "comment": "Malware payload (Mirai)", "value": "e049a4f5e8bccb9767124feb8a4eb55ab4715194630efabfa66ff929a3217cbf", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891244, "uuid": "586b1d23-f74a-473a-80ef-8c8c55d98726", "comment": "Malware payload (Mirai)", "value": "4caa835eefa6ad74817384123292814cad31149e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682891244, "uuid": "bcb0deba-aa12-4273-bd66-c8aba3d2fe77", "comment": "Malware payload (Mirai)", "value": "ff083d90384daf15fb2936ca2389c38a6faf53083e7dd536c16cf0f1b10c0b2293567cf521fb9da31091762d40174a39", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682891244, "uuid": "1febe849-7281-4ae1-8724-c141bc8ab549", "value": "T15423F169E1D27932FDED1C7AA8CA06E4AA41F100715243C857390CD96AAE0C5BD2DA7C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682891244, "uuid": "fe199d5e-19bb-4c57-894b-e2690fdb5af6", "value": "768:fJS4GmW3BHKBa0BJXEALN5oSWgjYS62j5Zg3lyReMGXTUAiflWz:bGmqga0BJXEALNWghjaly0PTUAis", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682891244, "uuid": "0a732d43-156d-40ad-8d45-f2dab2560256", "value": 46064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682891244, "uuid": "231701a9-c100-4f8f-a6d5-3b193293904b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682891244, "uuid": "73b000ed-e745-446e-8270-60c46397595c", "value": "42eca5af3ea9b13d88404974c1720197", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14762c95-e768-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866972, "uuid": "a538baaf-6bd6-40da-82e8-43899fb42208", "comment": "Malware payload (Mirai)", "value": "f578f93821fd59498eeb95ae8ccba31f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866972, "uuid": "dc065462-1cbc-4d97-8f7b-dee738586063", "comment": "Malware payload (Mirai)", "value": "e1569076b661abb419cb2708fabf016d9136ea0e0e2d7cf5da69140f1261d51f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866972, "uuid": "438091b6-3f3e-4cf6-ae75-49d211568312", "comment": "Malware payload (Mirai)", "value": "7241e7d272b81764c3bfb3c8ccb834ffc1e2acdc", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866972, "uuid": "f53c9066-c5c1-48c7-86b9-02ece73cb77c", "comment": "Malware payload (Mirai)", "value": "43319b50ebfd9ac1e963e0dbd78fb1f19f092f7671eac8eb33b06c89e858f55a8105a719c68c2a2cee0ed92bea9e6fe8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866972, "uuid": "cec7fe05-075c-4b9d-ba1e-6b34d25a1942", "value": "T1BA63A61A6E628FEDF659833447B78E21AB5823D527D1D685E26CD6002F6034E241FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866972, "uuid": "c84a9075-1add-4e2f-9ba8-df0d15e59600", "value": "768:YaDrpAYA0od2i+mbpFd0gPG4Xom7QaQxt4HtJWsbrH7IX1y/uFe3fCdwnzIG1:Y/GG/NPQDkHtVbPgVevCWnzd1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866972, "uuid": "1e1949e5-9285-4097-9335-bed01cacc488", "value": 72284, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866972, "uuid": "d70a2e13-125d-4069-8c9d-68a9f1259904", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866972, "uuid": "8adbab50-56e9-473d-99a6-7b40bd55213c", "value": "f578f93821fd59498eeb95ae8ccba31f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c5e9e2d-e6f4-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682817351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817351, "uuid": "e2384496-e800-42e5-973b-d0f057aba1ae", "comment": "Malware payload (Mirai)", "value": "7478401d91b205ed2c111e27f3d34b84", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817351, "uuid": "db748915-3887-490b-8a49-eee6ee973d66", "comment": "Malware payload (Mirai)", "value": "e15e13af8ce6ad0efaea4b5dc42b36a9b8619529586114b8890362ac83ad8bf0", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817351, "uuid": "32851111-6c93-414a-b0c3-a2fb3bd5b4c6", "comment": "Malware payload (Mirai)", "value": "566f47a875ab18db073a28c1225952e4fcb87b1e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682817351, "uuid": "452fad24-6eb2-452d-bfbd-e05a7723bbdc", "comment": "Malware payload (Mirai)", "value": "7aff4bb474c5d75b83fa51f4297bcf76a255bea4465543294b39eca77fb6a842741eb9b803db915e8ba8dbc37d457285", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817351, "uuid": "cd2e49fb-160c-4967-b443-13cd26ee686b", "value": "T172833A85BD81A622C6C112FBFA1F018D372557E8E2EA7203CD245FA0738BD6E0D67756", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817351, "uuid": "8f48c614-8dfd-4452-8699-8fd00c3d7f7b", "value": "1536:ldGl/UPLWOh7f1hBVpqPSYuqO0crTJrjvRMPX51tz33S:lEl/UPLWOhXBiSYuUcn5yS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682817351, "uuid": "8334f507-484c-441d-a25e-d349b52aca23", "value": 87348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682817351, "uuid": "b7a5a155-9d56-44c4-8dd9-4e71660fbe7b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682817351, "uuid": "9b43d292-14aa-4462-b8d1-b389053f4e0f", "value": "7478401d91b205ed2c111e27f3d34b84", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "28d8316e-e768-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682867006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867006, "uuid": "4eff0217-222f-4e7b-8721-ea1452e1e357", "comment": "Malware payload (Mirai)", "value": "275e8e7427f477473e8fa7694828aaf9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867006, "uuid": "a5a4bc13-2927-44fa-a9dc-36105e604a1d", "comment": "Malware payload (Mirai)", "value": "e1edc10b5d67a4812298bcad3938047096213762a884e18de51c06aa8dfdf1fa", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867006, "uuid": "a2b72c84-a88b-4231-b35f-bb7d8073155d", "comment": "Malware payload (Mirai)", "value": "ccfa35333fae390c2c46f6b6e969b8276d718c33", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682867006, "uuid": "95debf18-4cd1-437d-95fe-81b35601921d", "comment": "Malware payload (Mirai)", "value": "548c9d6521ae41ba0e76c781a9db90c1986f2dbd9ae68bf30ff7c185485f995a0c2c38f1cf1e4163e04e7cf9d61f00ab", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867006, "uuid": "61c424be-3416-4f24-809a-a9b8ca46be33", "value": "T1FE83A51E7E218FADF76D823147B74E25A69833C627E1D642E16CD6012E6034E641FFE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867006, "uuid": "d658b1e0-3510-45db-b559-528d38a96cd3", "value": "768:2ty6IP7M/kq0INRhfuN2Eo9tl/deyLYwHuRHI0I4EH6gTQ7ZDYovZ73x/nL8y8QL:Rakdn2Eo3eQaV6TQRYo99Be037WUT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682867006, "uuid": "0b41d080-9a29-4e3a-9829-cac766159b4c", "value": 84780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682867006, "uuid": "dd7db63a-d5b2-4d7c-b7e9-230be39ab3c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682867006, "uuid": "b5d07354-0fe9-4754-b614-bb203a8b7551", "value": "275e8e7427f477473e8fa7694828aaf9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b136f471-e772-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Phonk)", "timestamp": 1682871530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682871530, "uuid": "39244e0a-5ecf-4357-b96b-198bc4702cd5", "comment": "Malware payload (Phonk)", "value": "bd4f0d1fca038b6d7744a9c8b397bc53", "object_relation": "md5", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "Phonk", "colour": "#69F639", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682871530, "uuid": "74ad3131-1e20-443a-84ff-7719620e8c3a", "comment": "Malware payload (Phonk)", "value": "e4546356ee0bbf198bafc760d7fda14d5dc20449c432408cfeaccf8b7a18f837", "object_relation": "sha256", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "Phonk", "colour": "#69F639", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682871530, "uuid": "f66be258-4469-4af3-95e8-835521f25103", "comment": "Malware payload (Phonk)", "value": "4d17d573da0c015796435d274bc2d930a919388c", "object_relation": "sha1", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "Phonk", "colour": "#69F639", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682871530, "uuid": "13cd1d35-f3ba-4779-bcc2-ca2014d074e8", "comment": "Malware payload (Phonk)", "value": "a2bb17d9343f0f1a08a860d45b7c7073089a8cb0219db15a8b0a0941f7f34462e7092a720723e318bd8bbe7017c57cf9", "object_relation": "sha3-384", "Tag": [ { "name": "file-pumped", "colour": "#D06044", "exportable": true, "hide_tag": false }, { "name": "Phonk", "colour": "#69F639", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682871530, "uuid": "18fe203b-c693-4405-9e30-22d0604c54c5", "value": "T17116ABE70A64653B59BB90DD539AC076DF17BB791870301BFA5806083F03A7A23EE746", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682871530, "uuid": "adec5a36-7586-4f01-991e-47002556b854", "value": "12288:CBIKh4v3G14lsZTW8jRb6/FdOT5Vv30Bkp+YMKwOz7d7VfAnGqZec78ZcvSusESu:mqO14l8TWURb6dQUwYOX/YJZl8ASuX/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682871530, "uuid": "8b03abba-89ae-4396-ae63-4f088f4925a5", "value": 4070077, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682871530, "uuid": "5a07e8fc-328f-4562-bcab-714022aac55c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682871530, "uuid": "65ff340f-0780-4681-ab8e-039369a38607", "value": "ntask.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68d23074-e730-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682843062, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843062, "uuid": "ef9a2026-2d46-482b-aad3-4e20ce4d4156", "comment": "Malware payload (Mirai)", "value": "cf6d1af00fbecd5f2f3b6a81c4b71952", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843062, "uuid": "f8902766-144b-4bf5-b4bd-014f6a5b00d3", "comment": "Malware payload (Mirai)", "value": "e564e893844df3e4c2a1481ced4ad7fe225d841bf641f121b07193333272142b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843062, "uuid": "eb3ee554-e102-4319-afef-a7c6f09d933e", "comment": "Malware payload (Mirai)", "value": "193fce9219d53690b80c54df32234042414364c7", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682843062, "uuid": "fb591bf6-ffd9-433f-9694-fa770dd3580c", "comment": "Malware payload (Mirai)", "value": "a02f6f1137188f104b48e633463fa3afcb030f2786c54183224eb7cdcb96467340857ae91971822a21622115784e7848", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682843062, "uuid": "706f9a2e-a527-4327-bcd2-dd6f92ddf143", "value": "T11A83095AB9814F12C5C612BAFE1E018D371357F8E3DFB2239D106F20B7CA92B0E66955", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682843062, "uuid": "19510788-71f9-493a-b6bf-7fbf187804ef", "value": "1536:bFn+MUXoKg9Niy2I2SJVC7h0KWXD9WaPlS0YI1iW22EWKzH9urd5TYo/wbZnJZ:pU4Kf4De+KKD9Wa/22/KzH9urdNB/wbD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682843062, "uuid": "eff39028-6f8d-4f86-884b-7a0fda85251e", "value": 83256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682843062, "uuid": "22e1345c-51dd-4eb9-83ee-d654f02845df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682843062, "uuid": "123ff8e2-9ef6-4f82-861e-ffa3d737fa59", "value": "cf6d1af00fbecd5f2f3b6a81c4b71952", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06918554-e6f9-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682819274, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819274, "uuid": "16219372-dc29-4b6e-944c-c6da5b1b9fea", "comment": "Malware payload (Mirai)", "value": "77a6e710dc2dcc78ab26566e53d1d448", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819274, "uuid": "ddd9a823-3ff4-4668-87ea-eafe68ec993e", "comment": "Malware payload (Mirai)", "value": "e66e0b461bdbb0df29835cadc00f8ca4579d99c2d0e90e59f768a1c3a089f944", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819274, "uuid": "58ec92cd-4e33-4343-a82c-604c767b48b3", "comment": "Malware payload (Mirai)", "value": "af1b09dd91a7a5f34bd6a6bd1e991947411207b7", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819274, "uuid": "bf0cc114-68cc-490d-a9ac-77689ef5d529", "comment": "Malware payload (Mirai)", "value": "57156912791992e8911a8fa2754826e192408353c5d1fd9468ab4e1d717b1f7a8c5fd345faa39a9f2a3c2c1cd60e63b8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819274, "uuid": "85a01aef-8925-4330-95d5-56471abbc9b4", "value": "T1A4336C37E45A4E58C486413074289F792F63F1C493431EBB2AAAC2B55497EADF508FF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819274, "uuid": "9e7b4e74-90f7-4caa-bd83-cafad1c35410", "value": "1536:eaYSA/mEvzuszlyeKaks9zWLZCxAwPnTI:e7SAeEvSMyRafWLZYPnTI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682819274, "uuid": "d68b066a-d26f-4db5-b2b7-edd28b1f5774", "value": 51592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682819274, "uuid": "ba17e325-3653-4d2a-9b28-ce43bc372d56", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819274, "uuid": "8b0976d2-42cf-434c-b8d6-df5910e626a1", "value": "77a6e710dc2dcc78ab26566e53d1d448", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c91321e-e764-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682865348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682865348, "uuid": "6c8277ea-50af-4ee1-87e7-4e005cf20371", "comment": "Malware payload (Mirai)", "value": "2a4e5d0a098f16d9c8d8f45a60bcc61b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682865348, "uuid": "3fea617d-2ae1-4fc6-b288-0dc82b18a466", "comment": "Malware payload (Mirai)", "value": "ea3794fe14af9d3cd7418528544f83ade6c4ea59274ae8504e6df4679fe68211", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682865348, "uuid": "21d17f8b-0edd-4a50-b189-029c65925921", "comment": "Malware payload (Mirai)", "value": "3d7aba0b85286f1427a6dfb441f2a72cf5e65964", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682865348, "uuid": "2ae17dd6-6e83-40d5-aa3e-7dca0795a890", "comment": "Malware payload (Mirai)", "value": "617a857cb26213c8c20c884c384c220237039262868ad2e21e26b57bd6424add20474c1e39331e1b84aa23db9aeb1938", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682865348, "uuid": "8e4fa126-fc4e-4fdf-b7c3-7d5c38e14c95", "value": "T129633BDAF801DD7DF81BD77A4853090ABA30F3D502831B376397B9A7BC721A81912E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682865348, "uuid": "6372a80e-274f-4b16-8e57-ded024151b60", "value": "1536:nIgNf/No0n0lDYnPq8VpHw1ox16P9dJWLa1ngChQ+2:nIAf/GzEnPTw1y1y9/SChr2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682865348, "uuid": "d0004ff3-9767-46d8-946b-2ed0f95abc8d", "value": 69632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682865348, "uuid": "aab12d71-72fa-41fd-8ff0-0e9829c9d7a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682865348, "uuid": "db0a411b-b82b-4336-bd26-ebabca12cfbe", "value": "2a4e5d0a098f16d9c8d8f45a60bcc61b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6786bbf1-e743-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682851220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682851220, "uuid": "fb051ba6-00b2-471b-903f-14371902cae0", "comment": "Malware payload (Mirai)", "value": "b4efabd0e8728fd14e64426a7d83cedd", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682851220, "uuid": "8b37f6b7-e4d6-4761-85d5-7023a9e48092", "comment": "Malware payload (Mirai)", "value": "ea44d8bfbd73d56673b5dedfe6ccfd75a39d53dcac9a43c5cd6680e6ff0f4b4d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682851220, "uuid": "63e83d31-7d52-4e8f-9f9f-7e6312ee7cab", "comment": "Malware payload (Mirai)", "value": "283c0d42328269b321c378c7fc84be845519e7a5", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682851220, "uuid": "0d012f2e-dcd5-48c8-97b3-9c95e461dfa3", "comment": "Malware payload (Mirai)", "value": "fe8dcef0c26fd5043e46891eae1f10d381ecb2e0ffc32c4d00709c0d71d8865413bb1cd50de0ee86538903ebdafcc5a1", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682851220, "uuid": "47d78192-db05-441b-9208-0cbc3416f9c6", "value": "T1DB334AC8F543D4F9EC4715B01137FB379A36F5E91229E743D3A8DA32AC52A01A906ADC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682851220, "uuid": "d08f08cd-ebe0-4a71-8b12-f7550bfc0ba5", "value": "1536:XNBX9Z/DtwiLaiAl4JGGVyBSNWb0PyBSLCYQ:XNBX9ZbtEVeGiaCccyQCYQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682851220, "uuid": "c66cf140-ba65-425d-a4ae-f9b27ec0545a", "value": 50256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682851220, "uuid": "83fc898c-5d6b-49f5-b2c2-647350953822", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682851220, "uuid": "70b6b247-4775-4af8-821d-81389c96d643", "value": "b4efabd0e8728fd14e64426a7d83cedd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "145dc0c8-e6f3-11ed-b3cf-42010a9c0076", "comment": "Malware payload (IcedID)", "timestamp": 1682816721, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816721, "uuid": "825e318b-10e3-4748-849c-75d622e04c8e", "comment": "Malware payload (IcedID)", "value": "08fe17b7ec2a043cb5a41a5a2a972abb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "IcedID", "colour": "#819B92", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816721, "uuid": "943646ab-48a6-44d1-90ca-54bbbcc5d52a", "comment": "Malware payload (IcedID)", "value": "eae4b77ea1c206dc0a5fd6c0f34d2eae940b8fd20558aadf67ae4481099db184", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "IcedID", "colour": "#819B92", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816721, "uuid": "32c39e8e-84b6-458e-85a9-ee2356fb41df", "comment": "Malware payload (IcedID)", "value": "702299eefb8ae8f91f0d72fe3e948f59aeb1b08d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "IcedID", "colour": "#819B92", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816721, "uuid": "2a0d4fca-4ed0-491e-bfd1-bbea26a44af7", "comment": "Malware payload (IcedID)", "value": "57465ffe86c6ce137b425fc99c6503933ca5982bf260173a60134c3327a2de7f19a05554e327b50dc8a421a4b8cfe4d0", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "IcedID", "colour": "#819B92", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816721, "uuid": "7dd47d35-7858-4e99-9c4b-3ee6e09f31c5", "value": "T179746C1272F07872E6324B718E2EC6F46A5EF8625F15BBEB1216D62F49B11F2C172701", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816721, "uuid": "3775e3f2-ac1a-4f07-8a6f-9f8504b26c06", "value": "8e1291b1baddb8fcca0899ad3cc587e8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816721, "uuid": "ebf2b1dc-f221-480a-af37-b83ddb30ddba", "value": "3072:dnxptyUlNsogCPgpycZT/NS+asZ/GU1o5QmZNccKPfUD5+oX:5xv9zSpyw0AZ/T+HNccOfq+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682816721, "uuid": "052f05bc-fb6b-4b40-ab52-cd3039b00516", "value": 346112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682816721, "uuid": "7d47b1c9-82e8-43b2-a80e-22339be33451", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816721, "uuid": "9fd8a69c-d4b2-4cc5-adfa-7b43d06ed26b", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "802d7d7b-e6f7-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682818620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818620, "uuid": "67104b42-8bca-4eb2-a7bd-d73487b81941", "comment": "Malware payload", "value": "bba529e5d1ecf148789037fe85279422", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818620, "uuid": "96c9ba10-683f-43ba-8780-3b83c8ee896a", "comment": "Malware payload", "value": "ed0c36e214a12510057e4e48e975e60db58b10f71c7a3862f1b48c0d9c436668", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818620, "uuid": "6606a920-da5f-45f3-bbfb-f080f43b91f6", "comment": "Malware payload", "value": "8c1235fcba14f90df41059a03f3648bd873f87b5", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818620, "uuid": "ac40ff9f-846d-4202-88c8-815687169115", "comment": "Malware payload", "value": "ddcf578affdd667adcc3e3d0eecaace85e5ca2883bd9637349ea23475130e1d57a9f121e6aad1c519375fd70949383e0", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818620, "uuid": "b901e363-2e94-49f7-b09c-0faa0839a4c5", "value": "T1A805AE06B8E24874E8AAC0B03CDD9616BBEEDEB4812A7512CDD4D5CA75DD4F12E0B317", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818620, "uuid": "503266cb-f754-4058-829f-e92cad533c1f", "value": "12288:3DYWBABwzfGqWk22kfvnmTtDcBABlr8KjzH:3MUAuzfEH72Rjz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682818620, "uuid": "6308461d-11d9-4418-9d57-8987ab1b6e3a", "value": 860160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682818620, "uuid": "73029608-88d4-40e0-b94c-d77773f09f44", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818620, "uuid": "96ff2f31-0f96-498e-8681-db312d787123", "value": "SecuriteInfo.com.Win32.Evo-gen.12695.18145", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e63ba8e-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866210, "uuid": "d767f702-467e-4613-b778-1c1574e5ff9a", "comment": "Malware payload (Mirai)", "value": "02189cb4eba782f08ad33aa469b921fd", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866210, "uuid": "30248011-f3df-4e5e-a48f-a7e0a9a1cd56", "comment": "Malware payload (Mirai)", "value": "ed7f83de8f9d98f905c7ea106cd1666bd722b66d248efc540f9b539072b25d8f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866210, "uuid": "7db020ac-45c7-4e3b-8f78-4af22971c415", "comment": "Malware payload (Mirai)", "value": "c94e989d30197e6d4edb12025279e328c18086d9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866210, "uuid": "b3e543ea-34c3-4d7b-a88b-daec8d4db439", "comment": "Malware payload (Mirai)", "value": "9451a27210bcec6d3c0b7084be4a6256b7593428dd623667d056803789a2880b45681f498519bdec0a16a3f02389a2df", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866210, "uuid": "4760a328-0dae-41e9-acb2-2e86f5c2b1d4", "value": "T15A632A21BA761E1BC4C1947621F74B25B2F143CA26ECCA0A3DB20D9EFF71A446543AF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866210, "uuid": "6cb0f110-1a44-4ff9-9c2a-45bd7b7f9c4b", "value": "1536:lGBVg7AOotXhGIAsQXt3AYQlQm75YH/tatmV:lSCzxBGQmVNUV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866210, "uuid": "e3fcb90e-6906-43ca-bb90-eb72312a05d6", "value": 67312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866210, "uuid": "54b4c064-74fa-4264-8bfc-befc7b46c7a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866210, "uuid": "3eb131bf-900a-4938-b0ef-3c57e27cc004", "value": "02189cb4eba782f08ad33aa469b921fd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4b63803-e706-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682825204, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825204, "uuid": "70213ac7-9da7-4368-9719-25694b72429f", "comment": "Malware payload (Mirai)", "value": "1de84450492c5d27e8882244b392fd8c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825204, "uuid": "ddb97077-03f5-434c-b8a9-73c56c35cff7", "comment": "Malware payload (Mirai)", "value": "ed99354c7f7c8e8947996aca648fba09b7ef162374f1cb506d902a73d3263af7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825204, "uuid": "c5ac2511-1a8e-467e-8328-26c2c3b3afec", "comment": "Malware payload (Mirai)", "value": "075016d188be0c0234b17355fbec2496cb0dc51e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825204, "uuid": "23b2e53a-e257-46cc-ae5e-a89d4bff52f9", "comment": "Malware payload (Mirai)", "value": "392ad87f17b6e41760f6e480135c381ac24828c8ddff0c2ffc5142ed56eeb9ba41d1e02cec26ba8c2cb3a34f4daaa35c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682825204, "uuid": "def05933-ae41-4bc7-8c01-f59d4c0a62ed", "value": "T120C2E15676239A23F2F00CB9CB78119330D60AF851D433F60554DF6D5AC1A1FBA3A399", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682825204, "uuid": "52c160d9-ecd8-4e31-9c4c-26debc98adad", "value": "768:hz9LHYppnJIaZziBe+gkKB8B6iPKa1xeMrTs3Uoz+a:h5LH6p6aU4+gk/vxGMSz+a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682825204, "uuid": "ff83d52e-1fca-4724-bc40-d52b6a80bf11", "value": 28032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682825204, "uuid": "2f326313-3174-4980-b2e5-0fe9317f028f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682825204, "uuid": "aaa0b3ef-c118-42ef-b0db-88a6a97849b3", "value": "SecuriteInfo.com.Linux.Siggen.9999.558.30813", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae3baa88-e77a-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682874961, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874961, "uuid": "ae269dd4-605a-4477-b6fb-50bdc3ed170e", "comment": "Malware payload (Mirai)", "value": "2efdcf136a328337abb0ab4f6208db71", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874961, "uuid": "85ba2678-6da7-4c89-96c0-0c60b916571a", "comment": "Malware payload (Mirai)", "value": "eff663ea2a87cd3503005ed1096a4d58c9b47794c3ef98aa6837da2af8bbf325", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874961, "uuid": "12f223b3-136d-4de2-9492-941581226a70", "comment": "Malware payload (Mirai)", "value": "2fd78884d8418562503f1f11d8e47b70fa7102cc", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682874961, "uuid": "4f8b0eaf-e2e7-4f3a-821e-3464eec3e4ad", "comment": "Malware payload (Mirai)", "value": "5e58be953ea2c393c64a9316b85eb898495127db80f2a6908209716bd0460f88ff52cb8c16469efc5c11560d25178660", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874961, "uuid": "ff9c1811-5347-44c8-b412-e6730d64cf56", "value": "T144138E76C86D9DD4C2448A78A935CE781F63F104C2671EFA1E9A85A68043DFCFA093F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874961, "uuid": "ff8974e4-4d49-4936-b45f-9a0ced2d5996", "value": "768:Xad0wtw3XyPp+leFMeyiKrKUnUAwkYNoZMCroZFkC7:XaewtwndMMFBUcEaMT3kC7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682874961, "uuid": "51c7da0d-8b26-4b1c-883c-6bd48361b9d2", "value": 42676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682874961, "uuid": "cf9a1ce6-1c09-4662-8eb9-fd52578c6228", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682874961, "uuid": "f2e4ca24-dc1b-4760-bc5a-7518db5433a4", "value": "2efdcf136a328337abb0ab4f6208db71", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8121fd22-e6f3-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Amadey)", "timestamp": 1682816903, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816903, "uuid": "f8183cb4-5407-4b37-8999-67d8144f802c", "comment": "Malware payload (Amadey)", "value": "9fe9e106091e2db06b8749e56c8c0d1d", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816903, "uuid": "1b721339-aa9e-43d3-acee-b568136fcd6d", "comment": "Malware payload (Amadey)", "value": "f142e6624dde6b1f4fb8b997e4ccb7d0deeb30955422befe3f4ea54a80c920e8", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816903, "uuid": "28d0f086-02e2-4dd4-8033-407ce18ae9f7", "comment": "Malware payload (Amadey)", "value": "acfa74b916e16690ffb2182a6efa01081ac09c1c", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682816903, "uuid": "b40d2db4-6d29-4db7-a6c7-88d4cd96843d", "comment": "Malware payload (Amadey)", "value": "b45c7b3d639e1bdea54aac66610a536b7eedb9208a1ba8eb023e79db1ff7a85f489b78e918f2ff0fec835a9739799e91", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816903, "uuid": "011da5de-6a74-4b75-9d74-fbadef8eb613", "value": "T1BE452343BBE954B6CFA313B058F642C30776BD816F2C97A3164198CF49B28D82476B5B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816903, "uuid": "06764b30-33a3-4178-9786-144cdfe17aba", "value": "1efe015ade03f54dd6d9b2ccea28b970", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816903, "uuid": "2e46ae1a-a7e0-4a02-9403-eb9c6f86cae7", "value": "24576:/yoOekXTFuFMSQa1xh9t5/sUEvYkarlsKLLY/5NGtA02HT9xaYHVNl9:KoOeKTF1SQ4fxkzvYkarDQbzSYp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682816903, "uuid": "e5528581-f9b1-4aac-81d6-def80cc4a3ec", "value": 1278464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682816903, "uuid": "884c7214-8db3-4fc9-b286-4a6494ea3c6a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682816903, "uuid": "ca2ab801-2ded-4d68-b55c-77464494c49a", "value": "setup.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80ced026-e6f7-11ed-b3cf-42010a9c0076", "comment": "Malware payload", "timestamp": 1682818621, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818621, "uuid": "e455befd-755c-48be-b4bb-bc558d143ce3", "comment": "Malware payload", "value": "faf39ac44edcb25554b72888810c55b2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818621, "uuid": "12d1197c-676e-4bf7-aa21-b331bf44b362", "comment": "Malware payload", "value": "f1917655c9baa895b247fd31172223185c198551c58f99da6984b4e9ddb0eb32", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818621, "uuid": "04195e1e-9019-46d4-8cf3-ca0e2692e7cc", "comment": "Malware payload", "value": "6ec75fd33110c15cbf7417f423b911e4da708fe8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682818621, "uuid": "becae60f-d26f-49ec-b80f-db4575b6f05f", "comment": "Malware payload", "value": "bf6222158e0aefcac0471c135ec9d6c7d38793915ec6aa3a1cb2899f0be7566b407d82e76cc7306acde409b1040bc1a1", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818621, "uuid": "05f17844-0ead-48c4-9bd1-1fb40644790b", "value": "T157247E549BB0E082C108A2355C2D2B74D22AED941B724D937B1CDD38533FA43EDB6E9B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818621, "uuid": "a5036858-7fed-488c-b92e-5f26563844bf", "value": "3072:aoiMGHW1jKS5jT4XfCYw6k72ciWLJdVyA:X5K84P8JPNaA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682818621, "uuid": "3d0cd35e-3e14-4cb5-a05b-eedcbcd6311c", "value": 226304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682818621, "uuid": "6e3f884a-af13-4f67-93f9-d946b1ae3b6a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682818621, "uuid": "ff83c0e4-f7af-42fd-9691-2be2af456937", "value": "SecuriteInfo.com.W32.A-62389890.Eldorado.27655.14660", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a2b81c6-e736-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682845721, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682845721, "uuid": "b55fde89-7c5b-4c35-9c17-5a7ccd10ad0b", "comment": "Malware payload (Mirai)", "value": "057f043339b2d192996f3da4e792c748", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682845721, "uuid": "863d10ab-d214-4dbf-a0c1-88470fc4dd7a", "comment": "Malware payload (Mirai)", "value": "f2214291b84e16ecf16df2479563cd740c9a2ec0b17c6068d2894ad1f6e2c6f4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682845721, "uuid": "3b60e9aa-b4ed-4152-8466-6ae0889b722d", "comment": "Malware payload (Mirai)", "value": "b1fe44a4c545a662305b2f12daf991700329efd3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682845721, "uuid": "76df1a01-c5a0-44aa-84e3-82baaa577af3", "comment": "Malware payload (Mirai)", "value": "37283a7df8ca6afcd02fbf901ead32e3b1f3d7e3c56fbc6cfa3253b7b3a2311287827cafd37a5687e5b35cb363d1e668", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682845721, "uuid": "2b71510b-2430-474d-8105-b02a954c3415", "value": "T1D1130856F9924E26C2D413BBB67E5A8C3370A7D8C2DFB213CC506B61B98640F4D97E90", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682845721, "uuid": "97ceda2b-735a-4d46-96e3-0dd57d9dfb52", "value": "768:M+DPF2OvG5lMFv/7mgPaNHA889aLJDOmtqKkP28otpVdPQOCC6KpfewhwbZn:V2KG5yB7mg0HGwtqK02XV1QOCC62hwb1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682845721, "uuid": "35465442-c5d0-4b9d-af31-c00c7740ca52", "value": 44620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682845721, "uuid": "b853c3b1-c247-42b3-855c-c820856c2d2e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682845721, "uuid": "3c3e6419-9c6d-4550-b789-84b112d143dd", "value": "057f043339b2d192996f3da4e792c748", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3aefa8ed-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866177, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866177, "uuid": "214a9fbd-8d56-48b9-8377-53f7bd54d377", "comment": "Malware payload (Mirai)", "value": "6e10f7141fc5bfe4560cd452ec0f4b2a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866177, "uuid": "69ef530a-b216-4344-8b31-cf5e866bc81b", "comment": "Malware payload (Mirai)", "value": "f3c9566e9977741079d3cc6f71cc2921be928e17df305bbe0c2d4cea142743e2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866177, "uuid": "39ae4ac6-59a5-4fe6-8770-78e7e3e8aa31", "comment": "Malware payload (Mirai)", "value": "eb0da94d39537297ae786191bc405ac476676ed6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866177, "uuid": "03cb73b7-b9d0-4095-a74d-4a11729866bb", "comment": "Malware payload (Mirai)", "value": "1e5c510dcbcf38c3f5be14a79c4b8c78e23627a37dcd9b685859e740d93a74f5b3261e91ccdf17910d7ad10dfaa928ba", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866177, "uuid": "4f82b638-a10d-4e83-8b75-80d8693f8225", "value": "T141A2D1BFE8960997DDAAE03B010D14DA04BB5D5413B783C23E6575B389B74E8F836680", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866177, "uuid": "77a420a3-4e72-48ad-9b38-061cef00af28", "value": "384:MOcDqRfKUWFH39z+/49ETVQrGLruI8qB+eANnlBQpMr/4oVk+v1Rph:zMkKJFH39CBVQey7qsZoMTTlph", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866177, "uuid": "3fd2ed6a-7cd6-48f9-97b9-210c9c422026", "value": 22440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866177, "uuid": "ddc1f45b-a51c-4b9a-b4e8-82e54d9e201d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866177, "uuid": "735b6573-c2c4-4a20-baf2-eb5b9d2b3054", "value": "6e10f7141fc5bfe4560cd452ec0f4b2a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d54d89c5-e706-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682825205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825205, "uuid": "28b637f2-776d-4730-b16f-8cd94f355e0e", "comment": "Malware payload (Mirai)", "value": "35379ab8e8ebaa656db7575d1f9eb976", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825205, "uuid": "38183882-7194-43d1-bac3-62eb44dcf168", "comment": "Malware payload (Mirai)", "value": "f4e48e33d6ba090c6b61ef9ca3460f244be8dc3d36c55e0d83916925f5e00724", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825205, "uuid": "51c98538-23ba-4e76-96d1-280d71f940d2", "comment": "Malware payload (Mirai)", "value": "1ccc7718504aaa19c0663222ebdc60f67be1f29e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682825205, "uuid": "bb9270cd-bc44-4ecb-ac59-3349478d23cf", "comment": "Malware payload (Mirai)", "value": "8e0df5d011c34d660aa727d40b672e7b777d5c0f08cd3dffe3186fb2689536bd84df3f2dcf71eefa9cd6144aa2805474", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682825205, "uuid": "e81d2ddd-aaaa-4552-a4f6-20f423678a0c", "value": "T12AD2D03E111549A3D149F13503F71BA20E380F239252A869F7A4CE0B9DA1DF9BB92FD5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682825205, "uuid": "efdc5072-56cc-4fb8-8b28-637402222891", "value": "768:cNwtIOp5dCdu+wqxMl2CdTP4L5lcTCiVcJgGlzDpbuR1Jp:cNwtN/qu+txMlNTMTcTCi6VJuf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682825205, "uuid": "8abcb0d1-3469-4963-97e5-bf82421ce475", "value": 30104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682825205, "uuid": "5bc00da6-116b-40e6-b806-bfbe1f9ec7d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682825205, "uuid": "3a7186cd-ca80-4b25-95df-4866bdff624a", "value": "SecuriteInfo.com.Linux.Siggen.9999.11120.22659", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc7e8e64-e799-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682888407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682888407, "uuid": "fd762f91-19e1-44a6-94bd-b48656247867", "comment": "Malware payload (Mirai)", "value": "16608f859538ee9449a82587d1b17426", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682888407, "uuid": "a3b5d157-1ac4-4d96-967b-2d4b524e6d62", "comment": "Malware payload (Mirai)", "value": "f6b35f341c069b56d19ecf4f231748fb82c34dd1d6dac1028500c72dec4bf95c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682888407, "uuid": "205c842e-ce4d-4136-a8ae-6a381cf03782", "comment": "Malware payload (Mirai)", "value": "b5e1f7d97359a04f312836fd4198031123bf569e", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682888407, "uuid": "748cbd2b-9073-4285-af99-d0fc0df6f9c4", "comment": "Malware payload (Mirai)", "value": "08bb5966a6b532e80d9294dbe404d8147a0bc1b0e61f89289752bfd2dd39cb4f747681a912924ac81d8bca850d5f71b3", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682888407, "uuid": "3e7ad631-9168-4b97-9348-c521b4a061cd", "value": "T1C313E1391285285298F57C78DFFECADF95B722BA84AEBF5108301D34949316E19B03D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682888407, "uuid": "030ddb39-dda1-4a48-9f69-2fda78f3d37e", "value": "768:mvPdLnrLG7xG7k8iN22y5Y6TfKpoDtlXIh7P5kAjE3ucTqqc9xgmVPLGOs3UozB:MFLrJw872DQeoDrODqATc9I79LGzzB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682888407, "uuid": "16d4fdea-4481-4706-8c31-510ead42ab88", "value": 43172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682888407, "uuid": "cd316ad1-f664-4ef5-93b6-3929cde47229", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682888407, "uuid": "5a41df20-bf82-4088-8081-06aa0c9d3209", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4941655-e767-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866918, "uuid": "11115844-6023-494c-8a7d-77547ad55059", "comment": "Malware payload (Mirai)", "value": "b720ec91e848d30018a293a31146e667", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866918, "uuid": "842a2815-18fd-46e1-a5d5-d780e70a9e99", "comment": "Malware payload (Mirai)", "value": "f72dfa341e1a506fc65f3d54ed468f0936821b3ced96b939e4dfa70e72a0b5b0", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866918, "uuid": "1e8fe445-cc41-48b4-bd95-a4e3e1ee79d1", "comment": "Malware payload (Mirai)", "value": "a5a1ecbfad63853864cf7dce070a23c63c9a35aa", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866918, "uuid": "97943609-0643-471c-bc5c-526b710d07e5", "comment": "Malware payload (Mirai)", "value": "a54a2402204404773ad70365de3d1efc0df31e8cdb39a57394f26f20c75e0717fc4d8005600ba29e4371a5e2477422e5", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866918, "uuid": "c70d1c20-be53-418b-b087-7fe3b633c557", "value": "T104A2D1BDFB20C18CF045847E2997267B466FE8965B94430F9E15D0CB00C39CED49AEB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866918, "uuid": "46473205-bdb6-4069-9a06-161a22b096b4", "value": "384:pDYC95A2rM7RjFrvX2V6H2XJ8LaHYsbX1chiM4HhBJhpExUC03uhHB3QJmRxkmcX:pDZ5Dw7RjFjcU+O24sDS4HhrhpEguX34", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866918, "uuid": "a115e89d-62c5-459a-9876-073679e641b0", "value": 23252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866918, "uuid": "b136ea94-b466-4fd6-b6f6-582d542ec523", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866918, "uuid": "256ea162-a586-47dd-bd60-1b00aa0cdac1", "value": "b720ec91e848d30018a293a31146e667", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29f08037-e6f9-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682819334, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819334, "uuid": "6835fc5c-fd64-4060-ba7b-49144c830d2e", "comment": "Malware payload (Mirai)", "value": "ef2582879cc633e96c3db4b3d5ef409d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819334, "uuid": "b166f43c-fe88-418c-b886-c5736a5dbef3", "comment": "Malware payload (Mirai)", "value": "f998cc2d787fb23a43e881f17a3891972d18eb1be2d3fa2f1d620749844d1446", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819334, "uuid": "a2fdb927-e028-42ed-88c7-53ca3c52b707", "comment": "Malware payload (Mirai)", "value": "4a6f527b5b04a8c20d08271d7ce6edcee48c2730", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819334, "uuid": "d1632dfa-0f76-44b5-b88b-814c714135b9", "comment": "Malware payload (Mirai)", "value": "33bd07dbd508f3e9e490e0bbb566113a05358203d4d5691694b659f066dfe2d39c2955c020c26dbf671e52c36c89480f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819334, "uuid": "f6a26e4e-da26-4ed8-a497-3d995a73338d", "value": "T17FB3F756BF610FFBE8AFDD3346EA170A28DC551A21A97B757530D828F14B24B09D38B0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819334, "uuid": "f429efce-15ee-405b-9274-e65e5cf5a39a", "value": "3072:tRMOFrJUQdkjt6OgCN7QKNlAQXEXDHK/zcnxJT722E:tRMOFrSQdOtx376HYzcxJTTE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682819334, "uuid": "f68d6fe6-5454-4251-b4b5-74e1d123798e", "value": 108028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682819334, "uuid": "ade5a2a0-385e-49b8-a43f-4b5880bef5a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819334, "uuid": "faf3c238-f5b5-4d53-af0f-904548f02b78", "value": "ef2582879cc633e96c3db4b3d5ef409d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54a361e1-e764-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682865362, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682865362, "uuid": "e6d0b23d-fb9a-43d8-b77a-33c46782622c", "comment": "Malware payload (Mirai)", "value": "4ce9fb86819dff8fc5d4b6fd10d6e21c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682865362, "uuid": "9a39a2e0-a02f-49c9-ae82-8783eec59fa4", "comment": "Malware payload (Mirai)", "value": "fa03e096f00eaa3a3af87c2d5ce01e0da0a1036aad9e5633306b82b979b10cd5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682865362, "uuid": "6fd7d335-eb08-407f-9098-4c43a71ec444", "comment": "Malware payload (Mirai)", "value": "3c1be1fc8f25bf0a1e988a3f6cc8d19a6d7b57fc", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682865362, "uuid": "e99bcba9-3787-4125-b1b8-fdc12182a22d", "comment": "Malware payload (Mirai)", "value": "5319bca796ecd749599a5d972aebd937abc893549151f0d62bf26a11dfa433f36e8e7f41d46962988f44405260e2e5cf", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682865362, "uuid": "b02a5576-608a-4f8f-a077-c5cff32fb4a7", "value": "T165633B9AF802DD7DF81BD77A4453090AB630F3D502831B37639BB9A7BC721991D22E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682865362, "uuid": "b40108b2-b0b6-4067-a0c4-c5ffa6820660", "value": "1536:UEgwFPtJcSqDYb/7O8V5jc1vxZ+45dJm7+dbsWhjQsa:UEggPt+pET77c1pZl5/mWdZa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682865362, "uuid": "4cb7fb8e-f429-4e57-91dc-d1042d98c44b", "value": 69628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682865362, "uuid": "3f8f3fc6-3d48-4900-b7e7-3ec2704466c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682865362, "uuid": "c1365e71-a19a-4828-8f96-66b07b698785", "value": "4ce9fb86819dff8fc5d4b6fd10d6e21c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f07d8ebc-e755-11ed-b3cf-42010a9c0076", "comment": "Malware payload (AgentTesla)", "timestamp": 1682859181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859181, "uuid": "791cefee-62ef-48de-89fb-0cf1b5e7d6c5", "comment": "Malware payload (AgentTesla)", "value": "a28cfdf97a4e09f44d1ea0dba19d5f56", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859181, "uuid": "7722a78c-15e3-4838-9a7a-649d0130bcb7", "comment": "Malware payload (AgentTesla)", "value": "fd575fa04eb0f1c6fd0782d08279646cddaddd8f93f8a208d331fca14c841e36", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859181, "uuid": "48bd60e8-6d2d-433e-8b37-9f9a86c90461", "comment": "Malware payload (AgentTesla)", "value": "f406a790fb9ddf10cdcae1f9d1ff624762b4e1de", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682859181, "uuid": "b6b854cc-9351-44b5-b177-985bcbb99081", "comment": "Malware payload (AgentTesla)", "value": "5b9533f395f28246adc52653f4cc2a97a8a15f3cd0aacdcbd185da487c96aae9a82ac4ec66978b2295a8cd6700b04ce8", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859181, "uuid": "e94414db-2d9e-49ea-b479-75b5bfd63413", "value": "T13DC47C3C29BA5627C0B6C379CAD48427F160AD6F3021EEA954D733A64353B5239D327E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859181, "uuid": "5e3fda21-34a1-4f7c-957c-f91f565cb3a1", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859181, "uuid": "6e810cd9-b8ff-4546-b6d6-a351d512046e", "value": "12288:faU18KqnAozK/HrVPI247F+543WveFgF3fiCuBstEV:fJ1gnCBIx7lGvkgFPiHstEV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682859181, "uuid": "7cc5273f-b705-4f00-90fb-a4b485803426", "value": 583680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682859181, "uuid": "a3138fa9-5727-4fdf-94ef-b6b634d993a0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682859181, "uuid": "0b70b7e7-b8b6-4c72-b660-7801f570682b", "value": "NOA.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96c93934-e75e-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682862896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682862896, "uuid": "c5f46aed-764f-4115-ae01-7d0e140ea082", "comment": "Malware payload (Mirai)", "value": "0ffc331826ec6d5fe7e9614c79a8b025", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682862896, "uuid": "a571898e-10ef-436a-b60f-3a4733febfaf", "comment": "Malware payload (Mirai)", "value": "fd989857f6ef48dced9b6cb3f4fbe1790f4aff65fe1642970cfe930c621b9532", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682862896, "uuid": "6615e377-58cf-4c5d-b65a-0b25fc7591b7", "comment": "Malware payload (Mirai)", "value": "596defca7c067fdfb78ee32b9552fe6b55297d55", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682862896, "uuid": "76b982dd-e6e4-4eb7-a8fb-7f36e42f5364", "comment": "Malware payload (Mirai)", "value": "102f15aef67e4ecd62cacff24d59c146ada17271ee8c700b59782e6efa773b2fcd2885433c9be4a09f2b75399554bbb2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682862896, "uuid": "ecf5a639-0cf7-49b2-aa0b-94587169d5ee", "value": "T11E436BC4F643D8F5EC8705712077FB379B72E1E922A8D643D3B4DA32AC52651E606A8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682862896, "uuid": "085f58f3-83ec-457e-80a8-cfa0fba37f2d", "value": "1536:JeESt/basV2rcZhG6+KN7Tqw9qpFzWOIaEjrqM0s:JeESt/basVTgW7Tqwwp9tXESf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682862896, "uuid": "8fabb8e1-4da1-4842-a086-0fe46d483320", "value": 55632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682862896, "uuid": "904caa23-bcb6-46bc-b614-d7771232fc3b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682862896, "uuid": "84806970-81fc-4d7b-b8d3-a1d4b1fd8cb9", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f81fc514-e6f8-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682819250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819250, "uuid": "86f53db3-84a1-4eb7-b9f5-841c35d23ce7", "comment": "Malware payload (Mirai)", "value": "134afd61b71b2c9b0a58cd8575911cb4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819250, "uuid": "4bbe5f3c-fa4a-46a6-89b0-a95c11ad5ff8", "comment": "Malware payload (Mirai)", "value": "ff4d61b55f05d3bd02bcba59718d0f9095ca17925fd280044c19f5fb0a1acc26", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819250, "uuid": "0e2dfc56-a902-4f2b-949d-f3bc448a0c2c", "comment": "Malware payload (Mirai)", "value": "809cbc611db4c1408d3997188778daac831be254", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682819250, "uuid": "c3893b99-e288-4874-98e6-0e4ba0ce4fa1", "comment": "Malware payload (Mirai)", "value": "161c6a1d7c15db8b23eab7e1e56b171df5e5e43e4812d004170c14882e004fdc9e1dd60832683394981d91836dfda0fb", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819250, "uuid": "fa7e488f-d6e6-4d8a-b1c5-e56d9f44b92e", "value": "T1D1F2E791F8815627C2E013BAB6AE5A8E377077ECC2CFB61BD9214B247A8551F0D63F41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819250, "uuid": "9405a6df-d8fd-4bc2-a1e7-857e28d4a52b", "value": "768:0Tq7Eit5CoG5kOpHGSCwZlZlatSQ19FI4Ri45iheGrBoUZwn:0TK5JG5kyGSn3l0cuq3rUn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682819250, "uuid": "ab618882-f874-4d67-8190-84d1e9f672c6", "value": 35144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682819250, "uuid": "ea1e596d-9ec1-4ca6-a28b-89505a9add75", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682819250, "uuid": "8246a7fc-5769-457c-80f3-7663b449b4bf", "value": "134afd61b71b2c9b0a58cd8575911cb4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35ef89d1-e766-11ed-b3cf-42010a9c0076", "comment": "Malware payload (Mirai)", "timestamp": 1682866169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866169, "uuid": "ef14d98e-a388-4dd1-8a31-0d23a6a0766c", "comment": "Malware payload (Mirai)", "value": "2b51a096ad5f8b756f8f62cc7b35b5fe", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866169, "uuid": "65409814-4b8f-4244-80a0-474c3a38c704", "comment": "Malware payload (Mirai)", "value": "ff9b430c7aac038627a54325fe1bef44fbc6e33e65e8157ccec6329fc75830dd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866169, "uuid": "c7b47b9a-e006-426c-8020-8d2118fd37e5", "comment": "Malware payload (Mirai)", "value": "9ea93ec7353280b599f3c8e5ab44ffede308ff2c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1682866169, "uuid": "7338d11b-b40d-417a-add5-807ab28c2691", "comment": "Malware payload (Mirai)", "value": "0aa2b3fedc70214f783091ba1fd8ebdef1284455953b8dd5567d1390f307a001724eb80a95c14d2996fb0f43d193aed8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866169, "uuid": "effb229f-d978-4783-9e49-7bc8f049fc7d", "value": "T191632851BC819A13C6D1127BFA6E028D3B2613E8E3DF73179D225F2037C696B0D27A55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866169, "uuid": "541b198f-4a9b-4ca0-8559-cae883eabe27", "value": "1536:mN6lxMmiioB1k5WO//kWYzUoioUbgo8DNRu9AvHW0:mNbODkRIoioUb3ihHh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1682866169, "uuid": "00c4b3fe-d4ff-4f6d-a684-ca8e77b9ece1", "value": 66912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1682866169, "uuid": "f74150bc-7e22-4a18-bb36-6477648cb76f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1682866169, "uuid": "45a2981f-8705-46e4-9744-65f25e59742a", "value": "2b51a096ad5f8b756f8f62cc7b35b5fe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ] } }