{ "Event": { "published": true, "date": "2023-11-19", "threat_level_id": 2, "info": "MalwareBazaar malware samples for 2023-11-19", "timestamp": 1700438581, "analysis": 1, "event_creator_email": "bazaar@abuse.ch", "distribution": 3, "uuid": "dc767316-e62d-4ad9-9cb4-9439f55fee66", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ce429f4-86a7-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700376252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376252, "uuid": "a7169d13-a3b6-4199-b697-3178347e0428", "comment": "Malware payload (Mirai)", "value": "30cc0547ad713a13a71d5ee276cab313", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376252, "uuid": "46667df6-3dfd-44e7-ad86-20806f79d5f5", "comment": "Malware payload (Mirai)", "value": "0139bd2273ff8bf556de79728c9309189bd1cd919fa8c0ade75b63e047b29414", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376252, "uuid": "03a5afd3-3711-4f0c-adb2-671069b5bba5", "comment": "Malware payload (Mirai)", "value": "9186c989c4d8c377f2379b4937fd9e2f09a9cd1a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376252, "uuid": "fd42edab-66d4-4610-a61b-289f353a2723", "comment": "Malware payload (Mirai)", "value": "fdff2606e65a293ef689b1960fca4cb074a915858c778ea7aa247753e5ce5895e7bb7ff4504dee6939666573244bac87", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376252, "uuid": "e88e4555-da32-48bc-a12f-bf4e609350f4", "value": "T195C2D084F0458E41DFEB69F03E50DAD6BBD42F5FA9668E8126A053D2AB0D3A34305DCC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376252, "uuid": "b14e5a99-357c-4d07-8219-be190a074ec3", "value": "768:tVdafO76jpmNJJKehmA7trpfIX9KeA7PMwb4uVcqgw09C:Vam+AnKehPRa9a0M4u+qgw09C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700376252, "uuid": "4e1422a5-e625-46c2-b8d4-c73fdd0b55ba", "value": 27048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700376252, "uuid": "ea603dbf-5d03-4173-91c1-753f46a172d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376252, "uuid": "e63d9147-6aa6-470a-8a5c-1081406d2529", "value": "30cc0547ad713a13a71d5ee276cab313", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "704b08e8-86ad-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700378996, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378996, "uuid": "8d72763e-2d7b-4f98-82fb-aaae225d4181", "comment": "Malware payload (Mirai)", "value": "53b7295183fabb59b045712676fa8119", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378996, "uuid": "5f5ab94f-5b03-4ecb-a33b-68c5b4fbb86f", "comment": "Malware payload (Mirai)", "value": "02875cb0fb284da3c77efa38a857c5cc519793c598bd4576e60e555cc5a85627", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378996, "uuid": "4eba09b4-bb03-4610-9f4a-17ad88c94667", "comment": "Malware payload (Mirai)", "value": "a0428aad3767d1ff9e668c8bdf5e8160899cdd82", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378996, "uuid": "a5abb969-a6b3-4069-b397-9e4d4bd0289e", "comment": "Malware payload (Mirai)", "value": "01ff172f6db2c67876b2cd79deea939c22735e402edaa2e650bb0df1a229fedaf071fc99b6f70330303afb630a1ce446", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378996, "uuid": "8d8f9a5b-2e83-4905-8e2e-f4f8a9875963", "value": "T190336B36E029DED0C6560234A4E88F751F03F1C893536EBB2AE546B2645396CFA19FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378996, "uuid": "85fa110a-05a5-418f-866e-1c88971250ac", "value": "768:Oa2vU7eng2qGJert7LrLMU6fgatQh+YbT/9+m3CZQoV/bnmCozw:Oa4U7G7SvT6ftBTm3KVrmCo8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700378996, "uuid": "e184343c-7d7b-446a-b51f-4bacd6423ea9", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700378996, "uuid": "463473dd-f54d-44ee-b443-c680f0d361bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378996, "uuid": "196cf756-cf45-4ce7-9a0b-c794d4b296d0", "value": "53b7295183fabb59b045712676fa8119", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "984ec4c0-86ae-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700379493, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700379493, "uuid": "88a9a283-f313-4060-afcd-a4de33badb6d", "comment": "Malware payload", "value": "8a6da51d7d1724bc1deace44738eb200", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700379493, "uuid": "784b94b7-4dcd-44b5-ac55-de3f26faf15b", "comment": "Malware payload", "value": "02a5ad2c8da865b5e1d95a8853db1cb50181caabc05a9a3d55dc858a989e83e2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700379493, "uuid": "6810c486-7d29-42ab-9efe-be032590e1cb", "comment": "Malware payload", "value": "00c7bb8632d5ba12df4bf1b8a0fe08063b8abc47", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700379493, "uuid": "249f1723-534e-4fbf-9271-a7f46049fa77", "comment": "Malware payload", "value": "e0d6678cd0e5f6f354ec540f88dd8e2a3c3cdd67bc468c202cfeaecf934184a261fff5450be243ecfea1201cfdd4c7b7", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700379493, "uuid": "5d363932-4988-4460-8ddc-47ac4aeb6912", "value": "T1EC559E71B502D037E1A101F5A67D9BA612A9BA301BAB08D7B3C05E3D95F2DC36235F27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700379493, "uuid": "1bfb8ee0-d2a9-4b70-b418-44d472e038f5", "value": "7482a1595744a3c77ac9461f3f27a729", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700379493, "uuid": "7ae0f360-52ca-4b1c-a234-61ce69fa1d7c", "value": "24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJgrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TIrK5Zln2i6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700379493, "uuid": "a1d903f1-1091-4633-9117-8687056b2fc2", "value": 1322168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700379493, "uuid": "a4e9af63-597b-4bd1-a5ba-af3c934d5ec6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700379493, "uuid": "cadd8d45-06c8-4b1f-9df9-8f149c2bbade", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58352ad2-86d1-11ee-8907-42010a9c0042", "comment": "Malware payload (AgentTesla)", "timestamp": 1700394418, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700394418, "uuid": "599a9a41-5350-46c2-93c7-fa1b4613c5a8", "comment": "Malware payload (AgentTesla)", "value": "bac229d28544292d41b53ddc974a7444", "object_relation": "md5", "Tag": [ { "name": "RFQ", "colour": "#3BFA63", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700394418, "uuid": "f322ecc1-ecba-4d08-9c38-d4f41ac363ef", "comment": "Malware payload (AgentTesla)", "value": "02b7bfbcfc56051e5d13c9ae72f4c4728f52da4c6584eda568949da03a937ccb", "object_relation": "sha256", "Tag": [ { "name": "RFQ", "colour": "#3BFA63", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700394418, "uuid": "81630344-0ae0-48f9-a307-c73d7ee4ea1d", "comment": "Malware payload (AgentTesla)", "value": "b19ea96ef7a6f605cde4caabde55494a7d1cf992", "object_relation": "sha1", "Tag": [ { "name": "RFQ", "colour": "#3BFA63", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700394418, "uuid": "62c8eb0e-61fa-4e27-bd8c-95e4460c9491", "comment": "Malware payload (AgentTesla)", "value": "d86163c9962765bfa4d99991f171fb8130299d122d5137e368f9d0f50ee6a73e78e8d63af010c1f06821479aa412d9e8", "object_relation": "sha3-384", "Tag": [ { "name": "RFQ", "colour": "#3BFA63", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700394418, "uuid": "4b976ebc-8676-4c73-960e-c756cb6ef3f5", "value": "T1C2D4231388BCD090CB02CD4E0023BBF566E58C5A5FFBE2BC4590ACDCCD6DA5A69EE055", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700394418, "uuid": "b06fc842-557a-4f4d-91d7-06a83239f2ec", "value": "12288:xFXl2mA/CJD1BLAai8o37OqSwj9ORzP9gtM/APdILNVjlcnx47eJgNvz+QEwx:xFC/CN16R88Swj9ONPeM/GeVj6n2o6v3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700394418, "uuid": "21803322-ba6e-4e54-8b3a-2244f106d979", "value": 615111, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700394418, "uuid": "a9b71ef5-2daf-4781-808d-4c1ce80e5d06", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700394418, "uuid": "fc7a3af0-25dc-4934-bd1e-ca687420a7b5", "value": "RFQ.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d44e64b5-8692-11ee-8907-42010a9c0042", "comment": "Malware payload (Gafgyt)", "timestamp": 1700367568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367568, "uuid": "322282e6-caec-4f39-b35d-5c21880b5778", "comment": "Malware payload (Gafgyt)", "value": "db602533b53a6e39f1ecb5edab8f38a4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367568, "uuid": "7b7830ff-b978-4603-aa99-1c1d1618bbc4", "comment": "Malware payload (Gafgyt)", "value": "050b7d1b759c4fb53e5ddd8ae1d0800ed9121c732e563270c4cd3fc692d1a6a3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367568, "uuid": "2fa2f924-1b6f-4830-b074-317cfe2ac6e9", "comment": "Malware payload (Gafgyt)", "value": "3c0b79721354bb147efc004690a85a994e1112ad", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367568, "uuid": "edf6e5af-b64c-4e73-a3cd-bdf535ec9272", "comment": "Malware payload (Gafgyt)", "value": "ddb3a423231db89be3b94de081e4029ff6fa3765cd424666c8477acd036ed9d1c24a7a3249cb036dc0a5d7c16e6edd11", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367568, "uuid": "97e6d87e-b07d-4853-891a-012d2107bc03", "value": "T1A4B3D86A7921AFFEE06883310BF7AF20C7D521D626915386F15CE7585E3128D2C5FBA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367568, "uuid": "12f9dcd8-91d5-49fd-b0bc-fded9a23cd3e", "value": "3072:C/4g3Kd1r45hZmxgA9OKdwwjF9GhsR1Ae:O9an45hZLHKdwwjF9GhsR1Ae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700367568, "uuid": "f73d5104-3d2e-47b9-9cc4-a3cc0ec78893", "value": 116503, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700367568, "uuid": "ddf8da11-7713-4c53-a9f5-81e032dda3fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367568, "uuid": "e79ceae8-1bed-4182-b428-b3e7ae8f5ba9", "value": "db602533b53a6e39f1ecb5edab8f38a4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4d38aee-86e6-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700403619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403619, "uuid": "4bf18fd5-312c-44a5-861e-26e4fa245d20", "comment": "Malware payload", "value": "2c953e98e873ecdaa68d6de36b19b2a9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403619, "uuid": "770a4eaa-0dfe-4e33-8339-235b89de75af", "comment": "Malware payload", "value": "05343f5cd3d82f5e10a08832924e811ace699effe6543c4855d3467a238ca7b4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403619, "uuid": "efbe2a15-c261-4f20-8833-91c8a6b1e7e9", "comment": "Malware payload", "value": "059e237e66d7f7765533e0f648579cace2f1aa2b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403619, "uuid": "06ddda2c-d198-44f3-87d7-cf1aee513a24", "comment": "Malware payload", "value": "885e8926d44fe257e0f8ba4570bd232de1361da961036926f07036ebc979cfe704aea487ac5e77d830f0f8e363ed5c6a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403619, "uuid": "b23f5417-01fb-4a38-acde-8ab125e4ff3e", "value": "T1D6058E02B6CA01EBD2151AB1045A77319E3FBE6A4B1DDBC3D254EE5D3A26BC06D32136", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403619, "uuid": "aa4f15d6-9451-4dc2-b7c7-7bf9f8c822ce", "value": "12288:b/iSCVZA4DHxCtuwAi+yx6ukap/8E/ZzdFaYd:b/t4jxfy4ukayE/ZzCYd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700403619, "uuid": "bc8b25bb-f8bb-4e0b-a5fe-8dbfc07bc17f", "value": 856064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700403619, "uuid": "f1784558-9fbb-4cb3-9f7d-c2a54d2a8480", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403619, "uuid": "42413fa5-f427-4619-bd13-671ec3741f67", "value": "SecuriteInfo.com.Win32.Trojan.PSE.15IBL0F.539.4585", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b61f17e4-86d6-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700396723, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396723, "uuid": "d51eab06-fb23-421f-8d48-54ba7cf9fdc5", "comment": "Malware payload", "value": "c09bcdb9d13c5547503b43f3aaaf505f", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396723, "uuid": "e28a7fc2-5d71-45aa-a58d-22617912ae33", "comment": "Malware payload", "value": "088ee068d6b500d090031b5ff2d50ae7031defddd1b0321edee6817b14b10286", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396723, "uuid": "03bef73a-ec4e-4c4b-bcb9-e85e3ae293ef", "comment": "Malware payload", "value": "07a13fe544651bc4353d8db7b8a609732fd09c8c", "object_relation": "sha1", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396723, "uuid": "3844905f-8cc2-4096-8504-e4611f7bb318", "comment": "Malware payload", "value": "9ed997fec5a0739a989e8824fe485cddf38b214805c9dafae26482838f7a10fe54b07aa43f4e28da7c63085e8e89e6e0", "object_relation": "sha3-384", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396723, "uuid": "f7db8a29-ccda-4e40-ab47-6f0111b4b7e4", "value": "T14563011120C5BB81EED9C88C07E4A4195BE42B6ACF542FABC5FC8395D0BDF795E600E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396723, "uuid": "54aa0f01-7b47-4519-a945-05585d7e7c64", "value": "1536:9qBIX1POik3A4pzNi0g43NNLxtThDoNn50c1EpzC68+rDlM2433aYpN:kBI4quzNiINLxtNDo9KcG84RMr6YpN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700396723, "uuid": "100bacbe-6c2f-40bd-aabc-36d5b9948de6", "value": 67600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700396723, "uuid": "f7972597-cd01-45f2-be30-2d7c3a5612b9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396723, "uuid": "393249f0-5fa9-4e83-a644-486cd8b45565", "value": "Launcher.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9391a2ae-8675-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700355004, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700355004, "uuid": "fd75e556-1da8-48ff-81e8-f3e66d04f10f", "comment": "Malware payload (Mirai)", "value": "9e1a78c1b478dea241487bd8a202d2a9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700355004, "uuid": "5d8433be-7f32-428f-96f4-d666ed1b2d6b", "comment": "Malware payload (Mirai)", "value": "08f59dd7c4842a1a9bfab08acbbcd8824d5313f96cdb67bf5b6080f8bf068adf", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700355004, "uuid": "71fbe357-142e-4b88-bb66-02fb8b53cf8a", "comment": "Malware payload (Mirai)", "value": "e576183b2ddba5ba9da90df4dd1079d1abc4e93c", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700355004, "uuid": "1b93eed5-5f04-4263-9b5b-61cc54fb8fe4", "comment": "Malware payload (Mirai)", "value": "e524e7c6344bed9335ba188e4ec818aa1e88689b55722689a5442694c5c9f6aa9f9682ca7f8f3a691c1b11c70cf17510", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700355004, "uuid": "58823db0-5873-4550-82c7-33da31b5a039", "value": "T182C2D0B0F2825D85E09AF93F597F3A0A0127E33B94808475EFE4017E96D1E3C6A1C322", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700355004, "uuid": "3188156c-ce45-40b1-a98a-fca5093d29bd", "value": "768:PGial7golMRlk7yGVderT+VXuycO01uZ2enbcuyD7UiyqP:PhZRlA7sIzcpukenouy8ZqP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700355004, "uuid": "a00aca75-0994-49ad-8d32-89b3a485c11f", "value": 28168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700355004, "uuid": "612f64d9-2f90-4841-8825-a9519c9757f4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700355004, "uuid": "69277007-7ab7-41eb-b7da-b1c7dec3a769", "value": "cool.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec49f654-86ff-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700414423, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414423, "uuid": "44250661-8a69-4b85-a2b1-6e609766cedb", "comment": "Malware payload", "value": "e2826d33ddb673224a4318c8a60f7d2e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414423, "uuid": "55f46cb2-da76-4306-a710-59825e2fab29", "comment": "Malware payload", "value": "09286b7a8c57a7df5aaa32bc366b3a6df1b8b01f7954424ae884a571f6d21b0e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414423, "uuid": "6b5751c4-a63f-4f76-b99c-dea08e39cd0a", "comment": "Malware payload", "value": "ddf413a3e3a4f512cd944411dad89588d4fc584d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414423, "uuid": "5cedd116-2424-4ded-8142-907a5d1b436e", "comment": "Malware payload", "value": "0792a9265014c97b404a910b99d059dba562507d1b7ae0225e9c4e411bf68dbd9b5c53f77b5fc14a3bd67e55cf2abebd", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414423, "uuid": "e84477db-052a-4337-af25-4a5cd23a9add", "value": "T17E479628B4DCCE17C94453BD9183C4E272A5B85BAB87D71B36C5EB3F38953A089671B0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414423, "uuid": "8e49d919-36a8-45b2-97c2-dcd451429200", "value": "9ba998d095f19ccbab070722c0b693ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414423, "uuid": "5bcd3d41-20d0-49f2-9761-8403fd4afac5", "value": "196608:mwKthQ1YsG0EPK/1rLIP3TrlbkxEV4P6rIzDfuxErCU:e0ZUfkzDB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700414423, "uuid": "d906495c-d1fc-4363-95c1-0941c2c407f7", "value": 25583041, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700414423, "uuid": "59adca94-a848-4472-8e22-69eb0e6a735f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414423, "uuid": "69d3c031-0d21-4bf6-a1e1-745e55fdd280", "value": "SecuriteInfo.com.Trojan.Backdoor.Hupigon4.5731.22203", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c41fb293-86e6-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700403618, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403618, "uuid": "896f17db-4e10-4b3a-b74f-ff52705b1130", "comment": "Malware payload", "value": "b1063014514bb28892af7f06182a4624", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403618, "uuid": "01b0cef4-b193-42ab-b880-37c527716e3e", "comment": "Malware payload", "value": "0a4971dcb11571c926a1c7b89638d70908a0fa67c3aac017df82ecfc48f01184", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403618, "uuid": "568bb9d3-1ede-4554-8f5c-74bda5fb677a", "comment": "Malware payload", "value": "5e17c5ae1708951fbcdb7fba6e896cd8336488a5", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403618, "uuid": "114125dc-1742-4a80-8f0e-e57b9b4f69a7", "comment": "Malware payload", "value": "535c45bc4d4d31ce24b1e261601fa7df97c7fee65b9285545d904050debaee245c6b6c297d0f95ddf19b978d873f90f5", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403618, "uuid": "76550d29-3760-4f76-96dc-4ae627764726", "value": "T142E48E02F7C784C6DED278B1197FE7126F2AE518532A44FBA3B45C334B51481AA2D7A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403618, "uuid": "d68f64a9-7b1a-4701-ac16-30fd3e494301", "value": "12288:WPYU1gi0BQVKBOkTix6Bg4Y3GgZfLtFBV:U3iQMUd6e4YDTBV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700403618, "uuid": "5a1298c6-5783-47f5-9054-a6a514863a4a", "value": 712704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700403618, "uuid": "cb0a2faf-a434-4437-8c55-6277b200ad22", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403618, "uuid": "7cbd423e-a89c-406f-9d7d-cee3e6231478", "value": "SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.26905.482", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eeb27fee-86ff-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700414427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414427, "uuid": "7bac64da-e37f-449f-90ea-3d02e1658db9", "comment": "Malware payload", "value": "1e9528b5d48db45367620a5a9f591572", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414427, "uuid": "f4fb104e-6895-472e-8dca-c8facb7a0168", "comment": "Malware payload", "value": "0a4bbfb3fdaf8f538aae19fe387bebfe3ede21ff409054ae28bc8be5befd886b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414427, "uuid": "76d12de9-0f9d-46b0-b056-a4f819dfdbf2", "comment": "Malware payload", "value": "7f60c096f5de564a2730e2b279a8546ee5a945d4", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414427, "uuid": "33665bce-dc9d-4b56-aebd-3eff36ef30c5", "comment": "Malware payload", "value": "2580179738f7c9fbe27dd95002bed63d50de28a2428e4f61fd5347ff9b0315d31e7e86fbcbe9ee82c13bc41090d87828", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414427, "uuid": "5ae323c1-e9ac-4d85-9202-58bda4992ca6", "value": "T1C8157D43E69380A2D35B223109DE77365D68D1670E31BBEB82E4CEAEAE23C714C77551", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414427, "uuid": "162b267b-3a1e-454c-8538-3acaae01e4fc", "value": "12288:e5ri6+qq7YSXFKC8a/rsJrIqxLiYv4f2zN3uSkJ:e5rivYSXuazsFjLiuN8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700414427, "uuid": "2062e254-4e18-42ad-921f-de5967dff35e", "value": 897024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700414427, "uuid": "415caca3-4c7c-432c-9573-4091423dcfd2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414427, "uuid": "713a9f6e-4b38-41ba-b081-d8a2ff2af446", "value": "SecuriteInfo.com.Win32.Trojan.PSE.1S437JY.30385.32133", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35620b9d-86a0-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700373314, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373314, "uuid": "571c3937-f727-46ec-95d1-3a07c1461d9d", "comment": "Malware payload (Mirai)", "value": "7727ad320d3791ca72873407e5c97110", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373314, "uuid": "f0ddafb8-1792-4676-a3be-b3728b25460a", "comment": "Malware payload (Mirai)", "value": "0b8202bd11e49e2b5f356dfacf56a2b8855a86f18d4a4b197182c6748c18eed7", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373314, "uuid": "9c76d6c0-2115-427c-a4a6-f00fcecb1175", "comment": "Malware payload (Mirai)", "value": "5287f44819173cab64ded09126b775fee53d025a", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373314, "uuid": "8a402973-28fb-45dc-927d-72056cd18a37", "comment": "Malware payload (Mirai)", "value": "892d2fb8e1108228320d6e9a5188ef3ba3d2ef41667402a93b1900a827afe56dfa50b22c52b690dc238434753413e49b", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373314, "uuid": "7a096374-8709-4c29-8aa8-865ea1b0687c", "value": "T16CD2D0EBF2CBD4F4E4F584B8516C10C0F4A8339A572487FF049A62BE88726DA1635F91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373314, "uuid": "bbc3865f-a5aa-4f8a-ac55-2c451b9b5627", "value": "768:kYSoXdJZtUjkFfNJlVrQeHvPx2csGHErSx0sv:kYJdJZGjkFV35/McrJtv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700373314, "uuid": "e5f2e0cd-1c6a-4913-b108-083c4804cee3", "value": 29440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700373314, "uuid": "bc6e2217-3ebe-46bf-ae27-c40ad42ab21c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373314, "uuid": "2d0dcb15-1441-47b7-a074-6ffcaa90253b", "value": "7727ad320d3791ca72873407e5c97110", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8b232f0-86d5-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700396324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396324, "uuid": "70966be7-904e-41e7-9c14-3f4e6adece8c", "comment": "Malware payload", "value": "74f468bbfea77390b32d574fa2980fb8", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396324, "uuid": "31488426-79fc-4d55-8226-ba39500daba5", "comment": "Malware payload", "value": "0bbfe17f684a3946b76fc48fd788b632cac3ad8b4a60ab6207a35d0d80584758", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396324, "uuid": "8be4f3bb-8c4f-4464-b766-003df84aa3e7", "comment": "Malware payload", "value": "180c8e75602d8db6779ccb535d293573a097569b", "object_relation": "sha1", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396324, "uuid": "20ad0611-2aa1-4f15-84cb-cc10f0613b22", "comment": "Malware payload", "value": "abb9b71026f915e13aca40b4735dbf364ed9a96ae3ab2d9e087942920095df992215e31bf4526b64ad8883c6d4e60f03", "object_relation": "sha3-384", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396324, "uuid": "03b43ced-2fb4-417a-a2db-472d9d805de8", "value": "T18A4612C80FD102BBFC1DFDB7A66835B5C088FC589A14CDE364F896159A6631BC263DA4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396324, "uuid": "e8d1fca8-0f1d-4ae9-9034-0657820b4843", "value": "203d63d5d9a088e2d84cef737227986b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396324, "uuid": "c7d0da04-dfe0-4ccd-b611-7b791884ea5a", "value": "98304:GyEIjcwBZtneE64ee4j/Dwwdi9q8PyvCF20c4xc6l6RjU2yc/GbYYaixz:tjDXtZde1j7wwI0vCk1sejU+/iawz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700396324, "uuid": "9b9bb1f2-c4be-4114-95d3-bda709623e02", "value": 5566240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700396324, "uuid": "a0e6bdf1-a1dd-484a-8880-fa3ed5b68613", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396324, "uuid": "9e1a7753-b74a-467a-aa55-7821ec87ca63", "value": "mupdater.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c65a879-86e2-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700401807, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700401807, "uuid": "459ed07f-a900-4944-b26b-10cb74cb51f9", "comment": "Malware payload (Mirai)", "value": "84d0da0465d929bf1156ce4b1835216d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700401807, "uuid": "ffd300d1-1c61-4776-ba66-bddd40d0311d", "comment": "Malware payload (Mirai)", "value": "0eb97664eac5d0a722b5e7a9c6af03e7fef37b40fc0865265a8b94d9aef46b84", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700401807, "uuid": "e5f55316-1ac2-4942-83cb-165c509ebe87", "comment": "Malware payload (Mirai)", "value": "d26f47c48887d2db74c918c69e9a63f277e1800c", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700401807, "uuid": "2d5324d6-9e41-46f1-b1e2-b63fe0145c37", "comment": "Malware payload (Mirai)", "value": "80d3c45e8df6bde6fd6e50dd348e9cdc314b382426fe4b641064b483f7094e0c6e8343f7b96342dc880e7881e34c8cea", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700401807, "uuid": "869c360e-6a58-40bf-b169-a0506405b313", "value": "T12BD30945FC405B23C6D612B7FB5E428D3B2A17E8D3EE72039D256F60378A95B0E36642", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700401807, "uuid": "8a5c64c8-de8b-4279-9eeb-3f3ca4d600be", "value": "1536:EHQeHIjFlPz/rUFQsO/lFcAPWZf4VTyqsTgDdw4vb7u2/IIdWl1k9wyw2FR4soWm:EHQezFQ59FcT4YZMDdw4dAIcIFibF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700401807, "uuid": "01b4eea9-cd01-4b67-89ff-748673f02659", "value": 133888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700401807, "uuid": "dd7fe7a2-25b0-40c5-9c78-90d35a70e85a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700401807, "uuid": "bf7438d0-0501-4109-a8fa-5e9693a12d1c", "value": "bot.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3512a6c-86ff-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700414435, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414435, "uuid": "b933333f-1ddc-4f95-992d-0f0c8c99bd62", "comment": "Malware payload", "value": "93d1ed899dc054054ec8501998aed423", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414435, "uuid": "0980d3cd-1f5e-45e5-8737-ab266b2cca52", "comment": "Malware payload", "value": "1003cf567cb855d623fd502f2fe4ed869b64a3d582d19fb9b3f014596d0320f6", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414435, "uuid": "270cd372-dd25-4793-9a45-229478e6ed36", "comment": "Malware payload", "value": "85b6ed2d89b782fb5db986a0a76549f8c9aed6bd", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414435, "uuid": "d1c458f7-a681-4577-9c0a-cf25450c730e", "comment": "Malware payload", "value": "bc75d69e07b610c4c120b3ef64ec6086905b7f750f7a0732102b68bbb26bdbf5cba9305538e493316f6dbaaec685aa7b", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414435, "uuid": "f4ddaea7-e820-4d57-86fb-ebf1c4d7ccef", "value": "T1DD64F8313453CC12DF08AA36E869F77EA2057EF67129857F52A4FBAB61371D1202D70A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414435, "uuid": "d7a8f7c8-e92a-490d-9591-272aac4b2523", "value": "3072:RzPmMSsZgsoo0YpHX7AOOADjIWdNvVN+NHQYTGwoee7O/LIlu:FpSqG7Yp37iidDwTlqO/LI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700414435, "uuid": "aed9b041-9258-4ab3-8b1d-6cf81bbea8a8", "value": 323584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700414435, "uuid": "ae44d8fc-c82c-4531-b61d-51b78a763866", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414435, "uuid": "54218ae8-ec3b-4b4c-820d-347606197656", "value": "SecuriteInfo.com.Trojan.Crypt.21348.16987", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffe2dfd0-86e8-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700404577, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404577, "uuid": "41c8ad20-e411-4934-be89-74fc5a24425a", "comment": "Malware payload", "value": "ee40188bacd94177daf9d87ae44b9c31", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404577, "uuid": "b18a42d8-e018-4b9a-aa07-b53b9abe40c9", "comment": "Malware payload", "value": "13a7e8de46706c0921cfe6e10d0a8dad139c1dcfb78c7ed6b635bc90821d0d4f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404577, "uuid": "f2e892e7-96a6-4c89-bb90-d1cc5c833922", "comment": "Malware payload", "value": "96c43fd4c818d545bb2322c4a2ea5f3671a6d86a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404577, "uuid": "72a616dd-7484-4ac5-944b-d3e01fa4ea2e", "comment": "Malware payload", "value": "ebc20298767b960d8027ba262d906f748c317c79fa0020f91a9d1f7554f4007279d9de1e361e07766c999ae681f6848f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404577, "uuid": "451053c9-c5de-45dd-82a4-d1ad51dc49aa", "value": "T1FDE533935AE905A3D1B7093B0BC18439AAC1D780D71923A70A6FB0DDDF567AC9CF9C21", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404577, "uuid": "2f4d72af-22c1-4fc3-a7b9-3565430e215c", "value": "4328f7206db519cd4e82283211d98e83", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404577, "uuid": "b7497b7f-dff7-4009-a8dd-f44ce9c42fc3", "value": "49152:cl09kS3mE0w9UCregO8V6duBGJivPtGT+1uP+DspG5MxHoH+SN9PIU:cl09x2IuCre4V6duBGitTLsQMxIH+iIU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700404577, "uuid": "7f7c8587-0c80-4155-9a1b-69acbc3aaf39", "value": 3101368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700404577, "uuid": "3ad8dfd6-94f4-4db6-a598-13cc97db834c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404577, "uuid": "70a04185-af52-4bb2-be80-400b4a1ecd78", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bddb3956-86e6-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700403608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403608, "uuid": "424e7741-204e-47cc-8cb7-5fff512e0252", "comment": "Malware payload", "value": "d8ddd6154ef0f3cb7d27f6686b255341", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403608, "uuid": "8fe7dbc0-cba8-40f1-b8e6-48045c7b1e8a", "comment": "Malware payload", "value": "15d017f61961284d2d5222fadff78c7de6451ab9e74c84ca170e1d9ffdc83820", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403608, "uuid": "c7928537-ac0e-40bf-9ea1-2258a41e8df2", "comment": "Malware payload", "value": "9a8798795b15190cda9b49e2601f998b15306b1a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403608, "uuid": "56282bf5-4ce0-42ad-b4f0-f107a22b0754", "comment": "Malware payload", "value": "b7ff50a4ce0645425c60a5272be2f94c2ff938f030bd01a8d977930f579c752a4e6355435c71c4ecdcaef3406188c6d1", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403608, "uuid": "9c2ac581-4c34-4a8b-b385-a0a00ec8c74f", "value": "T15E2463136102E0E7D05963FFA59A23393EB6D63928B2C46319F4CD627871436DF9BE12", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403608, "uuid": "6584725b-d6ba-49c8-bf24-a8ba776b890d", "value": "3072:VW0jIQInbbYnoS5HpVSLKKOWajmf8b88YfHRX:VW0jIde6ve88m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700403608, "uuid": "f436d8ae-fb25-4a8c-aed7-6806d6dca635", "value": 221184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700403608, "uuid": "eb055769-d668-443a-b07a-0a9557be7471", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403608, "uuid": "528a35d5-dcb4-4c7a-b397-369e88ea499c", "value": "SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.23313.14887", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b3ff5ad-86a0-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700373297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373297, "uuid": "6b7e39b4-d021-4242-a665-96c316f78a7b", "comment": "Malware payload (Mirai)", "value": "19ae3e612b093d79e3960c8d2e1788d4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373297, "uuid": "868f66f1-d9b6-4898-9b62-a04ae176ee8f", "comment": "Malware payload (Mirai)", "value": "1b9513bfd375779d8505524091e658e0cc1def9c594a71320ecf57717a23ebe1", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373297, "uuid": "c75bf79e-ad06-4ca0-8524-082bb5c53015", "comment": "Malware payload (Mirai)", "value": "ca066d7c703ae72b95ae9931671b14c98e91524c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373297, "uuid": "8f0f23ef-073c-4cdd-8238-b723e6b242d7", "comment": "Malware payload (Mirai)", "value": "d732eedbac1073bef40353a91270e18b93e54c27189d54c276a9c5c99055246754003ac3515ceafebc44736dddb8a745", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373297, "uuid": "527f0480-4415-4b41-89e2-6344ff7bf731", "value": "T146E2F267D3729052DE782BF1F9AD85CB2B7D4B9CD17730A31A1156282E5A0835B3C8C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373297, "uuid": "5183740e-a496-4e18-b06b-99a136f59ea5", "value": "768:8oiWiO031vpAPbrVWZK3XVGxm9Xxg9q3UEL5IP:8orm1vpALgUJDL8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700373297, "uuid": "c46a1477-4a66-4637-883c-281095982d78", "value": 33028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700373297, "uuid": "f5b316d7-cc85-4474-93fb-5a65c0ab39a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373297, "uuid": "aebbfbee-56a4-4430-970d-cf1c61a18271", "value": "19ae3e612b093d79e3960c8d2e1788d4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d651ca85-86f0-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700407944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700407944, "uuid": "2f9ec455-0550-42c1-9b29-8711fa8e87e1", "comment": "Malware payload", "value": "26591460c73aa9739e0b34f948dab9c4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700407944, "uuid": "faafef75-7a24-433c-bf0e-19f1fcf6367b", "comment": "Malware payload", "value": "1d36f50fb824abd83c7134b74b669942461cee5e33124cede35d4d5519765734", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700407944, "uuid": "a2309eca-16d0-4c89-97c7-499cfe8c81e5", "comment": "Malware payload", "value": "049fefc36f5f7b74b04e9611b5d0073bffd35f67", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700407944, "uuid": "fb7a1457-7187-446b-ac15-da8c272ce02f", "comment": "Malware payload", "value": "847ebbbef66790481c194d53619acb6d87eeab9f50edd489840da46801b34b0e37a146c0f0b28a853ae9c795db9df563", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700407944, "uuid": "3bded3b2-0093-4c6b-8983-25f81251d60d", "value": "T104559E71B502D037E1A101F5A67D9BA612A9BA301BAB08D7B3C05E3D95F2DC36235F27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700407944, "uuid": "efa06d98-4477-4931-9d2a-38a047ba0541", "value": "7482a1595744a3c77ac9461f3f27a729", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700407944, "uuid": "0874146d-636b-4542-beef-1684228ef416", "value": "24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJgrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TIrK5Zln2i6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700407944, "uuid": "274f632a-31f2-40a5-9b5b-77362b2b949c", "value": 1322239, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700407944, "uuid": "9cfe5ae8-a92b-4207-b94c-09ad5e28ca14", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700407944, "uuid": "faa7677f-9d30-4f0c-ba13-cc3d498a2379", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fd693da-86ad-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700378969, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378969, "uuid": "62831ff4-d779-4e80-9df4-e852fcc52931", "comment": "Malware payload (Mirai)", "value": "bb3d92eca8e2b5ee7bc35b912706a9ff", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378969, "uuid": "c21f6115-8f8a-4b76-8e42-e68c0b2818aa", "comment": "Malware payload (Mirai)", "value": "1d594a1f608c11c248edc6833857ac14403265ec328ab156e347e77e6406be09", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378969, "uuid": "b356c922-01dd-4e70-bd29-eb9f1ffa92d7", "comment": "Malware payload (Mirai)", "value": "25759b7155e314fe1098db2c1973f8190cc8cd20", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378969, "uuid": "849720ea-8be7-4a0b-8e9f-ade64a2bf504", "comment": "Malware payload (Mirai)", "value": "698a8f4a3c77f403141ee48045dc9017189699d2a8a210a8a31a6e555d58f1adc386225367ec196db75feec75fa25f10", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378969, "uuid": "d22fff6b-f1a7-45ef-9ec6-2b0edac357c7", "value": "T1A9330A9EB8029D3CF90BE6BE54164E0DB93177C152830B2767BBFDA36C721945E02E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378969, "uuid": "f6787b63-51c6-47d1-86d0-590f10017a33", "value": "768:gduPBFnHooqR8qOCKq2cH4/te+TK806MMUVjzkfQXObHud2oGV:r/hqaJMeteqK806MHdkfQX6HuCV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700378969, "uuid": "ffaacb48-613f-4a79-aff0-abbd57c7d48e", "value": 54932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700378969, "uuid": "c2b17e90-ab57-42d5-a8c5-3b4589ba2c67", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378969, "uuid": "21501247-706b-4c55-959f-d8f42f46810d", "value": "bb3d92eca8e2b5ee7bc35b912706a9ff", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad80aeb7-870f-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700421190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700421190, "uuid": "725f2439-4e11-40b6-a3d7-8da37384f32c", "comment": "Malware payload", "value": "7ea792af56148f989b896bafc449f2cf", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700421190, "uuid": "99e7795b-e774-4b9c-b66f-4c6c0acd8c5f", "comment": "Malware payload", "value": "1f18d3407038bcd985ff480be2c729b4fd33c36bbffd8bcfb18574ee24b100a9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700421190, "uuid": "210d0820-2657-443e-9d74-ba4c32a59181", "comment": "Malware payload", "value": "f68f3bbd42dfc6591313bb95fa03216a86f9108b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700421190, "uuid": "defb231f-769e-4ee2-9b1a-922d1a5d8028", "comment": "Malware payload", "value": "f47226123faf803c3fdf84de64e995da32b154d518ba684594152cbeed6d9ef2c8ee5a57150788fc632f900b31c4dcde", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700421190, "uuid": "f838a6cb-f829-48ce-98a0-31a8cf577c15", "value": "T14437335390611DF6F491A13B811AC92C9F32B83187B0E54E97B8F5291F6B6F24DB9F80", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700421190, "uuid": "10b7a423-9ae3-49fd-8fc2-aaadb72ad475", "value": "1af6c885af093afc55142c2f1761dbe8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700421190, "uuid": "525dc620-7384-4d6d-a696-1ce4dd8c9a8c", "value": "393216:EiIE7YoHd0fLaOQtss26wvHi+2ohcyLkW+eGQRg93iObIzcLckVj8nFk1+Xzepm8:d7rHdGLJQtsEwvHiRyc0kW+e5R49MzcO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700421190, "uuid": "7fe93862-999d-4b1d-b727-b323071183d4", "value": 23599431, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700421190, "uuid": "2f65148f-9f50-4010-86c9-b8d40a1da566", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700421190, "uuid": "86e9da78-1bfe-47a4-9dcb-eb31c3efbd34", "value": "redtrace.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "126d09cd-86f0-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700407615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700407615, "uuid": "28a876d8-de26-4628-b34f-c9f3e0387608", "comment": "Malware payload", "value": "ea6ec71918ea7f425a20a330169921b7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700407615, "uuid": "621d8b2e-3b96-4b8f-bbcb-2fe49e57e084", "comment": "Malware payload", "value": "1f41d3a0527983c765effac94ad197d4ae778ba512e2e66edd29c43251c6f80e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700407615, "uuid": "e7ec0f41-c996-41b7-9b46-c4842ef2c9b3", "comment": "Malware payload", "value": "e21b93928c42ef599584eb4fbf5d2893f55913c8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700407615, "uuid": "6cba7439-482f-44d6-bb04-9c2be9d63e4e", "comment": "Malware payload", "value": "d4fc2c6b24a59d1d1c22c5cc9f4c79cdeac49c7bc27edbd2190b3d5b2f836050420e528ec060cec536b37e534c67bb94", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700407615, "uuid": "b3159229-1fd0-460e-8b48-02c2762d3b32", "value": "T1B6449D9369E0AC73C55687714E2DBAFCBB2EF4635D67C75B23140E5A1A302B1D62B302", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700407615, "uuid": "04eb4720-8c01-40c9-a70b-6fdd32adfc5a", "value": "eb2b7f9c7e630bef5e1bf00f3d34e673", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700407615, "uuid": "ec80e3c1-cc1e-4a82-996e-ae910d76a9d5", "value": "3072:VPiwYW0w5imXIK5dh0nzE4O+8qejrsmlnXp9QR4qMhXRBG7ovb1YDO:lz4m75dhYzmjqejwkkRVKGMa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700407615, "uuid": "76f87cd0-89e7-4f9c-b5b2-2cda45a194c8", "value": 263680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700407615, "uuid": "5fba87a1-a761-45a8-b9aa-588dc9212397", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700407615, "uuid": "2165fd20-b1ac-4726-8341-90116d1aa3bb", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9af041d-8692-11ee-8907-42010a9c0042", "comment": "Malware payload (Gafgyt)", "timestamp": 1700367550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367550, "uuid": "f03d4ee8-1331-4d91-879f-03bb35ae8f06", "comment": "Malware payload (Gafgyt)", "value": "4af8608cb0badd0d9d4630763aea22c5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367550, "uuid": "bde03d61-3b48-4cdb-ac7d-51ebd1988866", "comment": "Malware payload (Gafgyt)", "value": "21a7148d67b00b2a7847dc042b25c66815573017e36da8fe837d7650ba1a42a4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367550, "uuid": "c2a8a70b-1bb8-47e5-8acb-7fcec4d45f0b", "comment": "Malware payload (Gafgyt)", "value": "05e3ab7bf7f09bec24d089c70095775abcbbd728", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367550, "uuid": "837fac3c-e5ad-4e78-b4bc-aa3b41b690c5", "comment": "Malware payload (Gafgyt)", "value": "4705983d721b390130c01d97952237704285d575a725bd1d1b81565e08f7b0a607a128d41eb3cef6bcb4ef860420128f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367550, "uuid": "87e1c5c0-f100-4fe8-82c0-da3db7e46526", "value": "T191B3E857FB11CEB3C85FDD730AA68A01108DA99746D57B6BB3B4DA5CE74684B08E3C80", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367550, "uuid": "8a66f211-95ba-4ab0-988a-c6a802137ace", "value": "1536:Tgz/qzNLW/fMiZIX98U0I/QwErQNOM5hVwbfKdwwjF9GhCPR1Ae:Tgz/5f5g8utgA5hVwjKdwwjF9GhsR1Ae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700367550, "uuid": "28d1110e-1ce8-4d56-8773-6cb0679dca70", "value": 116647, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700367550, "uuid": "b7029846-37b3-477e-a0e3-21702b09f05a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367550, "uuid": "630589f8-4949-432b-bb3e-5a40972f68c9", "value": "4af8608cb0badd0d9d4630763aea22c5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e7837cb-86cc-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700392281, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700392281, "uuid": "e0d8700c-44aa-4ae4-b1ff-8ce9ee4d1bdd", "comment": "Malware payload", "value": "ec94fd594c1050f5cd47b73aef19488a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700392281, "uuid": "3be33f4f-6117-46ff-87e1-7c623da59628", "comment": "Malware payload", "value": "24d5ef431104804b632d701f9c37891a39b14fb35a161e8d013e0cd4a30e4132", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700392281, "uuid": "5320b4a8-d247-4d8b-8fe7-6a200d488bfb", "comment": "Malware payload", "value": "0c6dd27aa5dd1239b8e2e483c0f92c5e003b3e5a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700392281, "uuid": "2e305660-30b7-4e7d-9713-83a3ec563b1f", "comment": "Malware payload", "value": "e32d21aa07b5929460df6ddfbd6e592c50e4b665e371d64a87f09fc690b3b105703d8b3042954aa67fc12ce7f9251e49", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700392281, "uuid": "f76c724c-aff6-4a23-862f-607cdfc3a615", "value": "T16144AD3369E0BC72D966C3314F2D9AECBF6EB8234D61875B27641E6E19302B1D61B311", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700392281, "uuid": "e531c883-2f3d-4635-99a3-db8cad2de620", "value": "75f7b043db8054e118136d70892dffd3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700392281, "uuid": "50a8baab-26bd-4552-a008-649abebad99e", "value": "3072:IfmwmJlCjGqKuwzvD+zk0dWzd1R6AoGNmq3Z2tlpZJm9Ri6F87ovbDh9q:WalCrmDnca9oGNvZqpZB6iMC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700392281, "uuid": "12ee5ae4-5779-4512-ab2d-fd821a9f0367", "value": 264192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700392281, "uuid": "0f1dc960-824b-4d0d-8b49-b9f196756d14", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700392281, "uuid": "a52516f5-b8f7-4c41-8cc8-77bff7bbf981", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "811764e3-86ea-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700405224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405224, "uuid": "74e8af5d-7b73-4d8c-9473-ca8ca40ff2cc", "comment": "Malware payload", "value": "9f1189bd43c11689e6ebab461e9971ec", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405224, "uuid": "909af7a0-0da0-44cd-b495-a1eecb31f996", "comment": "Malware payload", "value": "2b64b187c3f36ebcfeb40e5f975d923167d4e981cae7f4e2861611d1e1ae036d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405224, "uuid": "1c7d4e26-8b89-4f85-a2d8-65efea46b6dc", "comment": "Malware payload", "value": "e90ecc19febcd61dd7552d1608e4d92a3e4f3e21", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405224, "uuid": "d17c7b39-fa92-431a-b8a9-9ecd7ccd1129", "comment": "Malware payload", "value": "e9a5f3f13589b0f7d03628f40c480a205f6c7ab901fa773693cd05be4bb024d08746b53c357bc409da3241e21d16de89", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405224, "uuid": "9b029ce2-7860-4b7c-8237-e488078201b2", "value": "T1F8449D1339E0BC72C46A83744F2DDAECBB6E74610D65875B27181E6A0DF02B1D7AB316", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405224, "uuid": "148f10de-1056-48a7-b5de-65b2334dffd6", "value": "eb2b7f9c7e630bef5e1bf00f3d34e673", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405224, "uuid": "c55a56ca-f880-4082-905b-f387f5894d88", "value": "3072:GP5wGHknHZ3dmS7D/O4n88oN5k//JctVXRBzc8oPN7ovbDh9ju:sQ53dmO/toN5ntdYMr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700405224, "uuid": "820cf053-6526-4248-8032-2cfecaa9f287", "value": 263680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700405224, "uuid": "4a9ca48c-9482-400d-9e3d-5d9752709e90", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405224, "uuid": "88600c53-3fc8-4cf7-adcf-1777b726598d", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c88c3db5-86a5-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700375708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700375708, "uuid": "1e139dcc-e614-420a-a5ed-c14a7145d2e8", "comment": "Malware payload", "value": "d085dc6ffcf8e6dc85b72eccd31c3f2b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700375708, "uuid": "79893244-85bf-4724-9623-a81d82a13c4d", "comment": "Malware payload", "value": "2bc718dd0556573f7dc30befcada86585e1d640656e8d9edf49a0f08f4555332", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700375708, "uuid": "8c5086b7-0504-42b9-bf33-8670be2b59fe", "comment": "Malware payload", "value": "9262e2f952a57945883bd1aeeb299c356e920fd7", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700375708, "uuid": "b199bd57-3479-499f-b849-0bedf8d9ba8e", "comment": "Malware payload", "value": "e489e865afaee411d6e871b20cabbe09a1f86ef0fca8e3a8e18786e5c884b505c5b8bdc46d4f4f4a37cac721b38db235", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700375708, "uuid": "c2bd993e-ceb9-4145-99b5-0ca37eec23dc", "value": "T1D9448D23E9E0AC7DC56E43714F2D96ECBB6E78225D65873B23141E6A19302B1DE1B30D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700375708, "uuid": "707c97ac-b7ba-4066-ad64-9ac8592ad988", "value": "c641dbd6770cebe481abc8b5144dfbb8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700375708, "uuid": "09e6f740-f8fd-43eb-b4d9-b8712ca36c15", "value": "6144:MINbP3BLlJJEbKXs4i1Go8Ch06i08MrTpp:MINzxLPbvi1ZfhYrKP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700375708, "uuid": "3923728d-84f9-4568-aec1-c781db7f6bcf", "value": 270848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700375708, "uuid": "93cc8e65-035e-46db-8c35-83ccfe3050b7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700375708, "uuid": "b88a2c5b-9357-4a7c-ac09-0cdabe2c1e5f", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d91673fd-8731-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700435866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700435866, "uuid": "d75ce6f5-a76b-4cee-bc3d-2754f95fdd61", "comment": "Malware payload", "value": "31b1bcb00fc84608f8e7c0fd6bbd38cd", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700435866, "uuid": "e96cef01-c2e5-44d0-a5c0-85bba21a5514", "comment": "Malware payload", "value": "2c507279c680c935a07e01c7a49cd6f971495bb337feafe6b9f094766ddc639c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700435866, "uuid": "ac843c1e-c0c9-4030-961c-a2d80911d29a", "comment": "Malware payload", "value": "a3fd59178d472d08811f21abb92bfe80543b851a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700435866, "uuid": "46188ce7-22b1-41d6-ae09-be1da4d0c192", "comment": "Malware payload", "value": "a4fb74b80adb4b7a47d1db2fb938b218b62ed82e73b516fa725f6f2c099805d9499dc3535945cf6cc35a06f4c9afb5e5", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700435866, "uuid": "ad4937a2-5962-4d30-919c-62f319aca69f", "value": "T11E75F121B2E14437D1775A799C1B969C6C27BE103D38A98B2BE81D8C6F38781353B397", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700435866, "uuid": "7b5f0591-38bc-4785-8522-94c7ed56ce5f", "value": "1dc34ea03776a458d82382034090cde6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700435866, "uuid": "e18c71a7-0fae-4477-9680-261e4654ec73", "value": "24576:cGvjcO5iNuoZBCESk1qsCSeE6CrJS/vE8OpGwfmm+NXo6MargCRNrCGZsr2:cSr5UlQE664vJwGamtNXMSPRN+0s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700435866, "uuid": "f52bfbff-5593-4693-a36a-6ea34a4afee9", "value": 1689088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700435866, "uuid": "7ce4c1b5-e72e-463f-ad5f-b1a35cb68994", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700435866, "uuid": "0a6265d8-218d-4f77-98fa-4b4f1f45b689", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "831f13fd-8699-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700370438, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370438, "uuid": "a470fdb2-0eea-4b5f-a0e9-2e695c0da1a5", "comment": "Malware payload (Mirai)", "value": "77a3a4feeb0099d5d9eedba89abb1141", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370438, "uuid": "02020fd1-dae9-41ea-b9c5-ec8ac3876af6", "comment": "Malware payload (Mirai)", "value": "2d5e55583bb0057996c92cfe09eb9b10b8c582d26d8fa46e56e23ae32f211d07", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370438, "uuid": "0f952b96-672e-44f6-8c9a-f198e7c4613f", "comment": "Malware payload (Mirai)", "value": "6981e926cbcb0d9110dd93a0dd8fad467947a84a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370438, "uuid": "9a853416-64f1-4f7f-a497-48a624b47c48", "comment": "Malware payload (Mirai)", "value": "6d9c0bda28eddc66583c86c6863afbbd885fd38cebd24b2d496a71220a7ee0f02f351f43f5518d95e0972b2a56fa0f41", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370438, "uuid": "32587ec4-d09a-4ef0-aff6-c869552bfa9b", "value": "T1F8731785BD818A17C5D423BAFA6E10CE372163E8E2DF32078D252F5077DA91F0EA3655", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370438, "uuid": "a3b9d182-f68b-4ca9-a69d-ced4d5110ee0", "value": "1536:5nzy/T1SKpeHgHAwN+jUsOr2R1X1FWhKVr156WPRBX1:5nzy/TUKSYif14hGJ5BJBX1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700370438, "uuid": "8dd3fcfa-8aad-4a70-8397-169d30b28313", "value": 79200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700370438, "uuid": "d4b4655d-48b7-4f2a-8b1c-527dfc166f61", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370438, "uuid": "f665cba5-33c1-4c47-8643-af7d9548378e", "value": "77a3a4feeb0099d5d9eedba89abb1141", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f872d1f6-86ee-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700407142, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700407142, "uuid": "cd18af58-719c-4014-86d5-b53d899924a9", "comment": "Malware payload (Mirai)", "value": "5f5650703405dfee92d81b3f95c3619b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700407142, "uuid": "bdac8050-509c-45fc-a504-42c5c1bb9237", "comment": "Malware payload (Mirai)", "value": "2f4ad498a1754dd42ba9af43c69a3947945139ac28687c04749781a272317d5d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700407142, "uuid": "4f7cf538-0bfb-43f7-a995-830a9225c4f3", "comment": "Malware payload (Mirai)", "value": "89c085bb1cdc4f496cb6d0188436f124589bab02", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700407142, "uuid": "b1d1a6ee-2d9d-4d74-9193-53a60148d9d7", "comment": "Malware payload (Mirai)", "value": "f7ec86d0e5dcfeea6603ea270e1652fbdb83557395da92414c4983a52e430a7c4440528d4078b4fd09372f72c6cf578b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700407142, "uuid": "25127ec9-5168-4795-b19a-e731ba335168", "value": "T18A735D24A9792E26C0D4A17B61FB8361F2F6230E25B0965D7C760F8FFF2464468162B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700407142, "uuid": "e866b27a-88ac-493d-a3ba-aee8c4d64f48", "value": "1536:5ms+geQfvznpCR8ee84cNsAUiAvFI7IlNnws8/:YwfdNu4cmZvFqI3w7/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700407142, "uuid": "5615bc2a-7b03-4d22-96c9-7b2fdd1741e3", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700407142, "uuid": "b8ff5f24-435e-4e10-b1ce-1dd2ff05555f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700407142, "uuid": "4ed513cb-5019-45f9-a9df-1e3eed15ff34", "value": "5f5650703405dfee92d81b3f95c3619b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39bec941-86a0-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700373321, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373321, "uuid": "b805c202-7fc0-4a28-90d1-b278eeec4781", "comment": "Malware payload (Mirai)", "value": "528fb913dfbc2f064a45b6e9e865270a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373321, "uuid": "e3c8537d-5796-40fe-a4d9-0a335e197be8", "comment": "Malware payload (Mirai)", "value": "2f4d5e236ac5f65fea296cf55d701d60c5bb931f2cdb7c3d85244728e76bedfe", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373321, "uuid": "d6ad16ef-6f36-4b90-a45f-4bc574f54ed1", "comment": "Malware payload (Mirai)", "value": "3d75d785ea66f32d6032204de38a368189dbf109", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373321, "uuid": "59253772-e301-467e-8e07-db0d91014771", "comment": "Malware payload (Mirai)", "value": "a25c5f9b984444a0ef6c092f3c0a07740203624444c715914283e9d0dfd9d0fdad682edefab64b43f32f0fb63dd91044", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373321, "uuid": "7f9ad3a3-841e-41d6-abbe-f20af8884d9f", "value": "T18D335D42B71C0943D1A37EB03A3F27D193EEEA9021E4E684295EDB4AD171E321585FDE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373321, "uuid": "05207e0b-6377-4347-9cb0-2a380f437acd", "value": "768:dDjB6EPw+VAZse6yWRFJa98TMasx+PEqIX+FFh1tB6U0BIXC:RBE+Wmcgb08Il4sqIuZ1T6HBQC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700373321, "uuid": "77238716-74e6-4b72-ada9-5334b0a28350", "value": 55044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700373321, "uuid": "e5468159-3f03-4a18-a3c6-96c1a492accb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373321, "uuid": "72197971-7310-4de6-9c6c-fc28cdc15aa1", "value": "528fb913dfbc2f064a45b6e9e865270a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f016fd43-86ff-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700414429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414429, "uuid": "aad46abd-0340-4533-a998-2262f68d54fb", "comment": "Malware payload", "value": "23a243fd616ab309d4b06b1bdf10c408", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414429, "uuid": "25557dfa-e8bc-418d-89b4-3b673637c30e", "comment": "Malware payload", "value": "2f559bb1c5635742d6e46a68fde8ea987d702ba6463307c6a26e58fac3fb77de", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414429, "uuid": "fddd242d-18c4-496a-83e1-0dcc9c456696", "comment": "Malware payload", "value": "01ac1c018d9e641eb56eb092ac4cf412916bcfc9", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414429, "uuid": "73fc6f49-870f-4dd3-8234-ebc9e48b15fd", "comment": "Malware payload", "value": "3cedf2d7390dd2924613bbbc526656393eff97577e20164791c21adf63023ecfd6eee46d01653b0f560f8e2f42bdb42c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414429, "uuid": "4e4dcc61-018a-4766-ab34-7446e6df2584", "value": "T18E15128293C46EB8D8EB1BF5A7D3079B3736B6B4A6C32657CD00D2087E659883F35911", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414429, "uuid": "2a6ac77e-4ad1-4e24-821a-09215afcea93", "value": "12288:lgEP90QRtDTpLcxH5hkKGXGepgUi4cbuu5+PXGWPHFGTVcp:pP93RtDaxkjGJnxweV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700414429, "uuid": "68c42802-3da2-4cfb-aa36-2dfec87a6f31", "value": 954368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700414429, "uuid": "fbff302d-72df-42a8-8af9-0673ec6467ae", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414429, "uuid": "275306b8-e991-435d-80ee-6f26e353d3aa", "value": "SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.25733.10809", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c36ce50a-86e6-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700403617, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403617, "uuid": "84f77def-f643-46ee-b98e-1c08ba9c26ab", "comment": "Malware payload", "value": "8a4c9d3975de3bf48b0ded54f8fffd0e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403617, "uuid": "96172339-6228-418c-95c1-854785c4c7a2", "comment": "Malware payload", "value": "30ebdca024b893eacaf21c1d4c8987a6d17e6ce54478d7030eab88a24a5e1220", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403617, "uuid": "5db50d89-26ae-4e4c-8e36-92c451699fec", "comment": "Malware payload", "value": "6c19241fdc93671751829e869af49284ead3cbb5", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403617, "uuid": "3f243840-7b3c-44bd-b592-ac24ed896a0a", "comment": "Malware payload", "value": "d2e4d0045c8c123aebb7767efcd0ae2b36e4db1d23cd991b0993df306bda6ead5a8c317949a2070f2caeda948091271d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403617, "uuid": "60ab7548-8619-4591-abb9-67a8fca357b3", "value": "T1CCD47CAFA2E18C17C8535A744E6BCFF82E1BFD513A3C388A19A85D4C9F346417871D92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403617, "uuid": "828dbb1b-0073-446e-a22c-54c69b79e77c", "value": "12288:ivtFoTXTPV3pfXYZne1ctW/Ab/l9xn+Fj:ivtFop5fXYZJ9Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700403617, "uuid": "d4ee507c-66e0-4b13-b922-27adf8fc834d", "value": 610304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700403617, "uuid": "db1e9e8e-b361-41a6-bdeb-8f7cf1e9f4cc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403617, "uuid": "43e431fc-5c9b-4fd7-bb60-aceaf8b42013", "value": "SecuriteInfo.com.W32.Xpack.E.gen.Eldorado.24961.30282", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4a33648-86f1-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700408370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700408370, "uuid": "bdf32265-448b-416b-9f7b-17b4424dc811", "comment": "Malware payload", "value": "39683da57a30127a8168bcf821a6f53d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700408370, "uuid": "3fae467e-4b90-41fb-9c0f-0d08bbefb9ac", "comment": "Malware payload", "value": "310757d3521c41996bd07af2e51e404deb9716ba6e315967dff7d3c7a1dfff06", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700408370, "uuid": "3d95c3ab-3682-43ea-962b-6e45a502a3d8", "comment": "Malware payload", "value": "88a09b178f3d3311a292cd5a389987fd0cde5b5c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700408370, "uuid": "c4b54cb3-6744-447d-9b15-6c419e6646d3", "comment": "Malware payload", "value": "321b2bf868e6d5abc249ef89e6d9277afb92f6add5eaaaae0aae5ed7ffd5c0b73ace9ca43744099a89d1b6a01f6daef5", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700408370, "uuid": "3df673bc-1752-4b43-9e24-6f76e352356d", "value": "T1D8763310BAD2D6FBD2801877BE6CB3C5B5B2CC041421C96B77C6560C4E3C99AA56FA37", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700408370, "uuid": "792522a3-a680-49d5-bf8f-9742dfbeca0d", "value": "3786a4cf8bfee8b4821db03449141df4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700408370, "uuid": "71a16f7f-4d6a-4fe1-aa06-2aad8df031be", "value": "196608:91OhYOGfTOHC9SsJu72Tp6EpFnm/2/DCPWBdsJ/7:3OhYO4CHC9SMu726UFnLbCVJ/7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700408370, "uuid": "57450bb1-605f-41c0-918b-c231124333d6", "value": 7517010, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700408370, "uuid": "f4047f95-1b06-42dd-baa5-de14d8dd99ae", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700408370, "uuid": "43acd8e2-33fc-413b-b903-1169bda81f8f", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86009cd2-8699-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700370443, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370443, "uuid": "dbebf8c5-9748-4df7-8fff-ecb1554df0a1", "comment": "Malware payload (Mirai)", "value": "b3dd1df3470a632e58cf1527e08c6ca3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370443, "uuid": "558f7e69-08a1-4dd8-9a2c-2f8ae76c6051", "comment": "Malware payload (Mirai)", "value": "315e988b924ae449d6b42b8da3d8887e24f2d9bd7c6151d328967fb3b6d8df04", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370443, "uuid": "90c43cc3-5413-4b5a-a50d-2ad43d5ea40a", "comment": "Malware payload (Mirai)", "value": "6a598eac9e78588110d2d32afadd655fb519339e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370443, "uuid": "e6649697-6e01-4933-9297-89ffe1be60a6", "comment": "Malware payload (Mirai)", "value": "f5c606d4ddd445dd3d8594ef54f8bcb513229758e4e12f624b561aca250e5dc8d060ebe5197d148a28b4d9aa06ab1dbf", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370443, "uuid": "3e09297c-fb42-4864-b7ae-40fe6bd2888c", "value": "T1E3734CC9B4018D7CF94BEABE94624A09F932270075930F1B76BBFD936D631A47D02D4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370443, "uuid": "733e5d21-1323-467e-842c-add51c0ce573", "value": "1536:oHYVv05XUNPwA7a/kAqcaqiVnTkGsv4qFNJPEm8l1Qov3GlvYO:oHTBUSunA3vN8fQ/lgO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700370443, "uuid": "853b6265-e25d-4e34-90f6-f255fa453614", "value": 75528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700370443, "uuid": "fb61f48a-1eef-4f48-8d32-86c00a59414d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370443, "uuid": "12bdc6b1-a7e4-47c6-9ba4-cf0e761b364e", "value": "b3dd1df3470a632e58cf1527e08c6ca3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d184a3e-86cd-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700392627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700392627, "uuid": "5bb21879-bd70-4c79-ad63-0dbb97858204", "comment": "Malware payload", "value": "34d1cebb6f502f4ae439aa6cdc186a04", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700392627, "uuid": "ae927d93-997e-4d09-bf5a-c65ed243d415", "comment": "Malware payload", "value": "323e620942b3447e81071f670ca27b0cbca20c50c38b0e90885fe13e44c302b1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700392627, "uuid": "35d513ec-da2e-48ab-ac22-0836a99abf3a", "comment": "Malware payload", "value": "2383c5e17dee34c614829f20cec349283c56d2ac", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700392627, "uuid": "e8726c31-3173-4608-b83b-6e8c4ba36248", "comment": "Malware payload", "value": "88a8d1e00f6665b5dfe864fba0a1d27ef1c3ecbea53b955f206dd0d6f65353c79e7d06b8d2de1c51d304f190748a447c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700392627, "uuid": "aa02c2a2-b9a6-45d0-9224-30341219499a", "value": "T1D3562397127A0044D9E5C83DCA3BFDA871F642B58BC2987D46EAFDC132564F6E213A13", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700392627, "uuid": "8e966acb-7233-4ed5-b6cf-f8a813f73297", "value": "372c5d18d541bfb9581c443bc011eecb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700392627, "uuid": "83293ede-dc9f-48c7-9b00-0398d7419c60", "value": "98304:wJkc3902El3vyTFVHpJgl6KEAW/IhCdTuuxizx35mmW4l7oE6PHVhQ2LCpK:uOB3KTcl678hCXx2p85E6NhnmK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700392627, "uuid": "baf0a532-5ad3-422a-9afd-b8ba37793975", "value": 6297752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700392627, "uuid": "c1ca8cf6-1d50-4ef4-b989-62ff022a375c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700392627, "uuid": "f24c41f5-091c-4428-b4a7-41297cbc8c6a", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c79893a3-86b3-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700381720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700381720, "uuid": "d89c59e9-8e8e-4bf1-a35c-6aab95855879", "comment": "Malware payload", "value": "f2d54287570ddc49554a25cc72426f4e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700381720, "uuid": "8756e9df-5c61-465d-8530-5b2354159503", "comment": "Malware payload", "value": "32d4bae99e3e24b7be91e342b78c84fb590146c0d5bc902f3c98b7673f6f7732", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700381720, "uuid": "d584dbca-cb9e-43b2-95c0-c8d5e536e370", "comment": "Malware payload", "value": "c0979ca92a301c0ea3292b7e08d7d0d8c155d405", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700381720, "uuid": "840cb653-c98a-4d17-8df8-f05071525346", "comment": "Malware payload", "value": "1579a091705d9dc82c44254793c9530cb371a06bfba587ecb131573d68556396fe55157f0fc9b435c28d687c4389c37f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700381720, "uuid": "4ee30052-6466-4dff-a82e-f6377c865d4f", "value": "T137448CD36DE0BC71D55683314E2DD6ECBB2EB8624D64874723E4EE6A19302B1F61B311", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700381720, "uuid": "fbaf3f7d-58a8-40c6-a7ee-5b33a95cfcde", "value": "f5eeef37ef8d5cb7e7cdbc3dacbee4c0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700381720, "uuid": "43c343c0-e114-4742-bec0-ae3525b97833", "value": "3072:oL4wwtrCfdVZm5n44mw+i609TGZD96y2fsR6Vr7ovb3TQh9:O4PCfTZAnsnq1S96/vhMrT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700381720, "uuid": "e899df70-11d3-47a3-b5a0-e33868700bee", "value": 270848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700381720, "uuid": "d786a928-6d43-411c-8ada-76f0f8847b37", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700381720, "uuid": "69cd2d9b-298d-439b-bfbd-7a1ee948cc96", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a70f782-86cf-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700393482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700393482, "uuid": "8f788ca3-2e8a-4d18-925d-f2a9f28efb39", "comment": "Malware payload", "value": "47437b8a25c634828593283d0679063a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700393482, "uuid": "820921a7-f6be-4ed1-8197-64afd766cb8f", "comment": "Malware payload", "value": "32dbc7826b9ba7e6efa3eba6aaac1ceac8afb5eefb72644e9aa95f0ed8e8a95b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700393482, "uuid": "d3301abe-29a5-4798-b724-32c7c1a5ccb5", "comment": "Malware payload", "value": "61cfbc1ac44d4c0164a7b14138d240a17462d892", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700393482, "uuid": "f936be85-47c0-4a7d-9b27-ef8d3ee341ca", "comment": "Malware payload", "value": "1a1e31701149492a69dd63a66677388affac5bd30518d8029487a9b7b7ae673f8d5e884239d69d8077d56f2895221821", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700393482, "uuid": "dba610a4-b9b4-4075-a29d-dfa8c53691c9", "value": "T109E73395FE099A17EC106A3781E89FF17B8D9783B784DBC31B7DEBE1A8524D8450022D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700393482, "uuid": "e9e9dadb-7893-40e4-8696-4bd86548a3eb", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700393482, "uuid": "b0c22ee9-e962-444e-82f6-37f37f9db3c1", "value": "1572864:6m6MrwnMt2uHPRNOMX5bXlaaftMz86vvJ60EGJ:p6MYcHPeMX5caGzV60EGJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700393482, "uuid": "92a8b365-1927-4838-b595-a7c563779b99", "value": 64666258, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700393482, "uuid": "3474028c-67ab-4369-9f0d-9297c371269f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700393482, "uuid": "c9c9c0b9-113c-4616-ae61-3dda5efe61fd", "value": "updater3.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fdc5c63f-8734-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700437216, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700437216, "uuid": "73394360-e0ec-4237-9804-719a622a5d53", "comment": "Malware payload", "value": "8f602d30966ffba20f95c2c047080aef", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700437216, "uuid": "4a9e4901-bb25-4639-a1d5-4f7906f42b36", "comment": "Malware payload", "value": "3310176989a25f60f2406a1da8ebfd962b27c07ee107b3472faff5e1df3857c9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700437216, "uuid": "70abadbc-7076-4a2f-8f65-92b621b26167", "comment": "Malware payload", "value": "cb496f2193e5623ed0a8066bb0b9d996a79fd458", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700437216, "uuid": "90f8612e-e9b9-4c4a-889a-6b5d05e00e2c", "comment": "Malware payload", "value": "d992d2b7259c5cfca7182b3eec4c7e870c0acbfa2411d1f535274e4610d03c1d6983af75a83214a882340cc6286b3a11", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700437216, "uuid": "67eda1df-3377-4e52-b414-f758839156d5", "value": "T15245013806746359EBAA82F3E8C10C59B354FD35197BF65EBC8ACEC615F89A90493C43", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700437216, "uuid": "d9e6c85b-fd97-40f6-8ef4-5654ebc53b47", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700437216, "uuid": "e2a5e54c-999b-4c50-b0c8-db67bccee16a", "value": "24576:KRIXK6oTsNXz/kfArTnzS+hUVUyWAUq8hXU2qG3NXFX7Fc3fnsQPFeVAO5:KOK6wsV7kfAPZheU1qgXkdO5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700437216, "uuid": "8bb425c8-271a-4d16-a11c-5519d0d25a8c", "value": 1190912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700437216, "uuid": "c59149bf-3b67-414b-85f2-3b5ed4d68953", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700437216, "uuid": "f917dd60-c85d-41a4-aefe-2c843dc2e9c0", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfbb085f-86e6-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700403611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403611, "uuid": "9e61050a-5f78-4098-8d51-82bfcc9dd8dd", "comment": "Malware payload", "value": "ba228a04f36fa8ea33d5daf7b701d938", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403611, "uuid": "2d529d3f-bb3b-4d24-bd45-44618b38eef4", "comment": "Malware payload", "value": "33500bc215bc41cff3023deb0ff58089f3349a3d2948de2f2b3bac1a1a7b0306", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403611, "uuid": "a0059615-412a-4b72-a2d6-d7d8921e6d9e", "comment": "Malware payload", "value": "4fc576870a1aafc6d2a02fd16f7fefaaf3750aae", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403611, "uuid": "02af4cba-e2b5-4c7f-a4a9-66606de39979", "comment": "Malware payload", "value": "b3862ec7f1d651408497f533d24f7f55f7a0a7e34460012e7070b6b9c50c75f80f4f3d74969e1135a408fdc13d6876c5", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403611, "uuid": "948d5177-95e7-4eea-aeb3-8c33823ffb6b", "value": "T14B25AEA93390CF2ACC1929377C11C2D076F1E9081352D386B63AE75D2DBA745AED528F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403611, "uuid": "214e3d10-7833-46c1-abb9-c98eab8f9c21", "value": "dae02f32a21e03ce65412f6e56942daa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403611, "uuid": "6a65e7e6-d501-4cd7-beca-e751f3c81495", "value": "12288:5hWWc1WdDxv/3BhG9FdKlK9/PJy+mGVfNItEqrOWb+CYxIoa+:5hWWc1OxUFdKlK9/xkGJmWWT+3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700403611, "uuid": "036935ec-1bf2-4704-a7c5-81d7589f4cc2", "value": 1007616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700403611, "uuid": "7eaa12ec-1f37-4d23-86bb-fa88b6d6b456", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403611, "uuid": "4e7c212b-1d86-4554-b23a-9e6fac22de06", "value": "SecuriteInfo.com.Trojan.MSIL.Injector.5704.12472", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "014dacc8-86e9-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700404580, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404580, "uuid": "1a76855e-58d7-438e-b1c7-87de02c6032b", "comment": "Malware payload (Mirai)", "value": "ef97162056d3312332a4ad7acc396e08", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404580, "uuid": "c1d2646b-f2e6-4aed-adce-09f87f5ad617", "comment": "Malware payload (Mirai)", "value": "343743521c30cbed9602d7f6aa9b27062a5924eb96f4a2826417545d92c86d3f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404580, "uuid": "be26cef6-8d76-4e65-9862-4c51bbbf9811", "comment": "Malware payload (Mirai)", "value": "fd99ad36556a2b7a733d47e02f461aeba4cee0c7", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404580, "uuid": "66b07045-c55c-461a-882e-b96abfd532d7", "comment": "Malware payload (Mirai)", "value": "479c31ab22b0115579ba5ce83bbc9817edec710644e79a0ff7315f3e892a743a9363f12ef1773f099d09981ce9debd68", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404580, "uuid": "2b4ebd0a-c6c9-41a3-b25d-2367e7ad6ab4", "value": "T1C8E2F193D371A452DE787BF1E8B984CB6ABD4BBCC17B70A3160516181D9A0831F3C8A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404580, "uuid": "930b9063-2705-409e-b7ad-615c94028981", "value": "768:koiWiO031vpAPbrVWZK3XVGxm9XXgcjfG9q3UEL5I1:korm1vpALgUJQcjfrLG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700404580, "uuid": "1df48b96-7002-41c3-bd72-1133e0c88c5f", "value": 33028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700404580, "uuid": "f0246066-2bea-42ae-b90f-5ed788c53ca1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404580, "uuid": "9de15dac-85b7-41bd-a369-0a8b837c84d6", "value": "ef97162056d3312332a4ad7acc396e08", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38d16953-86e8-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700404243, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404243, "uuid": "d7eb8c76-0d21-4053-82a0-a093523a3e8e", "comment": "Malware payload (Mirai)", "value": "019d1e28aa5ab61b0702384f023da837", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404243, "uuid": "df09f60a-e3be-4338-b39b-5922cde6e69b", "comment": "Malware payload (Mirai)", "value": "38563105e45cc42c9ab9f45e63d7ddbc391c032800174eb4cde180330238525b", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404243, "uuid": "e41d2193-7feb-4ea3-8716-d0a505728fc7", "comment": "Malware payload (Mirai)", "value": "f4fa4654027bd6109b4e9b0cddf4ceb5d509d741", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404243, "uuid": "e347a5c7-daf9-4af2-930e-f00fa95acff2", "comment": "Malware payload (Mirai)", "value": "846a09b7e47b90cadcc69ab088ba9a14bee4e32f7c7d8832aa07a94932c52244d7fa5a1f7f8b6fd9d68387a78a5b601b", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404243, "uuid": "8fc40e4a-c4bb-41c3-baac-668011987916", "value": "T117D2D0E7E1B762F4D0F278B2386BEE80FA5931379314435940AEBD85D69B34C5534A12", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404243, "uuid": "60f6cd66-591a-4181-809f-309486183f22", "value": "768:SYSoXdJZgicCHD+C98MP7L1YVPb2XmmSx0sv:SYJdJZuCj+CiE7L1APba6tv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700404243, "uuid": "775849e4-54a9-4a8c-9976-67080791def8", "value": 29440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700404243, "uuid": "3bdcbff8-3777-4bb0-9f3b-dab14527610c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404243, "uuid": "4cedf697-0b0a-471c-add8-ba027f694318", "value": "019d1e28aa5ab61b0702384f023da837", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50932e9c-8733-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700436495, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700436495, "uuid": "7a7ea2c6-dea2-42ec-9694-aab6a51e4e12", "comment": "Malware payload", "value": "6d8ceb645a2fd4e454c9807f88eab9d3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700436495, "uuid": "0ab143e1-0a23-4311-9f6d-a6c51352df82", "comment": "Malware payload", "value": "3cb612fb1e493424a52d66e74ad2d295eda8b6f3dba311518974d42bbc2d12d8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700436495, "uuid": "f44791ed-db52-45ae-9005-273105a39b65", "comment": "Malware payload", "value": "e5395fd5c5070cdb5c328ee1db6efe8a9fb979b2", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700436495, "uuid": "afeafafa-b80a-4bfa-b0f6-cc19d5d1dfd1", "comment": "Malware payload", "value": "2dba0784efc2c6e51fd26d8c0a1a6087390dcccc4f14257a77730054816f20ecc0c6841c9b549a73e57db30dd8dbbe91", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700436495, "uuid": "6dd84713-73b1-4221-abe1-43ac7d2ba5dc", "value": "T1C21633131EF36CC6EE0E6BB12B60A55736B55AF70B68A0D1748F03418943549F7FC92A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700436495, "uuid": "48bdce86-337f-4140-87b3-851630983312", "value": "622f737f127d05c1d65ceaa59e4c4bea", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700436495, "uuid": "4a58859e-59b9-4952-b90e-cd7023396519", "value": "98304:OMVJT34vo3H+z95jhb0ypNTl30xw3zauxjQ6s:tb3yoUjhIypqazauxj+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700436495, "uuid": "00178021-d060-4a1e-ad9c-bc34f59e1e97", "value": 4197888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700436495, "uuid": "ccb3d099-5b79-46ea-ac3a-3af8dad2b1c1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700436495, "uuid": "eaf07bad-3c6c-44f5-8a57-e4d282f183b1", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab8c4880-86bc-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700385538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700385538, "uuid": "7b6dd9e1-bc86-4486-a094-f5534f44c165", "comment": "Malware payload", "value": "d87bc0bcfa1976ffa6a165545fb7ca62", "object_relation": "md5", "Tag": [ { "name": "FakeCpuZ", "colour": "#502562", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700385538, "uuid": "9fab297d-f4e2-4cd5-a128-356cd2d78b10", "comment": "Malware payload", "value": "3d8afeb666655eb0d84c6cd6ae5b102934a205563543e965ab1f4cc35f73639e", "object_relation": "sha256", "Tag": [ { "name": "FakeCpuZ", "colour": "#502562", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700385538, "uuid": "338477a9-f80b-44a6-9db2-e37fb3f51456", "comment": "Malware payload", "value": "c1deb32355f559cc12390c0738c4937d0a737606", "object_relation": "sha1", "Tag": [ { "name": "FakeCpuZ", "colour": "#502562", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700385538, "uuid": "af3f6be2-43ca-4dcd-b682-f4aa089c66df", "comment": "Malware payload", "value": "da42771cc3006c722b5cf51627c6fe1fafa3a6fc34becf8e7ba4f1031d4c28edacb5f1351ade610d8cbfe40196af23a5", "object_relation": "sha3-384", "Tag": [ { "name": "FakeCpuZ", "colour": "#502562", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#BE684A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700385538, "uuid": "4135fef1-cbae-46d8-8492-5558a620a8f6", "value": "T15821422BA14B82B6EE9590C5F869E90AE415E945D946BCBCB6E852C5A4130BCC38B40B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700385538, "uuid": "93a6d815-cfa3-42ff-b957-10cce20a6481", "value": "24:fSnpG/BK8DCSy4hgKAM1BllW5wqrayuUy2x7ADt:fQp2Cd4g6/WlaVcmDt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700385538, "uuid": "c6bc009a-8d26-443b-933b-fd6c6cad5713", "value": 1317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700385538, "uuid": "15a85241-9d8a-4c48-8a26-92ce8a43813f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700385538, "uuid": "8bd3fb3e-5297-4170-96a1-8008e2ff6e2e", "value": "NEW_mormons_v1.ps1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3992ef0-86ae-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700379619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700379619, "uuid": "e90904ed-c7b4-47fc-acd5-348c717c30a5", "comment": "Malware payload (Mirai)", "value": "e73e057860f754d52e45309ea6d1ea90", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700379619, "uuid": "f0035017-50be-4068-9d44-6c4f85b08618", "comment": "Malware payload (Mirai)", "value": "3ecad2da82b5b302ec90ecd48949b49c0b4fbfc7df104270fbc7f5db12a1c05c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700379619, "uuid": "4db3692b-d2f6-402a-a688-bc4639efe340", "comment": "Malware payload (Mirai)", "value": "84d98c2e9066b6afb9aa11a66375556ec35080c8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700379619, "uuid": "c5cf1e35-8af7-466b-87cc-ac403fa6e714", "comment": "Malware payload (Mirai)", "value": "ad0f6223b6832925528111d45617d93d1673d4aac7a67b42d97dd7283605943081323d11648e0235880cf8ac3a2827dd", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700379619, "uuid": "6d772cea-0a66-4340-848c-5d10f82e77bd", "value": "T176432921B63A1F13D0E0A47D21FB4B59B1A15ADE26A4C64E7D720F4FFF11680A943DB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700379619, "uuid": "e9c56a73-afab-473d-8555-012fb33e6cd8", "value": "768:RqowmZPu9wtnfbltWgC6BSJsBcfDSTFIuQKqgESnmC/xO+KpAwB:RqtmZPuutfbltZFBSJsBcfDSTFI+BEB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700379619, "uuid": "4fb6155c-c11d-46f2-86e6-79abb8f57a7c", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700379619, "uuid": "c1bf81ea-8bcd-49c7-96d4-802846125aa8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700379619, "uuid": "d0a89dad-fb7d-4c7f-bcb5-936c16aeab3e", "value": "e73e057860f754d52e45309ea6d1ea90", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d42005e-86fb-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700412572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700412572, "uuid": "99125475-cfeb-48f7-99d6-4c24b3eeaf92", "comment": "Malware payload", "value": "320a062b2e5a45a5c5298a7cc50d949d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700412572, "uuid": "e37046a1-9cd8-4e99-ae1f-fa7c92509cde", "comment": "Malware payload", "value": "44f7e32d9d153692bf8e985566a42e118711c5c7c458354d9d2b8da8d3ecb34d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700412572, "uuid": "0b7f17e4-07b9-4fdf-95e5-94c5cf0dddcd", "comment": "Malware payload", "value": "408f2b7550053efd52e0954e7aa0f767a7fbb64b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700412572, "uuid": "6ecee6c1-ce40-4e61-8244-1650e54b4223", "comment": "Malware payload", "value": "1bbf74d8c1c3109324673371da525dbd4bacd76b43518b821f1fd09ab598705779e7bcf44053b892e54a6b292e5dc5c1", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700412572, "uuid": "fd64d785-1f57-4533-905a-7f2a8e4b31ad", "value": "T186448C2369D0BC71C56A87744E2D9AEEBB2E74614D61C78B27D41E6A1D302B1FF1B302", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700412572, "uuid": "fffe7ee5-94ba-4318-a868-7564f41ed7e4", "value": "eb2b7f9c7e630bef5e1bf00f3d34e673", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700412572, "uuid": "cb71d9e9-1077-4677-8dcc-f829e7e00a69", "value": "3072:VPowSp/yBSAnXbjHDN8zceIB05fZz3jnpPXHjXRBy97ovb1Yrz:loyBSA3jN8z4ozTlLytMe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700412572, "uuid": "d31ebb33-d179-4d02-be61-ca15f93bcb37", "value": 263680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700412572, "uuid": "a5b638d2-b41c-4738-8035-f24a242150c2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700412572, "uuid": "70aa3771-5e4f-4e70-909c-a75d7e0b78c9", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "deded1bd-86a7-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700376605, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376605, "uuid": "c24550b0-b47f-45af-9e4d-efffeeeff602", "comment": "Malware payload (Mirai)", "value": "3df7f7b814bb3d3b5a03247b9d9faae5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376605, "uuid": "bf97f597-3a9d-4c10-97a5-47b25ddeb114", "comment": "Malware payload (Mirai)", "value": "4a3f38efa662b472b7e54496753deb8b06d1dcddd11b16c5a9129f1aaf75883c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376605, "uuid": "bf49f758-37f1-48a1-8a11-9552890b6899", "comment": "Malware payload (Mirai)", "value": "2251751619f6b51529f12cf530a6a3918d39c278", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376605, "uuid": "13e59bbc-5e84-4a3a-9372-d1929ebfcd56", "comment": "Malware payload (Mirai)", "value": "7039bd31bdb52f8726c34e7132d5510f57593bceb7fb9d691d216f206c7a2b5b6e49cce52deff5e9c12c4226ca31355d", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376605, "uuid": "551c19bd-b732-44bf-9fe7-08bcebdfeeb3", "value": "T132A2D0257F1DE88BCD3BA27887E5E5C6A2907D60D3DCC9862741C11FABA36846834E42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376605, "uuid": "0179a2f5-b53d-4943-be5e-e688b4d1fa55", "value": "384:Mg9Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaQNAr8vcoBAvP+qNV+KLebRtUlSyF:798o08kxofBE+ZkXaT47C2EpitiF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700376605, "uuid": "ffedfcb9-93e6-48cc-9271-9afe5d0ab29f", "value": 21500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700376605, "uuid": "50d460cb-5715-412f-81e9-5033377e70cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376605, "uuid": "6e43b0ec-e0bd-456c-8040-bf75c20c6eb8", "value": "boatnet.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3ab5da8-86d1-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700394652, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700394652, "uuid": "9de6d500-317b-402a-ba1b-37d3124f6f24", "comment": "Malware payload", "value": "c0b3b0c8d71bb0703179dc37189b0b95", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700394652, "uuid": "d83c0aa7-581c-4c7d-ab46-c85b15446d03", "comment": "Malware payload", "value": "4afaefd1e04ef31fb1642e0b516c554e21de8340b84545641e7c29d028510afb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700394652, "uuid": "12f64355-a053-40d6-bccf-280d081e8411", "comment": "Malware payload", "value": "3437226e6988290a2d9d9008dad3df912d7f8820", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700394652, "uuid": "8110f972-9174-4900-b7f9-ec0e3dbf27b1", "comment": "Malware payload", "value": "a7b02d6d4044797268243a23d399faeeef1f016102e454d24052752ad35f1a3c9e160fef00cd0a6556d39bf3c66cd84e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700394652, "uuid": "7345954b-2879-4fde-bc14-939afe653a21", "value": "T19B44AD2379E3BC71C56B87714F2D9ADCBB6F76215D63874B23140E6A1A302B1C62B316", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700394652, "uuid": "5fddda1e-3361-41c4-a4f2-46d23f0a85e8", "value": "75f7b043db8054e118136d70892dffd3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700394652, "uuid": "c4b733cb-b802-4d12-b8c0-604090f65723", "value": "3072:+f/wl7lJbgU1PXkX5cLdjlQnf3ldoOtl3XD4aUHjr9Rib7ovbDh9q:o8lJ84PXsUOnNdzDXDBUDSfMC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700394652, "uuid": "e1eec296-f28c-48d3-8f0e-e2a784c704ef", "value": 263680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700394652, "uuid": "0c24576d-8ff3-4141-bcad-f875d8ad67e7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700394652, "uuid": "ba382f28-40de-400a-9e5b-f62604402c96", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a6341c3-8697-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700369403, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700369403, "uuid": "ec5ffe43-d8c6-45d9-a93b-7e0c3ead04bc", "comment": "Malware payload (Mirai)", "value": "396093f042a7bfb8f067ccdae0f6134d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700369403, "uuid": "51b4da02-a89a-4f6d-858d-7aa4942959d0", "comment": "Malware payload (Mirai)", "value": "4e1a2f9c7c083195dbe9474a04425784bc008292b7fed58578306acf833e9992", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700369403, "uuid": "4e68be11-8fb8-4e65-b912-60506c67866f", "comment": "Malware payload (Mirai)", "value": "2aec87e2e5f1ae16f7368615eac10d21cad89ddd", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700369403, "uuid": "5c683777-7194-4a63-a572-23ca45e62447", "comment": "Malware payload (Mirai)", "value": "0251530d0777c8ae64938d1febad3cd0cff1e954c9e2fb2e52461661ad4ee5e17a963508f51ce6c3960ec27d035009e7", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700369403, "uuid": "0fa65097-0939-4a04-8d1f-59cac2356370", "value": "T185635CC5B593DCF4DC160B3420B6FF369A76F03A6129DA9BD3A49D63E907602D90326C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700369403, "uuid": "40f1202c-64fd-4c24-86c4-4ef96afa1516", "value": "1536:jxUnb1LwXB9jLkelA8QZ+sT0WMvJ/zn8zUt83Gu51tgdQzMd:tUb1LWB9j4elA8Q0WmJ/bOv3BOazMd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700369403, "uuid": "6deb9fb1-5834-4e90-905e-1d397c955475", "value": 70416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700369403, "uuid": "995ce3be-e57d-4f17-94b1-c588784e0edb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700369403, "uuid": "be6483ae-3d97-4307-82b5-d37689b2d1cc", "value": "infn.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e9c9f37-86a0-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700373302, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373302, "uuid": "63511e65-0b9d-4520-8fcb-e7879b6be0f1", "comment": "Malware payload (Mirai)", "value": "b2d921dc77fa5eac94b5d42873a44ece", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373302, "uuid": "db8731cf-e029-466a-aac7-5ab29d5072f9", "comment": "Malware payload (Mirai)", "value": "501dc54ac895b996c3f647362591a6628534d798d5b6374909e6a3efe6f03a6e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373302, "uuid": "2bf27234-912b-444b-99e4-b5ff08d0644c", "comment": "Malware payload (Mirai)", "value": "ff901e6d1d7ecd9d837b763396b2055a03b4cca6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373302, "uuid": "49d0373f-6464-4d3b-90bb-ad880776bb7c", "comment": "Malware payload (Mirai)", "value": "1913ea64a0b636324415b445d1898b035b4d7ca8254c2429a18a23949f1333b7c238620d8f9fbf3124bc5e90050d4f60", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373302, "uuid": "13c07e48-a22a-4a17-9c42-65ad36bdd380", "value": "T19FD2D18D76D362FACCD9D67E721F1036309A74EAB6B29367B301C4434766140EA92E8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373302, "uuid": "3314183a-91f2-4808-a601-9559da8dc7ad", "value": "384:MSd/PxEDLd2TwM4zb6lowYcEaqsU9lcC450LQixBfE4jdlz0lewZ9y1WOJQaNyG:llxKd294CxEnsU96IHE4RlY99y1WlG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700373302, "uuid": "77274b75-3aff-4ea1-8b95-817d61122153", "value": 29456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700373302, "uuid": "8e38349c-fd19-42e3-9eb4-705869983a12", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373302, "uuid": "a6a0b243-e311-4706-9e0f-5695c9cf49be", "value": "b2d921dc77fa5eac94b5d42873a44ece", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66b79b55-86cf-11ee-8907-42010a9c0042", "comment": "Malware payload (Tosee)", "timestamp": 1700393583, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700393583, "uuid": "1e373d62-d4ed-4f4b-b5da-5b1493c21f90", "comment": "Malware payload (Tosee)", "value": "98bc4df0a0ab7afce91f477647addd23", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tosee", "colour": "#2CC5B5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700393583, "uuid": "807aefa6-3dbd-45a1-9447-1954634bf271", "comment": "Malware payload (Tosee)", "value": "557b2c8317bfbb669d0f226b2c8844f22dccd54c627ad12edb6c01b4a9d0fd0b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tosee", "colour": "#2CC5B5", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700393583, "uuid": "65bb6e33-6657-4ed5-9470-a41f334fa283", "comment": "Malware payload (Tosee)", "value": "c5177f07bd2ab18735995cf15feae75ac3e0056b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tosee", "colour": "#2CC5B5", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700393583, "uuid": "0b9a857e-9224-4fc0-8d96-d1bbcd04c75f", "comment": "Malware payload (Tosee)", "value": "247a3f5bf795573fec9e401f78af514d88ee2268b0ec742ae101c5818874528d0a82be63646c496b05f07a74813665b2", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tosee", "colour": "#2CC5B5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700393583, "uuid": "a6eefd83-5737-4597-8ecd-f06e74b905a4", "value": "T19944AD2369E0BC72C56A87758F2DDADCBB6F78617D65835F23141E6E09302B2C61B312", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700393583, "uuid": "5bc66385-88e8-4d01-9fac-1f3d760a1722", "value": "75f7b043db8054e118136d70892dffd3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700393583, "uuid": "1ffbf55e-f787-4ad2-b012-f65f65262275", "value": "3072:EfTwLZl44Y3HVhSq2zOLPWGkc5dFKkM/Uv2Tnl29Ri8A7ovbDh9U:Cgl4n3y1q7kchKkgvn98UMM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700393583, "uuid": "1f3c2e17-a691-4ff1-9556-39d7b4d5b8ab", "value": 263680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700393583, "uuid": "0959e876-a76a-4cfb-97de-9f9d65879478", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700393583, "uuid": "0d24c6b1-e613-4688-922a-657a376c7268", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "956ea860-8675-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700355007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700355007, "uuid": "0170999a-36e5-4ed1-b165-f1cd2188cfb6", "comment": "Malware payload (Mirai)", "value": "e56fdcca48c7a83ebe39ce172d5a34ab", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700355007, "uuid": "91904ac5-fe0a-4965-8cca-89b9dc19f283", "comment": "Malware payload (Mirai)", "value": "57312fe1c1898b56b55f4cdc3db62ffac364da1d23019f22b389b9b34f773149", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700355007, "uuid": "459adf91-4732-47e2-a526-bccd2ede01b9", "comment": "Malware payload (Mirai)", "value": "de831cd6678bab652fa02cc1373fca949551f69a", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700355007, "uuid": "38e12b04-5caf-4ea2-b678-de59123b3f4c", "comment": "Malware payload (Mirai)", "value": "578a1eaa5cd5cbfbafdc715815c804d82fc8ab77211b09b807119d687a3795dfc06bd3e2a3524efc250ff9c88467040c", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700355007, "uuid": "966bf61b-f66f-4739-9a6e-6205979036fb", "value": "T14CC2D0432C416052CAF6AE70D57C9F80AB3A99BC70EE3179717C836AA7D205C31AB5D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700355007, "uuid": "c0c2de15-b0e0-49f1-849c-6ae5864be4b1", "value": "768:P+qeE/jXFQUyx/OLiQgJ8QGt7pVZzw7BQCCrwVVcdqZT3UT:P+PE71ox/OLiQyfGhOtQIidQq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700355007, "uuid": "c0714a2b-6f34-4376-9633-ff8b42934d3a", "value": 27416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700355007, "uuid": "2f86f42a-867c-4590-afca-c081a03d1d20", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700355007, "uuid": "c97965fe-1643-4b2e-98bc-5fa4ce0f4ea8", "value": "cool.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00daaf1c-872e-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700434214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700434214, "uuid": "93e675a3-7636-4f6a-b95c-3ea417725053", "comment": "Malware payload", "value": "73e8d63b3da516fc8fa47f7477396018", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700434214, "uuid": "4c5b3ad6-a93f-4cf9-8215-702c1c12f8fa", "comment": "Malware payload", "value": "57d49bc67e669ede38f6a948bdb852668d4d8a860dfb8e928ce8617ddaa01d75", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700434214, "uuid": "e8308570-638e-4fe6-b647-5c12cb92952f", "comment": "Malware payload", "value": "79b3378ce9a288a7786c4403f909d2114f108fa4", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700434214, "uuid": "1c37fde1-df91-4371-8556-ed568a12f775", "comment": "Malware payload", "value": "5b006e5caf573de21ceb8e486de09f7d42e8389c1dc882da3ebc1812e48d16d06114d8353aafb2be5c30dab1a7ec7bdb", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700434214, "uuid": "d1658635-cdaf-483d-9b90-58a44dc29dd3", "value": "T1F27428C0378498EDCC0F9AF161218D659670D962A24FBB937C8BACF7BC1A3545B851E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700434214, "uuid": "39e7c35c-0144-4229-bf8c-edf3f2e99ba8", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700434214, "uuid": "e587770e-c4da-4916-a4aa-88ea1700b726", "value": "6144:qP1qay+5h1JO56ojaiBpo0Oejb0iTN1KzTi:OqybOlpoijb0in", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700434214, "uuid": "77306a1c-1102-4f0a-bbe4-735d2f4069a5", "value": 351232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700434214, "uuid": "fc847c3f-b711-4477-8dac-2d96bf5b5376", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700434214, "uuid": "c48d084f-234c-4bbd-be4e-e5973c84f54d", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a9d5bbf-86e2-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700401804, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700401804, "uuid": "3592f75c-b30e-4956-878b-bed297a10da3", "comment": "Malware payload (Mirai)", "value": "c0c2836d4de933a324d5d7f52da7022a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700401804, "uuid": "ffd35a8b-8a83-457e-bb20-065a815abb08", "comment": "Malware payload (Mirai)", "value": "581a3c2786f675036d7e07231055f1e36cf84d9359b2d16e6b06a06f0bb18ea9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700401804, "uuid": "8fa1679d-a7af-4ebd-9249-508fd20939d8", "comment": "Malware payload (Mirai)", "value": "d07d3cf1bbb5994704bc654a9b13e91521f9b3ab", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700401804, "uuid": "91846513-f717-40ec-98df-80c4d572f313", "comment": "Malware payload (Mirai)", "value": "0de6457b58a40d441c13b6f2695349e7ffced01c9661adb9b1dd0dae8d4baa9af5223a47a38873530e8e1340e14fa846", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700401804, "uuid": "8fd299af-62e9-416b-b845-003376b2e3f4", "value": "T1E6042A46EA404B13C0D627B5FADF42453333ABA497EB73069528ABF43F8679E4F22505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700401804, "uuid": "9cbf2cc4-14c4-4b1d-b6ea-d4ac8a841bd9", "value": "3072:wf/Ql9BbBLHcBCkAabwdyqkkUbH/6EBpDS/hJjogM/RqyfqQ:wf/QBLHElAabwdybkQ1BtS/XMgM/RqyX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700401804, "uuid": "36b6db7b-d3f3-4403-80b0-f21ace84cfa0", "value": 179805, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700401804, "uuid": "8c6958c7-5355-4db7-82df-ef4c6409d5ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700401804, "uuid": "0bec7c24-11d3-490a-ad05-d135a8b84550", "value": "bot.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62bdf833-86ad-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700378973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378973, "uuid": "0882658e-f02b-4221-b618-8fb2acc7f43d", "comment": "Malware payload (Mirai)", "value": "b057394091857d8cc629fa0b5652efa5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378973, "uuid": "5e0aa789-48c4-46c1-ac7b-9cc1e336e2fd", "comment": "Malware payload (Mirai)", "value": "5824d2ee749ccb4438502a0faa223be79c9c5e23cd93f0a58f7efea88dbf3bc1", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378973, "uuid": "8333ce9c-2a20-47bd-936b-09da2febb53d", "comment": "Malware payload (Mirai)", "value": "e61474ef2a837b7b313d56d0efaf3f7711b36cb8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378973, "uuid": "ea171eee-4082-4faf-bfc8-ac7a8a8ce66f", "comment": "Malware payload (Mirai)", "value": "29cba271e05dfd1cde6745a9269a77043b12f7b610f4e922c3a3da00677036191713b81357e53e91e975b332d841b751", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378973, "uuid": "74a60b6c-fa33-4af8-bc07-a4273325fbd3", "value": "T1D2B2D0CD61943184CA8D7C7C178D4A664FACA1D0BADD8B26E354CD98B3BEA8B345D078", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378973, "uuid": "d7dd122e-ab3a-4015-89cf-4b38ea2f5368", "value": "768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpxQZqEWvq:/QlS07FUXqIYSXQKquqqo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700378973, "uuid": "48d751a9-d6b2-4aa8-a2ec-00db06764fff", "value": 24912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700378973, "uuid": "12743538-2921-4713-9afd-1e40ca533395", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378973, "uuid": "f6eaa759-b5b9-4607-bbce-d70fdcc0c0bc", "value": "b057394091857d8cc629fa0b5652efa5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee01fa37-86ff-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700414426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414426, "uuid": "7e03fa49-8a40-4c2f-a9df-d8bd69f83c6f", "comment": "Malware payload", "value": "ac579e343410b629430024c52370668e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414426, "uuid": "635f533b-6452-47f0-a7a4-6872f6640800", "comment": "Malware payload", "value": "592b036e2d848d626ca63996e2edbba5ef65c9dc2e259b9dcb8fe517b2273851", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414426, "uuid": "ecef53b1-895b-4f43-8087-7b6b0ae7bf10", "comment": "Malware payload", "value": "494272a66662ca9657824490e93482c75d566e3a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414426, "uuid": "81748d53-82a6-40c4-83fb-02d1cc1d6375", "comment": "Malware payload", "value": "54322f765a53e52a9eb0cabdc188b1433093c924c4a56a8e1b8ed1c312b67e4be59cd3755c628dba1be866f3aa4516f7", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414426, "uuid": "bb4d1829-c75e-465f-9a41-ce954cb441bf", "value": "T12C43C703A90C3E61E1A24B704C37D6783F2BBC3D57928D57265ABE581D31A87BD9221F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414426, "uuid": "8ea6e79b-49f2-441b-af8c-e8f2c8f45334", "value": "768:R+KQY1F2i9jVJMF4cLjCSLYw8fvwluggSXXx0LBkcnjeeq+Fu:Rn7jVJJcLjCyIfvernXX+VKT+F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700414426, "uuid": "f9248dd4-b3fa-4666-a162-417bb78e6a6b", "value": 57344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700414426, "uuid": "8f7fc795-fc86-429d-86bc-8971d4d4ba76", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414426, "uuid": "bb48bd1e-c68e-49dc-9b5b-a7c078a9f194", "value": "SecuriteInfo.com.W32.Agent.CC.gen.Eldorado.21656.7934", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b79f94a7-86ec-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700406174, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700406174, "uuid": "11457ec7-752b-4132-8223-1731ebc46de1", "comment": "Malware payload", "value": "8236b680d9c9e22e2888f06630f1605f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700406174, "uuid": "2bbb6390-7223-446f-81a9-d16b63ebe1a5", "comment": "Malware payload", "value": "5edd21bf37afaa60ad092deb91977372ad05a64e9f3de9857641696c2e97cac0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700406174, "uuid": "530d2020-3190-4f34-a659-1f8911e6d432", "comment": "Malware payload", "value": "16d395b61b578c49bbc94daa6e57e78394af20ea", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700406174, "uuid": "cfd8ae31-9929-4217-b8ba-f8a796fb0766", "comment": "Malware payload", "value": "0f08e09fef0f193405ab1283840b0788fb4046dd0c44be5aea431bcac584d1c1f606ff910ec34ceeff0b4a2ec39c207f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700406174, "uuid": "8077ad34-262e-4368-af89-ddd6b926156f", "value": "T1EE449D2339E0BC72C55AF7354F2DDAECBB6E74614E65875B27181E7A0A302B1D62B301", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700406174, "uuid": "1f545744-7efd-4835-a83c-a48a4255c2c9", "value": "eb2b7f9c7e630bef5e1bf00f3d34e673", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700406174, "uuid": "ec9adaff-34f4-4246-858d-fc8eb3705167", "value": "3072:uP0wZ4/vqpVJ+XYYnyeA6wvQMWcGLG4SEVjXRBX7ovb1Yj:EoGYXYYnyeA7IMWcGLFV7LM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700406174, "uuid": "11217391-e8ee-4b3c-8b2f-d2acaab020a7", "value": 263168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700406174, "uuid": "46a849a3-e658-438b-ac74-a5908ac915f6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700406174, "uuid": "3442f02b-5ffb-47e6-8d7f-257a27913979", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2008391b-8731-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700435555, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700435555, "uuid": "1bc77f91-135d-480f-aa8b-45618de7357b", "comment": "Malware payload", "value": "f3bf59251ffa5afa2927f9f08c367619", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700435555, "uuid": "db6b4de0-02b3-4956-a7cb-57b7821342ec", "comment": "Malware payload", "value": "60e47e70a23033517fa0aa80589880255868b33c683c0e6a6b7fca9b1e2b7ba9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700435555, "uuid": "ff539322-093c-408f-9aee-a61e93c3c0de", "comment": "Malware payload", "value": "dcb7efb618444994ef76de58e7effd10486fbc9b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700435555, "uuid": "bd3b68af-3f0e-4899-a19c-7bd1aaa11bab", "comment": "Malware payload", "value": "1c4f4e9ea58e2bddc253eba180589340329d45614ce44ef4a61b40dade272e1e2b4bd4ddd318f9055309e5700bb8a0b1", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700435555, "uuid": "3b851966-ecee-495d-8554-fe91f02e49fb", "value": "T1BB559E71B502D037E1A101F5A67D9BA612A9BA301BAB08D7B3C05E3D95F2DC36235F27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700435555, "uuid": "81b966c8-03de-4334-8560-d65904f24346", "value": "7482a1595744a3c77ac9461f3f27a729", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700435555, "uuid": "15b8af20-55a5-4cf6-bb18-9b7b0bcf2a9a", "value": "24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJgrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TIrK5Zln2i6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700435555, "uuid": "f49d7f02-b3de-41de-9668-56f880bcbf42", "value": 1322308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700435555, "uuid": "90cd232a-f2f5-4583-8f62-12a35df0b484", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700435555, "uuid": "b11dfdb1-b50c-4a71-922a-0413317fe271", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "479d841c-86d6-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700396537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396537, "uuid": "cc3064d8-2e37-4039-8ad2-5050b18bd7a8", "comment": "Malware payload", "value": "b51c8e2023188114a3afb85df73b886f", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396537, "uuid": "36d0884f-3a55-481d-99bb-0c2c9235b5ab", "comment": "Malware payload", "value": "62d183e9bfa8eedfcb7f2ad75c419f38088e8a600dde6286f122bd7b567144f5", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396537, "uuid": "4dc60d98-a52f-45d0-a296-8f0e4488a93d", "comment": "Malware payload", "value": "1bc44f4a748fe2611a00004ca55f2567fa0890f8", "object_relation": "sha1", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396537, "uuid": "b8237434-6cdd-486d-bffc-262933553b69", "comment": "Malware payload", "value": "5eeccf127d9d21768f03082404d9ae40dbbf8d06c1ad67c536c7414843fb1eb4199131677ae17e2c1902b29d832d9fb5", "object_relation": "sha3-384", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396537, "uuid": "7e11bd76-3d4b-465b-9dab-7dba9f87605c", "value": "T19EE39DC922ECFF32D47C17F49A93411143F160377439EB085DE769CE962AB2642A5BA3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396537, "uuid": "8127e1ea-578f-42d3-a0b2-dc06a3c9d4d4", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396537, "uuid": "8558e0df-e55f-4f64-bfdf-adb5b4b69ccc", "value": "3072:BZ2BFiqZyk60phpaRhpaRhpaRhpa+gV4wC0eDWhpa4BJH:i96apaLpaLpaLpaoMeDYpa4L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700396537, "uuid": "07641ca2-6064-452c-9b75-192526a9bde5", "value": 147456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700396537, "uuid": "23473f6f-fa94-4872-8538-4517e952cf70", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396537, "uuid": "ea77f1f0-d698-4d86-aa5e-bf555719bb6b", "value": "launcher.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7cbffb76-869f-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700373004, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373004, "uuid": "fa575301-59d8-4edc-8fdb-ab0c520bec88", "comment": "Malware payload (Mirai)", "value": "676bede6f67e5e24c8b10d2b01c373a7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373004, "uuid": "1ece38d4-3354-4ec5-b2ae-b912f0660024", "comment": "Malware payload (Mirai)", "value": "63675c5571d36aae377a09d8dfff07c500f7345690eb65196934b67431b048bc", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373004, "uuid": "2eccab3c-c718-4237-bcf3-bb6cfc6a8dc3", "comment": "Malware payload (Mirai)", "value": "3c7d1b651676a9013bdafcbfc70a32bef6fb7d8f", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373004, "uuid": "789f5d54-79ef-4545-b36b-7c7a4f8a13a7", "comment": "Malware payload (Mirai)", "value": "762e612a7cd951b11afbe1daa461d4a867b648ab8234c3109ddf03b978bd0b8422f2c890abd1c5418769a76180f44999", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373004, "uuid": "d054e63b-f301-4723-a68f-2707959ad1ad", "value": "T1DE33F263576E2AE151B05777FC32EC1666AC16E85CA730DA2CF06A19B7C58024FF26C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373004, "uuid": "b7401710-27cc-45ab-a162-298c8edb6efb", "value": "1536:99O/ZMAXIxNUk0jOXLcPqF1aBexo4opKZbE:99O/ZNKy+XLGqFUFJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700373004, "uuid": "09b7b79d-cbe6-4114-9c72-cbe5ed3f0b79", "value": 52520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700373004, "uuid": "652bd325-e71b-4696-8890-89e9b90fcbd2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373004, "uuid": "5827fb48-9b52-4363-a69e-8a8cc9fbbeec", "value": "sora.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc1f3f8b-8692-11ee-8907-42010a9c0042", "comment": "Malware payload (Gafgyt)", "timestamp": 1700367581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367581, "uuid": "834f5c85-d6db-4ca8-94cd-9025ed4a5ffd", "comment": "Malware payload (Gafgyt)", "value": "4df0d9a5318dd0b2d031441d737c0e11", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367581, "uuid": "be47eb67-f7c4-4a25-8acd-2684b9ba1576", "comment": "Malware payload (Gafgyt)", "value": "63704912b284468b4f9f7cd306695988dc1e0f7b742ca04b59afaeb7d326ab13", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367581, "uuid": "e2430cd9-5cb2-4f86-8ede-7d2ae47c1f04", "comment": "Malware payload (Gafgyt)", "value": "51972a19e7cd7e7ac194a5ee0729688be7451b87", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367581, "uuid": "37099720-d62e-4262-81f3-38deacc019b7", "comment": "Malware payload (Gafgyt)", "value": "bcd7ee356bdbfb86e5ef24db0166bdfce79f8c9f303e8a3c657b57320dbf6d7a4c1b5ccc6fddb12c99372708d0816e6d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367581, "uuid": "2fcbe4e8-212d-40d1-8147-826727dc5621", "value": "T143E34B09F6408B53C0D32776B68F534537239BA5A3DB33069928AFF43FC27A94E22955", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367581, "uuid": "b1cca3e0-01aa-4fa4-b5fd-4097dbf4cc0d", "value": "3072:tdntU2haO5H1XacBoGmh9H5c5hDiGRvEM/9f9T637m5wTsL/Qpyn:ntVhaO5H1qEc9He5hDiGRcM/9l+7m5wS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700367581, "uuid": "e7d888fa-14b0-4d05-ab9b-f63317c906d9", "value": 156296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700367581, "uuid": "0b7392b5-51c5-45a9-bf6f-bffba19f1757", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367581, "uuid": "990f5fde-b28a-4500-bfa8-55f645d0df2f", "value": "4df0d9a5318dd0b2d031441d737c0e11", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41f6e35b-86e8-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700404259, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404259, "uuid": "c4bf1f89-4598-40aa-9de9-fdd1736f498f", "comment": "Malware payload (Mirai)", "value": "3cf57fd558aab15ec1a78a26c8344b3f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404259, "uuid": "bacc4e85-fa30-48c1-8777-aa8cce7a3a82", "comment": "Malware payload (Mirai)", "value": "655cfe6c42767ad4621bbbd5d2fcd0d311f042aa7e47ffc7e4359cbb15ad8465", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404259, "uuid": "a64f3c0e-16db-441d-81c2-99bd943f4cf8", "comment": "Malware payload (Mirai)", "value": "581161363e707a25e5661e8bf78da46e89ccd74e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404259, "uuid": "bc205dac-0f04-459b-8419-7dbfb4b10803", "comment": "Malware payload (Mirai)", "value": "061e1dabcde738c30f002a01e146c76bbba8c66a9636935c3e92dce3c61a84549a7ed2e95aa64579c3da670056cd751f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404259, "uuid": "008faad6-9846-41a1-b31e-731791093b2a", "value": "T1F0D2E11CD95D7D44C69D3EB954CE96B5294CB0C0A35DFACE17224458BA1BB87FC070B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404259, "uuid": "c0b55e5e-384c-4b4d-8454-373aa55c6545", "value": "768:11uUtLrVDsAp6tLkF4FuetwEub4sU/M9g36KNj4A9JbiWUu:1bDs06t4BEub4sU/MbUj3mu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700404259, "uuid": "00629ce2-d90f-41f0-baab-32a7f5a7b7c5", "value": 30324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700404259, "uuid": "d1191105-baac-4750-9055-fe1630c17220", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404259, "uuid": "ed5d2e27-2239-4c51-bc98-231770e4e78b", "value": "3cf57fd558aab15ec1a78a26c8344b3f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3674992e-86e8-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700404239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404239, "uuid": "5e9a0948-0f61-4ffb-9ab1-619747783062", "comment": "Malware payload (Mirai)", "value": "573aa89b0dc75fd93e83e86a1cc755cd", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404239, "uuid": "0f21e589-a13c-44ed-80f1-66016cc0d2af", "comment": "Malware payload (Mirai)", "value": "65974923f787d556050ccdade5c1153bdc34713199ab3446a7b9bc8569154bd4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404239, "uuid": "96b1d1f5-a6f8-45bb-ba99-800e7fc40418", "comment": "Malware payload (Mirai)", "value": "e309e0ff9afd571ad860a7363488dc0da992162b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404239, "uuid": "f9fbee10-be13-4d9d-b474-bc8e4cbc0d56", "comment": "Malware payload (Mirai)", "value": "ef1edcb231649eb63518a28d4bdfc48789d229e16f1e59dee4c448ec37a4198716326b8e28215b67a6d3719efb59675f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404239, "uuid": "a0fd9239-c88c-4c80-8c9b-c8d8ce668476", "value": "T11FC2D030A6FE2CB5D6500572E3BC56CABA520F7DEAFE3890110087BA3D419152EE98C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404239, "uuid": "e412585e-eb1c-4446-9e79-3def3a0c2062", "value": "384:ARt/koxisa34beDtZwuaCBsk+G9lLSsLYSTFs9u8OtqlrNEM2hymdGUop5h8:A7soTAZ3alkXLvFh8nNEls3Uoze", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700404239, "uuid": "ea64df8b-fb92-4b0a-832b-146b58a1c905", "value": 28176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700404239, "uuid": "fe332d63-cb83-411d-899a-e8430f8c0188", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404239, "uuid": "1522c781-131c-469e-8913-14e427310a08", "value": "573aa89b0dc75fd93e83e86a1cc755cd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89a54e9e-8699-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700370449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370449, "uuid": "17317bf3-f694-4255-ba77-8d4d965c45a9", "comment": "Malware payload (Mirai)", "value": "9360f52e92b1d9c58259d8c33e9a2622", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370449, "uuid": "ab21c680-465d-4b1f-a95a-f7a2d5e02e0a", "comment": "Malware payload (Mirai)", "value": "664743224bb77018a662134e0906bb938ae431fa0213935b2062fad76ddaa192", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370449, "uuid": "23a62cc3-5b5f-43c3-8f5d-15ed66cdf38f", "comment": "Malware payload (Mirai)", "value": "1ad756ef5a5f385a20e6d03ab1e20accb6280478", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370449, "uuid": "45659492-a8cb-4b40-a35c-c947335655da", "comment": "Malware payload (Mirai)", "value": "b673c35d0c0324df73f35b6bfed3810b186de386aca4b2fb71a387f5ddebc6c9c4e4bd510cf55775957108b2a9c58974", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370449, "uuid": "fefc9785-2cbd-4771-a83b-338bdbd2a640", "value": "T15BA394497FA40FF7F89BCC3749E92705288D662621A97F717931D818F64B24B26E3870", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370449, "uuid": "9fda2e9b-e85f-4b04-a27a-108c793b7c7a", "value": "1536:ykq2j4B50YtsHd1oU7aHmtmNvd92SYUrVSyZ8qy15:yri4B5XtQ7MmtE4y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700370449, "uuid": "2b766e79-599f-4e62-96ee-67d4d2d4828b", "value": 105888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700370449, "uuid": "b4723b39-2870-4f28-ae43-887a68ee2d7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370449, "uuid": "68ded33d-f020-4289-a3db-91e5a8be1d13", "value": "9360f52e92b1d9c58259d8c33e9a2622", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23301adb-86d1-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700394329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700394329, "uuid": "b91417dd-6e24-4032-a301-50fd608d9cc9", "comment": "Malware payload", "value": "10c677b96aa0d0111ab625259fec38a5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700394329, "uuid": "4bff3817-9703-4064-965b-1e3aefaecbec", "comment": "Malware payload", "value": "6702bbc33b5c3f5ae3f913cb4a023f154316a57bd37ca8efb55ac0f86245dc06", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700394329, "uuid": "681a39d3-7e12-48c1-9088-0625872ba7de", "comment": "Malware payload", "value": "e243be21915f7d4369839c381a9646f934471a47", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700394329, "uuid": "ecf544b4-f88f-4ad6-aa86-b6b2cf6d12df", "comment": "Malware payload", "value": "a8e3095c009b768b4e7849ce44df0da14a73015d3562d6b55004c988497438890a448937f5b7092df84696d00add6e04", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700394329, "uuid": "696f1206-0600-47d7-a24b-4815e7c45787", "value": "T195763321B4F6D87BE971053198696FFC3124B2AA0F7142871BD4DE3E8EBE5E6C107489", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700394329, "uuid": "0afce5cf-193a-47ca-93ff-1f179a405cc8", "value": "3786a4cf8bfee8b4821db03449141df4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700394329, "uuid": "504fc19e-140d-450c-9afe-ba132344189e", "value": "196608:91O6VZy8RIyiyp3xXPhVHLh+REnPD68AqiVbjeEaBlql:3OIvRNi0xhdLh+RuTAqihj88", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700394329, "uuid": "790bf0a2-6664-43aa-9014-76e632b452ba", "value": 7545630, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700394329, "uuid": "52434af7-561f-4c31-a4aa-d4aa78b02d1a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700394329, "uuid": "8e56923b-03b2-46c4-ad23-4b659641973e", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07e9a79f-8670-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700352622, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700352622, "uuid": "825ef3bd-c51c-4116-880a-05637903536a", "comment": "Malware payload", "value": "29a1998716bcbb50d62ed5129cd7f9eb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700352622, "uuid": "daa5c284-3a60-495a-adc7-9d4744e3c57a", "comment": "Malware payload", "value": "67adf402442da3b59bf5630a5a417df1ed62b3fcc59f9a3efbfd1acc0630aa53", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700352622, "uuid": "5ad9d9aa-408f-4ad8-930d-cc3e900e537d", "comment": "Malware payload", "value": "aafbd0975b66fa51f148576c071b080c0bbdc476", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700352622, "uuid": "120b09f5-1073-425e-bd0d-c7086af9ce0f", "comment": "Malware payload", "value": "73e9b2e19d4c5aa028f7e916047bab41625bffef9f828d7e2dbddd14c95779b41cf8cc082403c50851344e4eafed5501", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700352622, "uuid": "c9c94fc6-f7ac-4e6b-80c8-2fd69a090008", "value": "T124559E71B502D037E1A101F5A67D9BA612A9BA301BAB08D7B3C05E3D95F2DC36235F27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700352622, "uuid": "c4d9bac9-e5db-4ebb-b263-8f94ac62dd86", "value": "7482a1595744a3c77ac9461f3f27a729", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700352622, "uuid": "a5131e9f-19b2-4445-84fa-fab250255504", "value": "24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJgrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TIrK5Zln2i6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700352622, "uuid": "15ceb6b4-6611-4630-bd69-ee5b0d2c6ab2", "value": 1322101, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700352622, "uuid": "015e564d-7c03-4951-8f60-8d8be4623fc2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700352622, "uuid": "dbe86571-0c57-485e-8592-921093ee17d2", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7055ed7-86d1-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700394604, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700394604, "uuid": "1b881b11-e0e4-4db0-a93c-2619d513c03d", "comment": "Malware payload", "value": "742e428cb39339963dc087e708c3a781", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700394604, "uuid": "79b8835b-4eef-4cce-9150-40aee02d0a51", "comment": "Malware payload", "value": "6872748e3e1bb41d09f12ade298db167a3ff6519f68096844b61d3601105451b", "object_relation": "sha256", "Tag": [] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700394604, "uuid": "b4636af5-27d3-4a3f-8d99-728fe0bc1ea8", "comment": "Malware payload", "value": "0ffcab1173fe658f729bb252e7baba81836cb182", "object_relation": "sha1", "Tag": [] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700394604, "uuid": "64d5b789-0405-4bdf-a80f-802ae9eff1d1", "comment": "Malware payload", "value": "9aa5b576b9ddc9765124cabf72966a29c47ceb63184aeab340858262d5669558e5d1de6e050c0d8845097b4065f10999", "object_relation": "sha3-384", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700394604, "uuid": "119aa37d-b3cc-4a69-ade9-f40ee51fab49", "value": "T129430110C719BFA5FA7B9075B42750D2336E0BE4F2AB63C0E73A0B3555E840761EA593", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700394604, "uuid": "e40c0d58-eafe-422b-8405-733199d5928a", "value": "1536:oin4/vjvlGhKHhbLf1WN8WyInoI9vZErRJVP:B4zloKBeNyIfvy9P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700394604, "uuid": "027d1495-8e7a-4963-b614-dd252daaf571", "value": 58712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700394604, "uuid": "95dcace8-2401-4e7e-920e-5812afbdc23c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700394604, "uuid": "39a42358-b3ed-4fc3-9078-04dc5a2c2c48", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a96391df-8709-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700418606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700418606, "uuid": "a604d329-0a4f-4030-9946-48b8b70521e2", "comment": "Malware payload", "value": "a4212217a2e90127cf2870215d72edf5", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700418606, "uuid": "c1c2b051-55b8-4827-886a-c58aab4f583e", "comment": "Malware payload", "value": "6ad9ac5ab7a0071a789065d1fe2fde732d88be8faaf4e875e3097157bee34d38", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700418606, "uuid": "7248b8f8-7679-41e1-8e5c-7ab1a2da52a1", "comment": "Malware payload", "value": "2fc4ad01c10a37cc88e0c7ac02fed8734c0aa6e7", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700418606, "uuid": "24d4c712-0ddc-4b32-887d-272c2972ddca", "comment": "Malware payload", "value": "9d76707b678d14e1bcb43e373df2b15f6d370df0c1182298b81fe52b164ec07c166bfd36bc3e3a07af7118aadc5317a1", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700418606, "uuid": "bd46ba2b-7043-49fa-8a11-75629f87993e", "value": "T1056423209ADC05A0D5E3117AEE132D462B3121321B2F1F5E76FE0147EFE7F914B22A99", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700418606, "uuid": "0c328137-84b6-488e-8e8b-9233ba82bd5b", "value": "c78a8260f9a15829e711e4a9385a8f0b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700418606, "uuid": "c8b20ed0-6df5-4ab2-b2c8-51116ddd724e", "value": "6144:jSt2tu6b3Ulc6Bxz/Bn8ETaWASeIN8Sez8cihLtKb4XM1gvKUdFebAXmCEctjlLK:O36b3wcYxTBVcSeIWSeYXBKb48MJnBdK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700418606, "uuid": "1c3d9c54-3e7a-4e6b-a379-adfaf5785359", "value": 329728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700418606, "uuid": "48f0e735-2d61-4a51-bee2-90ab0409512f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700418606, "uuid": "13cbcda4-bb89-4aca-9197-bcf2a25487d3", "value": "a4212217a2e90127cf2870215d72edf5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1fa0167a-86d0-11ee-8907-42010a9c0042", "comment": "Malware payload (RiseProStealer)", "timestamp": 1700393893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700393893, "uuid": "fabd7ac0-a1e4-4816-9f6f-6a1dfaf19090", "comment": "Malware payload (RiseProStealer)", "value": "e0e760ca116a6ea03da007bb19bc05d4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700393893, "uuid": "dce975d9-e04c-4b22-b701-141b3fdea2aa", "comment": "Malware payload (RiseProStealer)", "value": "6fb6cc210dedd2a98405b4f3c2553e3fc915cac892611140f572ab0016642d18", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700393893, "uuid": "9510e416-9139-4dd8-9baf-c53f1609daca", "comment": "Malware payload (RiseProStealer)", "value": "ae6e31085c136cbfe62a68118988b5efa3378a25", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700393893, "uuid": "c611a84d-d25d-4216-b216-ca18529145e2", "comment": "Malware payload (RiseProStealer)", "value": "bbea0d0fa7308ec886e8580f8b1e6b848fd431b95160a231aca118946caecb0654e71543e93b958ab4b01e1b8c4a2b3f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700393893, "uuid": "e962ceb0-a14d-4454-aa34-cfba23d571dd", "value": "T18D559E71B502D037E1A101F5A67D9BA612A9BA301BAB08D7B3C05E3D95F2DC36235F27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700393893, "uuid": "95edc24b-9105-45ae-b5a4-ca7f291f20c7", "value": "7482a1595744a3c77ac9461f3f27a729", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700393893, "uuid": "05446ad2-93cf-439f-a2ad-acfbea5b21f7", "value": "24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJgrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TIrK5Zln2i6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700393893, "uuid": "717fdc0d-6371-4f3c-9529-b1f40b963801", "value": 1322204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700393893, "uuid": "4b58a228-d77d-4254-8a21-40b50af3dd9b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700393893, "uuid": "994594dc-58a2-428e-8bff-342926289deb", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b7e591a-86e2-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700401805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700401805, "uuid": "df218c53-adbf-49e3-8312-9142d06f00f0", "comment": "Malware payload (Mirai)", "value": "0d76c138a6258cbacae6fc84096a2114", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700401805, "uuid": "430702d5-8feb-4c2d-acdb-15dbdebc1c94", "comment": "Malware payload (Mirai)", "value": "6ff3a7500869fddac5834b493ea6e9cba4e1edc6ed21f26352a99d01be48d3e8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700401805, "uuid": "85a98e82-a883-4281-ac84-cc198a62cf77", "comment": "Malware payload (Mirai)", "value": "f4fce0c7d35bf7337a8d7f5556754d733d3242d4", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700401805, "uuid": "f65b844c-bc3e-4f34-bd35-7330d526fe50", "comment": "Malware payload (Mirai)", "value": "750f860dba9cd1d62c4813c32e7631d6177ca0c319ff177f64ca2e2c01764ee98b34540a75b0359a1e3e0109e8f47ae5", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700401805, "uuid": "2c3aac24-5927-434c-b5f3-4da22a0fa1a8", "value": "T130936CC5F683D4F5E89304B1613AEB339B33F0B52019EA43D7799932ECA1511EA16B6C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700401805, "uuid": "fe0c3995-e474-4f25-8d8c-82e5e2a85cd6", "value": "1536:xpmWc2AcighsZ82XJxfctHH1mSsM8y6Q+gBQ9TnkISGtAdC0xZ:xpmX2riED2XrfeHVmL1Q1Q9kVTC0x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700401805, "uuid": "dcbd4743-35a9-43a4-9fe8-77f534376ca6", "value": 89576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700401805, "uuid": "f4e1fddb-e8be-4b87-8205-6e4d16fbfd98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700401805, "uuid": "a90e9b98-3277-4760-addf-bccd00749aef", "value": "bot.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "326cf67f-86a0-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700373309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373309, "uuid": "e328e636-3839-4e32-aa77-a82ed415346d", "comment": "Malware payload (Mirai)", "value": "767ffcca0c85dff8df6756915a2ab811", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373309, "uuid": "931783f1-7bea-43d6-9028-d538534b3f3d", "comment": "Malware payload (Mirai)", "value": "7039ebe42cec238c24d9631609b4f0b5de6810df23da14cb02add3edb8b65312", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373309, "uuid": "20a7dc5a-a142-4543-a4fd-34219e627f37", "comment": "Malware payload (Mirai)", "value": "cf44b213c4c2efb38bf4c9da8096c9eb9dfe13af", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373309, "uuid": "b1f63f5e-21b5-4434-8e89-513aefffeeb3", "comment": "Malware payload (Mirai)", "value": "b0d7f96f48fb456031a94e90e0fb677f5589d56e060190faf85421ad16b97931e93522164f51bca03b7ef73e497dc6b7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373309, "uuid": "f0a7aef1-72b0-46ed-8c98-5da3fb9831c5", "value": "T175B2C0A487A59706C2B0B875D3BC8F926A3B15A0C5F63933271086BCD68549633EC6CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373309, "uuid": "c90cb0c6-c261-426f-8cef-0854aebd4bd2", "value": "384:4GHKXlJIDFUS0Mggks3aIrokYVDoDDRRKj55N7LB9U+Be4XUH7hymdGUop5hu7B:4GHKQFH0rs3zWoDDRsjt7LB9U+BhXUb3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700373309, "uuid": "e98646a6-e3e1-4e5a-9eb9-54c4fafa876c", "value": 24536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700373309, "uuid": "92e68a57-1adf-4660-a007-dc024b548a1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373309, "uuid": "af0f23bc-ee27-44aa-b261-b5b904a95ff7", "value": "767ffcca0c85dff8df6756915a2ab811", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33d5f5b0-86e8-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700404235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404235, "uuid": "e14ed794-6aca-48e5-9c58-116592dce971", "comment": "Malware payload (Mirai)", "value": "3cc14b354b9ad1f62727c6eb5e15f5d3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404235, "uuid": "434b0a9d-9c5c-4e08-8f83-db077d39a140", "comment": "Malware payload (Mirai)", "value": "73d54d6b3da2c85cd44388a8c80759dddc14325fc11d698e5d94c4f468c3d8ae", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404235, "uuid": "68239631-97fc-4880-b709-6b4c55cf1c92", "comment": "Malware payload (Mirai)", "value": "c2f3767e4daf57dc8cf20d4885452002b2f900c6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404235, "uuid": "c4afe993-affc-4004-ad95-e2a7c2a8cfdd", "comment": "Malware payload (Mirai)", "value": "32bc6bc95fd642c1cce16fe5a6579c04acc6aecaae7d05f8b63f256aeb4944da1fcb1e53ab81ddec20fb513a0fa7a781", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404235, "uuid": "865ab80f-9c77-4deb-b09e-eb2446ed6089", "value": "T120536EC6B4119E7DF5CBE7BE84224D0EB821722150531B27BB6FFD83BD721A48946E06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404235, "uuid": "ed75048c-2ca4-40ca-94f7-491cd5d11200", "value": "1536:kPqRg0FGTbSX5xpLepSGorsF7QhOx2X/ZOqc/yA8K:p5VHV8I9cKE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700404235, "uuid": "aa930491-dfa7-43c1-97fd-301afa020ad5", "value": 66508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700404235, "uuid": "5ad443dd-49cc-45d8-a8d0-c702f00ac478", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404235, "uuid": "df15fc0b-e37d-4eff-b361-c84609ef2654", "value": "3cc14b354b9ad1f62727c6eb5e15f5d3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6a001cb-86d3-11ee-8907-42010a9c0042", "comment": "Malware payload (RedLineStealer)", "timestamp": 1700395435, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700395435, "uuid": "7ef817d8-7cf8-4211-9ab1-690c1dc4a189", "comment": "Malware payload (RedLineStealer)", "value": "f2132f3b2846e6db8aa669cba44a6ce6", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700395435, "uuid": "eb64b296-774b-4abf-a582-571c1ee724c2", "comment": "Malware payload (RedLineStealer)", "value": "73f3966826cdf8297f246b27d4b6f8f46e4eb476e08da9a4c30d3d23936471a8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700395435, "uuid": "e9dfb86f-5e05-4f84-a846-d3ce473e3be4", "comment": "Malware payload (RedLineStealer)", "value": "e54356467c64da47030168426c802002365dedd8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700395435, "uuid": "c55bd096-ab22-4da3-83d8-11d30d40606f", "comment": "Malware payload (RedLineStealer)", "value": "e926a0d1b0c1f5c6ed47359feba28ba63d63267e2f806bf7ae4ced6628a6677f71ace61de824bb88616980484d26594a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700395435, "uuid": "1b8edb14-e40a-44cf-87b7-1755db476291", "value": "T1D274F122F6F1C072F21349754E72C2615B3B7CA18FA2C5DB27D51ABA1E221D2DB78312", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700395435, "uuid": "56971a0b-e923-4adf-a0b2-798731ff0cd4", "value": "3cf8645c93eebd6a8066c6479eebf80f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700395435, "uuid": "ca1f45c7-7997-4fa5-a732-5ad4d67a4750", "value": "6144:lU66fEZXq4yTWN8cRfiEAJnixtj1i+Ndoia1Ag7tiobX+pbvxDf:dZXJyREAcbhCirm5L+tv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700395435, "uuid": "9333a6ff-8b8b-496e-8e4c-ab850911ee3d", "value": 369152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700395435, "uuid": "417aa866-2417-414d-a770-1c8465afb333", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700395435, "uuid": "18e2e780-d5e3-4c3a-9bbd-b8999c7ea64e", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f75f7fb-8710-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700421354, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700421354, "uuid": "8de83ba3-5f08-4249-a1eb-33219751e90b", "comment": "Malware payload", "value": "0c648321522607509014810fa9850703", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700421354, "uuid": "65780110-7ce3-414f-a760-053ed49bcea2", "comment": "Malware payload", "value": "76465863089ece91dfcafbcf35b4129659eee5bb53ac9a9add3b95c77c9022fc", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700421354, "uuid": "939b3059-08df-4422-9eb2-a6d55916f89b", "comment": "Malware payload", "value": "637691d6383617223d3e560dca72cb47cd9df0e8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700421354, "uuid": "3f1808c7-e746-4f14-bdae-c1c92659b929", "comment": "Malware payload", "value": "02b53b862cc6b7ff7a9b88a964c6439e11ce10b8a29eb59bb5bfb7e2def7c8dbee9c98dfd60465c6289ec762707017f8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700421354, "uuid": "99ddf93c-7eba-4efa-8749-be4202f2d752", "value": "T1C7C533933A6283F1EF615F362D52961A59EA9E707F1011E3E255B8136CF0AC05A3B393", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700421354, "uuid": "7cb25a43-1471-4def-a80d-ce535a22b57b", "value": "f6baa5eaa8231d4fe8e922a2e6d240ea", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700421354, "uuid": "7b059fbb-6e4b-4ccc-9718-50079ba2ea97", "value": "49152:Co5P6mI0jX9MTqoQQzLrk3PxbFszLJpRgmjXB2LtBasOrlSi0GTIzVIBDwN3CX/T:Co5RM5zc3PxezrjXM+skSqIqeNK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700421354, "uuid": "0d9584c8-6261-4ed8-812a-e34d7321696b", "value": 2671400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700421354, "uuid": "a9990906-fce3-4898-b976-47caaa4354f6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700421354, "uuid": "6320c77f-ac7d-4535-a380-750263135b0f", "value": "0c648321522607509014810fa9850703", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de48ade4-86d2-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700395072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700395072, "uuid": "c5811ebf-9c23-426c-80a4-0cac89396c43", "comment": "Malware payload", "value": "b92f592c56d52d960cc9215c5e72aad8", "object_relation": "md5", "Tag": [ { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700395072, "uuid": "83528087-77b6-4990-acad-5426c25616ac", "comment": "Malware payload", "value": "7649ad4f79c1c15e03248b7262cd6b516f19f6ca8987fa76695b9b817318050e", "object_relation": "sha256", "Tag": [ { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700395072, "uuid": "c8c9d0fc-aff4-4134-8ffd-1f3219726901", "comment": "Malware payload", "value": "ded9c1bc5ef6cf89f8dcf7cc84e5bc8b907656ec", "object_relation": "sha1", "Tag": [ { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700395072, "uuid": "dcb5c8fc-d358-45e2-abc0-059b251697ce", "comment": "Malware payload", "value": "e98441b39a02f5289a00565483611d832de65d8eda4031462a32bf33fd29e7424da0599c13e11750cefc5f710b8834cf", "object_relation": "sha3-384", "Tag": [ { "name": "Shipping", "colour": "#83933F", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700395072, "uuid": "9572a4c0-6e57-4c0a-ad3e-a812a1f5991c", "value": "T16865331D5DD6B9A3430E5A0AAF30C2BDD4689695FFF2DFF8E72A98C223C51747218211", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700395072, "uuid": "3adac570-75a7-4dd5-9e8c-04d62d9de67e", "value": "24576:zvqYjNgCkhhZiwU+h0w5GM/ckqanMUCagnzj1CLPWJtuSUHNA/1iEJyjU/hxB4JL:z49CwU+h0w4MPqaEjnzj99T8R2hxqJL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700395072, "uuid": "5a057fa6-7680-42f6-a357-3e2462b4d4e4", "value": 1481271, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700395072, "uuid": "d0cbfb2c-2933-46ae-bf00-a4d278121692", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700395072, "uuid": "11337e6a-e5c6-4415-a263-55ed2c437981", "value": "Shipping Documents.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e75d11bc-8692-11ee-8907-42010a9c0042", "comment": "Malware payload (Gafgyt)", "timestamp": 1700367600, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367600, "uuid": "9dd6adda-1ce8-412e-bfb2-b5feb5fe27a2", "comment": "Malware payload (Gafgyt)", "value": "3bfde7bbc223d6aee6c6bf6ee8a1bdad", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367600, "uuid": "0455fbf7-33bf-48bc-b1bd-1a80bde46080", "comment": "Malware payload (Gafgyt)", "value": "798e939fe26112b9b01ead505087a3e05fa83ecfa7b6c4cb19c4b5ebe43f80cb", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367600, "uuid": "653c9912-cc23-4087-ab8b-a5fa5c2881a1", "comment": "Malware payload (Gafgyt)", "value": "c246020b051472d5040c2e59847579ae6d6d8c97", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367600, "uuid": "177688fd-dd54-4df6-b764-39ef66c3112d", "comment": "Malware payload (Gafgyt)", "value": "52d260ad25e3fe4ff823d80735da360bb4c4bc6bc0dff9c177a158f5b8f28980afefecedc099aa9803aa170074599b01", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367600, "uuid": "d817b06a-42cf-4405-b6ab-81a65c50a8b2", "value": "T11E934A17B653C6BAC0874BF41BDB9A314923B8BD0B227206B3D4BCE67F165A61D19F40", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367600, "uuid": "8638f904-b586-4bdd-ad16-9d068453ea99", "value": "1536:p7rHXokXsWFVSzkfLEkZAT5ipG5v3UphauH/SPNlDDUg6I9um2Xj5YZb0e:pcCPOkfQfNipGdUphaE/AVog99um2XFY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700367600, "uuid": "dd9008d4-cc8e-4358-9f68-6435db4bd5fe", "value": 94012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700367600, "uuid": "ce9f666a-027f-4c71-91be-0f60bd6615c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367600, "uuid": "b02451fb-fe9c-4921-8644-a94744552987", "value": "3bfde7bbc223d6aee6c6bf6ee8a1bdad", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed7854ef-86ea-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700405405, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405405, "uuid": "ca926e3d-2454-4827-b23e-4e2a77110484", "comment": "Malware payload (Mirai)", "value": "501427c34b2b82ec1a15759f83f247e3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405405, "uuid": "3fedf7dc-6753-4d04-ac5a-0f14c08a6148", "comment": "Malware payload (Mirai)", "value": "7a64860666cd02306481641d0e7331452cfb444e104938b182e698b4e6bc19aa", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405405, "uuid": "7b2a9e1f-f153-4909-b9e5-f4135511740b", "comment": "Malware payload (Mirai)", "value": "cc06f59675f3d3a994dbd7ce0c0678696edeb52e", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405405, "uuid": "5f5f5b92-1a2c-4bbe-949d-aaebc7d96468", "comment": "Malware payload (Mirai)", "value": "e0e3383a0c2a2f93c6dfcacfa76a614dd47dd5cd8c306d9928517e61fa214bd3b7b1a9cdc282b48b617db7efb9785eee", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405405, "uuid": "7a0a11f3-3265-4fd8-b305-c9061b24c54a", "value": "T1CB334B47A381D0BAF54340F613A6C7A24172F77B1046EE0AE399163AE936601DB277FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405405, "uuid": "2e9866e5-cecf-406b-83d7-aec854157145", "value": "768:P4NhHYTiaPS7s+KVB12SnW4IKq0XAVly5PPLfIV7T8M1HJIZY:g/4TiaPS7cBdnwKxXAVUhDefFJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700405405, "uuid": "89e75581-b74d-4cc8-b22b-24b70dedf498", "value": 50652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700405405, "uuid": "d8f298f9-7797-4520-b902-59789c7ae41d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405405, "uuid": "71ac4ac4-1194-42a6-b213-a84f32679bcd", "value": "0xc2s.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6974b0d8-86a8-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700376837, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376837, "uuid": "aae2d1cd-3b04-4b63-b8ae-e55b39394a86", "comment": "Malware payload", "value": "98453216f9c9107143d248d7f46a7c64", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376837, "uuid": "35f04853-da70-4544-a1a6-dc033377b4fc", "comment": "Malware payload", "value": "7c6e6b4aaa210da5a69c5b12328158d54486e6d31bfe4938ab82097f2babc9f5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376837, "uuid": "281e98ea-454e-41bf-9891-49fea3fddbbe", "comment": "Malware payload", "value": "bfba918795f7c58992e624a5d98cb787ec9bab17", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376837, "uuid": "58de140e-bb5e-4712-a48e-d83822847320", "comment": "Malware payload", "value": "b84b57e00e3a014377db1a8f95b3ca2e25f3e7a03163bab4103d546f799fd75613cfefb6e584a09b1fb77731513e9252", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376837, "uuid": "3b701076-1bd2-4678-93a5-9cbf846fc4e2", "value": "T112449D1369D0BCF2F55A83318E2DDAECBF6E7C225D64974B27582E5E19302B1D61B302", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376837, "uuid": "14175889-6b7d-447e-8b09-dc5d34af0f0a", "value": "c641dbd6770cebe481abc8b5144dfbb8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376837, "uuid": "7900ad91-927e-4479-96aa-c8bfff940d23", "value": "3072:cL3wrXdyeiSDykE99nwYrbkxzdix8M/TZ5rEOXRypH7ovb3Trh6:qidyjSmJ9dMxz4fZ5rEhRMrT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700376837, "uuid": "d67db529-a959-4c7c-a20c-90020ded1eb2", "value": 270848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700376837, "uuid": "3cbc4088-89ea-4849-a3ed-a3501b37c8af", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376837, "uuid": "e05b3779-2223-4fc3-9e2e-a0dff708e3c6", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "caa31137-86bf-11ee-8907-42010a9c0042", "comment": "Malware payload (IRATA)", "timestamp": 1700386879, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700386879, "uuid": "2023d783-5a45-4a0c-85ce-65fd25db4891", "comment": "Malware payload (IRATA)", "value": "e27a6a678d2a3391d3dedd7f6b5bcffe", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700386879, "uuid": "249e6528-257d-41e0-b577-0fcdb9f135dc", "comment": "Malware payload (IRATA)", "value": "7cab5be54ea256801ffbb8c5f14bbe8acf8c8edf4b14bec82a8e73f2a22fc229", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700386879, "uuid": "c7fa0f38-8b18-420c-9fe8-1d650429c447", "comment": "Malware payload (IRATA)", "value": "8a0a4a6524c4fae519ca273f427a067a80fd6b5a", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700386879, "uuid": "f9fae935-d30b-45e6-a2c1-9b3bb6139c34", "comment": "Malware payload (IRATA)", "value": "bac2d2a19a96b6d7b37374b18dcb7241c4618623f19174542e5e5aac53b3f825025b06d71439c8db30d9833aa4eb352a", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700386879, "uuid": "f0889064-454b-4288-86c5-6e3d115542ff", "value": "T162851243F7BAE457C832C03324822635214B5D68CA03F74A369977AE68B7DEC8BC16D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700386879, "uuid": "31f62122-81cf-4412-ab75-4e845f56c8ed", "value": "49152:1sFkkzEXp3a+VmS7LFKF8/LMrDCWeyShqwr6cQVY2t9JlW:ckkoXtNYS7gaQCKShqs6JS2jK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700386879, "uuid": "360b0d11-94bb-459c-8ff6-addb19619ef8", "value": 1781512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700386879, "uuid": "d0fd4dac-2be7-4b6a-8838-8f00f0a29d9c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700386879, "uuid": "53dad58b-a6ea-4e69-ac3d-acc9377d9a2d", "value": "dex.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8cc03592-8699-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700370454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370454, "uuid": "f621b7f1-b380-4e07-8d03-f647b3a2075a", "comment": "Malware payload (Mirai)", "value": "a96f39c2407901074f2be5ebdf1ed995", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370454, "uuid": "950386a5-3b6d-4e4b-9fc5-d7cfc9d4cb71", "comment": "Malware payload (Mirai)", "value": "7ccf69431a977f4d1e7c2efda6871ccc4ead80e93b341b8670351c94f2bca757", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370454, "uuid": "66e09572-0007-4c1b-9e8b-e3c4b3a0e1bc", "comment": "Malware payload (Mirai)", "value": "708dd3a4bcc0db04d8ab7b13f15eb3433cd757d6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370454, "uuid": "a3db8e47-46cb-47b1-bc01-ff661436f84b", "comment": "Malware payload (Mirai)", "value": "f5763f8e8368f9d0a81ce651911a626b9eb979a96acf1849a49675e0152b567914b8dac393cddff58b4b5298bc316ec2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370454, "uuid": "258a0dd9-71c3-4cd3-92ee-b0f4e3d88bde", "value": "T1A7734A4232680F4BD1A65BB41D3F17E083FEED9024F4F688164FDB568636E77418AE98", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370454, "uuid": "8924668b-5d71-4e93-95d7-97ff1c543ce4", "value": "768:YSygL2s//8xic1RZBjN8rDRIaRnqV3a5/WeMhC1LXVAaSsxbqV6sbFDzGpD3wCeS:1/8H9OrDRqVRhC1LXVAqe6MzGpD1n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700370454, "uuid": "34f9471b-c03b-47ee-b1e8-d8e5cc3224ea", "value": 74848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700370454, "uuid": "ae5bb42c-7c63-4cf1-a8b8-caf55974b0a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370454, "uuid": "0f21cd08-03fd-4ef1-8af9-b0edf687df3e", "value": "a96f39c2407901074f2be5ebdf1ed995", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dde237bc-86a7-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700376603, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376603, "uuid": "d40ed2a2-2693-4611-9305-8a627e674b3a", "comment": "Malware payload (Mirai)", "value": "84d026cfc9b5805d921b198c4c2cf261", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376603, "uuid": "a20542d6-4898-496d-92c6-5ff963a9f768", "comment": "Malware payload (Mirai)", "value": "7dedb32c9343ff807e9aea4c0d31ccbcc2191d80caecbac15d84a42b30e7f090", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376603, "uuid": "4217b6b4-0a71-46a3-83f5-e2e7721cef09", "comment": "Malware payload (Mirai)", "value": "8c9a411b04d09e4476c50246da7fb37c67876576", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376603, "uuid": "a91c11d1-462a-46c5-9e88-69ea3b073adf", "comment": "Malware payload (Mirai)", "value": "c258755ab088d599a95cefcedb9f5f598296dab81f4f38b67fd5f741b0deeb52d0387541eeb202f8244b4b8e86d75064", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376603, "uuid": "b20e1b3d-267e-40c2-9154-06a4fa901fe6", "value": "T1C8230271490E9EF134303C76EA95939376E12AB1C6673023D6280A3C3FB56531E5BE4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376603, "uuid": "94098e47-85cd-4f0f-be22-a5ae2bab0332", "value": "768:g/TYCoIxdEk+AxoTZAZHFeq8b3e9q3UELbUXfi6nVMQHI4vcGpvR:gECFd+A6YHAxDLRQZR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700376603, "uuid": "59bde812-6868-4c88-98ff-23e6223b0553", "value": 46624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700376603, "uuid": "9e3b2bc0-2ca4-4aa8-a8e9-525438e36394", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376603, "uuid": "60d6a3f6-2338-4cbd-8696-78b80c616692", "value": "boatnet.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69dda266-86ad-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700378985, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378985, "uuid": "bdb41c40-6132-4ed4-91eb-36047e994036", "comment": "Malware payload (Mirai)", "value": "d1d188ed57ae6edc2ee89ca094386fe7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378985, "uuid": "cfd53e84-36f7-4437-8811-1e4c052d6052", "comment": "Malware payload (Mirai)", "value": "7f2968d7993d4508991e36d2069e2fe075c1cd10fe159c48aea2781d9c977e92", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378985, "uuid": "dfe006e7-32ca-433e-a092-64b589c4498f", "comment": "Malware payload (Mirai)", "value": "384361d9f344a07ea66b11c477efa9f03e0800f0", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378985, "uuid": "7c6b497d-31e9-42e0-9b32-de4f10e67c6c", "comment": "Malware payload (Mirai)", "value": "688d85a4134a9efd391687d88926c16a5e780f683475b276397e46ce9edb290cba2453adf6ad93be74d626d1c81a11b9", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378985, "uuid": "75856ae4-ad17-462f-a407-f52c49bd2aef", "value": "T163A2D029E345AEF4DFEF9DA052C1C2C276E587C7268AC8E340FEAF012506046B749D5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378985, "uuid": "4ce3f818-d0ad-4515-9469-b4fb7e63564e", "value": "384:M/JywWc84Tp2YshxqlDeAkSqjGJLeCE5zRW6C5+UtYM4uVcqgw05VxJL:MRxsSVsMD6xiJJE5zRWNVB4uVcqgw09B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700378985, "uuid": "3999f8f7-a76f-4c64-987b-d6b2f4efdf37", "value": 21884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700378985, "uuid": "dd163eb2-93a4-4d05-bc47-10577e2cadee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378985, "uuid": "e086259b-2bb9-462c-af5b-dc82e9755495", "value": "d1d188ed57ae6edc2ee89ca094386fe7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef5e22cc-86ff-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700414428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414428, "uuid": "43be3811-377d-49ac-bdd9-d4cc5cf16e17", "comment": "Malware payload", "value": "fc167612cef19f43576c5622d8468131", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414428, "uuid": "fb6e644b-f133-4f9f-817e-65744bae0fde", "comment": "Malware payload", "value": "7f447f0a1d70bb8fc183eb123fcdc8907c7a1dbb1c7f3e9c1c8fca5808b733b7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414428, "uuid": "af331386-db71-48db-8543-0879ecbe137c", "comment": "Malware payload", "value": "98fd2d77dbfcbd96fd38ca1a55a40d9bf9a93943", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414428, "uuid": "9c72d743-58fd-4e67-b39b-8956196d597a", "comment": "Malware payload", "value": "5f89465cada5df028c82253a352b2563fb6449866cc7bdb50db487a37b62c230e4b6cff210db9f6a79935cff2adc6707", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414428, "uuid": "479907a5-ce9f-46de-bbc6-68a16caf31d9", "value": "T110D312562618AD39C9888FFC6EA7DE651824F046703A17DB3B5CA04B1B37760D636386", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414428, "uuid": "b50a1136-9cf9-4066-be7f-231e5bbb1780", "value": "fd67289eaa5c0d00a60a80a11af61ba3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414428, "uuid": "96f055d9-ef71-47cc-8cd3-7271f9f54a19", "value": "3072:dp0Eq1bBGsOZ0eBiuEkmTF7l8iqAgYUm0/zhlZJce:UEq1Ms0lEvTF7XqAg5zpKe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700414428, "uuid": "fb666074-ea3a-4656-8216-d10c10a13a2a", "value": 134732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700414428, "uuid": "951c26fb-7353-4f47-b4fe-3839e3078ed9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414428, "uuid": "39552cf8-5376-4089-811c-115332b27194", "value": "SecuriteInfo.com.HKTL_PORTSCAN.25654.4389", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "817814a4-86a6-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700376018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376018, "uuid": "c7ffd22f-27a5-42a8-b5fc-ce10fae037c1", "comment": "Malware payload", "value": "d912ec2d5e38147ac9d2c23ddbf9d361", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376018, "uuid": "73745f21-462a-4151-a922-838a80169d58", "comment": "Malware payload", "value": "7ff9a1a61d4bb0e1f0b29e61124aa6491690a793f8fdf7fd273a07958779e9d1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376018, "uuid": "978a1bbc-94a7-4698-bca8-e48a710cdc6e", "comment": "Malware payload", "value": "2b7b4156804244b6e425640a65dad2580cbd8e96", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376018, "uuid": "81a021f1-a913-42f9-9bf5-cfe9353f95b0", "comment": "Malware payload", "value": "6e0a6f41f32030d2e3216de1efe8554c0139b55eee360fd71a4f725efe6371a3324d4818c07457cb77ee44cd37724450", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376018, "uuid": "80fb77eb-8296-4831-96c8-d784ea6c4991", "value": "T1C7559E71B502D037E1A101F5A67D9BA612A9BA301BAB08D7B3C05E3D95F2DC36235F27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376018, "uuid": "9b1b7683-bd51-49cc-a2aa-3b06dd1a630a", "value": "7482a1595744a3c77ac9461f3f27a729", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376018, "uuid": "46b347d0-5dc5-4494-b4ce-004f08e84adf", "value": "24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJgrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TIrK5Zln2i6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700376018, "uuid": "9230c062-e607-4e39-afa8-5a2c5aa94d5d", "value": 1322159, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700376018, "uuid": "1bba1d42-a624-4fbe-a313-868e0e1e0bca", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376018, "uuid": "07431d26-2c90-4b29-81c9-abda7acc1725", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5afc3cf0-86b2-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700381108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700381108, "uuid": "f541af41-0740-4130-88de-e1cdb455f2d7", "comment": "Malware payload", "value": "ef4d9ec83c26bc710ec47c04065a6971", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700381108, "uuid": "8bcfa905-da08-44fe-b7b4-daa4de4cfba4", "comment": "Malware payload", "value": "8028033aa933a74655c63d0a1985490da6419042e817393561b01af48eede9be", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700381108, "uuid": "907b494a-42ef-4745-a223-2e0746408129", "comment": "Malware payload", "value": "f8b6fd084f1cda19f5f6f35eb4de7a7d0c15a1fb", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700381108, "uuid": "34922ca4-8816-4263-9693-6cbf6d4fbdef", "comment": "Malware payload", "value": "7d10f70cff219269fee9fd89962494a90c8dbc512685ffde7caaf8275ad907bd5e6e98177d9aa706c004b5eb2c66da36", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700381108, "uuid": "ddab6429-b9f1-4494-8c9c-e69ced4504f3", "value": "T1A6559E71B502D037E1A101F5A67D9BA612A9BA301BAB08D7B3C05E3D95F2DC36235F27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700381108, "uuid": "98c6e36a-27ec-4a64-be5f-522c56698218", "value": "7482a1595744a3c77ac9461f3f27a729", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700381108, "uuid": "c1083ffc-f752-491d-912d-8da53c2ea507", "value": "24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJgrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TIrK5Zln2i6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700381108, "uuid": "d8d2f90d-38e0-479b-9f4d-5ba70b0550e8", "value": 1322172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700381108, "uuid": "f83e2108-c0be-44a3-867d-d4b4ae082100", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700381108, "uuid": "4577a6dc-4d2e-4167-8709-505cface3f12", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f560900-86e8-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700404254, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404254, "uuid": "2e06a7dd-35b7-4cc3-8435-1a090e705fc7", "comment": "Malware payload (Mirai)", "value": "c8c5cc34b7f745f6fc9da111fac77e3c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404254, "uuid": "3f9c5b5c-14cd-4af1-97dc-c4398fb6f7f3", "comment": "Malware payload (Mirai)", "value": "8052805168849969279ce30ad58a6c27a3137f1f2713facdd7a2f673f959bb9f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404254, "uuid": "7289fb8d-e57d-4eb6-b9ee-3861feaa5261", "comment": "Malware payload (Mirai)", "value": "b64f31953c9b0603c2c41266c42b45b6db1bf9dd", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404254, "uuid": "cc425011-b382-4a85-b50b-a19554fdee0a", "comment": "Malware payload (Mirai)", "value": "bb10421a6add79b8ffadf221838df188f7d0796f6064aefbde8c2c73c1f7dff58ab66720da36235c19e91f6671ed3bb9", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404254, "uuid": "43316b4d-7fc0-4ff7-aad0-2d61c86029b9", "value": "T1C23302A2576E29E291B08377BC33EC1966AC17F95C67309A3CF45A0977C54024FF2782", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404254, "uuid": "0bfd78d6-991e-48cb-a42e-765cb29a99e3", "value": "1536:69O/ZMAXIxNUk0BLcPqF1aBexo4opKZbt:69O/ZNKydLGqFUF0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700404254, "uuid": "d60c296f-cfcb-4985-95ff-d14b82dc7a1a", "value": 52520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700404254, "uuid": "8df4a720-c8b4-4406-9c4b-0d7ec9eae1fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404254, "uuid": "1f540905-211e-4d36-8c8e-928c02e4a62d", "value": "c8c5cc34b7f745f6fc9da111fac77e3c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd578893-8735-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700437564, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700437564, "uuid": "1caf718e-0567-4f68-9dd4-85e3aabb3628", "comment": "Malware payload", "value": "8e375658c26073cc74244208a265fe4b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700437564, "uuid": "93bdbcea-6714-4de0-a88b-7c5176f5edad", "comment": "Malware payload", "value": "815e8230c53a920be7ea8beb56f086c31ac26c909ce59839d74f3f17443a6e46", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700437564, "uuid": "def7ca46-9f8e-42c1-9d11-8d18aac3670d", "comment": "Malware payload", "value": "f83bb9db040b6672582c0cf718b7edaa1c605f51", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700437564, "uuid": "7b1794be-c1b2-4710-a389-fbacbbc4d0e9", "comment": "Malware payload", "value": "e8cd52e6f1a7518ff338137f4a485812a8031e8858da10acf4f4fc7cfb54281e0dd7fc53667e6a194dc721d02aeabf8e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700437564, "uuid": "d17b537d-e559-4578-9f35-167834b9743e", "value": "T1E824C46AE344555DE83E433DB41C38B09F70BC56E16FD32E55BA3AED283BB098A105D2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700437564, "uuid": "54b387c2-ce83-47f4-a8bf-833c799c968a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700437564, "uuid": "847235b1-53db-4b5a-ac73-543085c4ef99", "value": "3072:3mYApYJ+a70NgcV4ZfJ6rInqP/OpTYL8RSd3/1Sh4eW+DaYKSH:2i+a70NgcGB4rII80N/1S+P+Dar", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700437564, "uuid": "7dc6c686-1b9c-49ba-b6bb-54445ed33bc5", "value": 224768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700437564, "uuid": "508de752-caf7-41ce-916f-03d8d5d20576", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700437564, "uuid": "d414c9b6-1ac4-46c9-9c8a-c9c2dbbb9b5d", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fc612a7-86de-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700400067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700400067, "uuid": "d9f007d5-d8ba-4c01-b956-7aecaf209396", "comment": "Malware payload (Mirai)", "value": "cd1a7ebc7319616e316b22a775166576", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700400067, "uuid": "ccfa397c-4b62-4682-8bd3-fde24517cfb2", "comment": "Malware payload (Mirai)", "value": "831fc53f15a689588c06cebb0ab354b70f600b05545f02df9869b98eea2e1b77", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700400067, "uuid": "cd345506-7aa8-4a5e-ba90-63d8f6303de2", "comment": "Malware payload (Mirai)", "value": "b298d69d245951fd50aaeae119b68afb18e3d2c8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700400067, "uuid": "28138ea7-8ad1-436e-aeac-716016471993", "comment": "Malware payload (Mirai)", "value": "0bcbcdac20f9a704dd3f8fc1c9fe3210a3667d67c4d1c4274666720dc728b6fb954773c8a3af42982ba4662647988d47", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700400067, "uuid": "d7d72569-c56a-4446-acbb-5a58cecb7c8b", "value": "T1E343F238950213C154D5583656BEA7E6D82E27BCDBE5743A73840860B892082FDBDF7F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700400067, "uuid": "7c3189c6-f743-4263-9e6e-0a49ff291e22", "value": "1536:OMORQPNqnrXXiVb9w8zlbTU22hsAQC8aUtpypePs:OMFsTXiU2l02RC9UTFs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700400067, "uuid": "d223475f-00ef-481e-b8e4-8f825ceb78a9", "value": 58792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700400067, "uuid": "dcf43332-e079-4a20-b2d5-12d421a26bbe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700400067, "uuid": "0047bb06-7c29-4ac2-83ce-4f39c8c1dc1a", "value": "SecuriteInfo.com.Linux.Siggen.9999.3114.20596", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a876f74-86ef-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700407199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700407199, "uuid": "124e7fb5-c777-427c-b06c-271e7e2762d3", "comment": "Malware payload", "value": "dd3aa12899dc964f112563e17b2c14f7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700407199, "uuid": "0db5753f-caea-4bcd-8336-2a9b9962392f", "comment": "Malware payload", "value": "84c9c0bb01264f22a81e82895144004645a9740e1d8628e0df9f45c45b5457e0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700407199, "uuid": "eaa2a1c6-e571-4e8a-908c-60c84c7d0c31", "comment": "Malware payload", "value": "0859dcdba2f123cf79a1dda1bb4e3e62c8e41648", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700407199, "uuid": "677d61da-8591-4744-866f-c406768835ff", "comment": "Malware payload", "value": "8810e0b6a72f46c1828b90b8b77eed57d8dc6b345eb890fa8674cf3de401de814ce74e07d18691689439c3a175aaaaca", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700407199, "uuid": "6b090045-60c4-4bca-8d38-7653def8e642", "value": "T12744AE2379E0BC71C56683748F2DDAECBB6EB8614D61875B23181E6E5E703B1C61B312", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700407199, "uuid": "b1d6c060-3770-4e47-be5d-c250efba567f", "value": "eb2b7f9c7e630bef5e1bf00f3d34e673", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700407199, "uuid": "053fac4e-594e-47a5-9140-04375b53615d", "value": "3072:HPqwf7NSbwtU2zCBjAQeMZwurJKXRBc7ovb1YD3:vEbiGjBZwpQMa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700407199, "uuid": "d6b91e2a-bdc1-4e34-99bf-aa7a1c73c495", "value": 263680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700407199, "uuid": "29d5fcbe-4c58-4958-9885-e2e18638c01d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700407199, "uuid": "34acc5cd-787b-4986-a811-676c830bda76", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e39bc3f-86b0-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700380335, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700380335, "uuid": "e50a1411-aa63-42a4-a425-a7548de4fa87", "comment": "Malware payload", "value": "ed3216dea6e09a4d42badc5f5dea07f5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700380335, "uuid": "c3075c68-466e-43ad-9aea-57bb5f308e37", "comment": "Malware payload", "value": "850f8e6aa01636764734348d593573e28286601af1fe3a3c6cad39c83b25b28a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700380335, "uuid": "76eeb3be-c34d-4982-a5db-13a5a3f2757e", "comment": "Malware payload", "value": "b6babd8bdb053ef0a703da6174ec80c4e2917990", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700380335, "uuid": "4f4cf097-6aa1-4cb0-9c09-4737dc0b62df", "comment": "Malware payload", "value": "1eb71ddcd31e4a19742d7c5673b0f6912979536d1b55704c3a9251bd3fba35fd5904bb3aa43f1e14d10a2d76e1871739", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700380335, "uuid": "d443cc79-c0f8-4361-bdc1-80af2f5b09eb", "value": "T1DF559E71B502D037E1A101F5A67D9BA612A9BA301BAB08D7B3C05E3D95F2DC36235F27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700380335, "uuid": "631fc685-fe19-42a8-a60b-796aed676809", "value": "7482a1595744a3c77ac9461f3f27a729", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700380335, "uuid": "9780c292-51aa-4e35-a4b7-cf6e8fa14ac6", "value": "24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJgrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TIrK5Zln2i6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700380335, "uuid": "aba41226-b659-485b-9ef0-cfb690cb7914", "value": 1322170, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700380335, "uuid": "b077073a-68ac-47c9-9717-42d001a66492", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700380335, "uuid": "c1b20a06-cd93-47dd-801c-d39f87244939", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd884840-86a5-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700375690, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700375690, "uuid": "f955406a-efec-430f-bbb8-ba52dcfa7a64", "comment": "Malware payload", "value": "cac3d966342e978c8604f5dbd3e4352a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700375690, "uuid": "f5c8775e-23cc-4ba4-b2c9-b68eb005e0c9", "comment": "Malware payload", "value": "858e68680bd069abc15038f92335361700eaf36ac9aa61ff8c54f555eb83939f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700375690, "uuid": "c6127d17-58f7-484d-bf1d-36393fd276ed", "comment": "Malware payload", "value": "617e28d9c047dc4bd970bbb1915cc159abc8473e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700375690, "uuid": "6e02a4cd-5672-4484-91d6-9a70686852d1", "comment": "Malware payload", "value": "d71f4f368000666c10b41e3c3744f9d7ca7c171bd4f539c3526349368be3c4d42997f5a7e604e315c1637cd1acb7200d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700375690, "uuid": "a07bd555-f3e5-411d-a904-096e550a8c56", "value": "T1401633555FE08D39FAEDD63432E211B2286BFEB103F5466B158DC9C914B06E489F832E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700375690, "uuid": "4aeaa764-7331-40f8-bd29-3d3deaeec893", "value": "646167cce332c1c252cdcb1839e0cf48", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700375690, "uuid": "b1adeae0-7178-41c3-84d2-fd844930068d", "value": "98304:YCHL70XKljH3xzwmGss0VV0B7cOeE8li5o5i:LHL70XsjH3xUmq0VViIPE8l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700375690, "uuid": "6aa8921e-e173-42d1-9ea9-98dfcc05ecd8", "value": 4140032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700375690, "uuid": "3a58faa3-ea31-49d5-942a-f79386734280", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700375690, "uuid": "768017a2-1108-4af9-aae6-bba9e99d3a35", "value": "cac3d966342e978c8604f5dbd3e4352a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cf9e1c8-86a3-11ee-8907-42010a9c0042", "comment": "Malware payload (Stealc)", "timestamp": 1700374669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700374669, "uuid": "7f207dfd-fb19-4c83-8a93-47c42d1ae7e8", "comment": "Malware payload (Stealc)", "value": "292cf186b9046c3582b9dfa6ac9d1ea4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700374669, "uuid": "146b9b68-c099-4ca2-885f-360acb83f8b2", "comment": "Malware payload (Stealc)", "value": "85fe9f67ab85bf222a82b13ff37cc0e3a2a88d73f2446e47ed6e7e88cf6b0f83", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700374669, "uuid": "8093bbb3-212e-4e0e-ae68-315ae44c16ea", "comment": "Malware payload (Stealc)", "value": "9bcf3ee176b1755fe6ed088aa31409821e8f24aa", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700374669, "uuid": "35b5adfc-a0ad-4e97-966a-ada7d214c643", "comment": "Malware payload (Stealc)", "value": "3358b30a45e1bad7e1b096afa87dc7c92bd6d35c1385a58f74f9bd8a7a16b8f2f5cc222dfb9f67380d4a917adaa89ba7", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700374669, "uuid": "1ecbe4a2-e975-4e95-82a2-3e9cffa91ed4", "value": "T1EA449D2329D3AC31C45643714E2D9AECB72E77227E67877B27161E5BD9302B1D61B302", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700374669, "uuid": "a252cd33-556d-4f08-8c17-88af40ea0bff", "value": "c641dbd6770cebe481abc8b5144dfbb8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700374669, "uuid": "6c48b669-d8f9-45bc-b5d3-4e3d8600f8a7", "value": "3072:cLgwKGdk4Gc2Hq8DeIyb+BxSumEo2BUhNl0XRyUI9y7ovb3Trh6:q7dkJcT8Cdi2Eo2qnlUI9SMrT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700374669, "uuid": "5aeb2fad-855b-455a-abbb-928fd52bc90f", "value": 271360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700374669, "uuid": "1fcc0274-fcc5-4c80-988a-daaa81cfbd7c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700374669, "uuid": "844407fd-07dc-4422-aa06-feed78c4d75b", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfdd0338-8692-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700367587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367587, "uuid": "afe93aef-64a8-4890-8795-3a3df1c92019", "comment": "Malware payload (Mirai)", "value": "d985fed7e728e6ddc38b3fe19b59a96e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367587, "uuid": "0106b944-b8e6-4504-a9e3-3a5e3c65d315", "comment": "Malware payload (Mirai)", "value": "87e0b6a59dd501e7d623d57eedc3c52f34c5b64e54f12d8ac487a956804069a9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367587, "uuid": "86bed172-a4a4-41f9-9671-c60131860da5", "comment": "Malware payload (Mirai)", "value": "6499ab4c87f11834e97b59b2cd267f34ee704dc6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367587, "uuid": "3046f487-b00e-40b3-84ba-77e661e46791", "comment": "Malware payload (Mirai)", "value": "08ecee3e78105b1dca8b6659106fa71902dabc5f36d4ce79b3c0a72c165f89a1585fe611566929d658094bf7113df703", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367587, "uuid": "2afc0b3c-35b8-446c-8566-f3a404bd1be3", "value": "T15B934C06F8419753C1C327B6B7CF47093B3667B957EB33026A386FB02BC67991A25A50", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367587, "uuid": "ba517f9b-3342-4a09-b128-7a60dbd8c45e", "value": "1536:ZvgGLI1gX3JGQxPuwjxtOZyI5hXNKV6T/Fo2kjvVqQEqn/lJXCPe:tIHQjjU5hXNKV6T/cjvVqQEqn9JXCPe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700367587, "uuid": "b5039ce6-0df6-4314-ad96-a4f3bd785ab8", "value": 96620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700367587, "uuid": "568b4ee1-9b16-40ea-a867-bd3ff6704945", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367587, "uuid": "60aee177-efee-4dd9-b685-73bbf11a53cf", "value": "d985fed7e728e6ddc38b3fe19b59a96e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90f99b4a-8699-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700370461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370461, "uuid": "de91a87a-c3b4-4d73-8cc1-515bdcf60d68", "comment": "Malware payload (Mirai)", "value": "f8f11ebac789303485c989f232bc9180", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370461, "uuid": "91944e9f-1a31-497b-8fb8-beb26a5a2b83", "comment": "Malware payload (Mirai)", "value": "8a3919deeaf5d27163a036ad17e634ad17094ffb4266cc7d7603c4130eaa04e6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370461, "uuid": "223c5788-44f2-41e0-b674-a099393a338b", "comment": "Malware payload (Mirai)", "value": "0aff5787d01979fa11a7e039af27302d01580a07", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370461, "uuid": "319427f2-2ba0-42d0-86b0-684542a95bdd", "comment": "Malware payload (Mirai)", "value": "994f13ce473dbbf0f1404d2bbde5ea187254c098d9b1fde45f5ac786d8a63c21f5cc5a3807963418acab70382df13906", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370461, "uuid": "a3f3779d-f44c-4afe-be0a-e28a6f5cd7ec", "value": "T17F63AFB2C01E69D8C6984234B5988D791B23F90595B71EF99AC78E928007EFCF94D3F1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370461, "uuid": "7fe3798b-10dd-4957-b946-7a496554ac97", "value": "1536:o/+9E/eSJaA/1dV4rGrp+uLjFU0t6ltbOsDCf:o29UeWJ1QrGrpzy0gXbOsD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700370461, "uuid": "6d07aba2-c6f1-46ba-ad3b-5d8a02cdf20b", "value": 70704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700370461, "uuid": "885da604-05ab-4b2c-88c3-44ad63c3ca36", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370461, "uuid": "67204086-3aae-4278-9e02-167c95809f62", "value": "f8f11ebac789303485c989f232bc9180", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2865cd2-86b3-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700381684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700381684, "uuid": "2e1a6722-c0fd-4ce3-8a0d-951c9f517d72", "comment": "Malware payload (Mirai)", "value": "835c452654a38ae46b38577baf934256", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700381684, "uuid": "d4b4b075-c65d-4a40-862b-91fd292306d0", "comment": "Malware payload (Mirai)", "value": "8c7eabb94f92ca3d608bf8bf8b982529f966e767e33f93acb24b62781f6e9768", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700381684, "uuid": "dbeabe9f-8f38-456d-89df-46143fe3f9d9", "comment": "Malware payload (Mirai)", "value": "83c06a95aa27b131530b3b19505081ee0c4da546", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700381684, "uuid": "f3585bd9-ecb8-4285-b997-4572385f2316", "comment": "Malware payload (Mirai)", "value": "524c7465c40fb761841df1dae4e6c3f1f62f2f3551071d7c2b3573b949fd19076aca8ee59c12af3a316ca8e3999f1684", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700381684, "uuid": "6d2df984-f5ba-4878-af61-d40b2a831a4f", "value": "T14E63E749EF514FFBD86FDD3706A9074535CC590A12A93B3A3574C828FA4B50B46E3CA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700381684, "uuid": "e8c717a6-faaa-419a-a6f4-754e0e66f4d4", "value": "1536:q+BSii5Lh/RsUFbJhM70DwZZ63kPCjLQBcaK:HB1IBJG70sZbu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700381684, "uuid": "0c066819-99b1-43dc-99f7-e0804749985a", "value": 70916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700381684, "uuid": "6cf43a58-3218-4494-9c69-1970cb53269a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700381684, "uuid": "b21add00-a571-41e9-85b2-fd7d6fa25e51", "value": "835c452654a38ae46b38577baf934256", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a82b5c55-86a7-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700376513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376513, "uuid": "bf9f11c5-5505-4d0a-ac54-58afac58edc2", "comment": "Malware payload", "value": "a50cdbb553dd7e824e6b9f976ba22735", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376513, "uuid": "a0887eaa-7e5d-4cf7-97c2-ff8360c10e4b", "comment": "Malware payload", "value": "8d9265eca9d59f00458445cb71b7a546ebb42b6015e6bd0ef7cbfa4f7728134f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376513, "uuid": "a93fb1a1-f7d0-4546-aea3-598b6047cd9e", "comment": "Malware payload", "value": "34de848ae821a0fd5f4a69ca5e5ddf1113b4f893", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376513, "uuid": "14a651aa-bfd7-43eb-8fbb-cc8d3ad34a5a", "comment": "Malware payload", "value": "0641871cb0f1afd893dd8d33e04f1b0ef94e03a513cba72a37113bb8bb84040eb8bc94ab70c2240db17ed85f3ae74d57", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376513, "uuid": "8993b3d4-bfda-492d-a282-90ed69715766", "value": "T1CA7633E1B5EFC7BAE137043091B5EEE488E5D2151BB08E3B29D6480D6B73D80E13656B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376513, "uuid": "75434e7f-1eb7-4452-8b9e-c3da423b278a", "value": "3786a4cf8bfee8b4821db03449141df4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376513, "uuid": "8514a56a-5590-448b-8da9-35c5419c7c62", "value": "196608:91O0n+eF6rLzzmdx7kU9r2YTl/MtNMC6F150uldBJKqfe2xlBv:3OU+eF6rLHmIU9Px/MtUFMGQqfHlBv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700376513, "uuid": "20a47837-d899-480e-b441-f49942fbc5da", "value": 7498195, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700376513, "uuid": "ddf23102-9c03-43db-9d48-4c2da8d1648e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376513, "uuid": "0edf64db-8cac-4abc-b9e0-37169827d72a", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "734a5c58-86ad-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700379001, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700379001, "uuid": "eb2f9bbb-37c6-45ca-bc92-5ab7a10f1a69", "comment": "Malware payload (Mirai)", "value": "845627dcb023850b967f8d1a6cffa6fb", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700379001, "uuid": "fa393170-1ec5-420c-a9d4-3f132ce848ae", "comment": "Malware payload (Mirai)", "value": "8fc21febf56a2f630cfb548924b35b450d30f29c6f5cbf1f8031be5bad431c0d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700379001, "uuid": "d6a874ff-2667-488f-b01e-73716ce2fa61", "comment": "Malware payload (Mirai)", "value": "7d6eabbee98cbf6bd45e7e557ed6bce9b9390bdf", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700379001, "uuid": "a5b46926-7305-43ff-b34c-67981dbf8319", "comment": "Malware payload (Mirai)", "value": "8777af17a639329c844c2a3db31debe0767698c2fbc0c0a6c8913a0cf76d06e7c64050e1f57fc6033c82f287d3d4f222", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700379001, "uuid": "682baccf-7f55-48da-956b-99cba6fa2778", "value": "T111C2D1E07726FD31C420AC3ED52A4D8A3A51067C90FF353664258D398FC169B63F88E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700379001, "uuid": "f49e1fa6-5868-4566-b29b-05e82052e16b", "value": "768:eMKyhegCCMqfizjoNpd2vJdX6vwru9q3UELun:NKy4qfqoeJdXWgTLm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700379001, "uuid": "78516ed1-ccc7-4a50-9d47-4de8715cc6ba", "value": 27300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700379001, "uuid": "bca63177-a5b4-4519-92f8-a53df91fe197", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700379001, "uuid": "593c70ff-00b2-4df4-baf3-6c9844220ad9", "value": "845627dcb023850b967f8d1a6cffa6fb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ec4dda86-86ea-11ee-8907-42010a9c0042", "comment": "Malware payload (Gafgyt)", "timestamp": 1700405404, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405404, "uuid": "24ee9d0f-40de-4c41-919e-2f0762a9d8c6", "comment": "Malware payload (Gafgyt)", "value": "95152fdd5df101143e265317d1ffd0b7", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405404, "uuid": "d3a5082f-1319-4f8d-9941-499a5a80b9f6", "comment": "Malware payload (Gafgyt)", "value": "908ed41a6df86ff289cd880e2b22acf7e2252ee0c7adc24c9e69446d0ff684dd", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405404, "uuid": "b8b8372f-4960-490e-818a-05da57dd90df", "comment": "Malware payload (Gafgyt)", "value": "df232e9d71a3738296d5a9f422ca6f0d44738902", "object_relation": "sha1", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405404, "uuid": "b5a19245-9937-43d1-a857-4a106b07fd0c", "comment": "Malware payload (Gafgyt)", "value": "b3f8a12006849256fb816f6ca08f21f77f0ee1d69db7d519143b9cf43c67ce088d903e0d283efd0f5fa5bcf240213ba4", "object_relation": "sha3-384", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405404, "uuid": "13f074f8-0efa-4b89-83dc-c4bf23beb13e", "value": "T10DE32A08E7404757C1E237BAE7DB434933339B58A39733199938ABF43BC27995E22616", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405404, "uuid": "149a0a1f-4d75-4b62-a91b-b2d788f979b2", "value": "3072:l2igEpNyFGp4qYBAaEdzgpyjP5dM/9lKqkIw:lsEpNyFGiqyAay+yjP/M/973w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700405404, "uuid": "407933ca-79cf-47cf-8414-cb5ccde1d384", "value": 145819, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700405404, "uuid": "274b1065-509a-48db-933f-5d70c41e9440", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405404, "uuid": "f6914ca8-942a-45c7-a9c2-463757c6c258", "value": "0xc2s.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce0ac97d-8692-11ee-8907-42010a9c0042", "comment": "Malware payload (Gafgyt)", "timestamp": 1700367557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367557, "uuid": "4199cdd4-e969-4958-b89c-d867cd1e0b3f", "comment": "Malware payload (Gafgyt)", "value": "c3de7f0fac981c20c6581a0d439962c0", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367557, "uuid": "474a033c-6dbd-4c47-86c1-043369c48b2e", "comment": "Malware payload (Gafgyt)", "value": "931e9aadd169c5ae8c593325de6239ddf94f8eb28156ff480d27081790f40f69", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367557, "uuid": "e2f7ee09-3942-4ebc-a9eb-a9ff839f9d9c", "comment": "Malware payload (Gafgyt)", "value": "e44cd161b21deae9685b1e8a26f7874773641377", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367557, "uuid": "f4eeb40e-fdb3-4039-803d-9c85b75e1492", "comment": "Malware payload (Gafgyt)", "value": "f65e5670c266cb0579bfdf7e7e2b9976de41f9bf54798a9ef10c09e1a927d41e05f26d5321add5cd2a201bb603f1a98c", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367557, "uuid": "b56a51fe-afbd-40e7-a17d-3a9e108bd640", "value": "T105A33A37BB130A23C0CA547212E30731BBB5D3D928FA5247BAA16DEC6F166803526FD5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367557, "uuid": "46b5d2c8-9e4e-479d-b297-fba587ffaa87", "value": "1536:xfRuqNM5h7t/RiRt4nHphaQoRKzO6F6OXj6ufeRTe:OqN8jRiRYphaQoRKzO6F6OXGufcTe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700367557, "uuid": "9f72953f-a8ac-4db2-84da-ac06269d35b6", "value": 102442, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700367557, "uuid": "57789c4c-07fe-4be8-9cff-e6a650b3398f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367557, "uuid": "b2ab8603-52c5-496a-8508-ac05109dab66", "value": "c3de7f0fac981c20c6581a0d439962c0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fecb6c20-86e8-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700404576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404576, "uuid": "136e7c02-8f1a-46e3-8ecb-1bb711a23ef1", "comment": "Malware payload (Mirai)", "value": "4bbc292a9b8450a3eac1666bbe013136", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404576, "uuid": "8d7b46c3-ed5c-42ea-a8cf-86f45562c706", "comment": "Malware payload (Mirai)", "value": "93977ab760a439f4cac1c83f478de64b6d400c920fdaeca4e47ef92ab67b132e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404576, "uuid": "d7ab5443-6833-41f8-a2ba-91b1cc551c73", "comment": "Malware payload (Mirai)", "value": "1d4b2edfd9aec97856d65972dd01f843b63e9339", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404576, "uuid": "14d60c43-12ff-4dec-9b5b-909b95399c3d", "comment": "Malware payload (Mirai)", "value": "8692f2773fa37f37db9a32694ef22e563295fb500cff2fbc0b39d5e3743b54106f378447674d817d96af1911b3bb51d9", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404576, "uuid": "81c25df8-739a-474e-a996-67acbd1f7a87", "value": "T1DEC2D044F0418A41DFEA69F43E40DADBBFA16F1FA9624E8126B053C26F5C2B79345DC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404576, "uuid": "b8f6dc7f-4952-4a23-b049-a90dc1c4f9db", "value": "768:FVdafO76jpmNJJKehmA7trpfIX9KeA7Pit4uVcqgw09e:tam+AnKehPRa9aat4u+qgw09e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700404576, "uuid": "b07c77c1-ec61-4746-9b05-64dfddbda3d0", "value": 27048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700404576, "uuid": "9084e85f-cf22-41c0-adad-ffede3b2b343", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404576, "uuid": "b88d623e-dd15-4fc7-a09a-82bda2dd406b", "value": "4bbc292a9b8450a3eac1666bbe013136", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40fcc84c-866f-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700352288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700352288, "uuid": "840aa2e5-6742-46ae-9009-0baba552c453", "comment": "Malware payload", "value": "72324ba92cf7136afc5c5157f81650ad", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700352288, "uuid": "d98d64ca-be13-4ec6-94e4-a740363f67ac", "comment": "Malware payload", "value": "9443898a12274ecffcc27e9aa9a1181734cf6c588c07a6d7bcdab44d21eabe82", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700352288, "uuid": "850fda31-19f0-4c9d-abe6-d47dc94b90f0", "comment": "Malware payload", "value": "4bc4182994b88ddcc719e30954a7f6f2e06e3b48", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700352288, "uuid": "6e7cff4f-a908-41fa-a735-41ef212a5de6", "comment": "Malware payload", "value": "cfe1980d5aefabf534f4d67dc6309feeb10fa09d285a3c5e01b4907bfad0874065c8372ed69ca96c00a69bbb937e1ad1", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700352288, "uuid": "0ab43023-8fde-4a34-b2c0-78b0d73b47f5", "value": "T124548D1329D0FC71C77683354E2D9AECBB6E786B4F65877B23241E6A19302B1D61B312", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700352288, "uuid": "f5c23040-6c14-4df9-b633-fdbd686d6079", "value": "f1674c3fc65cfb60c9a2182cca0ef389", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700352288, "uuid": "63f30739-f8c0-4066-a752-7315169c4c1b", "value": "3072:6l3OJQzC4srMqH5PaIqEbpp8hKAlANMcR6U7ovb3Trh6F0:e3VzCTYqHNlqUsToMrTP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700352288, "uuid": "99b6c00f-1969-4375-ab5b-ed3f0aaf40a2", "value": 280576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700352288, "uuid": "ef261f7d-e234-426b-90fc-b70b9f7bec3e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700352288, "uuid": "cbccb633-caf5-4852-be49-463e0ad49641", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9859112c-8725-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700430603, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700430603, "uuid": "514eeb7c-2ffb-455b-8db9-ffe581a3d82b", "comment": "Malware payload (Mirai)", "value": "e7aebd99d7acc60fccf2e94f8fd596d6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700430603, "uuid": "6c2b501c-980f-4ba4-96ab-5bdbf32f6980", "comment": "Malware payload (Mirai)", "value": "9488a5b955eabd10e7a3b6ca01dd9d84be8816c7fe59e8579db2545fce8f68bd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700430603, "uuid": "2def29db-5a03-4d24-a57a-0fd89bebc0df", "comment": "Malware payload (Mirai)", "value": "f5aa10bcb2e0d9ce4ad7ed1345f9ae62cbef07f2", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700430603, "uuid": "00b48c0d-3458-4d88-b4db-e6c0b9629dd2", "comment": "Malware payload (Mirai)", "value": "dee890197fe23eabdcf5a501486872451de4236f1bcf7dcbdb8581d87744b1fca33b4c37cbe78121783382da25d0eec5", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700430603, "uuid": "dd864540-2dc6-4ec5-8df9-51d7b34a450a", "value": "T19D73012412D775A0E44F1F398F685AF4761E0BB129818A4BB0F38A342807D7D4B6EF83", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700430603, "uuid": "91786269-bc70-4a69-a816-c756f04cff45", "value": "1536:lT2VUCjhzRULDbXATYpFrXWiBDKoSb3+02ePHDE981KVRRV2LzQxw:pSjhzRUL3Ak3rXfQoB0DDEyQVmz0w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700430603, "uuid": "759eec72-13e3-41cf-9a7d-f182d5021188", "value": 79528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700430603, "uuid": "f7074b32-14a7-4d67-86b3-1730f10f2e96", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700430603, "uuid": "67f97cd9-20dd-4a6d-bc1e-7cb01e9a0c30", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23b47421-86a9-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700377150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700377150, "uuid": "408417d9-a99d-4a6e-a202-e4c8b5f8252f", "comment": "Malware payload", "value": "47ce0377af38e997b82a9d6b37cb1cfc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700377150, "uuid": "e3c39381-0e54-4686-bc59-00e73e8c03d2", "comment": "Malware payload", "value": "978708f8b2ce3fda82c9376420dc023396ee686d43962675dda5f18b3b749753", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700377150, "uuid": "a476867a-ed8a-4662-b596-3a9ec68ec627", "comment": "Malware payload", "value": "6c4ba32b7489ed9a77f8df342bf035d222188b8e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700377150, "uuid": "c5067f47-5978-4719-9036-98f812a25491", "comment": "Malware payload", "value": "6a2d60fd70065dc677063d283e3eee4249eaf0ebc19a9ef6e1d4425fbc0803e4b0856449f3163eb83c8bb04513810ba8", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700377150, "uuid": "ab1a5c84-6f58-4598-9a57-90d965af3ce6", "value": "T13A75E0D2CBA4CF55C3A728F811DA97611E6069245DDCEE0FFA81FBA5F0211DF3142A62", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700377150, "uuid": "c325abe6-f35a-4d95-a27d-fc6c6d326d85", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700377150, "uuid": "a0a50b1d-b931-4146-8870-4d045143a4ba", "value": "24576:PQi5LkOBo/l2P4i63Ov1MnavlI02OHgu8Ohmp0gLFYT/Bnb+k0C7Ehf28KI9TnXR:PTkPNL02p2EnYTehj98hDo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700377150, "uuid": "29e03d54-f1de-49ce-b962-075e604f3d48", "value": 1695088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700377150, "uuid": "b376f4e2-dc4b-4254-99ae-4f002f8d7631", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700377150, "uuid": "eca5d979-607d-4650-a925-e91d7dd28cd0", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d86f6abc-8692-11ee-8907-42010a9c0042", "comment": "Malware payload (Gafgyt)", "timestamp": 1700367574, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367574, "uuid": "c9ae27dd-db15-4b2f-a8f4-3b8f7f765c8e", "comment": "Malware payload (Gafgyt)", "value": "550fba9ce38698facf2d4723fdcd6a28", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367574, "uuid": "e294a5fd-92d5-4dd6-b8a4-fc7ef3c97b76", "comment": "Malware payload (Gafgyt)", "value": "98609b9d2c41130df54cf2c1c57d6f7b2499bc1c6f0ae6329538488ffba2d53f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367574, "uuid": "8090b323-f91a-40c3-abf0-21ea94f1f627", "comment": "Malware payload (Gafgyt)", "value": "b73a6b26fa295d46f86fb4cebbf1250d56a3ab36", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367574, "uuid": "14f7c6ec-6151-491b-91e6-5e3ecf8aa2cd", "comment": "Malware payload (Gafgyt)", "value": "0f569a53fce2f359170116e169e633c11bfd8027140d1ede38d4d12ecffac6d019315e70d5113906104840e2872a3d6a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367574, "uuid": "c3d80308-e260-4197-b073-a1f416d96d91", "value": "T152933B07B71C4F43C1DB59F029BB2BF15769B9E112A36181B91BAEC05B33A781523F94", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367574, "uuid": "e8f79b0a-c8f8-4633-a80e-4e7a945a01f2", "value": "1536:T3oCu/OcwUBvPsTbwHH3P6zMSIHsiO6aRv/lz5B5hLg6wOFO6V6qDjjofSee:T43/qUBvPs6X03IHsi2/F5hL7wOFO6Vt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700367574, "uuid": "7c4c9ce5-7f67-4789-9deb-53648aea6afb", "value": 92720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700367574, "uuid": "175bfa18-7012-4fe7-97c7-6c1a0f38bb88", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367574, "uuid": "1e19bd59-07ee-4023-9dae-d1974c2a859a", "value": "550fba9ce38698facf2d4723fdcd6a28", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b331fe7a-86e4-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700402731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700402731, "uuid": "07890dab-7300-42db-aecd-8f2b0f3cbd31", "comment": "Malware payload", "value": "f076ab12bd891599e8a38d4a7a249fe0", "object_relation": "md5", "Tag": [ { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "lua", "colour": "#685EA2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "Tasker", "colour": "#BB9C71", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700402731, "uuid": "0d9b2992-784b-44e5-85a3-c71776bc899e", "comment": "Malware payload", "value": "9bd0c6fea25eb841df0b3fe9f768cb6499c78a3d77ca890d6c82fa6576b83522", "object_relation": "sha256", "Tag": [ { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "lua", "colour": "#685EA2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "Tasker", "colour": "#BB9C71", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700402731, "uuid": "d33d136b-cda4-441c-9eb4-b733c02780d6", "comment": "Malware payload", "value": "57a2cc9cafa9068f889c8b6ebc5f00e583018ca3", "object_relation": "sha1", "Tag": [ { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "lua", "colour": "#685EA2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "Tasker", "colour": "#BB9C71", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700402731, "uuid": "5c60f3d4-2284-4252-b49e-d0229c12c67a", "comment": "Malware payload", "value": "0b9e6a9947da6422e97cd4ec583fb3eb4e9356f20149aaf85a451d1d98c767db90d56754f346300b737b18d35549540a", "object_relation": "sha3-384", "Tag": [ { "name": "Downloader", "colour": "#25284B", "exportable": true, "hide_tag": false }, { "name": "lua", "colour": "#685EA2", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false }, { "name": "Tasker", "colour": "#BB9C71", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700402731, "uuid": "e96069c9-a818-4587-a2a6-bb25870e71af", "value": "T19BD5BE2A35CAC637EB7E86306669D77A25BE7EE00BB100DB63D42A1E1E305C14275F17", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700402731, "uuid": "5c0ea272-1a20-481a-b1de-f91556ad4a58", "value": "49152:UlDUdqW8zBQSc0ZnSKQZKumZrzq4Fb6HXr1iWnYs4ntHurpllQ6akuxtZlbv:n30ZnqKzFnWntuxt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700402731, "uuid": "8344c2f8-52fa-40dd-8c5f-e144913e633e", "value": 2949120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700402731, "uuid": "15b9156b-053d-4617-a030-6834235b6496", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700402731, "uuid": "29316894-3a1a-404d-8c06-c5d1c7dc001f", "value": "Cheat Lab 2.7.2.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfcdb413-86a7-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700376606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376606, "uuid": "0cab6bd3-5104-4ae0-b6a0-ffcff5de97c0", "comment": "Malware payload (Mirai)", "value": "79a430a59a787d6ea70b0804a36ce362", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376606, "uuid": "0c89b8b8-d9e8-4674-8b14-2ced3a4f0203", "comment": "Malware payload (Mirai)", "value": "9d802fbfca837e12b9b39c6a183b2d6b38cdf650ca1c246a926438e78679be0e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376606, "uuid": "202d60cd-35c4-4bf1-affe-b0e2cfa837c4", "comment": "Malware payload (Mirai)", "value": "8820a7bfb5a9d6eee715fd05ccda2bf48dfebf3b", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376606, "uuid": "e898e18c-b78e-4f8a-bdd9-c77792b1db5b", "comment": "Malware payload (Mirai)", "value": "57497b3389f1979aa7eb8c86536067954544b633606bf4863d7c25832f1161466761ec65445570e29dbea1dcab857db8", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376606, "uuid": "d07e3988-c4c9-4734-a797-07764a693c2a", "value": "T165A2E11472632D66E3ED1C3DC9AAC357B9A71BFC80F5327679451620C90924A2E38B4F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376606, "uuid": "45b20850-0a59-4cae-a2d7-08517a72f48f", "value": "384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjz/mhymdGUop5h7I:vvQn4j+ZO5fKAlxfms3UozK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700376606, "uuid": "b561381e-0371-4422-91fc-71bf9cb9eae1", "value": 22160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700376606, "uuid": "2e8d7178-045e-4c99-b6cc-f12c97303508", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376606, "uuid": "4cff9200-e2dd-483d-aa22-f17e4d50a1a1", "value": "boatnet.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8771e16-86ce-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700393264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700393264, "uuid": "abae5b2e-1617-4c15-a56e-114efdffc3ca", "comment": "Malware payload", "value": "1554f5a485ecdf95d9ccc3f8e0d37108", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700393264, "uuid": "139f6d35-d7c2-4821-9ab6-5de03a550dd6", "comment": "Malware payload", "value": "a13caddc82b57a5add7f98583c912cf676504a549c5a0b7dc2dd02d9c4cb3f30", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700393264, "uuid": "1e7ea096-48c4-4e2c-a956-69163ee2ccd9", "comment": "Malware payload", "value": "7afdb61cef1f1644553237e6adf075b692643a20", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700393264, "uuid": "3805fac9-b44a-4d58-bd07-269f2bb0c71a", "comment": "Malware payload", "value": "c8c068f64dff1b19c27a6ebea6026b8fc3e056b98176fcac37f41bdb675a626c6440096d163b887186a977a02df6c25b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700393264, "uuid": "9ba176fc-6aa0-4480-b36a-b39789b1fb39", "value": "T196448C1379E0BC71C46A8F714E2D9ADCBB6E74618D64834A237ADF5A5B302F1C61B305", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700393264, "uuid": "ec0abfb7-3a6c-4002-a07c-f75638999244", "value": "75f7b043db8054e118136d70892dffd3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700393264, "uuid": "684af04c-c577-4fbb-8a80-c2a8138da4c2", "value": "3072:gfewV0lOZQOmt++sBnksPMKtvwPjwV9Ri67ovbDh9U:OKlOeOmt++0PP3wLwUaMM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700393264, "uuid": "488aad3b-f577-4142-bd99-a1a5a5833a6a", "value": 263168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700393264, "uuid": "4b55a775-ff6d-434b-a747-1e9f0f3689f5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700393264, "uuid": "675745d9-4101-4f08-b248-e68d3d903e5b", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b61db234-86fb-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700412614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700412614, "uuid": "e50ff299-ad67-45fc-936b-adbf0f4f6994", "comment": "Malware payload", "value": "97e6726c0de3fb205c30ffe136ab5c68", "object_relation": "md5", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700412614, "uuid": "5d0ef1ce-db9a-4fa4-ade2-2585c5ac79fe", "comment": "Malware payload", "value": "a23208f90f9f481384f97d5fb548aa97f7bf08e8863aa15123218fa8023b83b9", "object_relation": "sha256", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700412614, "uuid": "53a7e81e-000a-4a79-9c3b-3a851f1da318", "comment": "Malware payload", "value": "a01b733201d2d4b720257cfb3f7717eb92f17c92", "object_relation": "sha1", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700412614, "uuid": "c8a7b527-1c7a-428d-9f03-ca15222a24d5", "comment": "Malware payload", "value": "ea57440c53c16e642967b574fb8c0f31963369b47f2e0648fc24c66b6dc294bd8a21f57f1242d3a0070f7a7e44bf5a93", "object_relation": "sha3-384", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700412614, "uuid": "b97529ad-c55f-40ac-b957-6de8b12cd19f", "value": "T14F04125C7E3301FFF7E422320E52B03675751AE8467F0826E191AC9EF666E60161F98A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700412614, "uuid": "d6a0532a-42f5-444c-bcb4-4cbc1a3ba261", "value": "3072:Z8p8SG0xXFAtEuw/mmi6mYU1aoh7THQEoMmE6d7lYr7qo/3xB2yZ+mK:mGSGVG/CIEoMmxyrN8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700412614, "uuid": "f8f6d3c6-cb04-49ac-8a1c-ebdd1db24ad4", "value": 186836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700412614, "uuid": "74aa2477-6188-4e2e-851c-c054988fc1c6", "value": "application/java-archive", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700412614, "uuid": "df18b784-8804-47ae-ab5f-1a54845f1ec1", "value": "06_11_2023_YENI_SIPARIS_LISTESI.XLSX.jar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8eefabb9-86d5-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700396227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396227, "uuid": "fa0470fb-7c8a-4e0d-b812-637a6b1f2927", "comment": "Malware payload", "value": "426e59ac373c95971b451fe03331dda0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396227, "uuid": "0523b591-f705-492e-8bce-2644c8aaf910", "comment": "Malware payload", "value": "a4e45a46a84f80384ec2f8671836dc39ff4db291dcb3e721357e943124d14d7b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396227, "uuid": "31147899-d4f3-4c52-a784-06c852be55d8", "comment": "Malware payload", "value": "835be142c6e7f9648b59c9d35b930dd756ee8940", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396227, "uuid": "60d1f71d-d94b-48bc-b309-7d5552089e29", "comment": "Malware payload", "value": "6fc48da685e5851c83a0c03984126d7dfbe002b501ec3f3874b7482da9b865201841cf083c84f3cd702ad5b8142465bd", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396227, "uuid": "fcb61e24-d20b-4409-b6c2-8153dc78df91", "value": "T16E7633EAB3C109F5D467CA3DC2824D49CAB0B52B0364D68B03F4A6B50F17AD49D3BB65", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396227, "uuid": "236c9ddc-68fb-4e93-8e0a-6972cca67664", "value": "20d446c1cb128febd23deb17efb67cf6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396227, "uuid": "d924b06b-2afa-4ca1-9f9e-da60f4c0291b", "value": "98304:WQzHqdVfB2DFEsZjg27zyuT/9vUIdD9C+z3zO917vOTh+ezDNh70UlvSvBb155mC:WYQsDVhXbT/9bvLz3S1bA3zVlKVii04", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700396227, "uuid": "1713f613-c98c-44df-a51a-7db988401e6d", "value": 7258235, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700396227, "uuid": "c92488ea-3e75-46d4-b6e2-eaab91dda61a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396227, "uuid": "b9d0312d-5d83-41eb-a7ca-95d3e27cfeed", "value": "gupdater.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47176371-86a4-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700375062, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700375062, "uuid": "e6d795e0-faef-416c-a47e-a962abc36519", "comment": "Malware payload", "value": "ce61cb188ac1ff8d7dd0f552ca684276", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700375062, "uuid": "403ea663-c420-47b9-8b55-03b555ca7c22", "comment": "Malware payload", "value": "a50880d6cbbc39560c99a3999e2b1fd0df3f0d5855a0f638a27489747a7f8877", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700375062, "uuid": "d4faf0a5-5d90-4d2a-98bf-92d711f2b33f", "comment": "Malware payload", "value": "65d2d933789e00943efadf220db4ec9dfe1c9978", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700375062, "uuid": "4efa569b-e8bb-4358-9581-7282177476b1", "comment": "Malware payload", "value": "3fc54f007e12ed94b3e133063084ce07d4a34b669204443c923d99bdd9edd11f24f15238961358f484d4b56d74222be8", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700375062, "uuid": "5e61fe30-41db-4082-869b-608a06dbaee2", "value": "T1B7449D1329E0BC71C56683754F2DDAECBB6E78225D61974B23E41E6E19303B1FA1B306", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700375062, "uuid": "06aa133b-b3bd-4234-a2b5-16319fa39490", "value": "c641dbd6770cebe481abc8b5144dfbb8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700375062, "uuid": "cab370bb-bbbc-4581-a3c5-b52cfdd216ab", "value": "6144:DnNLcPx/ShLWgr721tvqQQV5isUMrTpp:DnNAPkhK827vqQ4E/KP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700375062, "uuid": "d92782b0-391c-4fdd-881a-02d64f5410e7", "value": 270848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700375062, "uuid": "ba1b6203-40e0-4b84-912a-714eaf2a203c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700375062, "uuid": "1eec32b0-2db8-49c2-bc17-1b6f068844d0", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "947d1189-8675-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700355005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700355005, "uuid": "220c514a-19c4-403d-b851-ca373df48233", "comment": "Malware payload (Mirai)", "value": "c65002bebe034be1f71c2bb418ffd3f5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700355005, "uuid": "c578781f-6fec-46de-8809-eea77d3892d6", "comment": "Malware payload (Mirai)", "value": "a6e44e42622fd8e20d7f8d22794476e98b2bf0a28c33d9705265046a6b38b45b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700355005, "uuid": "89f765d2-56d3-48cf-a7f2-8f0d8c214b4c", "comment": "Malware payload (Mirai)", "value": "8f0c35676a20aa44a86cbd3875b50bb3761e640c", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700355005, "uuid": "8100dd84-f248-46e5-9adc-0944e55c6079", "comment": "Malware payload (Mirai)", "value": "b6069180f7dc73cad76470cfcb9a407b9af849211ca3a792d9d91842db382bddc3b5268bb580c3ba35a73cfa437d530a", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700355005, "uuid": "a758c1b6-d856-493b-8bdc-8367528e98f5", "value": "T14C3301A0DC08EDB7C1610DB3F07BCA1ABBAD6EAE449339F230A50054DAC714E2D39B45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700355005, "uuid": "cda4ef5d-0e88-4e59-bdac-f598e73ea4c6", "value": "768:mm2ntyyqn8SMAd0ATOYYu0s640z9jna/bWKfY4q3UIz43GUiPuDLbAB:+tRqnt3d0ASYYXsag/bWjz4WVPoAB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700355005, "uuid": "dd0f5236-5f7e-4f66-acd8-f8c7de3dc5a7", "value": 51868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700355005, "uuid": "dec1cfd3-d30b-4a55-97ef-117a39e864ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700355005, "uuid": "68e2ff8b-c72f-4c4c-89a4-8fadcfff2b8c", "value": "cool.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fabea46d-86e8-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700404569, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404569, "uuid": "5be70c1f-292c-486d-8f61-46fc4e3c366a", "comment": "Malware payload (Mirai)", "value": "2e40cd5590fc6ba108bc5784b62e2281", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404569, "uuid": "c39ef386-6578-4abc-b0a1-73b3967e8fc9", "comment": "Malware payload (Mirai)", "value": "aa2eabb4bfda9da583403ecaa7a01e8d7e1671133c211ec7a50952780981d0f1", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404569, "uuid": "4cd6eddf-f58f-4a04-9eb0-89544ecccabe", "comment": "Malware payload (Mirai)", "value": "4650165103882692a6aee2990a48cd9aa8874d0f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404569, "uuid": "f6802713-e272-4966-bcfe-fe4505aa6e92", "comment": "Malware payload (Mirai)", "value": "98ce4cadfc67f423c0bfa35c3895a937bff51d096493054221011beb733d84bbd366c278358c3ede0907568e3d73784c", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404569, "uuid": "a4998d9b-6dd5-4b06-a939-f4720cfd0ec5", "value": "T16EB2D0A49BD19B07C2B0B43993788F526B3B1594D6F63536272093BC968246233FC5C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404569, "uuid": "70a631aa-219b-421b-8c31-2f84b09de33e", "value": "384:4C9KXlJIDFUS0Mggks3aIrokYVDoDDRRKj55N7LB9U+BEudPDhymdGUop5hu7u:4C9KQFH0rs3zWoDDRsjt7LB9U+BEudPU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700404569, "uuid": "b0a1ef93-f1d4-4afa-81e6-a03942316fa4", "value": 24536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700404569, "uuid": "1663293c-f8c9-45d8-aff0-78fedeb5b43a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404569, "uuid": "d201e592-b5c8-4caa-b003-62063e8c1125", "value": "2e40cd5590fc6ba108bc5784b62e2281", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06907969-86a5-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700375383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700375383, "uuid": "d521e78a-3df8-4d06-9a6e-4bf16bc7ec9d", "comment": "Malware payload", "value": "fa9a777abead76a3054f020ab6a771c4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700375383, "uuid": "f262d9dc-deaa-4d0b-82eb-c60ff779be4f", "comment": "Malware payload", "value": "b135504480a767594d70045824f7eef392a71cc374883f30172aac744a36f4be", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700375383, "uuid": "bf01aef0-77ff-49d7-b0d8-520628984beb", "comment": "Malware payload", "value": "25ec7d311460abc90f3492c5a150e5288a156a28", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700375383, "uuid": "12584296-6d52-4871-ad61-9bbfdc5f8ae1", "comment": "Malware payload", "value": "6e92fe6ca2cfc295e33e8dea194b0fa91632b9f9ceb30cdf38d01c923a6368e68affb6879ed5f61c1b4f3add4f5538c1", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700375383, "uuid": "228e051c-e7c6-4d22-bd60-209345649552", "value": "T10C448C1329E0BC71F456433D4E2D9AECBB6E74E39D65874B27641E2E5A302B3D61B302", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700375383, "uuid": "0be71d1e-ad7f-4678-b371-cd0991cda2e3", "value": "c641dbd6770cebe481abc8b5144dfbb8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700375383, "uuid": "6e2efdb1-d9cb-485d-be29-7c203bc9e111", "value": "3072:ALYwpWdlrOpn2c6A6GA8AkcUvZIob9QwZkv5XRy2uefU7ovb3Trh6:m6dlQn2c6AtAkcvobVZkGWoMrT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700375383, "uuid": "90151192-63af-481f-bec4-9b090927ac7b", "value": 271872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700375383, "uuid": "9de605b9-9585-46ac-9c19-c6a169e23e0f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700375383, "uuid": "c192e8c4-2184-4ca1-b576-c47d05bfc879", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b53b5ee-8697-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700369405, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700369405, "uuid": "a4e81e23-158d-4f4b-91f3-97669c6b426f", "comment": "Malware payload (Mirai)", "value": "0a5a18cc789dece76cf51cd0a274b0b6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700369405, "uuid": "2cbaea20-9d33-4def-b788-ddc9faaab51d", "comment": "Malware payload (Mirai)", "value": "b35e3aa867802cb0d428f1a8e36b2cb4b5a8193c86a6b8a3702d75ad2cd717d6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700369405, "uuid": "fe50e2a5-f263-412c-a1c3-e07bf529956d", "comment": "Malware payload (Mirai)", "value": "5bdd3ed243a139c42e3b06638a5b8072746aa89a", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700369405, "uuid": "1f7e8a67-10d2-41e7-ac27-b2e285cfaeeb", "comment": "Malware payload (Mirai)", "value": "ce8734be4b3566b5e79cde145d07492f4d42c6c2bcd06cda1d6c40c2949e72554fe9b04388eefc5eb7e1fa11308c36db", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700369405, "uuid": "00c9ac2f-1b46-4ec5-9275-a87b31d79852", "value": "T18DE35C46FA818A03C4D527BAB6AF418D3322E754E3DB73068D186FB43F8675E0E67605", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700369405, "uuid": "252abcf5-e6b8-4c97-a87e-661a47684290", "value": "3072:/jm9G0vPihitiG74V+Idk4iipHurnNlY6TuYbd7myuM/9xSd2V:/jklvPiwtiG74V+B4/HurnNmcu07mXMJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700369405, "uuid": "b2c29190-fe1a-44f7-af1b-5a5d14bdcd4d", "value": 152972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700369405, "uuid": "a1113e68-1298-4e06-97b6-a08a65b42b39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700369405, "uuid": "146c10db-e2f8-4ab4-9dd6-51b25f5482ed", "value": "infn.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c7aa1f8-86ee-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700406800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700406800, "uuid": "e3091f30-1850-4d86-9a4a-07b028db014f", "comment": "Malware payload", "value": "39834fd69fe05d48782dc7aaf13944c5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700406800, "uuid": "97a86170-2ce7-4582-bdc4-24ba12e43f5e", "comment": "Malware payload", "value": "bb90099301a067c4387dfad41c170ba0943f15c47099285cc5fa8015a6f9912e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700406800, "uuid": "29bbc3a3-853a-499b-bc32-7e48e26d2b42", "comment": "Malware payload", "value": "55dac1704d44c94e4f0a3c48327119da7d0fae17", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700406800, "uuid": "cd5cd7ab-ac57-42d9-8785-a848d581160b", "comment": "Malware payload", "value": "16a9991cb4ca6b9c58d4953e51621e8c977c74aa575aa088aed224181adb0b106133b725854f534759e9334c4c1ff53d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700406800, "uuid": "d79ecd25-c32d-4e7a-8c2f-b47a76e0f87e", "value": "T1CA6633B352341145C4F7CC3A8627BEE571F6066BCA92BC3C99EA7AC035D61F4A313A52", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700406800, "uuid": "3b21d0c9-c9f4-4f6f-aebc-ae513c23b3e5", "value": "372c5d18d541bfb9581c443bc011eecb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700406800, "uuid": "c624fffc-258d-4c20-8306-c39ad1a30cef", "value": "196608:3lRO6aQkMhBALsJzt56vXhHeX+Ab1x5CxlqiDzty:31b9EGzt56vy+Ab1x5QFzty", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700406800, "uuid": "d97e8043-97d0-42d1-99bd-f75c277ef704", "value": 6723736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700406800, "uuid": "bda314dd-0cba-48cb-a9ec-97e29ddaf316", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700406800, "uuid": "a4253d3b-01c5-4c07-97f2-affb50dff35c", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9fb1b11-86cd-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700392944, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700392944, "uuid": "23a75261-c011-4218-91b8-a12b969b72eb", "comment": "Malware payload", "value": "1745b614ef0599b757d8b96daa503bc1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700392944, "uuid": "e66ef9b3-9eb3-4c71-a8bd-701eebb42623", "comment": "Malware payload", "value": "bc182c1ad875034766bf6f30db48ccd680a19757d51c21624d40c29f8609eb9f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700392944, "uuid": "a1ef5de7-edf9-442b-aeab-d669a868a8de", "comment": "Malware payload", "value": "b0bacd5f4a7de6f19c00ec0f4835f6bb48bcb7f4", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700392944, "uuid": "4055b0a5-67b7-4062-9e3b-fe34ea69f713", "comment": "Malware payload", "value": "b52f7038ff0e84d5f231e3e0d304768a014c6abe1beaea57c7dbe2d860ccdf717a1c75eda89fbd572a17539438f5d63f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700392944, "uuid": "ae1606be-ffe1-4932-a7d7-33b851f5e2d8", "value": "T18444AEE329E0BC7DC55A87314F6D9AECBB6E74219D64834BA3141E6A0D382B1C6DF311", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700392944, "uuid": "5e3e3db9-854c-4069-a279-849bc560e94a", "value": "75f7b043db8054e118136d70892dffd3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700392944, "uuid": "97edda68-fd7c-4aa5-8be3-03b079ef6549", "value": "3072:7fswbZleldn2I8vQhQrX+98nXPTw7roCbSM4UB1j3fPJ9oc9RiHMa7ovbDh9w:T/leznc4sO98nKroCWG5nro1s6M4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700392944, "uuid": "5d8bc719-cabd-4cde-bc91-390cc2a12632", "value": 263168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700392944, "uuid": "c005e231-809f-43f8-9890-55205d76a5aa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700392944, "uuid": "ca747348-233b-4a66-9c94-0a6eabd44d0c", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1dc82e0-86ff-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700414432, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414432, "uuid": "523084a7-ea7a-4159-b1da-dca02b26fc34", "comment": "Malware payload", "value": "90b76c3d4f6098fbbccb920a0ef85242", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414432, "uuid": "db6d1beb-97c8-47e6-bf0e-7341fbd9935c", "comment": "Malware payload", "value": "bc59d9f26a9c6726252b4ade0f270888551fef590839617030c84a528f9fef31", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414432, "uuid": "c84f0237-a8e9-44bf-be81-4d2a7e5bf899", "comment": "Malware payload", "value": "1d49d3564af6afe49c9985b75684974bda9399bf", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414432, "uuid": "b1fb970e-6bb6-462c-9b8f-a6bbb4345d36", "comment": "Malware payload", "value": "28c7a55ee38a731d1684fc55327465df0a4a5a39a63e2a52bd061a3d0804ad8ce7ec6d111d6b9066ac470cef49a9c09d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414432, "uuid": "d7271fc3-3690-4d9c-ba6b-c72272f97139", "value": "T10E853307B0C94A38E79D9AB8DF3B28D6D413A2649B86B60B375042FF937D3F54903585", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414432, "uuid": "2a9f05c4-65cf-4d0f-9dba-5b42e3356217", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414432, "uuid": "2f7e5564-b61b-4324-ad37-aa54f0a7bffc", "value": "49152:pkAVB11ogqfV//TTno1MzirCGUwSCv5i:pFVCfVnuSi2KSCv5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700414432, "uuid": "0d449af8-17a2-4468-a16f-4d1b746d0e25", "value": 1748992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700414432, "uuid": "7f131684-3d60-4b85-8e7d-06f1fafedcb7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414432, "uuid": "45c2fb26-235f-401e-8491-0b73970002ca", "value": "SecuriteInfo.com.Win32.Malware-gen.29376.15776", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3aa1bd9-8692-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700367593, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367593, "uuid": "cba0c0e6-9754-4783-8b41-d358f18a4487", "comment": "Malware payload (Mirai)", "value": "5973a820739260fa7c8a672194cf53b4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367593, "uuid": "a92f78e3-ee54-4fd6-9da8-f591f89e6242", "comment": "Malware payload (Mirai)", "value": "bce364e20fe72857b5da6c0353ffbd6f921295d5e4b4f72d8c69bf48f1c88dc6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367593, "uuid": "fea37407-0e16-45f8-b4ca-dfc716fe1ed8", "comment": "Malware payload (Mirai)", "value": "366e702bbf99415fc0d7d263b3c1359518d58a03", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367593, "uuid": "a1aa25f5-c0f0-4a24-8cf1-b1590a1ddbb9", "comment": "Malware payload (Mirai)", "value": "ba127d76b3557ecab5d8c2a01df09f5ab90a55f93a6e5e7369c0ddbfc79e37f96dd50b162f266b0b1ad31ab8979710be", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367593, "uuid": "d1514be8-356e-423c-ba1f-b045b3d2bec4", "value": "T160A32A05F9118757C1C327B6F78F47493B3167B997DB33026A34BEB02BC27991A2AA50", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367593, "uuid": "e7c68942-268c-4494-9470-a96c6ba453bd", "value": "3072:7e9h9oZi5hvFfKufS2faYj0+rQ0Knm4XATe:y9wZi5hNfKfpYj0+rQ0Knm4XATe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700367593, "uuid": "24981eeb-b838-4d1c-afe7-5e43fe6493b0", "value": 103862, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700367593, "uuid": "c11a9a1d-e4cd-4385-85a6-77c4a4da1d54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367593, "uuid": "aeef8375-5f76-4208-bb78-fdd0f9367bfb", "value": "5973a820739260fa7c8a672194cf53b4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ee70389d-86ea-11ee-8907-42010a9c0042", "comment": "Malware payload (Gafgyt)", "timestamp": 1700405407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405407, "uuid": "9497f0da-3d79-4272-bd84-b31d697afcab", "comment": "Malware payload (Gafgyt)", "value": "7c24589aca59cefd21f9e7f4eb136f75", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405407, "uuid": "4cec59f4-45fd-477b-8f3a-338fa56a1b33", "comment": "Malware payload (Gafgyt)", "value": "bcf2a7573cde46dc59cbdf458a76de1d494f0627180a21157da579968d2df17c", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405407, "uuid": "da5d59c6-cba9-4fa3-8aeb-3041e0824b23", "comment": "Malware payload (Gafgyt)", "value": "009ccfd514d5fadaf7d6b54e49ddd1cbe9082a0c", "object_relation": "sha1", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405407, "uuid": "9092bdf5-f9f0-4233-8a72-deb7de85ddb1", "comment": "Malware payload (Gafgyt)", "value": "e7be01e7e6c755a64e75f546d623e4b6697a0f4c6c8fec6b0eb8c95612b531e7afecd6b0bad87249c7fa7cf0e761f052", "object_relation": "sha3-384", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405407, "uuid": "f2cb7543-c69f-4b2d-95c9-ab891af40a45", "value": "T1D453E788F914635EC7E172FBEB0C03CD373B0B98D3CA722A6D354B6163C6B54596A125", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405407, "uuid": "fec432ae-0ed3-4f0b-8e5d-0fc933b7769f", "value": "1536:HQs54IHWcWbPSmHOqpEzczkUdHg6HvpxA:QIEbqI+8kUdhzA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700405407, "uuid": "97c74843-54e7-4f86-ba1c-f5e990a358f2", "value": 63076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700405407, "uuid": "acfc8301-b142-4aec-85b6-820b4a3c5d3b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405407, "uuid": "306582ca-d775-44d6-a807-3a4990161b50", "value": "0xc2s.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6b1e979-86e9-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700404911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404911, "uuid": "d26115fd-5ea4-42e0-8bca-49a51a5417a8", "comment": "Malware payload", "value": "a98655b9991babac470f832c27f4f532", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404911, "uuid": "1c0abdda-f963-4bfa-85f7-d992b6af884b", "comment": "Malware payload", "value": "bdcf936171dfe292012dadd6e9e9c8a185f4010a870b8b3713d916c93e2cad2c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404911, "uuid": "5efd9bc4-6710-4272-99d3-6e5fc160a080", "comment": "Malware payload", "value": "64158c34c6a039faea2e64c6b71a5505e7ba1d2e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404911, "uuid": "1d9745b5-f9da-4728-92a8-ed5fb8ee054b", "comment": "Malware payload", "value": "30a98c6bc90623a3b76a8d5aeab25c6731583b78cd724ff16fe7113bcf0707b5d88b9d6a9976b9cf6e7b1ff4ba11ef9f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404911, "uuid": "d1432aab-7d10-4a98-a477-a6ea3a98544b", "value": "T13B954E1132F94759FAF31BB96ABAA615087AFD69DF11C2DF1260508E0D20BD09970F3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404911, "uuid": "eb28791c-4cbd-44e3-8fac-f7740c9e16ea", "value": "7f31c6f90564a76d09f9c4b2d32fe147", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404911, "uuid": "0b002194-c073-42f9-88da-b2274381588a", "value": "24576:lGI5xs7eM+TnMMhbmA297wVgMcc6a9Dhvh7RjyH5a7Bt+I8x76IZ:lG9+TnMMhbmA2End6a3vB7Bt+IBIZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700404911, "uuid": "3c118686-9c4c-48fe-99a1-40d76b9e55bb", "value": 2017568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700404911, "uuid": "b8a72290-a586-4801-b83b-6402fdd9de57", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404911, "uuid": "52883b0b-fc06-4ed4-a5a6-01dbc941c4fe", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e089abc-869f-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700373006, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373006, "uuid": "60716843-5fe1-4e31-89c1-96c0c84067a0", "comment": "Malware payload (Mirai)", "value": "56bea1b7fd32465db785a65eb0498b1f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373006, "uuid": "d639bafd-9c31-40e3-b4de-70615202cb63", "comment": "Malware payload (Mirai)", "value": "bf5bf9cd9402dc72fad37f20d791d36cbb8cac2bb3575b7fbe9f699edca537eb", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373006, "uuid": "6f735ec9-fad4-4b5d-b6b9-ef6b30ea5171", "comment": "Malware payload (Mirai)", "value": "760830598fe65a3d218d8081883c025f720968bc", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373006, "uuid": "c831338c-3b54-4928-823e-11dd497ddacc", "comment": "Malware payload (Mirai)", "value": "18a90d11ad06d96dd43412db17325fdc054a3809c9806bca5a1e9e6a9b2218690b259b897d7cb0d2535af8d4a01f9256", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373006, "uuid": "0d6f43be-129f-439a-92d3-411ffb3c4dc7", "value": "T192C2E1E63D77799BDA28103934ADCE379274B462D76EB613A241410D7017178BB329EC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373006, "uuid": "0cba7161-a86f-41c8-b93e-f4ac356fa7cb", "value": "384:MG1DMwk8JPyGYhDZREXVZVBy6sIye1iWLRYh4Sw4cGJYeRzOFGBzd8QSetvOF4ND:HMwKDZOFbBy6sSHRYfeAxdd8BKmFN0Nj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700373006, "uuid": "7d2865e5-d1b6-4451-99e0-bc4013d06a7d", "value": 28056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700373006, "uuid": "eb786d3f-b7bf-4760-b989-c0799ca8f21c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373006, "uuid": "4eb688b2-2dbb-441a-98a6-4ea38e8292e1", "value": "sora.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a0796f30-8672-11ee-8907-42010a9c0042", "comment": "Malware payload (AgentTesla)", "timestamp": 1700353737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700353737, "uuid": "9a1537f8-5a73-4c8c-b2af-dc012394b163", "comment": "Malware payload (AgentTesla)", "value": "e0bcb417f88eb3763db1da03853375e1", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700353737, "uuid": "3bec54b0-6f32-41df-a162-f1e56e816bec", "comment": "Malware payload (AgentTesla)", "value": "bf744936c8aa55662bebab8ba8274b7aafee33d076fd302beedb1a1ba9241afd", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700353737, "uuid": "18e7044c-7711-42db-93e4-12f7744d259b", "comment": "Malware payload (AgentTesla)", "value": "3a4dafbaacf7127a7bd55a20346d9c857e01b5f2", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700353737, "uuid": "2caf2dd4-2cd2-4612-8c26-dd8402b43e8b", "comment": "Malware payload (AgentTesla)", "value": "d2d57440ed44b0d50130eaeafb428417ce4e76831c0682d0da4e77fc00e420938abb969eaa3c9dbcd638b7ebda1d2ca3", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700353737, "uuid": "5395579b-cc22-4c32-b94f-88699d3bfe11", "value": "T18695F19DFD266AAFC38EDD2579F0410737FC04A712B6E85D010DC5CBA607A122DA5B8B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700353737, "uuid": "f3978728-b9c0-45bd-af51-a381747f0e97", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700353737, "uuid": "b46c9de0-e13a-4b9c-9c27-d04e5267a4c3", "value": "49152:sPKSQTERAQO3i2X9QfDjii+ZoEpNJHXXXS:MKSQTvmfvI5Xy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700353737, "uuid": "cfb2e1ad-5bc3-4860-8709-8159d9342441", "value": 1942528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700353737, "uuid": "1fbd8e06-b197-4deb-8e6b-89f21bc75a69", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700353737, "uuid": "f324fd4d-063e-417b-bb16-bad66b2de186", "value": "SecuriteInfo.com.Win32.TrojanX-gen.21446.31685", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fbc34dc-86ed-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700406483, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700406483, "uuid": "7ebe5494-cd6d-468c-adc8-4a778999322d", "comment": "Malware payload", "value": "67320b2a68e0fce79fdc4aeaf2270de8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700406483, "uuid": "9092b780-c489-41eb-baa3-41f64b8075c0", "comment": "Malware payload", "value": "bfe5c4a07a769eb4bf4d35cfdf983578886a7042de97d6c7a25443c81392c6ce", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700406483, "uuid": "13b2127b-1f00-4743-9f50-67071e847ddf", "comment": "Malware payload", "value": "54434f8bde5fb6822718e6e243fcea6083355bdb", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700406483, "uuid": "26f1ddc4-f7ed-4796-8055-87f9380ec7de", "comment": "Malware payload", "value": "cb9059301f6d3e8faf4017131742d7d58c4e59bce2df7ed1817e1df06f674908e2b2ba8cb1b14998355b01dfd17901cf", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700406483, "uuid": "f4058d55-c733-4902-a3f5-e1099b7ed58f", "value": "T102559E71B502D037E1A101F5A67D9BA612A9BA301BAB08D7B3C05E3D95F2DC36235F27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700406483, "uuid": "795b297b-f9a2-45ae-9201-2b5e12f2df6e", "value": "7482a1595744a3c77ac9461f3f27a729", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700406483, "uuid": "82ac9e77-4fa8-4119-a43d-3bc2779f2931", "value": "24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJgrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TIrK5Zln2i6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700406483, "uuid": "f0986361-0324-4e8d-af8a-b6514401cec2", "value": 1322236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700406483, "uuid": "b53ea8d6-4ab6-4274-abbf-d114d742de35", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700406483, "uuid": "2b32a737-13b6-4156-837f-a92f8f427c7e", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78a7f06b-86ad-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700379010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700379010, "uuid": "449567ca-80a9-433a-9d5c-2b6059bdb941", "comment": "Malware payload (Mirai)", "value": "e2d00fad2323220e5e3fcb3e23486db6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700379010, "uuid": "969f29c6-74c1-4b70-a21e-66189b7676d3", "comment": "Malware payload (Mirai)", "value": "c2282fb08134db8c15198391e592e39996829ea12d03b9f2e3525645c5aa70cc", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700379010, "uuid": "15d46f63-3b65-451a-aef5-3dccb67aeadd", "comment": "Malware payload (Mirai)", "value": "4a0b709091fa2faaec50c886163e6cb7a341841b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700379010, "uuid": "f9be56ba-cfc9-49b6-9981-712bba00aa25", "comment": "Malware payload (Mirai)", "value": "1d4223bb3315e10671f0950b3173714e1483a26461cdb83a973059c59492d09d8e6a7542bfbc079c78f82c8265783a9c", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700379010, "uuid": "29015984-0d6b-45d5-90e3-6c5f4ae9e61b", "value": "T12DB2D03C1B111B98DA1EC0BD83AD1B513CB81B3592429D4B7207ED97AF9B8747453BE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700379010, "uuid": "4a65084f-f136-43de-9fa8-38f28cb39ede", "value": "384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiBamdzJgGlzDpH7uNj1JAb:neD8ZSWvZHZbs1row697qohQvg9MizJ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700379010, "uuid": "9b94d48a-c60a-4553-b371-b81dbf20c5aa", "value": 23784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700379010, "uuid": "9a948cbc-0a4d-482d-830b-4a987d04f4d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700379010, "uuid": "0d0b7d0d-3d50-4481-903d-3a90f9dbab17", "value": "e2d00fad2323220e5e3fcb3e23486db6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "416b05d5-86eb-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700405546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405546, "uuid": "bfd38dba-0f93-40e2-9d95-3370719393fa", "comment": "Malware payload", "value": "b635f70a21338a7036becb783f4470a4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405546, "uuid": "b7eef57a-67fb-4809-985e-54640d4fdb0a", "comment": "Malware payload", "value": "c25d4b735cc97ae902bf3699eaff4cd99e405da72467769ffb004d1a98ba8eaa", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405546, "uuid": "e2fcc3bb-bda9-498f-a1d1-474830051e47", "comment": "Malware payload", "value": "fd59e26d2cae275cb314bf51d2f24fa15a0a54ec", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405546, "uuid": "54d1e610-0908-4b7c-9086-da8f0eda2617", "comment": "Malware payload", "value": "00b6855c1e0f57038b8e405700cd316c92dda2759e326f79a4a636baf0fd11b584b2b525970865223977eff24bf6f968", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405546, "uuid": "1e8f9b12-966f-4a71-a3c4-490569d13d16", "value": "T1BA44AD2379ECBC71C95A87354F2DDADCBB6E74638D61870B23541E6A4E302B1D62B306", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405546, "uuid": "774ee795-bf55-4815-b3f9-5c435c1617c2", "value": "eb2b7f9c7e630bef5e1bf00f3d34e673", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405546, "uuid": "43c43f69-f30b-46a3-9459-12547ab14328", "value": "3072:1PbwQrXEOFklbi95RY+yYWrqDy/3NQVaM+vineXfcQCfv2XRB5K7ovbDhXx:FHEOCbA5REYUI7V3+yHQCfv25KM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700405546, "uuid": "05114305-94ca-45d6-920f-3d70ae97bba8", "value": 263168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700405546, "uuid": "59896b56-0494-4ef3-9ad8-dcf07f7006f6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405546, "uuid": "005e39c5-3bdd-428f-bae4-c96a647dc382", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd7f7cc2-8706-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700417405, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700417405, "uuid": "f034ba03-a2fa-4f92-b1e0-e139bc62c8f0", "comment": "Malware payload", "value": "88bb86494cb9411a9692f9c8e67ed32c", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "QiLin", "colour": "#5CCBBF", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700417405, "uuid": "6a6ed281-52ec-402e-8a48-889f0026e8d9", "comment": "Malware payload", "value": "c26ce932f3609ecd710a3a1ca7f7b96f1b103a11b49a86e9423e03664eaabd40", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "QiLin", "colour": "#5CCBBF", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700417405, "uuid": "3ae169a9-4a64-42be-80ff-81fabee0523b", "comment": "Malware payload", "value": "82f8060575de96dc4edc4f7b02ec31ba7637fa03", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "QiLin", "colour": "#5CCBBF", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700417405, "uuid": "a85b32be-0276-459e-b70f-c2e9448c7ff4", "comment": "Malware payload", "value": "77801ea7f478cf516b340654b53fda2b1d9189e728dcc10cb2150244d3d2191571ba4d602178bca10167a8b4f21133fc", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "QiLin", "colour": "#5CCBBF", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700417405, "uuid": "f07abfe8-c01d-4278-9444-c4f213559436", "value": "T136D5BF06FD439A79C5BF1470247EB379AD399C240525CEA7D7C88DB0BA2E7412D8872E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700417405, "uuid": "a00c06de-3baf-4055-a3ba-3052d403133d", "value": "f846e17badb830abe49083e4c5bb1447", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700417405, "uuid": "b896cd83-dfa1-41dd-bc06-11f097f0de47", "value": "49152:MxmXXxQjiQspGXtwB0pnkF7TosNjLSq6Pq3Ecv9dsiPTg3pg:DQeQVmB0pni7TosNKq6adsi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700417405, "uuid": "9c06b9fe-ed67-425d-a9db-52b553030755", "value": 2845184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700417405, "uuid": "f62cd789-f995-4d53-9896-5d68f5b7c505", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700417405, "uuid": "c731cbac-f3c1-4792-a709-853a45988db8", "value": "c26ce932f3609ecd710a3a1ca7f7b96f1b103a11b49a86e9423e03664eaabd40", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "808fcfee-8699-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700370434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370434, "uuid": "034c7238-2401-4dc1-994f-fea66f579cc7", "comment": "Malware payload (Mirai)", "value": "516ce7c7461f7dc02aaa33dd4b4c7e63", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370434, "uuid": "42b36e6e-8ae3-4a02-9c04-6ffbbcacf908", "comment": "Malware payload (Mirai)", "value": "c3d27fd6e376b6349dd53dfca948af1fd15009b33e059398d948142cc334b855", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370434, "uuid": "888dc684-ffc4-44e8-9d67-cb540f00a28f", "comment": "Malware payload (Mirai)", "value": "6d1361503dc642cc56c52c9c212f63f9c32edb87", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370434, "uuid": "a3e0fcf0-92cc-4d82-b6c9-0a883c6156c1", "comment": "Malware payload (Mirai)", "value": "a969a1d8e04948984cbb76c83725cbd0cfd0e50b6a57b66eb9f03a7e79449564775663ccf1c5ecc4c3ed42caae89f0ba", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370434, "uuid": "bd6f488a-d167-466e-ae7b-7bbbe0e6af18", "value": "T1C0A3B90E3E318F7CFFE9823547B79926964C379A36D1C585D09CE6012EB024A742FB69", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370434, "uuid": "3029820a-9df8-4ed6-a570-f687d5190153", "value": "1536:chefMQGyOjAbK9c+WkdR+MHDF4dj6e9K+er0FS9llLRevVrARINSNEc68F5t:1jOjd9cUHRw6EK+ZAYvVrARASecFFT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700370434, "uuid": "58b8d08a-7120-4461-8865-e4f0e7311e14", "value": 101792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700370434, "uuid": "65e69e5b-1777-4f5d-b128-a06bf8f9b984", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370434, "uuid": "213bac0a-76d7-40de-968c-e5c63b0bc6fb", "value": "516ce7c7461f7dc02aaa33dd4b4c7e63", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3cc310dc-86e8-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700404250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404250, "uuid": "0988b67b-7feb-409b-94dd-8622128c78e4", "comment": "Malware payload (Mirai)", "value": "64538ee791ba264ab93040223ee6945e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404250, "uuid": "af88451c-0c61-4fd2-9670-55cd7ade71ec", "comment": "Malware payload (Mirai)", "value": "c506ff99f81b74e164f3cbfbb96075847396d70934af9e708927b4c33038eeed", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404250, "uuid": "335bbcc1-be43-401c-b226-cb307b99689b", "comment": "Malware payload (Mirai)", "value": "7e947e3249e4ea2c5c74c2236c0bf0ea1b7fb07e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404250, "uuid": "d58b8244-f210-4983-aac2-18c5b2e0d5c4", "comment": "Malware payload (Mirai)", "value": "db3589b796dd2a66c59eddccad4cd375e79fe806c2dc0a2eaf6a9bed41222e79dae237af7804470eb67e05e88fecc127", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404250, "uuid": "3c608779-0dfc-4f2f-8dd6-ea1e5fe71554", "value": "T1D4539FA5C5ACAE58C71441B8B654CD398723F408A5A76EFBD646C796800BEFCF0187F1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404250, "uuid": "9faaf226-84eb-418b-8dab-4c19da2fe274", "value": "1536:PaAtVnz1/mUUNztiYmW6ihiYLTofs3wfpWIDNEJ7JC7:P/tVz1eUUfwN0T0f+whWONEJ7J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700404250, "uuid": "2ee7040e-197b-4571-b535-0f59ab1a3b9b", "value": 63772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700404250, "uuid": "8c618147-d674-4f40-a0e3-4de2dd2769bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404250, "uuid": "5a662b9b-049b-4ad6-9192-e2b8ecea02b0", "value": "64538ee791ba264ab93040223ee6945e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c733e54-8699-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700370427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370427, "uuid": "06b167b2-2719-4e21-a8e8-7b1fa076057d", "comment": "Malware payload (Mirai)", "value": "0ab16386ff722095ce2a7fe3a59949f5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370427, "uuid": "e89bd668-66c8-43d2-b603-d6ef1243aee7", "comment": "Malware payload (Mirai)", "value": "c87115ad5a7afbc0b9765a9235663bdbc4a3ec15778330642a77748a6ad5b311", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370427, "uuid": "0be29a3f-6a22-4a74-aadb-55cab47c5df1", "comment": "Malware payload (Mirai)", "value": "255c1262a32193e517bfd783418f231765762d5f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700370427, "uuid": "dd1eb3a8-a421-46f0-95bc-6ac1c7ae9eae", "comment": "Malware payload (Mirai)", "value": "5d54c8f9454007c817e6f0173dbf34478a6059ae36bcc7ace317d4a4c9d4ec898c9b555f4ebf5a5ed4979c847e14a408", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370427, "uuid": "620859ef-e762-4cee-a5d3-9010d3de7f3c", "value": "T19B832A46BD818A15C5C813BBFA2E118E331263A8E2DFB227DD156F2077CA52F0E77561", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370427, "uuid": "34377c5e-0b7a-47fd-8ebb-c02eb0da2472", "value": "1536:HQn/sr94Di0asEdFzZsCwShhIrwyOwjhSi2buFNq81FCEcCASfz1IRiych5da:Isr9SEdPsvShmkZk8i2bqo8nCbch5da", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700370427, "uuid": "c268caa6-2ba1-45a3-987d-c3751d2e6983", "value": 88068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700370427, "uuid": "60151f27-9373-4261-b41b-9221b7290aab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700370427, "uuid": "66aefd56-eedb-44dd-82be-5ec08ea1ac65", "value": "0ab16386ff722095ce2a7fe3a59949f5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ea16518-86e8-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700404226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404226, "uuid": "2d62122e-0ce9-49f4-a4fa-da11f2ae983c", "comment": "Malware payload", "value": "01b6e4c26dea623d00ff47cb2f78f78f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404226, "uuid": "6402213c-73fd-400c-891a-0f806379624a", "comment": "Malware payload", "value": "c8e9cddba27fa70d43d3f723195e2cacc16e3b16fdd4f0da41ac3c60dce28735", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404226, "uuid": "3dc85343-56c8-449d-8305-b16e8993487c", "comment": "Malware payload", "value": "3b9622bc4dedb3d0c9cb8b3df7e70001d3f8d6d8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404226, "uuid": "4f7fdf72-8591-4cdf-88ac-780d0a746e59", "comment": "Malware payload", "value": "f29ad8475403ca324eebd7152e6a5490950cb36acb3809f000ed7740761f37fa1f21e99a69d523ed7e7902a9c2cc0c78", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404226, "uuid": "b7228d9d-954a-438c-9078-1f3598ea1501", "value": "T14144ADE33AE0BC71C55A83754F2DBAECBB6EB4214D658346E3540E6A5D3C2B1C61B312", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404226, "uuid": "3dcd8618-8a25-428a-9243-4198458276a6", "value": "eb2b7f9c7e630bef5e1bf00f3d34e673", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404226, "uuid": "9df72b76-7583-40fa-a079-8315b43c2a01", "value": "3072:zPWw0Vsg6GESiw8mJr9GHAo4Ec1NEn/zZM1NH5EVEkiZXRBb7ovbDhXf:rWwW8mJBGHjxn/zZM1NHApufM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700404226, "uuid": "3e0f36e8-01a6-4d74-873c-492effe0546d", "value": 264192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700404226, "uuid": "9142be98-4245-4531-859b-a9abf27b0e08", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404226, "uuid": "05038aae-0f38-4d05-a838-cc36158853d3", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66165223-8730-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700435243, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700435243, "uuid": "4b8d9ebe-be33-40dc-bce6-65ec6c62094c", "comment": "Malware payload", "value": "64d9eaeaa490b8129014dda174fecdd4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700435243, "uuid": "d4996142-ebe0-4daa-9204-2d1e345eafaf", "comment": "Malware payload", "value": "ca63ebea3ecd1099004b38c13cd7617ea556d18dadd749102b6e837cff9ebf0e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700435243, "uuid": "9dfb710e-6eba-472a-9be1-a05fab4ca952", "comment": "Malware payload", "value": "eb80c0e3a20600527bbe405f008d998de58e45b8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700435243, "uuid": "f7a7eaf5-98b8-498e-823b-2dab3dfd3418", "comment": "Malware payload", "value": "e47669fa88262042864bc6a550dab0717056d74afc1b1c9d0b23df3b92d08b52ca55171238fe921ec73f60aa7a987d5f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700435243, "uuid": "604c0da0-ab4f-4da1-b16e-3c5cdd98ce6a", "value": "T166447B03ADD0EC71C45AC37D8E2D96ECFB6EB8624D64874723182E6A1A702B1D55F31E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700435243, "uuid": "fa63790c-570c-4d9f-b71d-7d822d460259", "value": "8b5a3cd5ed11dfb50b606bf9f9341c37", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700435243, "uuid": "610d3981-4cad-4406-8c31-3b3b74d6042c", "value": "3072:dNsekaqWDp1O92TAAm7qMtUi22rRzAevI1M3KkfyBswJchRW0r7ovbeBV:wDa3LOI3i22Vzhf3Vq0PM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700435243, "uuid": "52f0e1a3-9a8a-4635-acf1-46cacf3f5231", "value": 275456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700435243, "uuid": "0a58c630-0b66-4058-87ab-8b841777902b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700435243, "uuid": "08541c09-70c4-41c5-b58b-4b7b2392076b", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "932e7611-86f2-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700408690, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700408690, "uuid": "9f9bcf51-ed49-42fd-b4f2-6dda74e7144d", "comment": "Malware payload", "value": "1881d4201fe51e236a81415a69feb15e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700408690, "uuid": "9319bdec-650f-4d63-a854-1b528d201570", "comment": "Malware payload", "value": "cd4942c9bb87b2b1d0c3511c23a2f7d8f1af35527a628aed2ea82f38e1d6a2d8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700408690, "uuid": "dad74af7-1fd7-46af-a52c-bc6e0ae01e0e", "comment": "Malware payload", "value": "5f5d752bf742edc644b7f06a853e6899fde7174e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700408690, "uuid": "ea6707e1-e0af-4a04-91b0-4e268fed1d4c", "comment": "Malware payload", "value": "f45e289b3e564e2fd9213ff64ad1ffea9a1aac3ef42708bc6caf4b9a46a1b25409a4f51116f3d220584219bc03538cda", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700408690, "uuid": "1e7b7c95-933e-475d-91cc-c1b746d25c08", "value": "T1A044AD2379E1BC71C55A83318F2DDAECBB6E78614D25974B27141E6E0E332B1CA1B316", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700408690, "uuid": "afbf7bc7-164c-46fc-ad34-893db69362d0", "value": "eb2b7f9c7e630bef5e1bf00f3d34e673", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700408690, "uuid": "cb8ad972-15ed-45d7-986c-180754c2f950", "value": "3072:oPDwI0vhIKmR1+UJ5geyKp3fh45Z8RkcMPCwNwiRyVbfXRBII7ovb1YDl:WavsxfyKp3fhnRkCq9RyVDLMa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700408690, "uuid": "9ed2421c-d623-49bb-8d0a-281a49104fdc", "value": 263168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700408690, "uuid": "7b761228-c053-4588-a594-7a4221c92fb9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700408690, "uuid": "14564f3e-d425-4f63-bb4b-3f71003d8346", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01c7f800-86ec-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700405869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405869, "uuid": "22569bd7-d94c-41a8-9ae3-cd23a6da8c63", "comment": "Malware payload", "value": "e2ab3fcf152a2f80ee63b1f8e9ebb943", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405869, "uuid": "cdd5b26c-006b-49d8-9d96-e7e56636a391", "comment": "Malware payload", "value": "cfe40f3c2c4988c5ef6670ed65d864b414e339090b3ae5f05b63d3248b846e2c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405869, "uuid": "8705ae94-1259-4173-8a54-5d3aedfc817c", "comment": "Malware payload", "value": "08f633bbfd80c6fa037197a57eb0e33af66c3427", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700405869, "uuid": "74abec7f-38a3-4c0b-a581-209101cb5ec4", "comment": "Malware payload", "value": "cdbf4383242f62f9136337f2c0122b326fbf82c572c413221be8eb9717bc4f70aa95f00c96f404e60757aaa5521154a8", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405869, "uuid": "1d2e0ce6-ecc8-49cf-af5c-3228525dbb7b", "value": "T18D06334C08D07B34E6F40F3737A36DB1913D812F970F9F20D58B576EAA491A8EE62961", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405869, "uuid": "31fb5616-8c5e-4408-82b3-fcaa93a37c0a", "value": "4328f7206db519cd4e82283211d98e83", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405869, "uuid": "3a3c808d-9554-4134-b471-1bc80fe33d77", "value": "49152:bQ+kaTsCArncazA/U5WAgjtSykbET/QPqmlMlkunpG7WXxP6YcC/ZLGVB83+5huS:Z9MccngIPtxgc7WX16YBj+5G2P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700405869, "uuid": "bb21208c-7339-4950-9533-644530ac542f", "value": 3768472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700405869, "uuid": "18d70615-e9b0-489f-9a82-6391ba74b4bd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700405869, "uuid": "162a05f3-ef09-49a0-add5-bc4e0ec88196", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37fcdeac-86ad-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700378902, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378902, "uuid": "3ec9cfe7-e38a-4df0-a4fb-c666d01a891d", "comment": "Malware payload", "value": "92b9a800b18677ac3f059ecb2404f91f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378902, "uuid": "240b57c8-414a-42d0-aec5-b97675e80a42", "comment": "Malware payload", "value": "d1e98f7e98b657295de3e7f6fcab368dc803cb852c43e8be4f5ecccb8d83ae39", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378902, "uuid": "795510eb-3bb6-431f-94da-80be342c7843", "comment": "Malware payload", "value": "7034f519d473d5e371039e418aff377bf38fecd0", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378902, "uuid": "bd2f4c72-3a7a-4d73-81e5-4fc1d25c8dea", "comment": "Malware payload", "value": "48fb71ea690a60d4536e08072ad8b6b060cc1e01613384856865c83efdc49fbbea860e4c8b7068d883fab2d78e843952", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378902, "uuid": "df1d3f37-89f5-45c1-9bae-d59061a67cb0", "value": "T165559E71B502D037E1A101F5A67D9BA612A9BA301BAB08D7B3C05E3D95F2DC36235F27", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378902, "uuid": "0ebc3085-f7cd-41bf-b27e-2aa33b4114b5", "value": "7482a1595744a3c77ac9461f3f27a729", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378902, "uuid": "3fb8c5eb-c197-4854-9d40-4f84d2ecd883", "value": "24576:NmmEs2wqfcRBxJCBEmAMpCOJMbgp2kvB1Pj5R+d3ThJgrU35Zln2i6:8dw/IyPxbgp2iB1Pju3TIrK5Zln2i6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700378902, "uuid": "0f3a5e9d-4c72-4a28-ac9e-fa327cefd4ad", "value": 1322167, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700378902, "uuid": "c5348925-4b41-426d-82d0-731fc8704535", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378902, "uuid": "d7ffe374-1259-409e-a26d-48e5c00dc93f", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cba0a44-86ad-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700378990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378990, "uuid": "9e53a49a-8490-43ca-9878-b49aac4e8afd", "comment": "Malware payload (Mirai)", "value": "9caa60967a6794c9dbdff7d2acdddec9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378990, "uuid": "822ab035-e6bd-4615-a02f-4ff52d964cf4", "comment": "Malware payload (Mirai)", "value": "d2ec7a2adf728b3cb9da5d3d3a99c43c94e23f93a0569627870d503570f2370b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378990, "uuid": "a51719a0-2ff2-4d66-bc6b-a628248727b0", "comment": "Malware payload (Mirai)", "value": "37c3c93ea008f521a0704fc08a9af6750e4b03d3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378990, "uuid": "f9c7c8d3-a650-4899-b188-c3c82fcb0c70", "comment": "Malware payload (Mirai)", "value": "943e394426b148d8d1d28e0d31e392d319021d97b31e75050f8402671546315754397ddfb292ae3a513363a3386f66c7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378990, "uuid": "5603e983-7854-4b01-abbb-a36b2361237d", "value": "T1D182CF3051AB75E8CBF14435EEEE8EC6971A0BF8D1FC329317596B78894200211F92DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378990, "uuid": "b10e3c30-d7b8-4308-a621-214484937203", "value": "384:MjlzRV0P6iOwrkom0DRnVATuSlShu6NvmPWtUn+KMaSehymdGUop5h5lG:6/V0P6+kom0tVAoNvm+to1Ses3UoznlG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700378990, "uuid": "5113b122-e388-4726-a881-a344d2b049c2", "value": 18488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700378990, "uuid": "445f3ddc-cd38-4f07-959a-d45768daf763", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378990, "uuid": "1ed7fc78-e2ed-4283-958c-a3d32e4c2646", "value": "9caa60967a6794c9dbdff7d2acdddec9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08854877-86a7-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700376245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376245, "uuid": "62bfad54-5ff6-4504-a201-1dcbee4304df", "comment": "Malware payload (Mirai)", "value": "7a8b92aba5803d772d42c78e4fced7ae", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376245, "uuid": "1053e2e0-89bc-4898-a25c-1905e6871a84", "comment": "Malware payload (Mirai)", "value": "d4ccdfa0f35668fcff726c34c8a5cf566817f810bbc093fc919b033b356aa4c8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376245, "uuid": "355c0744-b47d-423f-a787-268f7451f3dc", "comment": "Malware payload (Mirai)", "value": "a9a0a78e32d5e0bf0688f6a6e2c6a9f73465e273", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700376245, "uuid": "a5df8355-2c81-48e9-8566-822f6c28994e", "comment": "Malware payload (Mirai)", "value": "7767dab288f85d78f2415f6e64840e6bb04a28a2d3d200699f283897d9f2aba40d55250046ca4559f4760866674b0762", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376245, "uuid": "f4b78730-6d1e-4542-883a-0b3a57ce307c", "value": "T1BB539FA5C5ACAE58C71441B8B654CD398723F408A5A76EFBD646C796800BEFCF0187F1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376245, "uuid": "7bfc3323-cc19-47c8-a8a5-da4e0d2c36b8", "value": "1536:PaAtVnz1/mUUNztiYmW6ihiYLTofs3wfpWIDNEJ7JC70:P/tVz1eUUfwN0T0f+whWONEJ7J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700376245, "uuid": "d8a4c6ad-377e-44cc-81d0-7bbd8417f2eb", "value": 63772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700376245, "uuid": "a67b41c4-3cbb-438a-8194-429c863c0edd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700376245, "uuid": "d6cbb921-c2c2-4867-a8e0-29e3a72a77d1", "value": "7a8b92aba5803d772d42c78e4fced7ae", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c42596c-8697-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700369406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700369406, "uuid": "4c5e6ddc-48aa-449a-9458-7b27ac5a0c04", "comment": "Malware payload (Mirai)", "value": "b63bc7f3e892a11554fd894ddbce52d5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700369406, "uuid": "f19d10c5-9b00-4186-aa4a-6754dd0d3a9e", "comment": "Malware payload (Mirai)", "value": "d50228edf8889309dbd75d0c6f4629660bec5f8988cd00e989f9f1c3c6536d88", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700369406, "uuid": "e91981d2-c44d-4445-86dd-ee274fbc6856", "comment": "Malware payload (Mirai)", "value": "30dbd459090cf2c64eba1eabbb31128dad6cf6d4", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700369406, "uuid": "a6b7eb98-18f5-4f53-a068-60ccfdeb9e06", "comment": "Malware payload (Mirai)", "value": "89298a90190cf9a6f00d4e9256dfed3c0e859e7099c884324183033427bf3149c1bb6fbb6fee760629b26a6d27ef0fe0", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700369406, "uuid": "66a0e4b9-42bd-4889-bbd8-05756de3941b", "value": "T15C63E651BCC18A6AC6D423BAB96E10CE3321B3E8D2CB7217CD251F5476C651F4EA3B91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700369406, "uuid": "313de6b6-181b-4994-982b-7ba94206e437", "value": "1536:1mt22EEIGPXVQFcPWQKImEzBcno0V6WhKyfLtz:1mtLEjGOyc5VBhJz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700369406, "uuid": "e55363eb-c072-4401-8205-3bf3e752e13f", "value": 70892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700369406, "uuid": "f41ddf33-5a7c-49a1-948b-6e2eeac1d8db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700369406, "uuid": "2813162b-647b-4511-b4a7-855b0ef024ad", "value": "infn.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0ddf542-86ff-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700414431, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414431, "uuid": "d7d25c53-6210-4b8a-afff-797ed1a069c1", "comment": "Malware payload", "value": "47daa079c5916632aedf37ec568345e5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414431, "uuid": "66e753b2-075f-4ba6-bf9f-70830d2f9a8b", "comment": "Malware payload", "value": "d5340a602a5f84d0d6a9d39441e0c9ad9a532ca214d8f7cef195d491dbc23009", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414431, "uuid": "6ad49dda-bcd7-4da1-a481-0175be655609", "comment": "Malware payload", "value": "ae5e4942c42f8f80dea5083471941785b2a4c5e6", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414431, "uuid": "bf199ebf-2738-4952-b6ab-0d21c1387efa", "comment": "Malware payload", "value": "d05c8b88547ed2cdc33484123e93e88a3ada7dd610da5ea0addf2bde669bd9cf80d365f247460a2461c1046b993980a5", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414431, "uuid": "b00bd0eb-6d68-4ba2-96c3-ee4a4b8df33c", "value": "T16A8533C745E9C693CD6E83320D7FED2364280CB24D570AED8D997A42AE37165E4AC1E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414431, "uuid": "74109745-b3a7-4b98-b28c-be965719d0b0", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414431, "uuid": "8692d6d3-45c0-479c-9ebb-f3c08af5eff9", "value": "24576:YVudezLHKU1XDSxQvIB2Nk4XfVfxmgivuGflMTY02q71IQeATMhyjYqNHmoEvWEn:Q5OU12/8yw1xBslkY7gIQe17q27", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700414431, "uuid": "2ce38b5d-1ade-4737-8334-7b8bae546d21", "value": 1769472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700414431, "uuid": "688f2f4f-fe43-4519-bd3a-efe1693352a2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414431, "uuid": "414a7acd-8e4a-4bbb-b7f1-2904673c943e", "value": "SecuriteInfo.com.Trojan.DownLoader8.47347.12061.10515", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed54a208-86ff-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700414425, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414425, "uuid": "ba9adfc5-b0e6-4e0d-a390-40c33ebcf9ad", "comment": "Malware payload", "value": "86f80ee05829816dce5ebb5dfe87d267", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414425, "uuid": "07a4c4f0-a5a6-4ebf-a72f-213ac8d96aca", "comment": "Malware payload", "value": "d7c2357b9d008a75afdf9950c21427d7b6c66d9405abe2fb62b83409ce23184e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414425, "uuid": "c467997e-ba50-434f-a4dd-957b0ad1dc29", "comment": "Malware payload", "value": "668fa317f7622178ddd48c8db792b680d6385c54", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414425, "uuid": "22a9337c-514e-4a75-b5d8-166a19572780", "comment": "Malware payload", "value": "492c419e6221a659f4ba7fe2097ef432b88aafb5547cd10009d2f683d64c75b42470105e169413f7c677c725e4534fa6", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414425, "uuid": "a8bf0637-d83f-4566-a809-aeec93a2d09e", "value": "T1E2368D13B781A93ED4AA1B359C7F8394DE37F75126129E4A36AC4C0CDF391826D3E246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414425, "uuid": "da02a4f7-edbc-4cc3-88e1-a08e785c4be1", "value": "49152:kQ9yVXOXvEmWcZwS8suuf5MiDRH942Tu98BMT8pu4NxdfpBwmNbzl:kI8cRSiDf4CMQQCxdfp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700414425, "uuid": "74e9b574-b66b-4627-8207-23181bab2238", "value": 4891648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700414425, "uuid": "376ebaec-432b-4cd8-ab70-6296d03cfbbf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414425, "uuid": "131097f3-9b9d-46f0-8041-02824e33b21f", "value": "SecuriteInfo.com.W32.A-62389890.Eldorado.27246.22606", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "805ecfe4-86ab-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700378164, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378164, "uuid": "c7658836-4770-499e-b5f8-a55ff525da14", "comment": "Malware payload", "value": "34d39652c9b00c9d01731c66006ace87", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378164, "uuid": "ed9885ad-0be4-4746-a640-d0f46af10334", "comment": "Malware payload", "value": "dd149f704fea606a0fecce14d3bbf186b2e1a802c3129cb56669d27b371dd693", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378164, "uuid": "d457341e-3b70-4f32-9877-5e3157f2fe24", "comment": "Malware payload", "value": "19a2428c1f20530f7269e634ce2b6a48c4bf2feb", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378164, "uuid": "edfbfb18-c45a-4ea0-a717-ff388a6e9dd0", "comment": "Malware payload", "value": "55a9382ae89821fc3c1f69858290975e6f764b6ce5f9c46ace9c842a1d7c949da8ceb9c0223bbfffde794f3cc88e16c9", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378164, "uuid": "fd878583-4c52-49a3-8c7c-e5cecc5a1573", "value": "T1AF449C2339D0BC71C46A8F748E2DDAECFB7EB8625E65874B23541E6A19303B1D61B311", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378164, "uuid": "ed721b96-4cf2-4046-bede-211dc3b7cf01", "value": "f5eeef37ef8d5cb7e7cdbc3dacbee4c0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378164, "uuid": "3397253c-1d2c-41d1-b31e-c3c723cc4694", "value": "3072:uLYSwmECGpSzTP+inOnC6CoR6mhr9Au3KMpwm2P25MWsR6EU7ovb3TQh9:YYLCGIfPfnOC6/1xO9DP25MmEoMrT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700378164, "uuid": "24fca4eb-2b82-43ca-b942-05d3f55edf1a", "value": 270848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700378164, "uuid": "6821d1ed-92f6-4a54-8582-f149dbb9f767", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378164, "uuid": "56f7a3da-9ad2-4f56-a5fc-a204fc2d01b1", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c1f62299-86e6-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700403614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403614, "uuid": "2cb71383-da7a-4124-8f7f-f71f07a95f12", "comment": "Malware payload", "value": "e03c4b1206aae90545d80f2387d086a0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403614, "uuid": "7de23594-00c4-49ab-a42e-4f662594e192", "comment": "Malware payload", "value": "e0961050c4eb320076ad82ac62a7fb19aaa5326e42e471cf776a4ca38edc9af7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403614, "uuid": "1677b938-eee4-442b-9795-4c3ac598112f", "comment": "Malware payload", "value": "61bfdfa02bfb70fca6b01d1aa5ae3d6c9add09d0", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403614, "uuid": "cb56c6f9-a895-4fc4-a8e5-dbb5436a9c11", "comment": "Malware payload", "value": "a6f76760150d53b739f7a70b979d9b5b7c31d7cf54fbe5826528efc3b3bd5f70de45fb3684de440ac648ac4dd12b2ea0", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403614, "uuid": "80ee9c3e-8dfe-41c4-8975-9809bc0d3c85", "value": "T1CF0612CCEB872267D3AB04B1944A5D1DDD5649E1C63CE1A831D60723B42A2FD7CBE29C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403614, "uuid": "975a94da-e75b-48e0-8e06-c01f9d2755b8", "value": "9e7067d242d1c26e07dde8dc2ac3cc1e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403614, "uuid": "4f04121e-ac5d-4e24-9e33-e9bd21376251", "value": "98304:P1rC3Sah4cqeAEJrJKOCHz9YHjB8WycFXSgHyxthXij:5nPceEJrJK3Hgew5S+2thXij", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700403614, "uuid": "24332df0-cc3b-475e-a8ed-2e5c9129bb57", "value": 3911680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700403614, "uuid": "01860610-5cb5-4113-b90b-02d9be78e0a6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403614, "uuid": "c3753e61-5130-4484-bf1a-eb3dc1a2a90c", "value": "SecuriteInfo.com.Trojan.Packed.2301.17264.14962", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7a327d2-86af-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700380002, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700380002, "uuid": "6056f498-e7ac-44c4-9c8e-68d901b064c1", "comment": "Malware payload", "value": "2b710f4d0457e8ed6ad377bde067960e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700380002, "uuid": "de0b4fa8-7da1-41e1-b342-2837037f504f", "comment": "Malware payload", "value": "e0f684491db67fd2de073942b9a8e0b3cf555fba4aa90cdf777df15bf88588de", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700380002, "uuid": "d9db51e3-e9c3-4126-b180-5304cea1fde0", "comment": "Malware payload", "value": "363efbd06cb5fcc52150588cd581d48ceba9d27c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700380002, "uuid": "bbe50caa-4824-4403-9191-5b3853748775", "comment": "Malware payload", "value": "c454363eb094ecfee79f84e5db371b94b5efc2498575fd517f123f2f610ba01387fe0e547d85bd7bcf6fa4ac3e303101", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700380002, "uuid": "e749dabb-ca80-426e-bd8f-a76234e696d6", "value": "T10744AD1369D0FC71C75A83704E2D96ECBB6EB42E4F65937B23541E6A29F02B1D61B302", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700380002, "uuid": "f3c2d2c7-49c2-490b-bff1-c5355ada0962", "value": "f5eeef37ef8d5cb7e7cdbc3dacbee4c0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700380002, "uuid": "e0a241e7-bf34-4d28-9bdb-67ebdc74a596", "value": "3072:MKLyYwEDyvtM/dEUtrDVwiRXZP8hE0B6PbsByTsR6++7ovb3TQh91:vygyv2/IWRNia4Bs1MrT+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700380002, "uuid": "55723113-cd8b-4242-ab98-dbe03bf7258d", "value": 270848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700380002, "uuid": "7fc0dfc5-aa51-4bbd-9c8f-4fc3ba8b77a4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700380002, "uuid": "b6d3bc45-eefe-4a99-8b17-cd0c5d62e381", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb35885b-8692-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700367606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367606, "uuid": "8a9c8c4c-2ebc-4473-9751-b85deb7aed6f", "comment": "Malware payload (Mirai)", "value": "dbd8bb626136b9e57d7909003fc97013", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367606, "uuid": "e6233075-d8d0-43d5-89de-cf05a559a7bd", "comment": "Malware payload (Mirai)", "value": "e2f4059a7fff8294abfc0bebdb30aa573e82ff36799af557cd62e2f7ba246b8c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367606, "uuid": "57ad77fb-7ff0-44ab-acac-fcd5267e9d6a", "comment": "Malware payload (Mirai)", "value": "392b6c608d4c2a3f5db2c32e98f2e34bffa4a8d1", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700367606, "uuid": "3dd52059-134e-4421-89c0-3008d4cd14fe", "comment": "Malware payload (Mirai)", "value": "1aeb8234cd1c823ca8e804ed99166d2a7d163dacaba1b79b9d33c641643446353f56b9f4cd96ece0e4c9dbccb9fda2d4", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367606, "uuid": "72f8fef1-d525-4c27-8770-400ddc1af759", "value": "T146C33B06F5108753C1C2177AB79F561A77232BF897DB3312A6247FB82BC279A0E39950", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367606, "uuid": "263ab549-4bf2-43dd-be5c-5611115921dd", "value": "3072:idwracAAviNmLpMQ1xA5hKHKSrbqlAdmyDQUJ1UX4Tn:SwraFgikxA5hKHKnlAdmyDQUJ1a4Tn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700367606, "uuid": "3d95892a-b12a-45ca-9cc8-3f99f701cdaf", "value": 118932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700367606, "uuid": "8a425337-c179-45e7-8155-ec2fe3b47ba3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700367606, "uuid": "83756753-7b83-4cfa-af59-4912decaf9cd", "value": "dbd8bb626136b9e57d7909003fc97013", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aab1ff0f-86d6-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700396703, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396703, "uuid": "e2849b26-466d-4b71-a59a-e8c815c1e9fc", "comment": "Malware payload", "value": "8589b564a5ed7920be4b1b08f3d6d8ed", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396703, "uuid": "59854849-2b68-4e2d-9149-2a1d3f754ba1", "comment": "Malware payload", "value": "e380482fc3d8c4fe11073f9734238d60ab66385e3261231358f7d02082b235cd", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396703, "uuid": "41cb9e78-d759-41b2-ad31-3547e47352df", "comment": "Malware payload", "value": "6f73743f61238a9746ba9e6ef3b5bf495f22f4a3", "object_relation": "sha1", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700396703, "uuid": "d80e7a2a-7a01-473b-9842-4ff3c443cef9", "comment": "Malware payload", "value": "d59e6dd3f01a910a9f453f55cef805ff2b572e2c5eaafcd825596d856e038065c0b48d0afaa9f105d3f34a4ad1db0ba0", "object_relation": "sha3-384", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396703, "uuid": "91f9bf7a-610c-4f27-8def-f7fb330cc3c1", "value": "T127D623A0B6C542E1C6AC8F7A271D3EE0499E709F44246CAD26D79328776231FD31FAC5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396703, "uuid": "da29a5fe-a09a-42e1-a500-1798fa643d37", "value": "a9c887a4f18a3fede2cc29ceea138ed3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396703, "uuid": "d45b718b-e343-4b36-9058-dab07efd744b", "value": "393216:W1pjCaVtz/VWvpxlAilDWT1IqWwLuMJrV50y9vDx5W:WdrwRxlAYaTWqWwLuM5VZvDx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700396703, "uuid": "ec72171a-bfd6-417c-bca0-6d306b697119", "value": 12898304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700396703, "uuid": "42799b4e-4dc3-4f18-97d2-c478b684f031", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700396703, "uuid": "8e3e426a-96aa-4973-9c7c-ae06ed04baae", "value": "updater.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "311e7e68-86e8-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700404230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404230, "uuid": "c4f9a770-4a92-42f8-8ea4-9e7df69efa55", "comment": "Malware payload (Mirai)", "value": "af49f42e5fb1258a7ddf7261ea38c050", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404230, "uuid": "552e65b0-9f75-46ac-a5dd-4dd1cbb586fb", "comment": "Malware payload (Mirai)", "value": "e5693264b2606429d4ca89aeecb33b5903244e3692c658e37333de12a7bb9827", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404230, "uuid": "43af87e0-c082-42f8-9102-bbe1aac7b74a", "comment": "Malware payload (Mirai)", "value": "9ff7609297a85bf03188bccb86676fde9e2c5a91", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404230, "uuid": "7ffe2ecd-4746-4129-8939-a13b01683cf6", "comment": "Malware payload (Mirai)", "value": "943dd117e4a57ea41d9da5f35d2a5aa781f730745df647fb521eef8e36f1efb58bf9b4460c39cc7350160afce94d9a6e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404230, "uuid": "33dad09f-3d09-45b1-8de0-43d9b5569d8e", "value": "T113C2E1F63E773DA7DE3501393499DD3642B5E022D3AEA653A240824820131BCB7729DD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404230, "uuid": "cd5433f5-e603-4c79-968e-4f61f3fbc353", "value": "768:qMwoDZLFbBy6HQHRYfeAxdd8Qmx5we/0NZ:qolcYfe6KAr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700404230, "uuid": "08412f75-9926-40e4-bc6e-c5d8d79f99b5", "value": 28048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700404230, "uuid": "ab40215d-5c97-4eb6-9631-000a5e1e688e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404230, "uuid": "679772e7-1874-4ba6-b500-12590bfeab10", "value": "af49f42e5fb1258a7ddf7261ea38c050", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "baac2c3e-872e-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700434526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700434526, "uuid": "95fe2b4e-f169-4314-a26b-9c7ae177bfa1", "comment": "Malware payload", "value": "8f0526e6f58758ef81392380f7b0e848", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700434526, "uuid": "8d0e70b5-c695-4049-af26-0d6329c64ba7", "comment": "Malware payload", "value": "eab1827bd89d6d6adc50e36e99c440ab87afc06f450a44a5d2de3fe3ccf4f3e9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700434526, "uuid": "1a2a20ee-8c66-4272-a579-2b615fb97ea1", "comment": "Malware payload", "value": "c116802664d3ef0ddc29890142bc4e3dedb3d91f", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700434526, "uuid": "f83f0e16-bcbd-4163-a90a-fe188f1afb26", "comment": "Malware payload", "value": "3455587891692f1a7154b64626de8854fb90c8d1eebc3a1fff8da54d3bf02897d42e323ad8ce426b0ab1fcfdc418b79f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700434526, "uuid": "7cdb25f5-b799-435a-b47e-f8e8addfb78c", "value": "T19A447B03EDE0EC71C45287718E2DB6ECBB6EF8615D66D74B23142E6A19302B1D65B332", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700434526, "uuid": "e875e692-09dd-439f-858c-431ea0050052", "value": "8b5a3cd5ed11dfb50b606bf9f9341c37", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700434526, "uuid": "d56ee7fe-fffd-4109-9c57-66230bbd0019", "value": "3072:oyG+4w5tBxKFNpX30u9fHtj0gBaAGXJ0+fXhRWtXj7ovbeBd:0ijBoFNpH59NFfGZNfWtXM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700434526, "uuid": "020bdb41-3399-479e-996d-c90d0e313b04", "value": 273408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700434526, "uuid": "aa3b96c3-1bc5-4df1-9902-8d807bd772c7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700434526, "uuid": "5c4773bb-a2a1-4e5b-b751-db716f95e531", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a265c4a-8725-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700430606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700430606, "uuid": "e9befb3c-b420-45e5-8076-b586e7066a44", "comment": "Malware payload (Mirai)", "value": "ecc5a3f8b9a0dc611cef9af233e52819", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700430606, "uuid": "4669d852-e056-4320-8dd3-3effad5dc081", "comment": "Malware payload (Mirai)", "value": "ebadc84f62cf4eb0f0451a6a91d52d2f31e0c7f53afdde5e9b2c557d805da7ad", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700430606, "uuid": "afe92056-f1f2-4971-a8d6-f1ab70e27672", "comment": "Malware payload (Mirai)", "value": "110c862ac53bc5b6827831bb6c7b067eaf93c2c2", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700430606, "uuid": "c3f8cd7d-54e0-414a-899d-6d5666d235ae", "comment": "Malware payload (Mirai)", "value": "cfa73bad41af18b64545a9bc14c3082acfe67c7005b8b68331d881ba3616c96f2c98363cc673b3f9ae5e98971c64467c", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700430606, "uuid": "b8d273f5-5adf-4738-aebd-bdbb729afd96", "value": "T18D23F1D5B2216B0AF3D9C3770E86E463AA5D387207BA9B131D60DF4AC21FCEB45124D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700430606, "uuid": "0f2be949-e459-4108-a76b-adbcac256d09", "value": "768:LnZ+agDaQqdZelVR8jB1kPv9+c1NVN8Et4S1bcCz/JBwEMlAi40jpuNdRc:qWQq2lVR8jB1qjv1tz/fwXC5ypujRc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700430606, "uuid": "c32abfe7-c5f4-49f0-889f-4026c026f67a", "value": 46404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700430606, "uuid": "8153c9e3-548f-44b5-ad97-4d198050d597", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700430606, "uuid": "2ee82f8e-25c3-4206-9f76-39fef08694a6", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "14b09136-86fa-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700411914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700411914, "uuid": "1af11237-3510-4947-8ade-0a7712374e29", "comment": "Malware payload", "value": "37155f0bca29ccd6b6d4f5b2bc42eb4d", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "QiLin", "colour": "#5CCBBF", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700411914, "uuid": "260f1e0e-689f-4c6c-b7fa-9c88322c7282", "comment": "Malware payload", "value": "ee24110ddb4121b31561f86692650b63215a93fb2357b2bd3301fabc419290a3", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "QiLin", "colour": "#5CCBBF", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700411914, "uuid": "8a732782-8dfe-447b-a27d-8cb148a13430", "comment": "Malware payload", "value": "998f5e133484d7b9186b82b2c96a0f6bfdf3f394", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "QiLin", "colour": "#5CCBBF", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700411914, "uuid": "1133434d-368b-4ca6-bcf9-06871f0a9aca", "comment": "Malware payload", "value": "c35f7a0ea9a2d5b75062f4108e9e45468850530ff65d2cfc98a2b36b486c3afe0e4ed7a30527cd6e1baa13f39394ca0a", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "QiLin", "colour": "#5CCBBF", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700411914, "uuid": "26d80f8d-2c98-428c-902e-293ed74ee74c", "value": "T1EE06CF06FA439675C5BF1470247FE379BA380C240516CE67DBD89E70BF2A7112D98B2A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700411914, "uuid": "54c94941-f076-48ee-a12e-9ebfb223788e", "value": "15390616e614eec01aad923da301a7f8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700411914, "uuid": "edc9631c-fcf6-4e80-9382-d82f1ef21cca", "value": "98304:wZgC/TFBEKgU3fp9qupTBzCkyZQwFwPD+8th5Gf:wZgCTDgU3fp9RpTBCkyZYUf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700411914, "uuid": "0790f98d-5bdc-4058-940d-6683d779b3ed", "value": 3788768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700411914, "uuid": "bcb1993b-6917-4e3d-8f36-83e4ebac35b8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700411914, "uuid": "7cf4f35e-15f3-400e-a7ac-977970e83ecb", "value": "ee24110ddb4121b31561f86692650b63215a93fb2357b2bd3301fabc419290a3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c064dcc8-86e6-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700403612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403612, "uuid": "e4b2e99a-2959-41f0-8e25-1901fdaba27b", "comment": "Malware payload", "value": "ca0b8a45b640bcb527ed9af51fb02a40", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403612, "uuid": "8aec4a12-b197-4b84-bc8a-391a650b80cf", "comment": "Malware payload", "value": "ee753ab736ce308017d71ceb9368128b9f59aa8bad38df0aa942b54c678519c9", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403612, "uuid": "043b9609-a8bd-4ab0-9e96-093ab38d3f1d", "comment": "Malware payload", "value": "a8ede4069420948a84c02e43eeee7a813e4bf96f", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700403612, "uuid": "87e30d6f-fbc5-4dff-8269-266c9ce1ab9f", "comment": "Malware payload", "value": "5aea70b13a32ade15484d7000fd02bf9f0a29d242b469955658aa3ee0cc1ea45fb1d2bd83af29642e96d417ba84c1f79", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403612, "uuid": "0eaea856-f837-4470-a44b-0dede419a58e", "value": "T17234D0197381DB2ADE8450BBFC5082CC2761C6288397CF52E529C34D1EAA3256FDD5EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403612, "uuid": "d8d2b83e-1ff8-4ac0-a27f-a6f9725f3fae", "value": "dae02f32a21e03ce65412f6e56942daa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403612, "uuid": "4870bbda-b205-4fb0-99fb-47ee5f3f12b6", "value": "3072:q6LcCGoSCPtBp08XF+DIjppwU67w92ltIY1YTbsek/LGWlXVCd:q6YnCPSu+Wpl67vbu8ek/L5lXVC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700403612, "uuid": "7ff87bb3-16f1-4797-8160-365ab0410bf6", "value": 240128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700403612, "uuid": "56d3789c-f7af-4377-87fe-6a258c82cf89", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700403612, "uuid": "bbdf2fbb-dd8a-413c-a29f-eb9cf24000cf", "value": "SecuriteInfo.com.W32.Trojan.HRZ.gen.Eldorado.7653.1489", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "812acb77-86ac-11ee-8907-42010a9c0042", "comment": "Malware payload (Tofsee)", "timestamp": 1700378595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378595, "uuid": "6669fde9-b392-4038-a812-2eb932d123a0", "comment": "Malware payload (Tofsee)", "value": "695c14c51ae9ff59157cf69f97b2d1cc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#0155AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378595, "uuid": "bf905006-a967-4024-975e-953a5f7e8a44", "comment": "Malware payload (Tofsee)", "value": "f2b4ea5a8678e6b4ff70b238e34a208f4287f113ba6a65c12592a01cf9cf17c1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#0155AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378595, "uuid": "39a67f5c-62b4-43b0-acf9-8d659c8506d1", "comment": "Malware payload (Tofsee)", "value": "4688eea11efa5c61c7704b5ca80196eb9099e867", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#0155AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700378595, "uuid": "bc35e627-fb07-4cfe-8d12-09fcaeb3517e", "comment": "Malware payload (Tofsee)", "value": "d78ceb3b4f99300dd2230c6daff630ff2cf00631ce6285b9c18e460951dff8f45e3684d34d318d80300390800214e0bd", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#0155AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378595, "uuid": "dbf306dc-9e78-45b7-b0c6-e0feb4728bad", "value": "T129448C1369ECBCF1C55A83314F2D9AECBF6E7C225D64874B33681E6A59302B1D61B312", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378595, "uuid": "e8f07f4f-f4ca-489d-83b5-34b5ea4615b7", "value": "f5eeef37ef8d5cb7e7cdbc3dacbee4c0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378595, "uuid": "7a1f4035-a8ef-4218-ad0c-7f33f91d5012", "value": "3072:d6LaowspCAE+mYgDxv5l7Iek5Ym7IQoiteVFWbVD22WsgAsR6c7ovb3TQh9:SaWCAF5Cf7Iem57InitGMxycQMrT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700378595, "uuid": "2ba4a37c-1602-4030-8946-ca31ed98ee1e", "value": 271360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700378595, "uuid": "81295650-32a4-4fbf-b8c6-f19fde973797", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700378595, "uuid": "e0bc5454-a65b-403c-a27a-be05dd854691", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3fda475-86ff-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700414436, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414436, "uuid": "4a63ade0-d186-4c00-9c0a-17873306fb20", "comment": "Malware payload", "value": "1d64d7357f6e9f27b0830e4fbb1914f7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414436, "uuid": "065fcfc3-55a7-4e49-8109-f8119ffb36ea", "comment": "Malware payload", "value": "f6918615d557a3c4ba14dd633608b2d4d0ec07ea89d52a4bf0fea24b11b86c93", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414436, "uuid": "a96db8c6-bff0-4842-a9c0-54984d1dd335", "comment": "Malware payload", "value": "886e8a62c7f1f8aa27604529a4545817512148fe", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700414436, "uuid": "ba167e86-c581-4f36-849a-f65df7343a42", "comment": "Malware payload", "value": "c97f2c139323f718cbe6da961ec3b3b01d0fb1a2e95a4caaf707f65147779a07a5163bd04ea47fab3e62556a03ab4019", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414436, "uuid": "9e314372-a9a0-4fb6-841c-8166dfef953c", "value": "T17653BF8192EB6A20D7D4FA3A1F92E234130A9D4D6232CF561BF07C63B7EE95329154F4", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414436, "uuid": "f72eacb3-1d7e-4ee1-a4b8-56edc931745e", "value": "6ec0bd563f17435e446261a178043fe3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414436, "uuid": "359886ba-ad69-4de2-8d4b-e007bbdbe4a6", "value": "1536:NWBayhhz23J4g+qulRJAwikbgBjZAt0MdcCJQNIyX:NoxhdS3ylRKggCtKpX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700414436, "uuid": "4cdead5c-a161-4f38-a00a-c38eca1e3fbd", "value": 63913, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700414436, "uuid": "3c4b41f0-034c-47ce-850e-4c1981e6e72c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700414436, "uuid": "7e7a06f3-1ce5-420c-a8e3-9f52a29edc20", "value": "SecuriteInfo.com.Win32.Malware-gen.214.29101", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99385f74-8725-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700430604, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700430604, "uuid": "04aa902e-006b-4a73-8f3f-d0ec54506cbc", "comment": "Malware payload (Mirai)", "value": "f0f2f7efe0f5c8f302fa9b87e3078d27", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700430604, "uuid": "238b9e67-eade-4590-9bd2-6d5bc08c3600", "comment": "Malware payload (Mirai)", "value": "f8680bc952009a4e7145291292d9f28d245a5658de76f9f8fe4308b8fe176f63", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700430604, "uuid": "4be93e72-0f8c-410e-a17a-b13b91360c75", "comment": "Malware payload (Mirai)", "value": "7bc19719ff3d9c80ad9646a8ec759cc80fb74559", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700430604, "uuid": "b372ad95-2491-41c7-93cf-7864b1f59238", "comment": "Malware payload (Mirai)", "value": "dcd85fa11ff5b114c37f9625ab5553bcf5ced3b65a7d43bd7d7f882d816bbb52ea6de07ce8c3672d8fd20b349f22ede0", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700430604, "uuid": "0941f55b-55fb-4ea1-8885-a05c1362d4ce", "value": "T1B603F043E2C147EFC189D178CAFAA429233016585F6E07CD2E89A9A61E5774CC332E0B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700430604, "uuid": "6e10dbb5-e9ce-46c7-809c-d8ba5d330db3", "value": "768:BzDhRyZfTb+/zH8nK46wGcjtLza4dtOBjB4RnQWoYxbbyzPkwhcPkvJNTO:BhRYWHz2Gkm4POB2RQWfbezPVuPkxtO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700430604, "uuid": "e9dfe257-c428-4245-bd40-a91e914e133a", "value": 38756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700430604, "uuid": "ca8b288e-1bc0-44fd-bc79-e0bd72817df8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700430604, "uuid": "7eec26ab-8b4d-4fe7-a314-05e51181ea17", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f388c5c-869f-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700373008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373008, "uuid": "8c91ff66-6dc5-450c-944d-5f5bf03f6a62", "comment": "Malware payload (Mirai)", "value": "d7cf97395329f096a7a1a178852c6f2f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373008, "uuid": "d7488108-0536-4fdf-8d27-fd9d4e04fb61", "comment": "Malware payload (Mirai)", "value": "f92a7872ab21f03c4539fdeb49406eb736578902e82d184c27fb1a84a4fc7d36", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373008, "uuid": "38fb89be-c226-4f15-bf69-a0bd876f4874", "comment": "Malware payload (Mirai)", "value": "a0b97576f280a9b0b4311733f6145c1d0d31c87a", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700373008, "uuid": "e2706cac-18d0-46a4-9728-677669430af7", "comment": "Malware payload (Mirai)", "value": "27073c10855b114b1b3e17f65dc5a9a15050e927e557977171a8a2b1c49a9b8869af696f4075e5846105482483f90200", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373008, "uuid": "cc2818cf-9e82-4d27-bba2-d51b186ccf5f", "value": "T12FC2D13066AE2CB1C6500572F7F85ACABE130F7DE9FD6890114186BB3C4194629EA9C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373008, "uuid": "6315d020-29c3-4feb-b8a4-f1b7e92acff8", "value": "384:ESt/koxisa34beDtZwuaCBsk+G9lLSsLYSTFs9u8OtqlrNE22AQ0hymdGUop5hf:ESsoTAZ3alkXLvFh8nNEHT0s3UozZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700373008, "uuid": "c7fc7b38-d128-44de-8c75-6571ade2ed33", "value": 28176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700373008, "uuid": "a4a9a668-9b56-4f92-a4b3-fe54f02722e1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700373008, "uuid": "3d93aca7-2a19-4755-a209-396e335814b3", "value": "sora.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7845e08-872f-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700434923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700434923, "uuid": "24a4a6a6-bbd4-4dee-8bdf-77fa505044f9", "comment": "Malware payload", "value": "c693f21bccf065366eda6249a6b7d5af", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700434923, "uuid": "844be90f-1d53-414c-86c1-a62333ba94ee", "comment": "Malware payload", "value": "fb3efd61057bc50d948e725db07523ae9d1d7031225c68b2780f45e7facc8bb3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700434923, "uuid": "7dba6331-710b-411b-b1b2-dd15a92c22c9", "comment": "Malware payload", "value": "f907ff18735f72ab779abb0789b717292f4b9516", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700434923, "uuid": "3ade65f0-a9cb-48fb-8d1a-0a7acb7a9aee", "comment": "Malware payload", "value": "45db8258671f37db74bd9b9c140c22709c96f17620eaa055d89c7917b358273b86848a1b7e6746c612a1b0b881743ab4", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700434923, "uuid": "e897380d-20c3-4c79-a9af-016ca7dbaae0", "value": "T134448B0B79E0EC31C89787718E2DD7ECBB6EB8618D65874F27142E5E29302B1D95B321", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700434923, "uuid": "6cd65963-b534-49a5-b105-ad5c243312cf", "value": "8b5a3cd5ed11dfb50b606bf9f9341c37", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700434923, "uuid": "6993ec72-3443-4d01-991a-2188daf2f438", "value": "3072:4yKNbd27sL+mPGnJNDJEwcUUaTZckLb0YN746dId94EhRW6hF7ovbeBA:wvssJOXDiadLgY9606bM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700434923, "uuid": "270666f7-e70d-4abd-af45-8afa87b82e90", "value": 274944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700434923, "uuid": "2122a636-6286-43ec-84e6-6ac771a17558", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700434923, "uuid": "ee52aeab-685f-46b3-bfb6-162a2a1b20b5", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9282585c-8732-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700436177, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700436177, "uuid": "06ce3d3d-cf9e-4b2f-a3e2-135ecfa8237d", "comment": "Malware payload", "value": "16fce2ec70c877031f907e2d7fbc46d1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700436177, "uuid": "fd9ad1d9-db50-4ae9-a451-aef608fdf4f9", "comment": "Malware payload", "value": "fbf7e0b2df67a0e9dde2e278e03b844cf4ef487a745120334a6723a5ad71077f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700436177, "uuid": "0ff982b3-33a3-49af-9b09-714b70373a2b", "comment": "Malware payload", "value": "cbe77f9c31cd800c8341212abc5b276e764effab", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700436177, "uuid": "0ca59c06-5b33-443a-8c7b-8b010f6196da", "comment": "Malware payload", "value": "46af6d81be26bce6e6fc017b7aebe0bcb0cec642320894b34739e2720c5f273b8cbdfcab358c71f98b49a99f2b60637b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700436177, "uuid": "6624d172-3a32-4d17-8235-2b8e8c59624d", "value": "T145955D1137F95B59F6F31BB86ABAA611087AFC69CF11C2DF1294508E4D20BD09970B3B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700436177, "uuid": "9db5b35c-74b6-4e74-9acb-556fd3cffc87", "value": "8c258f040372dc83a7dc27d4d1112d61", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700436177, "uuid": "1820d59c-dde6-4247-84ff-2e02957408ca", "value": "24576:AtgfZs7ePs+87T29wK5dWiO86a9DhvhMsjEArI3/I5:At+s+87T29wKj6a3vpEbI5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700436177, "uuid": "b002126c-7e69-4993-bfae-f98c2392c86d", "value": 2017568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700436177, "uuid": "adb31a71-357e-47ed-b122-f17903949f94", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700436177, "uuid": "fee3713d-ebdf-47b0-94d8-e39e28619617", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4525826b-86e8-11ee-8907-42010a9c0042", "comment": "Malware payload (Mirai)", "timestamp": 1700404264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404264, "uuid": "9cb35f3c-e131-4a87-a6b1-d263423c5792", "comment": "Malware payload (Mirai)", "value": "172dd782db056302c0a91d96fe7f27bf", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404264, "uuid": "76d9c366-3ad2-4709-8dcc-edd14298096c", "comment": "Malware payload (Mirai)", "value": "fdcc148385789ea82c0f911cbc299c7b943e4bed0c6d88b11eb14b825adeeb7a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404264, "uuid": "2c23af10-e891-40a2-9370-965edd1ae156", "comment": "Malware payload (Mirai)", "value": "754ebf338ae822dcf8b6ff0763b08e77388a0a18", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700404264, "uuid": "e81613c5-c8c4-46be-a75e-a9c22b93ab77", "comment": "Malware payload (Mirai)", "value": "6a9c52e6719bb7ea8e0b57cd02c34ca503c70de0c663336e2a971e5fa75c3f9e54f3eec4b7b71df31dd70e4c8663f7c6", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404264, "uuid": "bc6cd0be-270a-4b64-96be-e09be17be457", "value": "T192D2D08876D363F68C8DCA7EB75E003A70EA74E5A7B2A323B305D4534766140E691E8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404264, "uuid": "1f22996c-f87d-4117-b24e-0b0309561098", "value": "384:MSd/PxEDLd2TwULzm6lowYcEaqsp9qC450LQixBfE4jdlz0lewZ90BKj6LHLKNyC:llxKd2FLPxEnspd6IHE4RlY990m6zC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700404264, "uuid": "0d7c0405-f7bb-4317-8332-d2f2cb72cab1", "value": 29456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700404264, "uuid": "0a9e6610-bd32-489a-8ddd-ae1c8794b5c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700404264, "uuid": "481f0888-cf79-45b3-8dd3-64db1609031e", "value": "172dd782db056302c0a91d96fe7f27bf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45c2df30-8734-11ee-8907-42010a9c0042", "comment": "Malware payload", "timestamp": 1700436907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1700436907, "uuid": "a9636f55-4e7c-4ae4-9601-529d6f229ee1", "comment": "Malware payload", "value": "3746ec4e33194d9d59433ee540370b98", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1700436907, "uuid": "9aa62720-6934-4e2c-8152-3e0a26f2ea8b", "comment": "Malware payload", "value": "fdccf4ea45fd8aea2759fdb0c1b301ed989a6784a15778666db9b8e0e98403ca", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1700436907, "uuid": "c95d2163-abb2-4e3c-9bb4-eaa135f163ce", "comment": "Malware payload", "value": "110b145c224c60a474ac596894192488f55b587a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1700436907, "uuid": "00792c46-de88-4019-90d4-8d19c38ca6ed", "comment": "Malware payload", "value": "2d54f2a8e6812821deca94f834a469a131d9f9eafe920686228afa3ced183402b52f478c18dc4bc2334663a8d1675759", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1700436907, "uuid": "979e9e20-a524-4b12-820b-1c7f5ca149a0", "value": "T135447CC369E0EC33C55687358E2DD6FCBB2EB8634D64874A27142EEE29302B1D65B351", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1700436907, "uuid": "cdd2ed47-a1be-4c58-a8da-a56092a6b8c9", "value": "8b5a3cd5ed11dfb50b606bf9f9341c37", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1700436907, "uuid": "ff213ef2-5b59-4bf8-a801-927e7953398a", "value": "3072:1LjOTuAZxU4oqmhZ2Qrfqw0GcSkLyphou2ukd89dohRW68H7ovbeB5:1453b4hr7l0GXkLyPz2bu9dR6wM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1700436907, "uuid": "2e0e6d19-72d9-4d51-a0fb-7770e530b59a", "value": 273408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1700436907, "uuid": "98b22726-26db-4178-8e5a-693987337151", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1700436907, "uuid": "769d63d0-ff93-4698-a91d-9e8377216662", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ] } }