{ "Event": { "published": true, "date": "2026-02-14", "threat_level_id": 2, "info": "MalwareBazaar malware samples for 2026-02-14", "timestamp": 1771113782, "analysis": 1, "event_creator_email": "bazaar@abuse.ch", "distribution": 3, "uuid": "e004265a-29d0-44cb-aff8-1f4182e97318", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88f0cbfd-0997-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771068186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068186, "uuid": "89792d2c-542c-41a1-a3f2-cd02d2bbd3ad", "comment": "Malware payload (Mirai)", "value": "fbd9fc3f818320c03d14a7c7a3a070ea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068186, "uuid": "12afe775-7220-4fbe-9db0-b68845eb6951", "comment": "Malware payload (Mirai)", "value": "009e60e4db5dccf9d96b4b5b496d592c8cd20f1380c9c80799ad9be17d6900bc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068186, "uuid": "915656a1-9d0c-466f-bb9f-99ad882bb5a7", "comment": "Malware payload (Mirai)", "value": "dc9978e4790fec345af5589e69ba77d02fc12706", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068186, "uuid": "60a1ca06-bc7d-4a9d-bfd5-c18e53dfda16", "comment": "Malware payload (Mirai)", "value": "185318c2e98f0190d0b1c774908c3f7f6420d0b296f43340b71dadaba0951f85a6d94db5fa6dd7c52fd689b783514479", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068186, "uuid": "934bc02d-3138-4d98-bacf-426194d3fae1", "value": "T18C53025259ECFC3ACEE1D4390B6801F686DC99B4A492A01F53C97CF48A06964AADC6C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068186, "uuid": "d423e4f6-cd2e-494d-b4b9-c8edad05adb9", "value": "1536:Mdcqm5iERozq3p7o8FwOA4zCKOFGUfKbeH6UhV/ViAQi:MaHJgMo8FwOA4zUFGUO3Uhb1Qi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771068186, "uuid": "1e43b32a-ffdb-4fca-8117-71d228585b77", "value": 63928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771068186, "uuid": "01bbbade-5f64-4c57-ada5-71d11782a086", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068186, "uuid": "f73a7c77-d1b8-4193-a0d5-85995ec87885", "value": "SecuriteInfo.com.Linux.Packed.2042.21379.24536", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d191789c-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037384, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037384, "uuid": "e2c98060-1719-4a4d-a452-04cc911c2f1f", "comment": "Malware payload (Mirai)", "value": "bcb2bdc9b080654ec6a25dff7bcf774f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037384, "uuid": "4d0f6500-c146-4928-93b1-e1564072d172", "comment": "Malware payload (Mirai)", "value": "011323a27015402862c40bd58211e58f1c0bab3a25aca6f98abe2fd6303dad66", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037384, "uuid": "241b8c4a-26e8-478b-84c6-89179d4059d5", "comment": "Malware payload (Mirai)", "value": "9385715796a3e4932d0d849d8351d65485336f55", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037384, "uuid": "37fac6fc-b174-4734-9822-8f883fad5c60", "comment": "Malware payload (Mirai)", "value": "12aa5b36ccab6b2c283e66d22e9c44e09336d9886f4e16310b39096b4108cfee5fbe776aaa0c31c7032ed8b10f386cea", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037384, "uuid": "bd2d4a32-e68a-429c-878d-65079d8c1aca", "value": "T1B5934A55FD819A12C6C112B7FB6E028D372713A8E2EE32039D256F2173CB91B0E7B555", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037384, "uuid": "3013b2b9-aadb-45fe-a0c7-c219902fe077", "value": "1536:kU+tmIjkv8P+V/Q4EFi53lMVAb+H1RoeNpV77W1QCg1vvMBYs:kUumEkv8fi5VMVAbe1RoU7qaR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037384, "uuid": "b62ca79e-e278-4138-88e8-3cc8268c3ae9", "value": 91948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037384, "uuid": "c9dd3506-0355-433e-bd9f-42c41b9f55d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037384, "uuid": "1545f6c4-7d32-4031-947b-14ed65c4ca0b", "value": "nwfaiehg4ewijfgriehgirehaughrarg.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05854023-09e6-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771101896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101896, "uuid": "b6d0dd4c-d477-49ee-861c-2c11dcdf1087", "comment": "Malware payload (Mirai)", "value": "00f8ec952830797cb6c73a02add9f2d9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101896, "uuid": "d9a99e6c-0470-4c5e-b59a-9e3458656393", "comment": "Malware payload (Mirai)", "value": "02b4d4cd1f9ae6bbb6fda92143e82affa25c7cc0006d87422e978a05535c8f2b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101896, "uuid": "c3fc8026-32f1-4f7d-9b9a-04e21cb5e160", "comment": "Malware payload (Mirai)", "value": "29998c91026955fad841d4e37b1b153b9caeb1be", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101896, "uuid": "0197edf7-04c6-42ac-85c3-c87ac5962b59", "comment": "Malware payload (Mirai)", "value": "132b3a78d3ab3a37935e927b9052d141e36dc532681fd26d9e4b591fcf6e1c70519fff5aa9326989cfa66746c91fe0e1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101896, "uuid": "9008c568-def7-45a3-8b54-bd5ca72a7926", "value": "T1F1431845BCD19A12CAE4237AF92E41CD372523E9D1EF7217CC112F10778A82F1EA7A56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101896, "uuid": "90032162-07d3-4090-907a-f6dfc2e65c18", "value": "1536:D9PcRxxfdqcicMnroYVbJiYOg1lIwwh+1gAL2i0Zec1aRQFO6:DhcRxx5wwEr2itTQFv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771101896, "uuid": "df41ad99-dca4-4d54-92a4-6f728272396b", "value": 58432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771101896, "uuid": "2e359517-ef93-4052-a356-7683656a8f86", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101896, "uuid": "3af9e7a6-67b6-448d-901d-f475ac0df9e5", "value": "kwari.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "382e7341-09ab-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771076641, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076641, "uuid": "980ff7d3-2973-4ce0-8a96-571d72b113a8", "comment": "Malware payload (Mirai)", "value": "cf7ecde5dde926e0245f6ffdca9ddd47", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076641, "uuid": "a9f3137d-e989-46ae-96e8-e9d49bb83de9", "comment": "Malware payload (Mirai)", "value": "052b47c2bb452ee21bbe4c1687b03bd596dec5daa58ff2b4a50b517b1a5c1ddd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076641, "uuid": "05737562-cb0f-44ab-aaa6-b307d5f86d62", "comment": "Malware payload (Mirai)", "value": "14226b9428d48abc43b5902c008a70384f784653", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076641, "uuid": "98c39f92-d292-4974-89a9-be7a3220d940", "comment": "Malware payload (Mirai)", "value": "a17075b201e998e3bcd721fd361536b7a6d536ff7941d14b06312ae7196cd691e892dfb14f5328bf50af3cf6bb69a342", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771076641, "uuid": "e6c2d6a4-ff3c-4139-a9ab-bf997b9d051f", "value": "T195D3B021E4006DD1EC2129F578BA97B80350EE700BDE1582EFFDF95E647BD9438AD2A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771076641, "uuid": "9bf6bba6-e2a2-47a0-9981-e164a2bd5d4e", "value": "3072:PnicTtkAg7FSGp+VJE6AqUjq+c7zAbpb9/xt:PiySSGp+PMmT7zMplT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771076641, "uuid": "f20c8a14-2c46-43cf-8d8a-c54b5c6a825c", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771076641, "uuid": "712eb5aa-7711-44c4-ac7d-cffb4aaf4339", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771076641, "uuid": "6d8ced0b-2a4f-43ed-8e59-168c8d609e4f", "value": "xnxnxnxnxnxnxnxnsh2xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e99fc39-097a-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771055633, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055633, "uuid": "1e06660c-3bbb-48c8-b9ae-69240468a97c", "comment": "Malware payload", "value": "29144c2f5acd859adf08d42ffcd74f50", "object_relation": "md5", "Tag": [ { "name": "0APT", "colour": "#EA07F8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055633, "uuid": "5e3eee48-5a66-4616-a52a-26220212783d", "comment": "Malware payload", "value": "0578bc26b46f3a0f7d626ce1304640a9b47233441824835cad627d109bd1a34e", "object_relation": "sha256", "Tag": [ { "name": "0APT", "colour": "#EA07F8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055633, "uuid": "786a420b-b674-4798-a860-f9b037ed147b", "comment": "Malware payload", "value": "1a855e84cdc02f3057a73caf9f30756a94a8a0e1", "object_relation": "sha1", "Tag": [ { "name": "0APT", "colour": "#EA07F8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055633, "uuid": "60a99bcf-3b77-470b-8f8e-b4d0ec9d94b7", "comment": "Malware payload", "value": "1a0a42f99fd068a056de15a7d20be4a69f542d6c64308a12bcf719eff1232dd2bb31512b94331a88d864099ef3c4b443", "object_relation": "sha3-384", "Tag": [ { "name": "0APT", "colour": "#EA07F8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771055633, "uuid": "b903c6ad-aee6-4bf1-8b0c-ec3682d5cb6b", "value": "T142558E01E920D979C7A310F0045FA3E889601A35A513DBD3EE6AED78A53E2539F1E737", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771055633, "uuid": "7775f734-c99f-499b-b012-43157d72014b", "value": "24576:G0Dtycbg8hGZy75NQ5bR5cwq6V7LooTcUEDFDDRLvy+aK3szFbq3uxxg:6cFhDcPcwqqvo/UEDJVe+aFbqexxg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771055633, "uuid": "ca7b0b62-504d-4f11-92c2-826fc2ec7920", "value": 1392140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771055633, "uuid": "21d34ac9-0280-4469-af5d-b7fc02755db4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771055633, "uuid": "7b5331cd-5c5c-4b49-9ae8-bca8c3b26f62", "value": "BDB4-0240-88D9-0APT-KEY", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9a26375-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037344, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037344, "uuid": "e563845c-a321-40b9-8b8b-98510f3cdf50", "comment": "Malware payload (Mirai)", "value": "89eacce25f6c995045429d067626d1fd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037344, "uuid": "64cd175d-8a38-485c-a78a-d41a761b1bd0", "comment": "Malware payload (Mirai)", "value": "05f963383a1e3f522baabff9129d89ff970faf5121b5e511ec0bba7bebd05e59", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037344, "uuid": "5c98b071-0d1a-4e4a-ba63-90aabc40e219", "comment": "Malware payload (Mirai)", "value": "632915530aabfc9df88724b4d180d61f26b79d6a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037344, "uuid": "2a928927-83a1-4cf2-8f76-702f0edeb049", "comment": "Malware payload (Mirai)", "value": "1b2fdf114b7f2a476b93d16d8ced84e3e58684e279e2bc69cff9f240883aa6ae326e1935d2fc9c1e00ceabd619419b3b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037344, "uuid": "a2aca42c-0737-445e-8409-4891f84065be", "value": "T15FA348D7B401CDBDF80EDB774453090AF531E3A219831F7A626BB9A7ED351A41922E82", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037344, "uuid": "42919454-85d0-4901-bff1-956f820c6316", "value": "1536:pd3pWv1r2Ib1LOshwY1YSIFjn8IxDKSvClItxKbfLLMduKt+zBUCt:hIBhC4YSIFjx8IbKLat+zB3t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037344, "uuid": "089febf7-3c44-4fd0-9dc5-177103856fe9", "value": 98864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037344, "uuid": "df4eaedd-5069-415d-87d1-d6c054bdaf39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037344, "uuid": "06314917-4cf3-47ff-9255-93b3b288ca9a", "value": "nwfaiehg4ewijfgriehgirehaughrarg.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f17a5041-093e-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771030136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030136, "uuid": "d1c03c77-9b91-47af-bd0f-1562aa85edf5", "comment": "Malware payload (Mirai)", "value": "63e4f5be6c346d044d81edb9af9c8200", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030136, "uuid": "2be251f4-8cff-4024-9402-d7fc341a5185", "comment": "Malware payload (Mirai)", "value": "06398bb87edd30dbe700a36c804bc0e0be0956d43a7505f9f1ae0a22c5883cf4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030136, "uuid": "20c547d0-faa0-4482-b220-640abea53832", "comment": "Malware payload (Mirai)", "value": "f85852b04864d752911525b8331842235f7964df", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030136, "uuid": "42a0af7e-0bdd-4658-a32b-c7d08da68a94", "comment": "Malware payload (Mirai)", "value": "c3b9af392cec890e4b60003b5b327e85c471012c5ba82e2cce3a10beb97f6c60bf7f5a2442b618e4ca510e09279229ff", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771030136, "uuid": "b23deb66-b0d3-4d8b-be2f-03e1d938c81a", "value": "T148A2B0232442057AC470467DDEBB86485763163CB2FA727173840B7DB68A25BEAF1EC7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771030136, "uuid": "eb4687aa-3346-4466-990c-e87f12d5e463", "value": "384:bXs/3R3M8/uCew5nHAPOC8wd8aeHd4Jwd9tiThab5am6EyoJdoShymdGUop5hR:Ts/3Rc82C9NHAPOATpJwd9wUbx6EpJBO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771030136, "uuid": "c5e05c6d-a708-4cf5-9fa4-6a5d8c6c4243", "value": 22200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771030136, "uuid": "d0cb3b4d-52db-44a4-85d4-89efe991476e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771030136, "uuid": "e5efc0dd-1bbc-4ce8-992f-02831b09db0b", "value": "boatnet.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e0ca10ac-09c3-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771087231, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087231, "uuid": "555976c1-8eee-495b-9b3e-19c771b1b4de", "comment": "Malware payload", "value": "666cd55e251f8a071ed256e7c73dc285", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087231, "uuid": "b6311e45-27dc-4eec-b338-a4df7a047945", "comment": "Malware payload", "value": "06cb74c0cafe0ee369c727b5041bba96eee44d849d66fb67def1c2afbe448d9a", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087231, "uuid": "7a1fbb80-0f78-4a43-89aa-7b143b645596", "comment": "Malware payload", "value": "04950d58030d7053a61919b6f7b4c64b6979b846", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087231, "uuid": "705828d2-70c3-4f49-981c-28362f48e84c", "comment": "Malware payload", "value": "2ccf93337f4d63381bae05e8b524e3ef716034e5634725cce5335004c60eb93c72c5a5c94eb2b0a1ae46360e8386b525", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087231, "uuid": "8619b5b3-607b-465c-952e-1ba8e8d9aa70", "value": "T1F9D5AE5393EC41E4E0BB4774D86A4626EEF17C1A0B3496DF0245F61E2F33AC25A76722", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087231, "uuid": "ecc7322d-7c82-4d66-82a0-50b134cc37e2", "value": "0f09257e903f2692e9b9d8944d8cf0fa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087231, "uuid": "91ae03a8-63cd-400d-a230-e99a54de8d59", "value": "49152:VDdxw6drF3W1QrL1UDq3r8mlp4D32yoH3bel:FdW6O/mrUS3bel", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771087231, "uuid": "e3da23ab-903a-40b2-b51e-896192ab68ca", "value": 2865072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771087231, "uuid": "0872d6f2-9c35-4247-872a-8d33a255980f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087231, "uuid": "49419cb7-90fa-4b0a-a0a8-4f13eb412927", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a11e08f1-0985-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771060496, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060496, "uuid": "d597525c-fd48-4a0d-8aeb-a00420a8ca3b", "comment": "Malware payload", "value": "b535027a1bcd7fade91afb56fb1bfe61", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060496, "uuid": "6fcc9bce-f1ec-409a-a670-ae919cc06a9e", "comment": "Malware payload", "value": "08f6a72a16cf3010923bc860e31ee7a78ed57000448c8dfb449244b70be3125c", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060496, "uuid": "a3aa8841-26de-4bd9-824e-eecef2af25ac", "comment": "Malware payload", "value": "11e52a2868fc33bbddd1893ca1505d27f02c303c", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060496, "uuid": "fede3d8b-0191-4cc5-abd5-170178749aee", "comment": "Malware payload", "value": "932f538fe113c1244ed6d9c335ee4f7921ae6b033bd20e59d84e778445904768729183cacfd88d49a0d14391cdd84dc2", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060496, "uuid": "fe0effcb-baa2-412d-92dd-b7de009f1c23", "value": "T1FBF0499F7164CF224AA8C5BAB3F84108A0918446E2F45FE3D3955873AE8694D3AD125D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060496, "uuid": "19daaa29-44f4-455e-b886-b869177ec2b4", "value": "12:FE8i9pAC7PkxGWi2jTKg9dzCXDdglXg1zQuP:FE8G/LWi2jT6XDdCAQ4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771060496, "uuid": "4dceec7a-4e57-4cd5-a021-471d8f651377", "value": 649, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771060496, "uuid": "a8c6e215-bc1c-483c-8536-f72dd931d1e0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060496, "uuid": "cdb68287-c38f-446f-a5bf-5f5fccb526b3", "value": "b535027a1bcd7fade91afb56fb1bfe61-", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "759223b5-09ec-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771104661, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104661, "uuid": "e713e94e-6707-4532-ac41-60d39b779b25", "comment": "Malware payload (Mirai)", "value": "229d1f52a568ae7ea250f304de57b0cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104661, "uuid": "5f4e6f0e-8553-4f31-8445-372d1c5f0e23", "comment": "Malware payload (Mirai)", "value": "097ee49cc92932e72626c9ff5cb9649cdb5b28efdef6b7c2f070cfae9c839288", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104661, "uuid": "e29a0e80-cebf-4f71-bc5a-75bbdc3afc9e", "comment": "Malware payload (Mirai)", "value": "7909c4146b014ab16a9b23369641eeb46eb56555", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104661, "uuid": "3fce233f-3817-488a-92f4-f52cb4057154", "comment": "Malware payload (Mirai)", "value": "1407fa0bafd6a77a96ac00cb0074e131fa774786ed50cd022e67ab891a6f22dba7b3c08cc037a407a1dd9128f02b4ec4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104661, "uuid": "6ec184a3-5605-45ab-b851-511e96215d5f", "value": "T1AA739E77C8267E98D5984570B8B58E781B63A400C68B1FFF5A59C6798047EECF2093F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104661, "uuid": "d57e3178-739b-46f4-8155-4877cbc112c2", "value": "1536:Tpwtq/0FORx0SFXqRgljniSIjZEXnK82nG7cuGc8KCGWUzgwul:Tpv0QRxJ0WkjWXK8bTGc8KI4z0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771104661, "uuid": "6ea24931-35be-42d6-b04e-2c45ecdd8cf4", "value": 75308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771104661, "uuid": "4b1d2aa8-656b-49d2-9cf5-286ce0859125", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104661, "uuid": "7a9debfa-36c8-492c-a5d1-4b68b8062912", "value": "manji.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7cc3cd5-09a5-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771074251, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074251, "uuid": "0501eb3c-fb93-493c-95dc-46421570f982", "comment": "Malware payload (Mirai)", "value": "6451e22e181eac7449dbd297f4ef185b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074251, "uuid": "2e8f1c46-7ada-47bc-83df-7b6752fbe07e", "comment": "Malware payload (Mirai)", "value": "09eee29b5575e6c8c2948757b1be1530defe48fc146c174896a333f44ed1c42c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074251, "uuid": "fc821ca5-1ff1-43b9-8d6f-5ee2123c59f1", "comment": "Malware payload (Mirai)", "value": "019a1aa1a53f06ebffd9c9e128048d063de8ed3b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074251, "uuid": "c05cffe1-7e2e-4dec-95e4-86b5b49311cd", "comment": "Malware payload (Mirai)", "value": "e1fccc3006a08408fcb9215f3ec09618444667bc6d41a7d9d59e305c54ad2573f84ad180b56e52e13a73919c2d90f786", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074251, "uuid": "52afe22d-a066-41ff-9c19-af27b815001b", "value": "T101435DC5AA43E8F1EC1701751137E3379736E9360129EA93DB55EA32EC66E00DA173AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074251, "uuid": "bde9751f-78bc-487d-8d60-b81b514b78a5", "value": "1536:Zykw3dK8ZEOj8g7jL3E27v3KrTX2fC5jkYVrq5uUu:ZR4Y8ZEwhb7v3WTXACLQYUu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771074251, "uuid": "d50e75a7-c666-48f5-87db-c44fac241173", "value": 60080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771074251, "uuid": "cae423b6-ce10-419a-81e0-61e81caab40e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074251, "uuid": "832beb9e-719b-4f9d-bdd2-6dac444d6977", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39de115a-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048726, "uuid": "9953efe8-6da2-4128-b5b2-19c3cbbb8506", "comment": "Malware payload (Mirai)", "value": "3b1bc281035e2240688aabf3735f71fc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048726, "uuid": "55494409-269e-4444-b9fc-d229e752ddb8", "comment": "Malware payload (Mirai)", "value": "0b5ef6e32c5ec91e1e42b212c21f378ce6228700fa6e3d8049a7a28b3c14fd48", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048726, "uuid": "9a46fb89-4e29-4347-940e-242acbacad98", "comment": "Malware payload (Mirai)", "value": "427917d07f6ee80bfffb71e1a9dd1cf3471e0f9b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048726, "uuid": "e4d5d12e-cab8-405b-a36e-d3eeb5b45b0a", "comment": "Malware payload (Mirai)", "value": "302b70d71f83432348d4035cc0575a3d18e81d84cbf56cbdb53608eb882c6e5db8dfe521fa7727c86d77df858fc5154a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048726, "uuid": "d66eaaf8-fe6c-4732-a00d-5eb86463cc42", "value": "T19FC3E185BB6369D1C0A342BDA4C00AC387916E318BE317080699F674387DDFB1F69DE9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048726, "uuid": "d3e094e4-283e-417f-ba00-07de294b24db", "value": "3072:OBb4K+nqsnSjZldbaUXGSgqTWo1OWqEwztlMMTnw:0OCDjXG9qTWywxlxTnw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048726, "uuid": "2017d3ff-b613-4e40-b088-4d95e4719f5e", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048726, "uuid": "f83e8913-97ce-4174-b7fa-272641fd7213", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048726, "uuid": "026a207d-adc4-4f42-90d8-fc953c09ed3a", "value": "xnxnxnxnxnxnxnxnriscv32xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "694c9c5b-0998-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771068563, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068563, "uuid": "749f22ea-8774-4401-a273-f514aae70413", "comment": "Malware payload", "value": "9212c223aeec2d32c553afbc931b07f1", "object_relation": "md5", "Tag": [ { "name": "176-65-132-183", "colour": "#7F9EA5", "exportable": true, "hide_tag": false }, { "name": "critical-service-cc", "colour": "#19D4CC", "exportable": true, "hide_tag": false }, { "name": "pw-1234", "colour": "#ADC330", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068563, "uuid": "bbffe0dc-7ac7-41c7-9817-500ed49ed470", "comment": "Malware payload", "value": "0f56f8cfa4efcb7c2cf86c5e5f84c9dfe62ddfb607273e847f034a0ca5bdae98", "object_relation": "sha256", "Tag": [ { "name": "176-65-132-183", "colour": "#7F9EA5", "exportable": true, "hide_tag": false }, { "name": "critical-service-cc", "colour": "#19D4CC", "exportable": true, "hide_tag": false }, { "name": "pw-1234", "colour": "#ADC330", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068563, "uuid": "a4ac70a8-9ed0-4209-9d5b-3e08242d821d", "comment": "Malware payload", "value": "a061f66706c583ef66c5e8d07720fbce938fcd0f", "object_relation": "sha1", "Tag": [ { "name": "176-65-132-183", "colour": "#7F9EA5", "exportable": true, "hide_tag": false }, { "name": "critical-service-cc", "colour": "#19D4CC", "exportable": true, "hide_tag": false }, { "name": "pw-1234", "colour": "#ADC330", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068563, "uuid": "9a11b8ff-3cdc-4609-90f0-345c85b938c7", "comment": "Malware payload", "value": "f7a26cb75835e0e61958227c381ea284bbfeda168f088cf8176ca97cbfb68ea291b0d2d2f7e90fa0b87e4db0ff0ba3e4", "object_relation": "sha3-384", "Tag": [ { "name": "176-65-132-183", "colour": "#7F9EA5", "exportable": true, "hide_tag": false }, { "name": "critical-service-cc", "colour": "#19D4CC", "exportable": true, "hide_tag": false }, { "name": "pw-1234", "colour": "#ADC330", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068563, "uuid": "0ab82a77-e0f9-44ce-ad6d-22a007d43412", "value": "T1C4D633D5A976099B8A4AC7868FBDE0E4F928F67F9CCC41905F87DC5A644CE430BB0E05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068563, "uuid": "57f0bdeb-7c0b-4db3-9a2d-9647913fd65e", "value": "196608:3X4kHitLUxFvyQ0fE9kvDAOPANvrcQllsTugAJLgaJV8vy+yiW5yH:3X4kHqUvGgPjn0ugARnJV8vqiW4H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771068563, "uuid": "80cd94d0-7603-4e12-82fc-ac03e2435fe9", "value": 13579598, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771068563, "uuid": "8433f392-949e-4aa0-8c1d-b4db3528949a", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068563, "uuid": "938376d7-273f-40d0-bcf9-077ae132be25", "value": "012.534.4.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e01d316f-09c2-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771086801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771086801, "uuid": "c796e621-01a5-4975-aa6d-61c174f45dce", "comment": "Malware payload", "value": "7e735d6ef01c3d2c879db7955d819ff1", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771086801, "uuid": "25ad0639-e246-4e2a-bbfe-c12e7493f8b3", "comment": "Malware payload", "value": "10a1a22c67abc0afccf373e05d11a29a613b287347d55e07597016ce0905420d", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771086801, "uuid": "b0f78461-302e-4b47-a45d-9c58ea4b5a8b", "comment": "Malware payload", "value": "48f914db989f60c8963dc95e02f709792f302f61", "object_relation": "sha1", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771086801, "uuid": "7e9a4f64-921f-4168-8d6a-344c3b28b465", "comment": "Malware payload", "value": "e4d93f956383511477207ae805602d5b0eb7bab37cc39022109e0ff03f82ba7e78eeba63b001e84a881b96c60d5d5664", "object_relation": "sha3-384", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771086801, "uuid": "a2267116-7ad5-4696-b12c-a4b69cdcd0a0", "value": "T188A31367E7E405B2E4C5E618793E77C385C86433CA3DBAC886D58468D274BBF4682335", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771086801, "uuid": "eaed64c5-514c-4d65-a97c-50a366c9b563", "value": "3072:ahCl5bCTk2cefvMFVshcawbWVk2/de2kCFHUqjYQT:qy7LefvMFVs6fR2/U+UqJT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771086801, "uuid": "25ae7bbc-d5a2-49a1-b149-4ddfd8e2af3f", "value": 100976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771086801, "uuid": "fc5a0520-a99a-403b-8cd4-c4fff49b60b0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771086801, "uuid": "7f928537-64e0-4fee-b3f7-8fd483c4099e", "value": "7e735d6ef01c3d2c879db7955d819ff1.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e99a5af-09f5-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771108461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771108461, "uuid": "2852edf0-6d3a-4422-845e-e2ff1e1d0c3c", "comment": "Malware payload", "value": "17c70417e6a9154ab36caab4843a5142", "object_relation": "md5", "Tag": [ { "name": "a3dacb", "colour": "#376450", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771108461, "uuid": "363c6bdf-2dd4-47b2-9cea-97639b49d5dc", "comment": "Malware payload", "value": "10ded890320a96e2b69baa901bf556f5d11f483e5c97cd477f45cc8258395f56", "object_relation": "sha256", "Tag": [ { "name": "a3dacb", "colour": "#376450", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771108461, "uuid": "0162e4e0-9657-4927-aedf-05b0259c2dac", "comment": "Malware payload", "value": "c8277b640dc67928458c036c210adbdf2624a337", "object_relation": "sha1", "Tag": [ { "name": "a3dacb", "colour": "#376450", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771108461, "uuid": "6234afeb-51c6-48dd-bafa-2e267ee5c676", "comment": "Malware payload", "value": "a6a4726e69090bd158448703305b8e4ffe9781ffea21fcab1e8299302c119f7deab4934ed533ead39b671aef4e14ae5d", "object_relation": "sha3-384", "Tag": [ { "name": "a3dacb", "colour": "#376450", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771108461, "uuid": "60262750-783c-4067-8e39-39d1e0fac4ef", "value": "T13BF7337EEF925464CE1221B36B1D6B78A66C30E0137E20CB1A9DD3DD96635B4DAC007E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771108461, "uuid": "7b7bfae0-d9d7-487f-a440-f7518a0fdfb1", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771108461, "uuid": "8e65cd44-ba3d-466b-86e8-160c822da6aa", "value": "1572864:SLdk6QhMxdXHhIQaB8rQqF84WZ3K761txYfqaSx5WbMYl7O47:S26+MJYBIQAPWxtKjmQAd47", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771108461, "uuid": "756af6cf-84ec-45b3-9837-886d9e4fee19", "value": 75397941, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771108461, "uuid": "561f7e5c-a7fa-40de-94af-70047674058f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771108461, "uuid": "9a36def2-1811-4b3b-98ce-50ed1cb1dd34", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75301734-09a9-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771075884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075884, "uuid": "46a481cf-73dd-4cb4-ae5e-6de2de5989a7", "comment": "Malware payload (Mirai)", "value": "024c9c6ef641449947ed6c3a65e34c79", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075884, "uuid": "3260701e-4935-41e2-b052-d8b07d02206f", "comment": "Malware payload (Mirai)", "value": "12532347b4ed46aaeeb39fd3ed08a93479d15428417550e7d011d3e652a56a9b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075884, "uuid": "ffbe9761-4835-458b-9320-97265a7970ec", "comment": "Malware payload (Mirai)", "value": "3174333939bc5a571f1e35fc2f0c29a6db2d958a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075884, "uuid": "050431a2-2a3e-447e-b09c-e5db4ee25b0c", "comment": "Malware payload (Mirai)", "value": "0185113092f35baf1cf6ac4933dd90164ef9e5ef5ae02e0abffdc145b2594fe461c14b01381b82a01c6e2cf9203ffbf9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075884, "uuid": "938d98a9-72eb-4fad-97a1-73e09fc75320", "value": "T1BDF33B47B7208FB1C368967109B3CB67A6E6269216E19985E66DCD107F3035C6C3FFA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075884, "uuid": "df4ef564-a74c-4dbc-8434-3b7039e11fc9", "value": "3072:93VJgTdgahP/2o/ZrTheIsnjCWRXFm4UpM1wLxpPNNOziH2fam:9FJMgWPZr8IaCWReS1WpPe77", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771075884, "uuid": "87f99f3b-9693-4d6a-8cb2-0ef4f56dff4b", "value": 166976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771075884, "uuid": "2cff4934-968f-4b28-80de-cc567670cb53", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075884, "uuid": "bfa20259-989a-4941-b5d5-62ba6e6ffc79", "value": "xnxnxnxnxnxnxnxnmipsxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fefe9235-09a5-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771074397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074397, "uuid": "1ed0247d-da2c-4686-ba03-3979e01f7b81", "comment": "Malware payload", "value": "b039c8589be26dcde5372a47e63ec802", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074397, "uuid": "875d8d78-3cd3-4f1e-99ef-71b82479ff27", "comment": "Malware payload", "value": "12916bbf57834e0671b97c14708001e8d92a1e8074cdbc809dc4f07888e8e53e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074397, "uuid": "f7395b54-016d-48e7-93a3-1062faaf571a", "comment": "Malware payload", "value": "b2605e66da2d436ea0eab4836797590402696cbd", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074397, "uuid": "9d4ac851-49ce-456f-91a7-01201c6cf8fc", "comment": "Malware payload", "value": "bdc389a7cd67e259ba57e8b0262402ca6d75ccc90d86b8ec1b8ec59b061b213fe5fbe0af856e5b61196e94f3f8fa48f3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074397, "uuid": "5ee052cf-3551-4859-859d-21d67d93b3be", "value": "T139B4238F77BE39C58DF12DE895E1CA1B8ADD1E9A18FEC9154CE6829C43D10138921F4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074397, "uuid": "63123dbc-175e-4687-b247-416a3b06a5d7", "value": "12288:VoJw13Esa1dWMz3omHXwxWvDQB1F2tt78NpI1jSvvkmlkT0teHAh:VoG13EsScEPHXMWvDa1kt78govVlkTuh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771074397, "uuid": "f392062e-72a0-42db-8dac-b9d73ad90ac1", "value": 517626, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771074397, "uuid": "eb0eaabd-4fb8-4638-83cd-460041573681", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074397, "uuid": "1213a6da-1270-424a-ab48-aeecabd0ae5b", "value": "pty10", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e6a4cbd-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048734, "uuid": "5f856f3b-286b-4f95-a886-c7523bc6b7d0", "comment": "Malware payload (Mirai)", "value": "b7d4b11ed1792e44fe83f6e1b5c4cdd7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048734, "uuid": "1036ac00-c097-4188-af40-3690bcbe0424", "comment": "Malware payload (Mirai)", "value": "12bfc0c8c55b216ada2653b33d68cbd57a7c6f7a3a13655a1b349098d06d8a59", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048734, "uuid": "080bc97a-fa3d-472b-b686-fdcd816d3acd", "comment": "Malware payload (Mirai)", "value": "68e5b3773c8d28a87a87ff290f37fdddaa8f9c1d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048734, "uuid": "95cf9b59-5f16-40d9-938d-baf523178639", "comment": "Malware payload (Mirai)", "value": "03d39fbd1a5cfc4453f36841e90138f5b13100567251a04cfc6154602daf2406401eefe6af423ec248f43f55278e0d24", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048734, "uuid": "a8e0a2f8-1696-47d9-a477-75b7df3714fc", "value": "T179631243FFEC1F5CFCDA1AF407AA66CB1351902294B641B80DE69C99516FDA1109A8CD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048734, "uuid": "d1a93dcc-a16c-4d0f-967c-5adc9e519f4a", "value": "1536:G7MbwKNGjjH+Xq34n/q8Zu41zmX3sDgtrPA:G7Mbp2L+Xqdfoz2sqrPA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048734, "uuid": "50ae5c24-9853-4e40-a09f-483640093957", "value": 70860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048734, "uuid": "41f342bc-da92-456a-abdb-8a93c77b9eff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048734, "uuid": "a61a421b-8f7f-4488-9c3e-876f595f4907", "value": "xnxnxnxnxnxnxnxnpowerpcxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc132cbf-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037348, "uuid": "85f9e8e3-7c38-468d-8249-1ea8cb66374d", "comment": "Malware payload (Mirai)", "value": "c8207143791287a0b48b2e004b3366eb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037348, "uuid": "df192342-22fb-4bb4-a700-12540483d967", "comment": "Malware payload (Mirai)", "value": "12d3e721fed2446f93fe6b03206d958f13fb9cbe537211fef417d29ed9b25694", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037348, "uuid": "a084dd3a-7c97-4729-86f9-173ae2313e25", "comment": "Malware payload (Mirai)", "value": "7e883db8d963093ba20f73e9e82c7415ea0df1c3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037348, "uuid": "b9390db5-751f-4298-9139-77411561aa77", "comment": "Malware payload (Mirai)", "value": "19eb54ce00c940f12dfed4b00809ad1dceaff342f201f239c003b3d6bced24de131c371c0c4a0f05cfdd56f5034c8bed", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037348, "uuid": "dd013390-d290-4988-b19b-4a901f7b07cd", "value": "T14103F2A549D94DF5A664787AFBB703CF22710B3DD093B031C4B80B65F7C606A0978B56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037348, "uuid": "be71926e-ce2e-4ad2-9032-f22288a8da31", "value": "768:Vz21lG5SLJt6DrRjocHFR8NpK++N9MZTh6y5LTb+69BK3jgs3UozI:dwAgWNscHkpVVoy5Xb+kK3hzI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037348, "uuid": "ec30e508-bf55-4efe-86cf-bf18b6b9f5eb", "value": 41052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037348, "uuid": "216117bd-042b-41ad-a662-03415955db40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037348, "uuid": "334a9fba-7197-4c3e-b1ca-f6271a6784dd", "value": "nwfaiehg4ewijfgriehgirehaughrarg.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe11d263-09da-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771097159, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771097159, "uuid": "dd0d2f06-df8e-4ade-900e-fc9005aa5c1c", "comment": "Malware payload (Mirai)", "value": "5a88ed97d83b7778db3761f5e71d5cc2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771097159, "uuid": "3da4a343-23d6-4081-844a-fe9f594afd2d", "comment": "Malware payload (Mirai)", "value": "15028ee949af7785942d444cb0289040b40b96ba611b729ff145e91451b11f1b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771097159, "uuid": "3c26dc28-87ba-4750-b885-694a87bfd10f", "comment": "Malware payload (Mirai)", "value": "268fb4c8e4c4babec7ff86894e99b08728a4a555", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771097159, "uuid": "756dc029-82e0-4627-be9f-9860760acef2", "comment": "Malware payload (Mirai)", "value": "8e327264f10a67075b869b5da4d984a252cc54e773e53bac27ce083ffd36cd07a6fcaa5941b0ef87f72ac54601747ce1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771097159, "uuid": "210739e1-0202-4acf-a458-16c2a2970610", "value": "T1DD04C706AF620FFBC86BDD7302F90B1129CCA81726A53B753274E924F54A58B59D3C78", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771097159, "uuid": "7c152cd3-3452-4d97-a96a-997495bcb9e4", "value": "1536:y0cxxzZeK4948XEtEJMxhE76diNxFHJdRnHyLgG3kZyUW89JZY1YbR5wEYUqrXHA:HG8Xw8THUOZZhgEY/rXie0B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771097159, "uuid": "c4e266f7-1ebb-42d0-afde-66317e254f2b", "value": 179152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771097159, "uuid": "d03430a8-484c-427f-ad02-61e3d30c6ae9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771097159, "uuid": "95635da6-53da-4002-976f-10144e1883d0", "value": "israel.mipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "385b6bcd-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048724, "uuid": "974e98b2-06ff-449a-add9-8393201cd3b8", "comment": "Malware payload (Mirai)", "value": "44c9389c1c03d2307151f973c337bc2a", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048724, "uuid": "c19c94a4-3c68-4b25-a493-c247b3f5ac3a", "comment": "Malware payload (Mirai)", "value": "150c82cf4264fd1abe073c2d7d2722dab726f3afa40aed04908f027aa6eddb49", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048724, "uuid": "76802dd7-2f5d-4f46-9164-774875f3ee75", "comment": "Malware payload (Mirai)", "value": "675ec3d0779c63410d41680f56e09cc74d682a32", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048724, "uuid": "f5082fda-6e39-480c-9a81-239f50064f4b", "comment": "Malware payload (Mirai)", "value": "cfe331c9729107031f24c870cbcc449e1e941099fbf1f395a204741352c0b3a59d7762d31247305088dac92808483e6f", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048724, "uuid": "ce39edb7-d01e-4918-b82d-a454e42d0e9c", "value": "T1FC516D9A12205FB5D708C94EF7F0B934664FA0C3EBDE9704AB420B6C8EC9D4C3685E60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048724, "uuid": "106432f8-58cc-498a-8c7b-c19efc961da2", "value": "24:7S2JMBnbiBJuuZAEvEnEYPEhEmdbbwaFJUfyFhM3w:7S2JMBnbiBJuuZAAc1yLbbwuFhM3w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048724, "uuid": "3dd9a132-3556-4fb6-8f98-5c846b1efb54", "value": 2926, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048724, "uuid": "ad718858-9338-46a7-9494-5b673580d3d6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048724, "uuid": "bdd70666-f273-41a0-a4d5-2264739fae7c", "value": "run.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41abeaaf-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048739, "uuid": "a7cc8cf5-c50a-44aa-adf8-6e3bb57ed1a4", "comment": "Malware payload (Mirai)", "value": "5c84461d2a865ccff0b676676e8b6994", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048739, "uuid": "ab56a3e5-09de-4443-aeb6-165b579f6426", "comment": "Malware payload (Mirai)", "value": "15d7536e181779329720ac4b0c96f5c2f00ad1303474e98ee34f33b1225ef35f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048739, "uuid": "c6872c02-0684-44da-b66b-6b906582db69", "comment": "Malware payload (Mirai)", "value": "c71b87372339c9649c388b0378d7d3f721d15c8b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048739, "uuid": "33ed23b6-d584-44e1-b506-2ca492da554a", "comment": "Malware payload (Mirai)", "value": "cfb00b93659563d5d4f84a5d79c7ea2d01c2831d74b765aaed1ca876d8fdf78434009934b7bbf73d99399f577e8d53d8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048739, "uuid": "6c9d00f8-f6e2-4f6c-9cbc-bbc5f4bac763", "value": "T1D5B3AF87B2907ABEF0A45E3FC4135E26A6259F705583273D71FDF9906E3A3503292E42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048739, "uuid": "8d55ce39-6c8a-4e64-96b9-44e689283d9c", "value": "1536:tdNSXAeuUGWnKYUqwaJ1Xq/3A5hcB57laZeCNjHWBOdiyWT15Ov6fHzv8rSR:t3SrlGWnKTU83AQB5A5Liy36f7USR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048739, "uuid": "15433932-4b6f-422f-9960-2e0ea318dc78", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048739, "uuid": "aeb4eb5f-d274-4e11-af75-2f85c02b70ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048739, "uuid": "9ec89d85-a225-4a3f-8e7e-d7d417f50ad5", "value": "xnxnxnxnxnxnxnxnm68kxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd447e27-09da-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771097158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771097158, "uuid": "10430d89-9728-4887-81fb-bf6e54d1b1b6", "comment": "Malware payload", "value": "783605752e434a14116dc6e0d6345185", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771097158, "uuid": "2ad2b7f0-5d2e-4bb3-8536-676eb9804e50", "comment": "Malware payload", "value": "16b7b3a5b3e0a7de6d9cedaab4fe4a6ae1c61ef839f1583d6af9eb5f6ab2ca72", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771097158, "uuid": "021dd9dd-8191-498e-be50-91c89715d056", "comment": "Malware payload", "value": "ececfe34386c070554d84e2c93638d776527d307", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771097158, "uuid": "f02ba016-5deb-41e0-9956-e7976c130c00", "comment": "Malware payload", "value": "99edc07d29d51b2fd1180428a942902d790bc548d987491ff1092920996d385a58f65b8e64ace8571a31cb762b3775b8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771097158, "uuid": "f18fc1c3-57c8-4db0-b40e-a637b2c72dde", "value": "T17C8423B3297E0DF5E8A96551F0865EEFE31837D8BEC6C0DC46799252181CE934CB24B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771097158, "uuid": "6fc8bfcb-70ce-48b7-a088-162c18ce24a7", "value": "6144:SpVCtek4nX9cxhbUfFYQWZzMLVGWQjlvTed1mMYp3cSxC3J1cErlH9z7JAEf:SI74X9cHbU1yzmsWQlvTed1up3903TPz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771097158, "uuid": "1c7c9c0b-e0cf-4541-8db4-e54b3aa665c2", "value": 385225, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771097158, "uuid": "d6e1f7b2-50b2-4943-ba6f-37de8ba85d34", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771097158, "uuid": "7ff9cfbb-f826-4856-abe2-f516f82f77e8", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffa430e1-0993-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771066667, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066667, "uuid": "5470c5a4-8da4-4145-a1ed-abc5f6167b5c", "comment": "Malware payload", "value": "a5a2a06e37069bf91326c8231f427b3a", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#288F7C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066667, "uuid": "3b0e105b-a90a-49d2-8525-a7b664794e6d", "comment": "Malware payload", "value": "1b5870e925fb5c43b49f24f2a174da1359ce753bd888277746f62a132749fc55", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#288F7C", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066667, "uuid": "8000b5d6-dfeb-4a60-b073-fe7b6466a304", "comment": "Malware payload", "value": "29923aed64627de0db27ede94cef4115ceb64c11", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#288F7C", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066667, "uuid": "dbac7338-c237-4bf1-b499-1383accc7177", "comment": "Malware payload", "value": "62954570ff5b72f51308515318c79ff8677afbc172e1fcbdfeaaaae5d8a4fc18ab59b0b33760f9bf69d842f8f952c893", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#288F7C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066667, "uuid": "48821671-924f-4b66-8ae2-a558339051c8", "value": "T17E254B23AA51C535E1511BF8BA779639F9ECBC68C600F1A3B787DA19AF712C06253313", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066667, "uuid": "807976d7-97f8-4ecb-bea3-ef5ad07a276a", "value": "8166a3e26d7c023a459a1c6f8c656d80", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066667, "uuid": "733871aa-794e-4ca3-a6ba-17b17774499d", "value": "24576:mIOrBANpUIEBkDgc2HwtaS+sLuJIGhwc:xwANpUBkDgccwt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771066667, "uuid": "6fe8bf7d-88cc-4912-9ba5-c73f663ea617", "value": 1053696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771066667, "uuid": "fbf8bc2d-fad4-4a84-8cfe-433ac7cbea52", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066667, "uuid": "f093a0dd-ae16-46e9-9b32-6f7a9a0aeb9f", "value": "1b5870e925fb5c43b49f24f2a174da1359ce753bd888277746f62a132749fc55.dll.sample", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01c597d2-0947-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771033600, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771033600, "uuid": "bc0b9f28-933d-4903-a2c3-a9daa5e3fa42", "comment": "Malware payload (Mirai)", "value": "c8e50660090add53dfe4ea0d40ecf51a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771033600, "uuid": "e754d860-ee21-4783-a8d9-7c609a7bb4eb", "comment": "Malware payload (Mirai)", "value": "1c3d7baecf8f590f50953df490edac875cd6d82d3454fc0070ecac85962a6393", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771033600, "uuid": "90d7d555-4c31-47d6-a35d-b7014b5b8331", "comment": "Malware payload (Mirai)", "value": "6aa3cee16053d2bb9349ac0eb7c4dd9fc3dd7275", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771033600, "uuid": "e59b9645-b09e-43c1-a24a-e4064bae3723", "comment": "Malware payload (Mirai)", "value": "e4ea150e1ef701b126b3a1aeaf7182df90243b2a910a3fe932d670521951bd52e58b4bf4f46be4ad4cf8bc1650c73fb3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771033600, "uuid": "9bceacdd-53e4-4666-bf4b-d8f31a615ca7", "value": "T18C337C32D4299ED0C55A0174A0AC8F391F13F1C893536EFB1AE646F26493968FA19FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771033600, "uuid": "d855328d-fa3d-43cc-8e08-5e7724ae7e8a", "value": "768:Eabv/weADYqMqeEtJLrkqU6fratq6Obq9CTCMCKod/fRICOhw:EacKC7Rm6fm3WCMqdhICOq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771033600, "uuid": "72af4f4e-16ac-4341-86df-6ee20559a035", "value": 50168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771033600, "uuid": "1ea71255-cfc1-4416-ae01-d170d5e42372", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771033600, "uuid": "4df7d998-0857-4109-b06a-502adab21c97", "value": "boatnet.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "942a58da-0997-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771068205, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068205, "uuid": "4805923e-60e7-4ba1-8508-44c3ad2ed852", "comment": "Malware payload (Mirai)", "value": "b68443db3c7a11184b1961b6c5801985", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068205, "uuid": "560e13b4-ff5a-4e0c-9cc1-01306983e534", "comment": "Malware payload (Mirai)", "value": "1d73dfa85a6ab46e4685def50046a45758f428206f50a52917e2b8c48e2225bf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068205, "uuid": "ebea8db7-b9d9-4e3a-8233-a5e9b0cd5f21", "comment": "Malware payload (Mirai)", "value": "fe99ddb077e64618a9492f9c3e38ad1e59e324db", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068205, "uuid": "7f5c5f7f-6594-414d-bba1-ac223c8cc4bc", "comment": "Malware payload (Mirai)", "value": "048a555503760330dd48d31be9bcae7e88a351b999ef8343cf6882ff23aa7be176c071e09be8d9dab7b5ac464cc68b06", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068205, "uuid": "ffe7b4d2-f774-44de-9493-082b26de1c6f", "value": "T1E8C35B82E6A2D0F1E68701B00557F3E68935EA305416CEC6EFA93D71EC717829D9BB1C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068205, "uuid": "2ffaf50d-50f1-465f-b347-3e355a0693cb", "value": "3072:3atpsoRNjmj1VGCr75MoS9SrPwVrx5tiy5w:VoRNjmj1VGFVrRiyG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771068205, "uuid": "3ae0060c-df10-4b32-b6b2-e1754dcc7929", "value": 123472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771068205, "uuid": "29935f18-e9b5-47dd-b137-5641e9c357c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068205, "uuid": "68f1f14f-2c82-4704-9875-10aed1c5d4f9", "value": "SecuriteInfo.com.Linux.Packed.2057.8557.30737", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "391d8f4a-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048725, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048725, "uuid": "55cd4209-6e18-43a7-9add-a768d41d822d", "comment": "Malware payload (Mirai)", "value": "2cbbe949c4d5b855de3cfcafc466b7f5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048725, "uuid": "c1a85eef-25c3-4371-a6c5-425442b480cb", "comment": "Malware payload (Mirai)", "value": "1ee9c33af35cdfe68cbedda44989b6c9562640dd379ca4ff8edca018c37dde63", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048725, "uuid": "86d3e8de-c470-461f-8c3b-e90ac0686044", "comment": "Malware payload (Mirai)", "value": "38b714ef1b020b96dc1942b664c5e6daebc2630b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048725, "uuid": "ffcc30fa-c71f-4bec-81d7-e123929f21fc", "comment": "Malware payload (Mirai)", "value": "4641b40d14b879edad116dfeb065dfd478527b9de9970ffe050d57bf63b35d3212155d918c2c00aacac680b128ee0f4e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048725, "uuid": "70970602-0171-4652-ba34-23cbfdeab046", "value": "T11B147120FA0663B1CC731A34A79A2E5A6E7704559FEB26312D1F533CDE628509B31F8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048725, "uuid": "5ac3e8aa-6d1e-4094-a17e-727317affee6", "value": "3072:IcHZcggt1NJmeDQBwnKUDMaVsb3pjr1lCRhUKG:IcY5JpMByVs9jSwf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048725, "uuid": "de08b357-8d1d-48bf-9ecf-24a362a78a58", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048725, "uuid": "4f37da69-85b0-4868-af19-67763ef50f59", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048725, "uuid": "a2bc4847-da82-4f7c-be2a-397b5ea6baf3", "value": "xnxnxnxnxnxnxnxnmicroblazexnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37dee738-09c4-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771087378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087378, "uuid": "a4be562a-4a00-49b1-8a8c-321173086fc9", "comment": "Malware payload", "value": "2f1a976c58a05cc66d910b144779c061", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087378, "uuid": "acff14cc-375c-4d32-abc7-9a287302da81", "comment": "Malware payload", "value": "1f32a1315838dca9212d636d8667a34ddc60901bd0132744d94d7450965b5d0c", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087378, "uuid": "63652521-0f5a-4578-a77b-040ff0678050", "comment": "Malware payload", "value": "f41ea8a209713ef4f2ea89314aade5f1e97d4a9a", "object_relation": "sha1", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087378, "uuid": "686711f3-ea31-480d-9b1a-28861908f6b1", "comment": "Malware payload", "value": "18b4a7804bc5f8b76c023c4d3fc9456cafafedd43640ef48163cab6704ba9e7720bfa97afae82dd4c72928539ee20d71", "object_relation": "sha3-384", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087378, "uuid": "2cb9d67a-5281-476f-a75d-6a7e0826d916", "value": "T126115213CD5ACD82CD18F9B0031A7B52AE59D02D98311AB405696E7D859721A5CE0C0D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087378, "uuid": "41c88d90-bab4-4d62-b1b4-12da5e646b84", "value": "24:96EX4lrkxQWLjc5ierpagonhFSK8tgnl5yOEYl:9HQ3aYfB/gl7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771087378, "uuid": "f8352c8b-14aa-425a-a7ed-18e05c48dd05", "value": 864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771087378, "uuid": "9db511ae-f0ee-4dc9-8f43-0397a8ab7c18", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087378, "uuid": "a7345bb6-fc7e-40a2-a5bf-558dd1e7866b", "value": "Docusigndoc.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56b07530-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048775, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048775, "uuid": "9971e8eb-44cc-482e-9088-3e24ca111a86", "comment": "Malware payload (Mirai)", "value": "c3e60868d7e35f51a595726ed43032b2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048775, "uuid": "323d5b11-bdf4-4680-9508-55c03a63a69a", "comment": "Malware payload (Mirai)", "value": "1fd48a642892a00fc019ee4d98ef11deb24270784f174edc123c9dabb43d92dc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048775, "uuid": "9f9dd456-5ae7-4084-93dc-0f2c0ed34432", "comment": "Malware payload (Mirai)", "value": "32453be95a6b0e5c4358ad33cf03a4a25fbb22ca", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048775, "uuid": "8001800b-ec9e-460e-aaf6-6981423a1254", "comment": "Malware payload (Mirai)", "value": "42a0620b217a947779560ac15b6c331dc81fc5acd01265cf9007c59ccaa47820ffd64c1b0570733ab5e7dc3ca029909d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048775, "uuid": "1ff281bb-67af-49a7-b25c-2d5f73337747", "value": "T1A7145A05FB0C0463CA931CF48E3F0BFAA3621A9115F99115250D7F5A1A32DB7A68BFD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048775, "uuid": "e6cf5aa8-4faa-42dd-8cba-afa3abcecd3a", "value": "3072:ESZAGIiEgACYrerYqlNSwppHaecY4NXUUaN:HZ15BTYCrYq1QDY6F4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048775, "uuid": "ca88c342-a3aa-41f4-92da-3ffdddb859ea", "value": 197308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048775, "uuid": "ae18d648-10fe-4486-b187-1f551964bef8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048775, "uuid": "a04b78cb-6dc7-474e-a502-b963361be4b3", "value": "xnxnxnxnxnxnxnxnpowerpcxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "554bbd49-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048772, "uuid": "7917725a-96b5-42aa-96cd-297a4d00923b", "comment": "Malware payload (Mirai)", "value": "4f988b5b29498eb7d4fcca5a87fd2332", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048772, "uuid": "32fdf47e-29fb-4c49-8055-bffd161dacef", "comment": "Malware payload (Mirai)", "value": "201950084acda686431830179092c415ab1280377db8f1cf52c0f596c88ea915", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048772, "uuid": "f5e273e8-f59b-4661-9f96-fec0ae3bd4ea", "comment": "Malware payload (Mirai)", "value": "17bc97a630eb1016a88730ae8393a32842aecd80", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048772, "uuid": "c0326307-4f04-4b8a-9828-5fc62b562612", "comment": "Malware payload (Mirai)", "value": "d72153b53a80f6d5d092e7a8b1c05ad4980b5807435c770439c6a2de94c95bf42f3b87bfb9566f0c76f7f69d8487f695", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048772, "uuid": "a1478599-b156-428e-907e-dd20769d8704", "value": "T1E5F33B47B7208FB1C368967109B3CB67A6E6269216E19985E66DCD107E3035C6C3FFA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048772, "uuid": "ad159116-7750-4e31-8d34-c6905a1c8b76", "value": "3072:93VJgTdgahP/2o/ZrTheIsnjCWRXFm4UpM1wLxpPNNOziHTfam:9FJMgWPZr8IaCWReS1WpPeU7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048772, "uuid": "a6d525ae-d1a3-48f3-891e-b9c24b7d038d", "value": 166976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048772, "uuid": "395ca7d7-7f84-427c-b1ff-d3974bde70a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048772, "uuid": "4668561f-8132-4c1b-ab4a-8daa97446616", "value": "xnxnxnxnxnxnxnxnmipsxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5820bb74-09b9-11f1-a129-42010a9c0007", "comment": "Malware payload (SystemBC)", "timestamp": 1771082707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771082707, "uuid": "ef16f81d-94bd-47f0-8bfb-b7d58184c92e", "comment": "Malware payload (SystemBC)", "value": "8eae0ea8ab6eb67caa03da3a4521796a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#A89B59", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771082707, "uuid": "20cee186-28e2-4b77-9f4f-1b92cc4df6f1", "comment": "Malware payload (SystemBC)", "value": "2086ece64145022a260c7676e660e93d2a1be44a767a8233daa4f14d0125e0bd", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#A89B59", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771082707, "uuid": "b36181ca-8fe8-4b9d-9a41-281426e002cc", "comment": "Malware payload (SystemBC)", "value": "7fd7ce04bcdef45b63993bebddec804b705246dc", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#A89B59", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771082707, "uuid": "4dc71aef-0ce7-4218-ace8-fecb048ec749", "comment": "Malware payload (SystemBC)", "value": "96d5481143e5ffe163199cc79610d682df122119f048eba0840ecbaab2e2836177f6bfa8a588bb8aad2e7bc8adee736f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#A89B59", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771082707, "uuid": "cdea2122-0c3f-42c5-9c5c-72b186ea18b6", "value": "T15A7533AB98799270F42123767AF7E7DD86888D0ADC69F91121363D3ED841E543C72CAC", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771082707, "uuid": "82fb54d9-08cb-4f3b-95a0-77c60e4a6ed7", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771082707, "uuid": "cc8685b4-8da5-4eb1-b5d8-8f39da7fd55a", "value": "24576:fDt7KQ00yjDJgSa3Pc9qy2wKYY7X6NBGotUyuSCbw+t8Q5emJSTq:fh4Ra3ESwJBUwUx4S5N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771082707, "uuid": "12815563-9e76-4488-a520-917748220ca1", "value": 1689600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771082707, "uuid": "5b87f39b-af4c-455d-8ba5-4617ef5e2037", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771082707, "uuid": "03b309b8-8fff-4776-a952-a46ede4de584", "value": "JoykGgp.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d4a1613f-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037389, "uuid": "48861a43-341e-486f-8430-5fa47ae9373f", "comment": "Malware payload (Mirai)", "value": "4d6fff68fcef274dc3b496f823deea8c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037389, "uuid": "375eeff2-fd28-4d6e-8781-c88f16c5bce2", "comment": "Malware payload (Mirai)", "value": "24306ceff0cbe3b2946d11aad22a3d355214c2d6a33bf992386620dea259d45b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037389, "uuid": "5470da5a-0fa2-4bae-b784-081cb058d092", "comment": "Malware payload (Mirai)", "value": "eb177014a0ade7b23303546125157d16aa18f698", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037389, "uuid": "992182e4-7dd8-4fcc-9b65-4491b0c22c21", "comment": "Malware payload (Mirai)", "value": "5c3d8e2620111097e1e1f6d887a974e213b8d6e2caa5d37ba277bf1c34748deead5bad3fe78263f8699bd0f3fa4b1f97", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037389, "uuid": "0b23d57e-9103-4ca4-9aec-0cd74028b2f7", "value": "T15D736BC2AB47D4F4EC2605712077EB728773E13E1029EE83C769AC36ED52941962A3DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037389, "uuid": "ad32db6d-90af-4c47-8911-ed7ede25e249", "value": "1536:IUQvN+2Lhc3KmFNmdA3rkiQ8U75Be/8+0:8lVKKmFcdA3wi70v9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037389, "uuid": "03780a43-5ea7-4d13-923e-e68cadbfc314", "value": 79504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037389, "uuid": "a6780c74-c37f-4204-a518-5ed623eef033", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037389, "uuid": "57ffa6b0-128c-425f-9c38-60c841c4d513", "value": "nwfaiehg4ewijfgriehgirehaughrarg.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1a4d578-09ca-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771090239, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771090239, "uuid": "338728f6-d3f2-4902-9f3f-cf11c7b90c28", "comment": "Malware payload", "value": "20d5c18970a8f16235aeaa81ea182e5b", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771090239, "uuid": "88556f93-0160-45e8-8cce-f4e979965c7b", "comment": "Malware payload", "value": "248d4a0174012228e5954b3a40bb3d902e5eb30b549720747ddeac0d7880fd54", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771090239, "uuid": "1d280057-069e-4090-8348-2e3035a2751b", "comment": "Malware payload", "value": "0239f48e872c23a90fefe730920bc6f32ef9f8c5", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771090239, "uuid": "e8fd362a-5dfb-41cd-af8c-572e6e93e1a8", "comment": "Malware payload", "value": "931c9bf044db715d02454930c4e09ac88af6a964e94584709e43362e7f17d58c7397554ba9e1e168ae8474c6a5fab555", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771090239, "uuid": "7b473c04-2a67-41df-bb7f-75136ec7f183", "value": "T14103F65BB390D332D44203714A6FC7E59F74AC949F621116326AF34C6E72ED422E79E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771090239, "uuid": "0d78f59c-8a91-488c-be7d-f1215d99076b", "value": "384:ozY+DalIyDenei7edaUen5YPeToW3T1XFFM69q5ICUV1XFFM6ztcq5ICVbi:Is+yDcei7dUcKP6hRjqmCUz56qmC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771090239, "uuid": "8eb9f71d-ac9d-4ba8-b39f-6429a2906393", "value": 40960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771090239, "uuid": "4f952406-95eb-4d77-8e9e-61040d68c9b9", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771090239, "uuid": "ad821f5f-7aa8-4cd6-a46f-4fea5372f8f1", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c36d530-09f6-11f1-a129-42010a9c0007", "comment": "Malware payload (njrat)", "timestamp": 1771108913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771108913, "uuid": "82287a0e-d28e-46e1-a834-ff00b97cc69f", "comment": "Malware payload (njrat)", "value": "15b0aee052abb740592de1672ed7cff8", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771108913, "uuid": "e17ce632-e569-47be-b970-c20bd5f33021", "comment": "Malware payload (njrat)", "value": "25411e3f056d4be6cee0033da6208f661c9566c50022d5be81dbcab13fe5c240", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771108913, "uuid": "c0d2b964-7bec-4333-b22d-db9b5ba6db88", "comment": "Malware payload (njrat)", "value": "1ad5a2baf2e0cb70d58451441511d6c0f860cc47", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771108913, "uuid": "4806cb85-43d4-4e17-8d28-c91a01c2b5e0", "comment": "Malware payload (njrat)", "value": "dbadd47524f4f1dc2fb31312e789f4c55bf3b8f4c7b6806ae6a9f162e4a45b885bd9f3798827ae67496feb29b54f28ee", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771108913, "uuid": "07af7163-4246-41b5-a616-906e428aec7e", "value": "T1D71495E5B740C864C85B5ABAC437D6A7A433A25E9C799A1E38D5FF0B7C323464017C8B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771108913, "uuid": "dfd0f380-c7c8-4b38-b54f-7d65a89eae44", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771108913, "uuid": "e5903692-6efd-48c3-a27a-1d2231333ca1", "value": "3072:2iMxOUTwDt4UxbHoCM+lmsolAIrRuw+mqv9j1MWLQy:IOdDOUxba+lDAA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771108913, "uuid": "dfbb9b09-661f-4c42-8bd2-aee46efc847d", "value": 206336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771108913, "uuid": "692bf153-0f1a-4dfd-9871-6c0feae2854d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771108913, "uuid": "2897dfab-12d2-4e54-945b-be150f8b6577", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbdc241e-0941-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771031362, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031362, "uuid": "90df54be-19eb-4dfe-9ab3-9f06b45176e3", "comment": "Malware payload (Mirai)", "value": "98b1382d9bf877b5b4e1fa4395a79d3b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031362, "uuid": "f412c658-afb2-4e77-b6d0-3af14263916b", "comment": "Malware payload (Mirai)", "value": "25acee413f2e1fa697b8cc10b4e8061554cc2d7916aaaaca36ec186ec6b2f31a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031362, "uuid": "b46971fc-2e5c-4fc3-8859-90500011eb26", "comment": "Malware payload (Mirai)", "value": "009daa7a96ab844ec9ca89b8699a0ae2cc8f2b56", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031362, "uuid": "d523a876-1f90-4a8b-bac5-694745388da9", "comment": "Malware payload (Mirai)", "value": "632bfaf000998eaf97e1ff3ed1a13a2fa2a11ec93e11066d2ce31f791d5e1f241b2313665a1d9ef7ac5c87bd9569bc6f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771031362, "uuid": "4d10c877-dfba-4736-8964-88de42261f8f", "value": "T161333A02326C0F17C0A35A74252F1BE587FFFAD122E4F645251F8B668A78E371489E9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771031362, "uuid": "083a43c2-5a9c-4804-b18c-b41e7ea10419", "value": "768:pAS8OMctQRq6FRW9fRCQObTXn8SQ5ajyhGfTMvDJins9694legIniWwE:azfwNRCQCD8joWhGfoV9oHgIiPE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771031362, "uuid": "6313de3a-0a94-42ce-8761-dfd6f4b0325f", "value": 54364, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771031362, "uuid": "a242d705-be68-4f17-9d46-d6f31b31b114", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771031362, "uuid": "77005e6f-26bb-4409-a669-f33a3a1588db", "value": "boatnet.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95fc216b-0997-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771068208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068208, "uuid": "93206c1c-de47-4672-bdce-a8dec4af98c3", "comment": "Malware payload (Mirai)", "value": "991c092a636801994f3b88aec45fe115", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068208, "uuid": "928aefd4-9893-4023-a2b4-cc23169f824f", "comment": "Malware payload (Mirai)", "value": "260d639a1615daf0eb6130bb399b08b7b0c4dbf4817d9474ff95c0e73ffe81c5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068208, "uuid": "a229c231-64ab-4348-b39a-3d70563b3e24", "comment": "Malware payload (Mirai)", "value": "49bbbe618540a6d9043c280ca4c7717f1eb73e50", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068208, "uuid": "bf835dc2-b48b-4780-b3c6-e9f858b90959", "comment": "Malware payload (Mirai)", "value": "5b20e2967aedf6a24ae3ed953237d93fe0d2c731284aeef593d38abc19ecbadaa4b40fe6f6da04390f9dc42b7c8e52cf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068208, "uuid": "2aac1ce4-ea05-4960-b5b9-0c157332269d", "value": "T1C6D35C0A78D270FCC687D170926E9F61EA3A745C02183DBBA3C2AE711937DE05E15F62", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068208, "uuid": "3a7015ee-26aa-446d-b6f2-915848af1746", "value": "3072:lAF2acRfkY6z3xv+ErH4vk9954rlvLFZW8YYQm:yIRfe3xvvSrlvZZ7Um", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771068208, "uuid": "0c07de99-c186-459d-bacb-48544de3b0eb", "value": 136064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771068208, "uuid": "40bd067f-91eb-4583-b40b-a33873ebdcc5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068208, "uuid": "02490e97-c739-4449-a410-4994272990ff", "value": "SecuriteInfo.com.Linux.Packed.2042.21379.24536", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19718c49-09f4-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771107942, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771107942, "uuid": "b4e799a5-0b76-43d2-91be-d86e40cee8b4", "comment": "Malware payload", "value": "c49d8562472dd5d01f55a77d0c573dbb", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771107942, "uuid": "189d357d-3a9a-4abd-b8e2-ef60c6450c1b", "comment": "Malware payload", "value": "2ab67a7cffe4d2be4c6c7d83bdd455c46274667d6c9215b803aea598fb1c9481", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771107942, "uuid": "71016343-b4f4-4b94-b098-0ae20015788e", "comment": "Malware payload", "value": "27f5111fdfb570f9eac6d72d1c06bea3379170ca", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771107942, "uuid": "58722532-a317-4dbb-ad4b-b2f224ed7a88", "comment": "Malware payload", "value": "c604dcb5c9d0daa5f52b60ac2ab9bc323857a41e22e7347bf200eaa7116b2f6dfc8499a881bacc4ae9736bedc6fc8d8b", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771107942, "uuid": "3053f85a-35e7-4d78-ae0e-bb4cef3a1f74", "value": "T1BF725B3EC9B8A894D39F3080D9EFCD9310949B036FB08674D8490EA65F282EDDF1A51C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771107942, "uuid": "d3d151c3-ad1b-4ea4-8260-4107c8babe9d", "value": "384:NmIjX9hPQh2H3jp1FHMFyLYRFnSpeY4WFo9jCtP1jGewTps71fEKS/6fCo:NmIDnG2XN/HQTFIXtdjGp1QmpRo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771107942, "uuid": "4bfeddfe-513c-49ea-be51-9e7a01091199", "value": 17483, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771107942, "uuid": "fdf0d6da-3825-46da-b11e-19cd9d4b6a96", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771107942, "uuid": "0e5264d7-a5ab-4f77-ae35-ed6ffd1f9897", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8760db24-0947-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771033824, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771033824, "uuid": "c8a7342f-88ab-4354-bc2c-90ece2431387", "comment": "Malware payload (Mirai)", "value": "d90ef29cb437720765778037710aa915", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771033824, "uuid": "7ce5b9d9-a84b-429c-a0ca-482c269efa2a", "comment": "Malware payload (Mirai)", "value": "2ac1b75c67c48fb4aad681e9dff196c39f371468042d8980e5a8de533531afe3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771033824, "uuid": "289a76e6-44d4-44a5-ab9b-5701a001b963", "comment": "Malware payload (Mirai)", "value": "8ed465cbc5c9dc54ed2c45a73ffb845a479ab619", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771033824, "uuid": "ec73bf9d-e14a-4216-a82f-3186635823d8", "comment": "Malware payload (Mirai)", "value": "cbd99d610fa27ba2a29114918fe1fc824af56a62192b8ae7d1348798cba14c3a64652df7024aac3fbe324122224d7f83", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771033824, "uuid": "68fa7dcc-c6a4-4022-8c63-280f5b8ccd75", "value": "T13D230891BC819A2BC2D41379F5AF598E3360B3E8D2CB7227CD614B107AC551F1C6AFA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771033824, "uuid": "afe22de6-fcde-4cf1-ac20-98c8392f90f5", "value": "768:B/uWSm3TVMtMXjPnwiCtdNOlZQ081Eblbc/CcwZrMH3ZZ7kmG2DCYWoCqz+L5xd0:BKm3ZnwldNOT2EblbTgZfzs8EWVp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771033824, "uuid": "22fe7cee-f037-437a-86a0-3e95f4f85b9b", "value": 47116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771033824, "uuid": "58fe958d-0e2a-4d2b-b850-b485a24d9662", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771033824, "uuid": "9bf630cf-7282-4a77-b674-87eb045fd304", "value": "boatnet.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3727cc15-0942-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771031542, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031542, "uuid": "43842214-75b3-4d24-9973-08c05f3dd85f", "comment": "Malware payload (Mirai)", "value": "bc3508e5e063bca49da05b443e4db0f9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031542, "uuid": "82aedf94-78e4-42d7-a292-f46f826e70d9", "comment": "Malware payload (Mirai)", "value": "2e04c4b7eb089a815671d83be447ef3661e5ddbef58a81a89405ac842309759c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031542, "uuid": "f280a157-e107-4103-b65a-3a27de1a4952", "comment": "Malware payload (Mirai)", "value": "d4212c94fd628aa02e71f3f49f4b01cde5cfdd26", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031542, "uuid": "dd60626e-0e98-4778-a050-4b6500f66874", "comment": "Malware payload (Mirai)", "value": "b9ec5c843187bbf0f607cc269c2e8220a5dc4047fc299cb62e96ef4c84fae08e8be1128d50887944a037168058f0d8bd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771031542, "uuid": "eb3ff31b-ec19-45f3-9047-b31536044f38", "value": "T1EDA2E15491C2459FCA2E9C7AC16E8CF25054E9D1837D73452FF78210BB879B6D43BC15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771031542, "uuid": "cbe21a3e-6613-47ad-8da2-ff18258ba68d", "value": "384:M3P5Bf6jfUhVosq0Odg1hRH89eItsIFlCgMnuAeRzyB4rXLf6DhZTaD2+v1RYm:U5BgfXi3cwItdFZMnu4arXLiDhZTaFYm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771031542, "uuid": "fddec1c5-357e-4c58-9c6f-49ba042c7944", "value": 22456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771031542, "uuid": "637d7dec-1233-400d-83d6-330d250d410c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771031542, "uuid": "84159f02-7a09-4c33-8fa9-fd3e16082eac", "value": "boatnet.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ce77dd2-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048731, "uuid": "bbdb1e1f-9065-4367-b52e-831a45ec92c7", "comment": "Malware payload (Mirai)", "value": "a92eaff2ab391ec0e06648afabd91730", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048731, "uuid": "68ac84c4-ba8f-4391-9015-9ee7e9a5fe48", "comment": "Malware payload (Mirai)", "value": "2f558e7c9d2bf4f5c92ce06466b11ce8a2a6732a07929b1dc4b5b987faa35599", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048731, "uuid": "4e0a6a37-2e72-4d64-918e-6b3e8f546fc4", "comment": "Malware payload (Mirai)", "value": "663c46b9c54a35365c95a9f957c469b06ef3e2b6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048731, "uuid": "538c0e56-297b-48eb-8027-9137e222ebd6", "comment": "Malware payload (Mirai)", "value": "c3552f3053ae490bc0cb61b7bbbc2507acde7d369e86922006382ccac8d13841588e0cb6e6ca090eb865820d38dd488a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048731, "uuid": "fb3dc3c2-f0f4-45c8-aa07-d3a1285603dc", "value": "T119D3CF32E0086DA0DD2117B434B6597C0340DEB40AD59243EFBEE5AE28B7DA57DEDB60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048731, "uuid": "643bdc42-8ea6-4c6e-a257-ed258cb10ead", "value": "3072:jNOFV2mOAc6NBmjOd1CVOHVv3WDxGGRhaUNhkv0Zg6:xOFgpOEoVv3MXL5NhGOg6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048731, "uuid": "240232a4-c58a-4def-bb2c-d8ebaebaaa07", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048731, "uuid": "e386d5b1-a623-4a18-84ba-1626f041a325", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048731, "uuid": "5a48d10a-a111-462e-a212-756740c9d4e2", "value": "xnxnxnxnxnxnxnxnsh4xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a424deb-099f-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771071571, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771071571, "uuid": "45799e74-e6b6-4a37-94ea-51464b472785", "comment": "Malware payload", "value": "748e8cc3f8bdf9e6faf936d19c8eea8b", "object_relation": "md5", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771071571, "uuid": "897b2f91-f341-468b-8d55-1b097fa27dd1", "comment": "Malware payload", "value": "2fc5b6e2add608ad85dc0a15c51d052fa78da9a71a4499d030561b8ff3a1de83", "object_relation": "sha256", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771071571, "uuid": "1f6fb43b-57a2-407f-b0e4-bc2452712fc3", "comment": "Malware payload", "value": "fe1f78a5fb6d81e3bd68ecf0413761554a37182f", "object_relation": "sha1", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771071571, "uuid": "67c6c6ec-1244-4ae9-96d0-a0f550a07ef5", "comment": "Malware payload", "value": "de0dfc977b4ee6fc8499098b74397277eb0f33850499325cee9c741aceb2663e3fa87d477a0211ca4ae47d5481c00627", "object_relation": "sha3-384", "Tag": [ { "name": "vbs", "colour": "#05BD76", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771071571, "uuid": "270ccff1-17a2-44c4-9e20-bf2f00aeaed9", "value": "T1C041544AFC0BE529C5B2C692F92A3F0FEB90042751206068F95CC986DB249BDDB1D1CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771071571, "uuid": "394fa693-0eee-421c-b9d4-6d1bf49d0774", "value": "24:PXFqMmu5FdZhs3TcN4N2zSG99cdW4apMYkb9/ROMx1AWqSMqgX6pMxZcrkdATjuE:PIzjcqwzprcdWzK71AWdMmQ4tu4L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771071571, "uuid": "65b05810-f680-407b-9651-344eb9a7a2fe", "value": 2390, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771071571, "uuid": "06fd85ec-2551-4c22-a771-1bfcb78c1c65", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771071571, "uuid": "4ba093a3-a2a5-4667-b898-123db5b39317", "value": "Docx_xlx_01.vbs", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52be6263-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048768, "uuid": "1c5f8972-3539-4f12-a898-bfddecb43764", "comment": "Malware payload (Mirai)", "value": "93b1f85ae7c8bd10018e494275cad7c9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048768, "uuid": "20c66fe2-a297-4ecc-8054-2efd219ff72c", "comment": "Malware payload (Mirai)", "value": "321994484cefc6a6001906f2e060696ca95a0cf97190491dcf93e75aa00f7de1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048768, "uuid": "ed6ee33f-0a3b-4340-a000-4e7f8fb4e260", "comment": "Malware payload (Mirai)", "value": "939edfc1c23408e9c5f7041a7d34d2ae1fe9dcd5", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048768, "uuid": "8970d6bd-3c3c-456d-b3c9-598d8d9afbdf", "comment": "Malware payload (Mirai)", "value": "84e1265841b53a87d97844a6dd8b11558b7f1a9e06075c12de7399fbdd4f56d153bbcbb7ab68ffa89dc13039d6d69b45", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048768, "uuid": "5c62bcba-8e4e-43ec-abad-512f6ad9029b", "value": "T1C6148D68FE4F68D2D2C7E37DAE4A0FA230277D749565C0B51A00A29FD5EAFD488D0613", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048768, "uuid": "bc013dc7-d582-403c-a8f5-9928f99c880f", "value": "3072:badBpAIWIfbEdOcdY3rZiigZ2eNRzPxB:bOVfbEdxm4iubP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048768, "uuid": "f5dbedba-87c6-4e00-ae98-7e3a5904a78a", "value": 197488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048768, "uuid": "c68a5807-e71d-499d-90b9-282ab782feae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048768, "uuid": "6cffb5ec-6e09-403a-b301-412c9a2ecb93", "value": "xnxnxnxnxnxnxnxnaarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3464645-09ee-11f1-a129-42010a9c0007", "comment": "Malware payload (SystemBC)", "timestamp": 1771105597, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105597, "uuid": "14a2b98f-885d-482c-9da3-3c9a5d123d1d", "comment": "Malware payload (SystemBC)", "value": "9515e6dc7ee0e4bd461dd3afc22d3705", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#A89B59", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105597, "uuid": "ec38bc77-e14e-4af0-b39d-1ee708c00759", "comment": "Malware payload (SystemBC)", "value": "3468d4fecf3ad380d5ab579fcc149680999c431eb07617707a639763906c2be2", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#A89B59", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105597, "uuid": "85fa5a32-69b1-499e-aebf-bc16a8e5d4c3", "comment": "Malware payload (SystemBC)", "value": "4ba0de194b8a5c17182458ad3f70f34ed030983b", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#A89B59", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105597, "uuid": "d53166d5-21cc-4acb-9d2c-d5ca3a948bf7", "comment": "Malware payload (SystemBC)", "value": "4d2c26a77e53c09947105fae0e0326cc2d2625d34049d2e410fc50bfe584821740ac59bd35bc75cf91797683f1ab57fb", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "SystemBC", "colour": "#A89B59", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105597, "uuid": "7eef45ad-2e50-4087-ba5f-d20d9d563568", "value": "T1C775338152382E11C4D087B7C7F5E0686E9879CABA7CC570235F92F1EDAAA17F4508DA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105597, "uuid": "cfeb98fa-155f-4555-9ab6-e4762d5d3694", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105597, "uuid": "306dd97f-39d7-4800-b751-c54f69361c9b", "value": "49152:NEcvDSWFaTHGNHjmjeVhMK3lN9CZgTUOD:NEcrvaTHS6K1rf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771105597, "uuid": "83f4db8b-1e95-4318-be11-d7447533f61f", "value": 1691136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771105597, "uuid": "671ce0d6-75b0-4e41-87bc-4ecbd3d950e1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105597, "uuid": "b991f439-18f3-409e-bf97-3f266c1e65d5", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c92edce-09bf-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771085184, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771085184, "uuid": "36fc7587-d66b-4239-a0e5-040e6debc646", "comment": "Malware payload (Mirai)", "value": "288781435197fbf4a064c87e63e6947d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771085184, "uuid": "9b823fce-e13f-46c0-bbb9-4a1d29e80f98", "comment": "Malware payload (Mirai)", "value": "347aa9900fcbaecc0f1f8b90a47d88959ae0e1ca8aab1f968e0f5bf09438b3cf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771085184, "uuid": "8630f31d-79f8-4fd4-b508-3d54d800dc09", "comment": "Malware payload (Mirai)", "value": "fa01f3445ea4e41dbe6087f0b7f01cb7f9cd0ed3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771085184, "uuid": "6cdf8a6f-d0b6-4a7b-8f55-42a63a659cb6", "comment": "Malware payload (Mirai)", "value": "c918b2cc8822a074ec28e456aab09cd6506d8a14658d834c9d4b076b9ccd88857f1fc614029ea05f7cfff815e8c2c899", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771085184, "uuid": "f3bb414b-71da-48df-bbcf-bf6e0020087a", "value": "T14CD30802770E4E43D1233DF0277B2BE0879FFD9228A5A580752EBEC952719F26445EE9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771085184, "uuid": "5648c79e-4cd1-4dd3-b584-1402cd85d68b", "value": "1536:HyC83HbYXipxvBkcIBl+Q0vr9ehd+A30g72H/+qhvAPRDyK3x++MLXsWhG1qO:HlM7eipxvqca+XYhT0BSPhehG1qO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771085184, "uuid": "e9512d12-f2ac-4273-b7b5-b188ddd19f6d", "value": 136652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771085184, "uuid": "6441ce5c-abd8-4f45-9910-ebc3c501e578", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771085184, "uuid": "ae7929be-d5a3-42c2-aa7a-5bc517d68329", "value": "israel.powerpc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd7a5cd6-09ab-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771076891, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076891, "uuid": "bd204373-8c09-4c56-bb64-0517f08cc1fd", "comment": "Malware payload (Mirai)", "value": "1e3f665d57c6a527c5ceb45b8c701bb1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076891, "uuid": "89a02a4d-1a01-409f-b4c4-199abe831e31", "comment": "Malware payload (Mirai)", "value": "37370273ab5fec76fdefb0830ba0301f9c9ddfa9cf58913d39fe665295d5f53c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076891, "uuid": "b7973e30-7121-48d5-aeec-4caa716d3a35", "comment": "Malware payload (Mirai)", "value": "0f7634953a95c45a4415acd40ad8487f421e5deb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076891, "uuid": "da2f501b-f3b9-4b0a-ba09-8f5f4904db60", "comment": "Malware payload (Mirai)", "value": "640a4cac9df22e70c76ae18bee01c9bca6fb9a1ab66e8c95c52d6cecc618efa7b0410f3a5b277344c2232c15997a11d3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771076891, "uuid": "05060b32-40fd-4c27-bcb1-cea8c1afc3f0", "value": "T1A4147120FA0663B1CC731A34A79A2E5A6E7704559FEB26312D1F533CDE628509B31F8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771076891, "uuid": "7b9c9740-d294-4764-8cfe-29ad620ad558", "value": "3072:IcHZcggt1NJmeDQBwnKUDMaVsb3pjr1lCRgUKG:IcY5JpMByVs9jSvf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771076891, "uuid": "a409da56-0f7d-486e-9ce6-e4163203eed6", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771076891, "uuid": "77171f71-9106-4a1a-94be-d8074ab01a0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771076891, "uuid": "c9bb68ee-dd05-447c-ac02-da787742756c", "value": "xnxnxnxnxnxnxnxnmicroblazexnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f12a089-09da-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771096812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096812, "uuid": "22e70ab9-f610-4e74-9a63-ff9c97e6d634", "comment": "Malware payload", "value": "549b9c352976896bee533ceea5f27395", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096812, "uuid": "5086b6f7-c4b8-4e15-bd03-74260143871b", "comment": "Malware payload", "value": "3879e4ecf84ca8e3cb38c0e3d800f2c937d89fdbabf9133f35be75357151e14c", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096812, "uuid": "3d497306-47ee-4206-ad2b-77792594e4a9", "comment": "Malware payload", "value": "d00bd63040786db48525285421f97ba768225537", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096812, "uuid": "9116fa79-6a8a-4e3c-8525-263b93b8dc78", "comment": "Malware payload", "value": "5776e2bd07fbbf5a766bb13936444253b2e52cf2e3542ed6b3bdddb9f77d6a434198afce26e2d360d1ad7f436208efa4", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096812, "uuid": "cf5e92ee-9cf4-4d04-8dfc-f1b86f9cc3fc", "value": "T1C403E65BB3509331E44103314A6FC7E56F74AC849FA25616327AF34C6E31AD066E7EE2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096812, "uuid": "3d96a041-584b-45fb-af97-22d280d5da5b", "value": "384:CzY+DulnUHA7ticeToW3T1XFFM69q5ICpV1XFFM6ztcq5ICVbi:+IhQstic6hRjqmCpz56qmC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771096812, "uuid": "8ce89f57-922a-45bd-aa58-431e784efb1c", "value": 40960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771096812, "uuid": "eb673c2b-943e-468e-b886-3838bcce9a67", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096812, "uuid": "8366cd59-281e-41b1-9c58-00d0c3c8423a", "value": "SecuriteInfo.com.Heur.BZC.PZQ.Boxter.1023.E7A74D4F.10956.1904", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3aa8a640-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048728, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048728, "uuid": "552a5b98-f8d3-4c94-b56f-62dba2a61766", "comment": "Malware payload (Mirai)", "value": "098a6650349799b91ff16b931ab8061a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048728, "uuid": "6189bb3d-6f8e-4750-bedc-ad722b9d2766", "comment": "Malware payload (Mirai)", "value": "3d7d8d92fdbb92ea15e19dd4b02628c6ec607a222fa6e368e5ddfded06616eef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048728, "uuid": "b848fa68-3df2-400f-b47e-100a35a677f4", "comment": "Malware payload (Mirai)", "value": "ef0961b8544aa9427f5c60f7ef767be5ad050acf", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048728, "uuid": "e0c1cbac-46dc-46f2-8726-99e89d46e38b", "comment": "Malware payload (Mirai)", "value": "c78dd3d719ccdcc598ccc5c2b46067b8349c4e22800c65bf068f71feb0d31030defaee274eebdfba487db4fe0b171688", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048728, "uuid": "8b1cf83c-2e2a-475e-8d02-c5c78ae014d3", "value": "T1A7146C2BB3C39CE6C51063308C316362776FD7081958EAFFDA1B3794A9977225A246C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048728, "uuid": "8d80a9a5-9774-4fd8-9329-b4205c0a8977", "value": "6144:1R9Om5159ZA0mzoWcz4Mm4ztkES7IKTtJ:BZAyFzQSdS7Ik", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048728, "uuid": "b2e60439-c0bb-48a4-a77f-56219bf2de92", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048728, "uuid": "5f93ebd2-a21e-42bc-83d5-13c08ab2f819", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048728, "uuid": "78fa68e7-f017-42f0-a831-10936ce41147", "value": "xnxnxnxnxnxnxnxnloongarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "034772ce-09e6-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771101892, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101892, "uuid": "2d2f54ae-0c7f-4ce8-a22e-a55d402f73cc", "comment": "Malware payload (Mirai)", "value": "948a8f211029533774752259c5fa39ea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101892, "uuid": "cce88736-18eb-439e-98de-f0b880abd420", "comment": "Malware payload (Mirai)", "value": "3e20ba167f75107d2f6d623cb63b184edfc93cb5e010ed6a7f41f612c94f50c5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101892, "uuid": "3a5901bb-9f93-4e63-b508-d3ec50046fe4", "comment": "Malware payload (Mirai)", "value": "108fd0535ef17e3ecccf177a5a97e78fe7881e6e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101892, "uuid": "31c20132-d5be-4182-ab38-6b33c7de54f4", "comment": "Malware payload (Mirai)", "value": "6635ea7eaa87670008f88d3543f4d094dd075768a4b2779c53f2bc9e8dd3297674e68789880c3f94eadcc1573d1d617c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101892, "uuid": "8d351ea5-cc81-45d9-a48d-fc002d084a29", "value": "T1D2433CD5F801AD3DF957EAFE44624A0DBA21721150A30B2BA36BFDC37C332A44E16D91", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101892, "uuid": "e780da8f-06a9-4fd6-b088-67d9ade50bd0", "value": "1536:bFyTOn7IOlZFK2x+qEbYbKup7X6Y3fG8ce:bFwh2xJEM/gYPt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771101892, "uuid": "3bdc414d-1eb5-442f-bcda-55d60badf96a", "value": 57244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771101892, "uuid": "1891d6c4-3f99-4604-9c97-5d42c2e929b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101892, "uuid": "73ce94ce-bb41-4a52-8ebf-c922e608f85b", "value": "kwari.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c84435f8-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037369, "uuid": "7f3a16d1-96df-4b42-ae3d-167b1aec6f68", "comment": "Malware payload (Mirai)", "value": "f318a7eb03cc3ef2804123a27a83bc8f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037369, "uuid": "94af2659-821c-4c1a-806e-6a1b364c3659", "comment": "Malware payload (Mirai)", "value": "3ed5a8511e482e62bc455a2b4a408f65158861ef2d844d31699e8e0aedd02893", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037369, "uuid": "24d9dcf9-5dd7-4b22-a706-b1c93d1b8892", "comment": "Malware payload (Mirai)", "value": "69d2e923ab82bb235c711bd389acb3d8318b1496", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037369, "uuid": "cd287c9f-d0fd-4639-abca-d977d5c76daf", "comment": "Malware payload (Mirai)", "value": "d92668b1e1e9d372066f6c62daebc526ca8949c45e4b2d0bf871fc50a856d603f9834ce379c1fea31c6c9efada35d240", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037369, "uuid": "1bbf425f-a433-4b76-90b1-a3a89776fed2", "value": "T134B3C95E7E218FBDF768863047B34B21A35933D627E1D685E26CD9041F6034E285FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037369, "uuid": "9cbac112-de26-44d1-901e-e3ba73bcf286", "value": "1536:pTkwJlCS4RqbYLajrSdBiy41K2hXRCNWVMuAiTageQrdHD4HbABgz:pJ8ebpj/1K2hXRCGMuTXmbVz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037369, "uuid": "04b213ff-065a-40aa-9e63-44514356f961", "value": 114280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037369, "uuid": "2007bf27-e5f3-4ebc-b203-236c43459f89", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037369, "uuid": "e2cfcc85-ae08-455f-ad62-6cdfb11902ac", "value": "nwfaiehg4ewijfgriehgirehaughrarg.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df3684cd-0985-11f1-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1771060600, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060600, "uuid": "9534255c-59a1-40cc-bc9e-f09debc9f9f6", "comment": "Malware payload (AsyncRAT)", "value": "556485146ae1e2fa3eebb3cc2c5e5d86", "object_relation": "md5", "Tag": [ { "name": "anarchyrat", "colour": "#992565", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060600, "uuid": "6c269219-20a1-4d9d-84bf-49d6fbf7588b", "comment": "Malware payload (AsyncRAT)", "value": "3fa82d62627cf04ad9a08e3260756f1ccf7ff28adda8d48d02f3c75e5de5211d", "object_relation": "sha256", "Tag": [ { "name": "anarchyrat", "colour": "#992565", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060600, "uuid": "53d9d010-7b42-4e25-b9c8-82400ce9da9c", "comment": "Malware payload (AsyncRAT)", "value": "333c7169db40f5095a0920ae649e44aafaa35ae6", "object_relation": "sha1", "Tag": [ { "name": "anarchyrat", "colour": "#992565", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060600, "uuid": "712974be-ebe9-414f-b1b7-ed7a459f7620", "comment": "Malware payload (AsyncRAT)", "value": "2288590e65287058cb2c9f1b68c77ed09e643722767b265073bbc5ac0e870d21e9ec88500ecf51fe7748606b06e60b54", "object_relation": "sha3-384", "Tag": [ { "name": "anarchyrat", "colour": "#992565", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060600, "uuid": "2bf2ddfe-feea-4c9b-9423-3ca6f25dcd16", "value": "T1B19329342F888527E1AD4EB4BCA3564FC6B58D333111DA5F6C8434D75ABEBC90D122EA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060600, "uuid": "8d43cb3b-2f3e-4fdc-8122-91b6266897f7", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060600, "uuid": "43757602-39d0-4759-9e6e-eb13bb533a4a", "value": "1536:cudpaSswAZ54506WGbbFwDGQofaGxVclN:huSswAZ5bGbbFPJbY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771060600, "uuid": "dd5bb8a7-ab6e-47a9-b74d-ebca2cafa9be", "value": 91136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771060600, "uuid": "8ed6124b-9688-4b30-8bd0-229a9d734316", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060600, "uuid": "b6b934ba-b764-4c53-8e8e-0d8953c7d052", "value": "3fa82d62627cf04ad9a08e3260756f1ccf7ff28adda8d48d02f3c75e5de5211d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c20b57d-09e0-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771099437, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771099437, "uuid": "8bf1b47d-449d-47c7-b13d-29ff5458a679", "comment": "Malware payload", "value": "dee2f9b6adc6ed5585c761e601515102", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771099437, "uuid": "9255292f-61b0-4eaa-9f4b-880fe9152a67", "comment": "Malware payload", "value": "416a3fe028bb705a5f27abc78465f0f3e40598eaac2a1cd1fc007bbd2963ea32", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771099437, "uuid": "bad535bd-bb89-4801-8e20-e0329f1cd5cc", "comment": "Malware payload", "value": "0527a5e73a734586dc3c06771ecd995895a1f6b8", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771099437, "uuid": "2ca7a1a3-5ca7-4645-9e0b-661e176131b5", "comment": "Malware payload", "value": "9567efeb5a71cfa223af3fc7f5ae9109493650a9fdede69e38486c5b131e659293f62b04b1737bdd883679e724a54a8e", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771099437, "uuid": "0a947060-4321-457d-a730-f89ec4a82b0e", "value": "T165455E23B6C67D3EE05B0A368A73E158D83F7361671A4C5687F0184CCF295A12E3EA57", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771099437, "uuid": "625321ca-2cc0-4f0c-bf56-991c44ba3d20", "value": "39c61d6731c29eaaec79b77e3082cafc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771099437, "uuid": "8a3eff51-8474-4fc5-ade2-ba6c3aafa64b", "value": "12288:cmE/bX6eP3jAe7IgNNHpGXUfBFmUTgW+adegB/kp2Nw4s01:cd/ueP3jAYn9GXUfB4mgRadePCw4/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771099437, "uuid": "e0b3af32-23e1-4f5a-b361-6195ec0cdcd8", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771099437, "uuid": "5376f0b9-0a98-4caf-9b2c-3d2dd7ddd6bf", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771099437, "uuid": "5933e6e8-1055-418d-ad0c-e929bc44f6fe", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03c98c8d-0960-11f1-a129-42010a9c0007", "comment": "Malware payload (njrat)", "timestamp": 1771044341, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771044341, "uuid": "9b596b24-3714-420d-a534-ea6f62512d2e", "comment": "Malware payload (njrat)", "value": "0cd3df20559504130571e116dda8cb18", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771044341, "uuid": "7b50db3b-e27d-48bf-8808-b0750581ce91", "comment": "Malware payload (njrat)", "value": "42a08d1063980328bf1a1c5652c21a79e8b06d6abcac1881a0e8afa391b86c81", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771044341, "uuid": "58ca7c4b-b0a2-4cfb-a507-a15c1024f92a", "comment": "Malware payload (njrat)", "value": "81f874e57dac9804e05834f47d5f1a5189f9c5e0", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771044341, "uuid": "7666eed6-d9e1-41be-a04a-1dee451f6bdc", "comment": "Malware payload (njrat)", "value": "c7eb82fec8d38ae1dab24e86f87c675597fe15e150b60aa0017d030c13d76ff7ba0f0426515558cc6e593d38f32ebaed", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771044341, "uuid": "b3932095-22b8-4f52-a39e-cfb55257f38c", "value": "T182B36C0EF7918E86C16C0E778DA3A44842F8C4AB7427F77F16DC1EE19E268CD894B954", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771044341, "uuid": "4048c913-c43d-43b2-9557-5a85dd2def33", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771044341, "uuid": "02eaab8a-8ef4-422d-a1a0-29f88d25c9ab", "value": "1536:U9AnA5izv9uLVr5GvDI+0O5YJq2WJrT93YmRflRkU+9WDXeScbuztFoN:U3A9CrIs+Hujiv7flRkU4WzeScbu8N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771044341, "uuid": "1f3fb454-62c4-4b88-b9ff-b178aacda576", "value": 107520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771044341, "uuid": "aa3e72e8-bb3a-4868-b341-d0c412b5787c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771044341, "uuid": "c35857f1-4982-424f-a81b-1ddf5d703335", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b66270c-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048729, "uuid": "d26aa18d-82c0-400c-b384-11761a20db1e", "comment": "Malware payload (Mirai)", "value": "39d9728f52d101fa30cdc5687f767ee5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048729, "uuid": "eaa189c6-e8aa-4214-abb0-131ae3ff483f", "comment": "Malware payload (Mirai)", "value": "44371fbb1814ab72d483592ee0c445afead996afc505d99dc8b15aa2973d7f77", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048729, "uuid": "8d6b4986-aeb3-471d-b71b-98899ae5b1a7", "comment": "Malware payload (Mirai)", "value": "9c017311b532a4da2eea5a4d931a80c2b98e5039", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048729, "uuid": "8bb8da96-e51a-4294-bd6c-79b1c2e2cfd8", "comment": "Malware payload (Mirai)", "value": "3b4f8ec86f8efa463dfdf8349afea5034a56638fcd6f1c17b25a9de19d23b8b529398b4d84f207c7c023c653b1bcc685", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048729, "uuid": "603069b5-3da5-438f-aafe-228b5d9b8dd7", "value": "T1FB6301CB6EB02F26D098A171703419CADC3AED8BE243869CD3E1A7A5073847650C8F1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048729, "uuid": "5610492e-7b1e-4727-9275-b66d53a7cead", "value": "1536:MaxZLmYKVDNSl2y08yumeJyGYVmIMG2TVrNh:MaxZLmYKX+t08jmeJhYTEJNh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048729, "uuid": "8e941e2b-1277-45a2-a950-fb504af36c73", "value": 70452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048729, "uuid": "7502c7e3-dc42-43dc-8904-c426f8ebad9a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048729, "uuid": "8d11e110-0f25-429b-87d1-940b1bb0a6a2", "value": "xnxnxnxnxnxnxnxnaarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58bfd09a-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048778, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048778, "uuid": "2406e4f6-511e-4399-9b1b-a440db616600", "comment": "Malware payload (Mirai)", "value": "ed2386d46eff4180e8c4342e8af939f3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048778, "uuid": "7d9e17bc-2d1c-49d1-9de8-bedd759ef3df", "comment": "Malware payload (Mirai)", "value": "44f36db456c67c9d6e66a4d0dd50d62b615b74a3dc589f9a7bfec097af989149", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048778, "uuid": "b0ab50d7-ed6b-4b96-b853-f052ea2f6507", "comment": "Malware payload (Mirai)", "value": "b818f819fb948a291ab72a4df0c17a05b6ce95e1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048778, "uuid": "ef200cfb-965d-485a-90e6-b02a00751adc", "comment": "Malware payload (Mirai)", "value": "327cd24ec2c8b2025150234326e0a2fd25bb2956707f465825b8630dd8f5dbf46ca348bac3a8e96858eed74b9916ae6d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048778, "uuid": "e2133b95-ca55-4981-bc21-c172e5eea60c", "value": "T16BD35C0A78D270FCC687D170926E9F61EA3A745C02183DBBA3C2AE711937ED05E15F62", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048778, "uuid": "fea68a7a-1418-46c3-839a-b2e70c975001", "value": "3072:lAF2acRfkY6z3xv+ErH4vk9954rlvLFZW8YYQl:yIRfe3xvvSrlvZZ7Ul", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048778, "uuid": "5ea3b913-30c7-45f1-a791-cdc41af9f5ec", "value": 136064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048778, "uuid": "5e5befc9-7950-417c-bc1c-f9a58c1e3b5c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048778, "uuid": "b2d7d63d-81c6-4481-b0cc-398da7513bef", "value": "xnxnxnxnxnxnxnxnx86_64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d56292c-09c1-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771086125, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771086125, "uuid": "19b6dc22-cdbc-48d5-b324-1d3119b12388", "comment": "Malware payload", "value": "8166ba7615104faa096ac54ca0d05402", "object_relation": "md5", "Tag": [ { "name": "iso", "colour": "#ED4E86", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771086125, "uuid": "beb79fae-e53b-4c96-8d17-459ce3afd178", "comment": "Malware payload", "value": "454274717eec75cab30b5e0098bd5fa2faf9679e8449f0e90c31726fd80b3892", "object_relation": "sha256", "Tag": [ { "name": "iso", "colour": "#ED4E86", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771086125, "uuid": "25725e6b-4c7c-4c3e-9810-736a2f61ec6c", "comment": "Malware payload", "value": "a39638d281e8f9c2c327c3823b6e05f5c0e1d024", "object_relation": "sha1", "Tag": [ { "name": "iso", "colour": "#ED4E86", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771086125, "uuid": "65b36cc0-c4de-4603-b3dc-0358e1fb2d37", "comment": "Malware payload", "value": "b12cae1978b0793411fb06c5d0d237544f85a628f81bec15e7215d4996e01a043a5f0e834186cd8fea93b739c3fa3154", "object_relation": "sha3-384", "Tag": [ { "name": "iso", "colour": "#ED4E86", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771086125, "uuid": "4ed687a0-7e5b-4fe4-bb32-b820ef0ac0b8", "value": "T17853A0082FC41259C679CA325CA9F7208763F442AAF58B2E31DD50980FD7511A932B7E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771086125, "uuid": "3818d733-0b32-43bd-a9f8-3e63fb0fc618", "value": "24:5b+SGtjA9c0dSFfaPiA8AbN54+/eW+/fPO+/4z4I0WueWk+m+:5bhCj8v0cPx55HOmkI8eit", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771086125, "uuid": "86a60639-887d-48d9-9afa-f31b5e7b5ea4", "value": 63488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771086125, "uuid": "afb5fbee-c376-491f-a9db-dc99e9a05081", "value": "application/x-iso9660-image", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771086125, "uuid": "a5590cdf-1f6e-47ff-bb12-c9461864f94e", "value": "8166ba7615104faa096ac54ca0d05402.iso", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e138ee8-09da-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771096783, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096783, "uuid": "56300836-bc50-48cb-9e76-9ed96175f39e", "comment": "Malware payload", "value": "8181a17fcb4ceb41acb28fcdc51872ec", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096783, "uuid": "1ed7f6ed-7578-4c59-8e2a-521670d5229a", "comment": "Malware payload", "value": "45e8d9a8bc7e3c884c40c8ad10ccc6ad59dabd1814b675c252aac49cc4c60401", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096783, "uuid": "8b273903-6c41-41cd-b48f-b9c8eb2e6713", "comment": "Malware payload", "value": "a49ad7c3cc240dc2efb0c80b8cd25f7c31954c6a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096783, "uuid": "e7f1224a-2018-411c-b18d-a1652bf08b75", "comment": "Malware payload", "value": "2060f0fb39925716d19d1190dca4e6b73e009e70f942007b3133cea047dd601270a3d974b2046f4425385da3e40c4a2e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096783, "uuid": "4eea97dc-c620-4b4b-81a1-c5e7921b6703", "value": "T1F9466B576F28D74FCA2962310CB2C698372A9C8901C6A417B755F30DB6B21EC5E9EDF0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096783, "uuid": "2d2b7536-fb7a-4ed6-8ded-de269be269d9", "value": "49152:u3xUtupANP+YuMnbn5MS6JirCF0MzDZ8mLIkY8jQw7Sj8J4mT5fbI:HtuK5QiOFhDGm0r8jDNjtfM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771096783, "uuid": "a99cfe6c-fc3a-4b12-ba54-71af773a33ae", "value": 5587929, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771096783, "uuid": "986c42c7-53fc-46d2-837a-8781a0ef8a80", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096783, "uuid": "24683e61-2195-427f-b463-3fc04f56d1c5", "value": "bot_linux_mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "933201f7-098b-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771063049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771063049, "uuid": "8863c1ba-d99f-4f4e-b48c-52583e4159d1", "comment": "Malware payload (Mirai)", "value": "9a97d0a85929f1767554642088e9eec4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771063049, "uuid": "6dfb9bb3-b567-4329-a123-8594daeac9ab", "comment": "Malware payload (Mirai)", "value": "45ffaaf041247cbfb34845c1ff69fd359618db32508c196f35ea5f874ebab32a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771063049, "uuid": "470f48db-49bd-4168-af87-c8baa1975dda", "comment": "Malware payload (Mirai)", "value": "dca2fe593ef8c717c4badcf590d71e0ce97e9102", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771063049, "uuid": "bdf5654f-a7d1-4f82-8c2e-1db2176c6896", "comment": "Malware payload (Mirai)", "value": "c0319a51fe0af56b3a57f19df006f7f19b3cca0d63c968571a3d8ecdd94f4d733226e76ecb19b52ee8c48ec3ac33e255", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771063049, "uuid": "605ca1c9-f7e5-4845-9762-7db7a7180913", "value": "T152C3E946BD418F13C5C321F7FBDE429C7A266B2DD6FA3202A925BFA137864D60D36211", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771063049, "uuid": "f14d877b-4ce7-44c2-8631-6a23fb9e9793", "value": "1536:6hlfXTMFzq/uaBnysyADbGTuecZ11cXOWL+5Wpou8CHldxwyw0OaFsXU9+/eHqA7:6LXTcq/uaB0A+dcZ7Jkpp87LARmq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771063049, "uuid": "2fb16360-5d6f-4cad-a0d4-4cff3cc81f06", "value": 126792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771063049, "uuid": "6b49a87a-27df-4ead-8abe-e414472da8fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771063049, "uuid": "cb97f303-ffc8-4853-a240-245a6e7824a2", "value": "israel.armv5l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8836faad-09a4-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771073768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073768, "uuid": "73df6914-8246-4c16-864e-4c2c05aa0444", "comment": "Malware payload (Mirai)", "value": "e00920d5148d35b3f36a47b3201718a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073768, "uuid": "e0d05d56-1274-4f0e-b5d9-e9704f6ed76c", "comment": "Malware payload (Mirai)", "value": "46cec34d69868240618f1a5ed06842e9312180d746fd3f489254ccdca943eabb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073768, "uuid": "3048ecaa-4532-46ac-b0f9-051d42a75841", "comment": "Malware payload (Mirai)", "value": "0cd555044eafe2edb120b261919da8fd2450ab92", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073768, "uuid": "8eb27977-931e-4317-a4b2-ffc3fe4abfc3", "comment": "Malware payload (Mirai)", "value": "34b3414b062738dde653f0ccbfe5c425d7dc8731fbeb7d34d8265cf3e8d1156e26ed71d099ba9f54d2797aea7eb185f4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771073768, "uuid": "f31a18d5-f1f8-408d-acc0-b0748f25cb0a", "value": "T123734C51BC429623C6D112BBFB5E428D372653A8E2DB3213CD256F21378786B0E7B646", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771073768, "uuid": "6674bf64-a3a8-43be-851c-d0741229a824", "value": "1536:aSUkQiU8lEcQ94zBDEDZ3vbxx3RgC1KPVgOfUbT2T9Ovy:aSUk9UeQ9CBmDjRgCEIty", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771073768, "uuid": "96db6bfb-fe51-4ca9-8e84-ffa9848208f1", "value": 73736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771073768, "uuid": "13d8bb58-b5ea-42b8-9508-239076e25311", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771073768, "uuid": "3aa18ae2-3ef0-4880-83fd-1994ee23ff07", "value": "arm4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e102615-09ff-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771112889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112889, "uuid": "7e2dd0c5-9a2d-477e-abcb-a6f090ef46ef", "comment": "Malware payload", "value": "affa5d67bd5fa9c786f4e9ee38d28116", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112889, "uuid": "7decef3c-b01d-4d70-98cf-049d16bc39f6", "comment": "Malware payload", "value": "477b70c677c0a3dd145463957a2e737a36c90b3a860b155a4c1c6ab7610b0f99", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112889, "uuid": "91da9cf8-91ae-4e87-9a1e-6737e461c417", "comment": "Malware payload", "value": "e8be0f837ddb8a6422590ddfa5885c7d24fa4159", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112889, "uuid": "3d3672ff-9844-4ef5-9a0e-9ea7a333cabd", "comment": "Malware payload", "value": "66bf41091cd96019abf2805c82ea3574dd5594bd92e07e2b202a5fb7a70663b5e7166f6f1aeed3b9e5a570ab2decb624", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112889, "uuid": "236ba7ae-0c80-4082-9693-d64bf6c0755b", "value": "T14067239765EEB5C49B830A80668661DA27C0709EC4FE852D3BCF5C036531DEF4A89E73", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112889, "uuid": "00ec7128-49c2-4224-bcca-29415f0a70f7", "value": "70e5b1cab8d19321549d4bcc1e1e9958", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112889, "uuid": "a2052c5f-0b5c-4b70-812f-25a6b9e5f275", "value": "786432:ccWSMOy3/5LeN885gdtfCyNgoTMyfagwCWXjKl:pWSp0/6jaCqJwCWXjKl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771112889, "uuid": "05aab2fc-7e19-49c0-a3ac-a3ce229dd950", "value": 29901576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771112889, "uuid": "7253e3ad-0c87-4f63-9331-de539e232462", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112889, "uuid": "94a2a7aa-433d-4d70-9596-7593709b7df9", "value": "Dropbox.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53e58f32-093f-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771030302, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030302, "uuid": "eefb5c5c-c4c3-424c-a29b-34f83d228217", "comment": "Malware payload", "value": "939e5f6ed379d36831b8ada449da6f37", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030302, "uuid": "42133e80-1859-4aa9-8ce7-dec7b9bc8a0e", "comment": "Malware payload", "value": "47d4c0206c670c38677122478008a12eb157bf0dfccdddb6f7cbb8666303ca39", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030302, "uuid": "f5093e38-c4c9-4d49-8119-cd7c1bee980f", "comment": "Malware payload", "value": "a33b3a39d53fc860aa7d9ccade618480b6c29985", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030302, "uuid": "8ff3e8ab-d8fe-43df-90d9-3cbc10f9f232", "comment": "Malware payload", "value": "4d23da612c7c5c0d753e33bfaac75c2455d1f5c6525ce317be2b210ef774d4d913eaadea34ac5a433ea08e8be0240381", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771030302, "uuid": "cdec3f70-7b71-43de-b114-a0f4aeb74aa3", "value": "T192063B1BA5E320FCC5DAC074476FD623BE71B8A942247EBB2198AE302F56E50671DF11", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771030302, "uuid": "7a2f63d8-1b84-4239-9094-df1a050489df", "value": "98304:g8DPu7AJOgt5Gnuk4zX06WOESLAsNFeuLSgPETesUVLFqK4sB9sPBVrZm:OVaGFesaVB9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771030302, "uuid": "3cd9aa52-5f28-468b-906b-fbfd37aafaea", "value": 3724232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771030302, "uuid": "0e8efe1b-6a5b-4fbb-b588-18a746cf8232", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771030302, "uuid": "8020db39-1273-418c-983d-afa2079e8891", "value": "f33.png", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73243a5e-09e9-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771103368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771103368, "uuid": "aeda5fbc-11de-424a-b13a-f8033c577188", "comment": "Malware payload", "value": "55b53b62331830e6c84e83506197011e", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771103368, "uuid": "5edc8373-b34a-4ccf-8381-7b41a08bbb9b", "comment": "Malware payload", "value": "4b6d2eed0d7eb68c0c2e35b7c1cd80e0c2ce446b23aef4b471f1eb9eeb509e5f", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771103368, "uuid": "795054d9-22ce-4a75-a86a-515f1d95f413", "comment": "Malware payload", "value": "9384e23e7860043853cec373f36a8a34106e7910", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771103368, "uuid": "43f8c9da-a968-4437-93c2-c96f488a68c4", "comment": "Malware payload", "value": "c4698139045aa0810f3108710b0902605490dc4d38148b4cc93d12d5b0704834b385907288adeb87a853218daafca866", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771103368, "uuid": "14a47cd1-e55d-4178-b495-7f0ec42a8827", "value": "T10CF0E20FA04BF03AD08419E8EB61FB5AAC30B86B6277CE5C78407650FFD6424B8A2240", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771103368, "uuid": "95376fa8-b6ea-4fa2-967c-f9c7d220b5e1", "value": "6:hLgjJ5Ja/+YcLN7+Y3JMF/+Ye0IdyJ44LIXLoO4eGLw+v+YdF/vNnQz2JMIykwFx:lSjkOLZpqjW3bo/8pqF82Q/NiTZA+0t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771103368, "uuid": "da15d4fe-ec43-4e9b-a116-eee528feecfe", "value": 526, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771103368, "uuid": "edba5b90-ffdb-42aa-9c30-caf7df458cb5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771103368, "uuid": "e9c36d76-e814-4332-a8fb-fc4103ffe8fe", "value": "jaws.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f5d44a1-09ac-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771077136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771077136, "uuid": "fe2c6134-c460-4b7b-a0c4-2a3d7fbb16c9", "comment": "Malware payload (Mirai)", "value": "3f20a5587937a1a4df625ebec8288d9d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771077136, "uuid": "28232900-3aaa-4cbe-bebc-e1be13d91cae", "comment": "Malware payload (Mirai)", "value": "4b77388d287e1544ccfbb7e5feaa4418be3dca60b1d0d54c56d8a7371c2e9a3d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771077136, "uuid": "e9b79815-1cc8-4b2c-92d8-26ed2c095f50", "comment": "Malware payload (Mirai)", "value": "8b30c68c418c328870c175940e1a4592e3fd8f88", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771077136, "uuid": "a2d40aae-6908-4456-bc57-34e8ed8e7301", "comment": "Malware payload (Mirai)", "value": "a37f8b86974907f241e8a4958d0e521551f7d9981737fe17df8d0dfafeb3a194d1edfac43bdd100d2e88090ed17b26f1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771077136, "uuid": "a23b13dc-4239-4ddb-a6b3-6fce8c079b73", "value": "T106B3D606AA429B01D49735FAFB9F41593353AFBCE3FA7101D9209FA123C69DB0F66112", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771077136, "uuid": "a97a9819-a300-43ed-a5d2-1c597b5bf94d", "value": "3072:bNYwRYJzDG9BaoaEWOJSUBm2/8MPwwSctW3:bIJzC9EoaEWOJSQmDMIwSctW3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771077136, "uuid": "a0d12aca-d2a5-4e11-a6ea-eea93169cab1", "value": 112652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771077136, "uuid": "c4a01185-59fa-4e68-9aa7-441be907abb2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771077136, "uuid": "fdd2d99f-8975-465f-b03c-9f639ab938f9", "value": "israel.armv7l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c148782b-09d4-11f1-a129-42010a9c0007", "comment": "Malware payload (Hajime)", "timestamp": 1771094480, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771094480, "uuid": "a704a451-e812-476f-a2a5-b24b542cc0ba", "comment": "Malware payload (Hajime)", "value": "8b00a1e0849bce17af99d7b7fc018084", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Hajime", "colour": "#A08D3D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771094480, "uuid": "efa68b04-7ff7-4aad-b92c-b6110ecd5ea9", "comment": "Malware payload (Hajime)", "value": "4c020214d0411f2b4fc632451f19955d39f72c846b7ea357a05df777123b3728", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Hajime", "colour": "#A08D3D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771094480, "uuid": "31bb1f02-6694-44ab-abf0-96d879f38261", "comment": "Malware payload (Hajime)", "value": "df9accc0d662d4dc152fef0b821aff14052ab0a1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Hajime", "colour": "#A08D3D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771094480, "uuid": "f75f7180-91b6-4346-9bd4-6154ee01f078", "comment": "Malware payload (Hajime)", "value": "675e329d1a1cc4edfeb9a330b5334b30d9db7ee530a474a2534adfb00c9a365492d4c3146bf20c7333a55251440938cb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Hajime", "colour": "#A08D3D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771094480, "uuid": "3cc80e1a-2c82-4ec7-bc17-319b91335731", "value": "T19D631206239A297192714AF2E7FDBB4CF64E39588FF16C246C113D7CA93136D4CC8919", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771094480, "uuid": "29cf9dfe-be4d-450c-8781-2579b575917b", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRe:yYI0ARqw1qAEv7UIFM8oJorFquyjkRe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771094480, "uuid": "1bb97469-8699-412e-9e4e-f80d251bf538", "value": 67728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771094480, "uuid": "e98fc4f3-cd15-4f0f-b089-d940a09ce4a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771094480, "uuid": "64e38c6a-66a4-4423-b6fe-85ef6588ba2f", "value": "i", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5665d981-09e7-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771102461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771102461, "uuid": "3703516e-c592-4474-b98f-403842ed93d6", "comment": "Malware payload", "value": "b5e3dcf2b57a265e0cdd7342a3ebf81f", "object_relation": "md5", "Tag": [ { "name": "91-219-237-175", "colour": "#A4538A", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771102461, "uuid": "8ed29972-5384-453b-a504-180c55c9ace3", "comment": "Malware payload", "value": "4c7ad378162308d6c0fa626d527c0e31b3cbc976b10730384d4bea8672313a17", "object_relation": "sha256", "Tag": [ { "name": "91-219-237-175", "colour": "#A4538A", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771102461, "uuid": "1cde72d6-3e1a-49d7-bb25-5c009a04508c", "comment": "Malware payload", "value": "6f7cd56bd7d8094cb0285fd03fc0771a2c6f48f9", "object_relation": "sha1", "Tag": [ { "name": "91-219-237-175", "colour": "#A4538A", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771102461, "uuid": "8c6dd17f-c32a-4009-90ad-467ff6432cbb", "comment": "Malware payload", "value": "92a633d330bdb042e6b246a8f2d86e1551983a81cdd817bce22f6d81fca980906cfd3a703a7cf1a4d1d2086209a99759", "object_relation": "sha3-384", "Tag": [ { "name": "91-219-237-175", "colour": "#A4538A", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771102461, "uuid": "a92fc055-4b84-48ee-bc5f-bc00dde263f9", "value": "T1A2083365A9C611ECDD99B17FB7AFB06C98813D8F40E1389AB1DBBB64373090E8C60157", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771102461, "uuid": "de175a3d-ce9a-478f-b29f-f54670039864", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771102461, "uuid": "877c356b-201b-4416-b9cb-99ea0e1e1417", "value": "1572864:lJBAV6xfKiBnOzXigeZfEsgnmQVHEhMkVUrtrYDwngSkYd+e84KGB9:lJBAoxfKYnCige1Qxtvgn4KK9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771102461, "uuid": "576fc81f-d091-4341-bbf7-6661e2774f78", "value": 81501728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771102461, "uuid": "286624d6-6eb6-474a-83d1-dbcc618c2646", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771102461, "uuid": "4acc6c04-e809-4f3d-ac2b-aac4483b937f", "value": "MassMailer2026 Setup 1.8.8.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd0180f1-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037377, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037377, "uuid": "dbba531d-689e-4660-9718-66428ba8d670", "comment": "Malware payload (Mirai)", "value": "14cf630841a4d0ec3368284145c171a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037377, "uuid": "6428dc7e-5742-4fdc-9433-36eef4d885e2", "comment": "Malware payload (Mirai)", "value": "4da15baf1036f7a5cdc17d3ab2f2dc4c0f75f983e69601e0aec6c80b87976a37", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037377, "uuid": "40024a38-757d-4953-8f9a-954305257170", "comment": "Malware payload (Mirai)", "value": "e7d5a67ae65c81ace874d59fbfe075ad08430314", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037377, "uuid": "9c75c5c1-ac50-4d7f-9949-4f19dc17e06e", "comment": "Malware payload (Mirai)", "value": "7417f1cedd3865cdd19d3832603ad5a653df0f81c76ca6ec84bef47234f54885e03c9030c24393c650b39428a0f8a219", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037377, "uuid": "ebc014bf-1c74-4a51-8aee-1430d6bc0985", "value": "T1388328C1BA8B80F5D80748304067F33FCB32E6394066D75DEF6A9E26DE376416B16289", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037377, "uuid": "8540a434-be6c-4444-8e5d-afd88e8d563d", "value": "1536:6Mpfl9OnpbStfCiu5W4S1WEIeCK2ZEcKkW0EYI9L:Xt9Kp2tflu5Pl3KSEXk+J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037377, "uuid": "7e533d16-93bd-448e-91c5-309234ebc672", "value": 83600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037377, "uuid": "28e190a0-5b79-4a7f-80f5-48aefdc4a9da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037377, "uuid": "d8d3c525-1b0b-4293-bd98-98c8c6a27197", "value": "nwfaiehg4ewijfgriehgirehaughrarg.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6b8b609-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037339, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037339, "uuid": "4fa4a470-b7a2-4835-b9a2-6734694d3a70", "comment": "Malware payload (Mirai)", "value": "c0288cb0c19b6cb5966011016e76e186", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037339, "uuid": "34b3ae40-b744-45af-94b4-a75b2a5e499f", "comment": "Malware payload (Mirai)", "value": "4de60c1ccbfd8810489cd2754d3e0ae46a39abdfbf85b1fc0f6d26ec9ee06494", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037339, "uuid": "40ec78ad-e931-4e1e-a634-e3e6a9712999", "comment": "Malware payload (Mirai)", "value": "b6dfc9f3d0b2c3eb7aee86d4dd5742c47559aedb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037339, "uuid": "1e6654a3-2195-476a-8b73-b187835ab84a", "comment": "Malware payload (Mirai)", "value": "6fd79627e72eef65bf018f4f1473f24a6ca5822a57ace811caa3a2229b8b87b88ea226d3a909ace2ea5f013d1408ca9d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037339, "uuid": "91360c18-5e44-4eaa-96d9-210364084d59", "value": "T1ADC3AE87B78B10A0C4624AF017C71B9D6B53B211CE6FE8E3AC1E753F5A7A4DB1916381", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037339, "uuid": "be626c98-4af6-4218-8054-64d5465014b3", "value": "1536:A68QyAmkjsUAFa5XnF63Fgrf52T+HCKsJZSlh/YeoYXxP/cgEvE4/LWQ:DYA7jbAFaF63FgL5c8nwZS8eoYWgQq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037339, "uuid": "de44e24b-ca2b-4896-b03c-89a4bf49049d", "value": 124676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037339, "uuid": "3011b70c-cfdb-4411-997b-ed67051e286b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037339, "uuid": "c039c64b-8f38-479f-9283-7f66d57122cd", "value": "nwfaiehg4ewijfgriehgirehaughrarg.arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78b1ca74-09ec-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771104666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104666, "uuid": "6f6a2a1d-6c68-459b-95c8-a52b8d9f18ad", "comment": "Malware payload (Mirai)", "value": "275aa1e9e2ce97a060ddc82303c46075", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104666, "uuid": "78c9677e-e990-45bf-ab04-5b777996c2f6", "comment": "Malware payload (Mirai)", "value": "4f5c7049c581fe3334fd299d5f4d680eb77a25c5f01a39a1025664fd1610a4cc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104666, "uuid": "e197c999-465b-468a-9215-66e4f12903a9", "comment": "Malware payload (Mirai)", "value": "730afccf3e6b174c3df3378c1de1b21455043972", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104666, "uuid": "4773a7f3-3dc5-4562-bcb6-fb66b647baae", "comment": "Malware payload (Mirai)", "value": "65d0351261cc1a565309b246ff8d0bd65355b6bfe3fbe2f731947b915c5a05efa1dd87178cc5b6d73dfc7198658e9140", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104666, "uuid": "96360815-0122-42e6-a3c9-7c953c60b9f9", "value": "T1B2930886B8829B11D5C112BEFE1E118E3313177CE3DE72129D246F24678B96B0E7B916", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104666, "uuid": "52271cae-797a-40c8-b1b6-70465ba721fa", "value": "1536:CknJxjhCMsBMl3EVGpOFnbRfGqtCMy05LyHQ4YE86v5aeyXc8aRQeiC4VfC5lzc4:1tC5MqVGpOFn1fGqtCy5GHQ4q6v5aeTB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771104666, "uuid": "5dbb828f-8e5a-4b90-a9fa-d4fe40070fe2", "value": 92832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771104666, "uuid": "146daa11-8c32-460c-a6cf-d5a5cd22b70a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104666, "uuid": "ba57cdc4-73dc-4455-a47d-7673c93b6a4f", "value": "manji.armv6l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "461bb346-09e0-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771099427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771099427, "uuid": "8f97e451-6da8-40f8-8b16-b03e1603b7f2", "comment": "Malware payload (Mirai)", "value": "93d10ac0e88a54cd6cced0f6e4f16c3b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771099427, "uuid": "9fa228e0-2c9b-42a0-8e1c-13755c5b0527", "comment": "Malware payload (Mirai)", "value": "5021ff1f9a0d8aa6c5057ec412d1217f7cdce0d7214122e856c6ce7c44077e55", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771099427, "uuid": "87b6233a-1b26-4609-bae4-af72cf241fbc", "comment": "Malware payload (Mirai)", "value": "1a955787bca6cae345a33b40aef118bae0f70fbc", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771099427, "uuid": "1061c041-e9d2-45c5-8af0-7c92d779c665", "comment": "Malware payload (Mirai)", "value": "59b7972fc28455494b893f8fbeb83f6dd346d588676ab07d4da695894ca778d72e395490c0ef90574de37a9c099d1675", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771099427, "uuid": "482e3918-2f6f-4382-a6eb-a9754961f408", "value": "T1E3F308C7F901DFB7F40BE37644A308157131FBA618525A73B26379AAAA3A1C41427F86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771099427, "uuid": "e96d3c82-ad68-41d3-b573-a56bb5aa0926", "value": "3072:5qYzUZmspp6eREUzU2Ky4KUsJZeUsmwxJ6TsxqVjjbiRLW8glVu:TK3YeR05y45sJZFsfisxzL9Gu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771099427, "uuid": "d8f5284a-874b-42f7-aac2-1a0e6e97cac0", "value": 159976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771099427, "uuid": "a724267b-2482-418a-9581-3b617c201a31", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771099427, "uuid": "9c6c9032-e581-4189-a737-d003206d8dcc", "value": "israel.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02892a5c-09e6-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771101891, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101891, "uuid": "f67b16bc-6ae7-4f01-9fa3-e949a4d6b9ea", "comment": "Malware payload (Mirai)", "value": "dc6d744ae8d06e53d31d6fb90e12e1cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101891, "uuid": "9e60fa1e-274d-4baf-add6-d661c0775a56", "comment": "Malware payload (Mirai)", "value": "50340e823b5ab0f9e8e72ef30af6ffe67fd4be9bd74910e5a0dba1e9862c719f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101891, "uuid": "16d6d00c-5015-4546-b246-b4eb33231d9b", "comment": "Malware payload (Mirai)", "value": "4141184283692762a098118b9abd2efc211637d2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101891, "uuid": "b0cb1558-4b42-44a2-abed-4d38c074fc97", "comment": "Malware payload (Mirai)", "value": "132b7e9d64d5bf2af79c071c0e50a3a7082e92d2c6af21c254a0b313ff601e03ee52a9ac8d2abb93561364805f84b935", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101891, "uuid": "0b07b912-fca3-45a2-b7e8-0e1b6beb5ccc", "value": "T1C47386092E219F7CFFAE423847B78F259648339A36E1D585D25CEA011E7074E341FBA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101891, "uuid": "5957303d-a388-4dc1-be15-2303d67576f4", "value": "1536:PCxBpGYuQsvvfImMvdaGuT+tp32xIogGrYzgp1J7:kLduxMMGuYkxIogGrYsLF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771101891, "uuid": "ec71bbba-d8fe-423e-b8a8-9687a596f612", "value": 75836, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771101891, "uuid": "e32fb91d-2984-4078-8392-732412fce811", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101891, "uuid": "315ea6a6-747d-4fdb-969b-576aab1326ad", "value": "kwari.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd18c3e9-09a7-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771075199, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075199, "uuid": "2f632a45-d870-414b-8ea2-460cbdea0bb1", "comment": "Malware payload", "value": "9e0a5d839a8a69f178365fd71c961f4a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075199, "uuid": "451a64d6-0644-4867-8a17-17133192a529", "comment": "Malware payload", "value": "515812a0d0c1b4e089eaa40b12d1f223d38c4486813865beddc806962989573f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075199, "uuid": "b96a9c07-9401-44cd-985e-62f1d26f4515", "comment": "Malware payload", "value": "a0a53bfea9f1abe387f8d04b9b651439a466b679", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075199, "uuid": "b4811535-83f3-46df-83a5-c02762bd1031", "comment": "Malware payload", "value": "2fed3e1c2750b9ce778a0d71e50571aabd47b48a3f5828e3cffa061869aa0c63bdbb5c4fed1b41bf70cc6aef4780341f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075199, "uuid": "c169de0f-4ac3-4ba0-821d-d4d7de33065e", "value": "T17C25339CF8DF7C62D7EF88DAF34A13894703EC5CC954D8D321232A71B121E68AE26559", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075199, "uuid": "dd9d1a54-073c-40e5-a14d-078d6c260ff0", "value": "24576:VC3SCD5aVjKXpb9KyHK7nIgJtTpYIHzpquVF2TFl2w4rnglV6M:VTCNmjK5bBKLIgJtTWWz48F25l2w4rnM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771075199, "uuid": "346a8b5d-9c64-4d7c-a4dc-da7ce97ddaf6", "value": 1049071, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771075199, "uuid": "2c864ba7-6551-48fb-bba0-4d21c2ca7007", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075199, "uuid": "a4b73634-173a-4463-8159-bde6da0f38b6", "value": "bizy.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03a7c58b-0993-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771066245, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066245, "uuid": "58f12749-2318-4476-ab12-b264a2bd386e", "comment": "Malware payload", "value": "a71180cff28ad50bd3d3b376ce849f4b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#CDACE8", "exportable": true, "hide_tag": false }, { "name": "sexsoldier42", "colour": "#580AE6", "exportable": true, "hide_tag": false }, { "name": "XMRIG", "colour": "#0EAB84", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066245, "uuid": "c8cba308-f591-4891-9e8a-df422d1bf12b", "comment": "Malware payload", "value": "5567035c2acdc2d6c03e0ab3374f9f5984986e8d072435a02aade4c475755ba1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#CDACE8", "exportable": true, "hide_tag": false }, { "name": "sexsoldier42", "colour": "#580AE6", "exportable": true, "hide_tag": false }, { "name": "XMRIG", "colour": "#0EAB84", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066245, "uuid": "e0adffe8-faf4-4422-946e-f107eb0011f2", "comment": "Malware payload", "value": "24ba7c15b2099fe3d3f3e6cc47cf802dd6b15b24", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#CDACE8", "exportable": true, "hide_tag": false }, { "name": "sexsoldier42", "colour": "#580AE6", "exportable": true, "hide_tag": false }, { "name": "XMRIG", "colour": "#0EAB84", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066245, "uuid": "4870d4f1-0cf0-469a-9e69-865b3e72b225", "comment": "Malware payload", "value": "9c3cafde0ff773d87ef52575805da41b0af36c096fefbc4eb32419c94a5320637ba519d0a6ac3fb8fc04dc8c4077d4c8", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#CDACE8", "exportable": true, "hide_tag": false }, { "name": "sexsoldier42", "colour": "#580AE6", "exportable": true, "hide_tag": false }, { "name": "XMRIG", "colour": "#0EAB84", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066245, "uuid": "7621585f-66b0-4ea7-9298-7d79c5ae2315", "value": "T1A3A3284BF29760FCC117C178469B9372E6B1B8211434EF6E5BA0DB312D61EA1BF29B14", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066245, "uuid": "6f2c9aaf-f410-4724-8286-2b6f0c744fb6", "value": "520d1809bd6114325dcff70b5ef3b5f6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066245, "uuid": "559290f6-2110-415a-99c3-bc19219773de", "value": "3072:QuD2yb8GAU5qK2fZwJR3vByBrWx3MPyH:QuDqGd0Lf+9A5xPyH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771066245, "uuid": "10be123b-bc1c-4640-9c9d-5e92cca7e277", "value": 104960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771066245, "uuid": "8d0dc3a7-a15b-4961-a17d-51df724838f0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066245, "uuid": "1670c0ae-8f67-433e-9224-e235a5e38f8e", "value": "svchost32.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "691941c6-09a9-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771075864, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075864, "uuid": "004bc0bb-bb97-4c3c-b2aa-378ecc10cfd7", "comment": "Malware payload (Mirai)", "value": "879df6077ae65aedd3c5a97e523b0658", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075864, "uuid": "ba9a5f60-5bd9-4bfb-b9cd-21237a4fa1ed", "comment": "Malware payload (Mirai)", "value": "570e1f1ea3c9778ac710c70dd95c6f0437e68bb9372c687971086d5a37e3f2be", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075864, "uuid": "c7d32367-790c-430a-a1ba-7df61f5c067a", "comment": "Malware payload (Mirai)", "value": "c542c94b39297c2d27e59194097097a775c7609f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075864, "uuid": "55d4d415-d971-4f26-99fb-5783a84a77c6", "comment": "Malware payload (Mirai)", "value": "7318961e4f2cc8016bc7cdb5a3e13fdbbadffbe2d9147c25434fa4a28e6c76a6e241864a34ba2707d9a3c8143d0c0c97", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075864, "uuid": "78fb6d46-84c4-4429-a301-cc996c4280d7", "value": "T1DCA31A46B9429F02D4C631FAFBAF514933536FB8E3E93102D920AF5027C69DB0E76652", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075864, "uuid": "978cfda3-4d69-43de-abd9-5368a18a872b", "value": "1536:+Onrqlanre54frkP4nOBQY/waaiZ3v5bNB/hc49lmyimWyW3JY7Pzau:6l2rCioBQY/waaK3v5bNBWyWyW3JAzau", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771075864, "uuid": "93a2cdf9-940c-4e95-b31f-6c8810e44f06", "value": 97688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771075864, "uuid": "0486d106-5cec-43d5-8275-7eeebefd725f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075864, "uuid": "6a760fd3-2351-4ec8-b69f-bc2b2fa2d906", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06f598a1-09e6-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771101898, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101898, "uuid": "158885cd-0c8c-47f4-beb6-c2fb4f5e942f", "comment": "Malware payload (Mirai)", "value": "bd7138c96f6bc0622ba773331d629ce6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101898, "uuid": "b00a1dcc-d7a5-447d-aec5-e430aeed74e8", "comment": "Malware payload (Mirai)", "value": "581233505413e1e91a7aaf1a5e85034d1beba5e4e02229a275e68c13cedd6aca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101898, "uuid": "97aac193-2940-4c06-9b80-02d5952b3f0d", "comment": "Malware payload (Mirai)", "value": "e27086e719bf34693c37feecb9a911df982249ca", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101898, "uuid": "28d2feeb-4a18-4584-8e0b-792c5baa9d45", "comment": "Malware payload (Mirai)", "value": "d39487cf96d24e8994bcb6e87c1cc340d5a97f93ad467643a09de05173e6475e76ca2a2c0b5321cc51c03074193c8cd4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101898, "uuid": "1c05c5b7-c1ba-4e41-9bfb-0e8551365f8f", "value": "T1FF73831ABF654FF7E8ABCC378AA91B0124CC651A21A97F797930D814F24B24F55E3870", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101898, "uuid": "9273893e-6423-41d6-b2c7-542bdbf7d2a6", "value": "1536:7p/bgkjaVYjj/76mI7MZz4ODnu9d6dPRRo1/:7dbgkjaVYHGQZz4eP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771101898, "uuid": "f9659f5c-b91c-4a59-8047-4634cecc6ffc", "value": 76476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771101898, "uuid": "70d81bb1-fa02-493b-8c00-914812a98178", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101898, "uuid": "0d2a6f2d-f4cb-4795-9419-0c341c68be5d", "value": "kwari.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "35a1ce9d-09c1-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771086085, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771086085, "uuid": "816d268b-defc-4eec-83e0-3a3fadf34676", "comment": "Malware payload", "value": "5080e029c34d68e3c0f94f7a266b1621", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771086085, "uuid": "a98535b1-4a01-4ff0-a9fa-63d02ccc04ed", "comment": "Malware payload", "value": "5830c290b366e970c5ea25db9727a8b5df8d3cc62aa7e7756e9eb688d43d78e6", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771086085, "uuid": "1c686c5f-7ad1-440e-b764-e944cb46b2bb", "comment": "Malware payload", "value": "06b68017d187e6769ca19bd9540086abf0ec3fe1", "object_relation": "sha1", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771086085, "uuid": "085d1bd9-6d16-482e-a438-9d073c0ad603", "comment": "Malware payload", "value": "d521981260648f7b7624f0f60390f7465923684d643c6fa3c804579fb35167cdea4a635905dbec790e4c0e2e1af9cb62", "object_relation": "sha3-384", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771086085, "uuid": "fce8c96f-0960-45f5-a28c-d524d313efa2", "value": "T15B41FC195AE41329D7778E3B941AE3145731B907EB62CF6E05D050C80D49614F835F3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771086085, "uuid": "63a7fb19-91a2-47b9-ae60-1d47d8c5bd12", "value": "24:8dSFfaPiA8AbN54+/eW+/fPO+/4z4I0WueWk+m+:80cPx55HOmkI8eit", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771086085, "uuid": "bc7e9ed4-dacb-4cc3-a03f-ff2fb2504270", "value": 1947, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771086085, "uuid": "d37e9af1-9170-4be4-ad8e-0072594e10f5", "value": "application/x-ms-shortcut", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771086085, "uuid": "07e0c8ab-25e1-40db-a1fe-bb82fbfab090", "value": "\u0412\u0438\u043c\u043e\u0433\u0438 \u0434\u043e \u0411\u041f\u041b\u0410.txt.lnk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07ab981a-09e6-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771101900, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101900, "uuid": "7f27d1b8-5272-4183-89d2-7c3815c4bb3b", "comment": "Malware payload (Mirai)", "value": "77c95567b7543e5e30ba9d813edc5f90", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101900, "uuid": "56a4bf7a-bc14-4573-92b8-d5cc2121b173", "comment": "Malware payload (Mirai)", "value": "596ed29cff1bfe80431b0a827821568e46e9831f5f41c90e628d247c0fea9baa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101900, "uuid": "d0c2e6e4-4da4-4cab-bf92-3acaee480d74", "comment": "Malware payload (Mirai)", "value": "a56d3a5a78cced0e0d3ba39d3a6dff8d589af931", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101900, "uuid": "e6dbc686-986d-413c-8cd7-be3966cdc079", "comment": "Malware payload (Mirai)", "value": "3c31f68bfefce279437ef56e067ed698b72ef9253293af556ba98912a53ddd6c0cf898ca17431a67bf2848f7da0f6fc3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101900, "uuid": "1d9fc8b1-a30a-4a6d-ab95-1eac57a8507f", "value": "T1FB33F885BCD29A1AC6E0537AF96E809E331073E9C2DF7623CC140B1176C655F4EA3B96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101900, "uuid": "1eacd38b-1ddd-4fbd-9815-6ad0172bacbe", "value": "1536:RfinNXlMJZdy9imMnjkYm7JSWOCr7O+1gAD2yKCQ5KkzoEOSSSSSSSSSSSSSSSSc:RqnNXiJI9j2yBezohSSSSSSSSSSSSSSs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771101900, "uuid": "040cdcaa-3d75-4d00-b64e-6c52b672a9dc", "value": 51392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771101900, "uuid": "66a2b5b3-b83f-41db-bafa-20ba966d6830", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101900, "uuid": "9d4f7c77-d831-46dc-949a-ed7bfe9e323d", "value": "kwari.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75bb2272-09ff-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771112822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112822, "uuid": "cc3af416-c1fc-42d0-bb2f-e203a23dc20c", "comment": "Malware payload", "value": "841cab2a3109ceb13f2bc33042ff4db7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112822, "uuid": "39542014-bc15-4a54-aa63-8badbc8ef9b1", "comment": "Malware payload", "value": "5a4ae73d9deab5225bf225fec5f1a1bd92d1e7cded7384e17d4a38528e44389a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112822, "uuid": "30f43065-a4f5-453f-85b6-8d0c836d7542", "comment": "Malware payload", "value": "5f53d8b8ed3adf810d20cfc32ecc400f93140c82", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112822, "uuid": "c2f88a70-b1fe-4f72-ba4a-713925324dff", "comment": "Malware payload", "value": "a034af7c9142880ceadcbe5e2ef0c58088de177a7e4bb3ee22c0d8d44717460eaa9666eaf524d0b9a83a231182601b00", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112822, "uuid": "dcd55877-d80b-47fe-ae99-c88c63a136d1", "value": "T186E57C07BDE418A6E0AAA23189A25572BFF1BC452F2153CB2A80F7BC2F737C06575355", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112822, "uuid": "22648b3f-d070-47c3-ae56-735de4221a05", "value": "49152:fDkefA44jNNwfDQQ1aYyUc2Ktq8TECJZCw:fP/0CRyUc++", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771112822, "uuid": "3c47c46b-0aab-4d55-ab42-57963fd05cac", "value": 3082240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771112822, "uuid": "97f8afb3-951e-4c80-9852-24e53ed2600a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112822, "uuid": "8ffceb73-d411-464c-8eaf-cad929443fb0", "value": "2qfidlen.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "705a930c-09bd-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771084466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771084466, "uuid": "6f353673-bbe3-4183-be0b-effb0f70dcb1", "comment": "Malware payload (Mirai)", "value": "5991eb511ff1353eaeb312497e682c01", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771084466, "uuid": "7acd22c3-52d8-420d-bf9b-be0167978ad8", "comment": "Malware payload (Mirai)", "value": "5ab512ff5ffa6279e8b5ce80856159dcb97c79b9b056018f20c2f0a1a210b3ff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771084466, "uuid": "e209c54e-8ea1-4066-be01-0d6c247f1f1e", "comment": "Malware payload (Mirai)", "value": "021b3babc1be2e2c3d6ebb0b1b584ab956ef2e25", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771084466, "uuid": "065b3653-248d-4678-a472-8c7bcfcc7c0f", "comment": "Malware payload (Mirai)", "value": "25ef94d189ccf1a80e4ab8fee7a1354ba7840a6f18100b1166324cb47e6f480d29bb056b386ccef888a4666ab8a9bc60", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771084466, "uuid": "10b2fea8-fb29-41db-bd5e-f3a444da20ba", "value": "T194C31863DD279F5AC127A5F061F24E341B53BD2688570FB9A07AEAE08183DCDB5053B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771084466, "uuid": "c8ee7456-fed8-4b4f-b9a6-3fc7120bb413", "value": "1536:teVDBF0lVw5CGUNKPOGo7dj1XGYjSU/Wn32ECzMQvAN:EVDoLw53UUPi/XGiv/W33CgdN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771084466, "uuid": "be7b85d0-fbbd-4953-9481-b006a96718c0", "value": 119476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771084466, "uuid": "2f7d2577-06a9-4949-bfd4-d672854ad731", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771084466, "uuid": "fced32f5-96d2-4e1d-9ba2-d4c6ffc60f5b", "value": "israel.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7922558-09a4-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771073875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073875, "uuid": "d61864ab-3dd6-44ef-a741-e46f62053add", "comment": "Malware payload (Mirai)", "value": "f94ed58c36d9ed37e742cf556dbbf6c9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073875, "uuid": "5eeb637b-80a0-40ce-919a-bbf1122406aa", "comment": "Malware payload (Mirai)", "value": "5b9b0a6478040125aa9446a0515a90c098403000e62ccc59c041d89beb238cb1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073875, "uuid": "95ec47f7-82f6-4f10-956d-25129f725ccb", "comment": "Malware payload (Mirai)", "value": "e3a16aa32b36f713d2ab1ac908a1788a7ffd7777", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073875, "uuid": "727e9c89-256d-49b1-83da-1426417b2489", "comment": "Malware payload (Mirai)", "value": "51082788952f009bfa80a857253d70047d9331f7f4d1a07de7aa4c99e55833292ffe4ba8d8a15fb74b2eb44086d3ccd6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771073875, "uuid": "acfd441c-3dd2-4424-be9e-5348659a863e", "value": "T18C93E61ABF510EFBDC6BCD3706A9070235DC951722E93B367A74C928B54B20B5AD3CA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771073875, "uuid": "0925103b-8dc4-45ca-aead-46e84b6a728d", "value": "1536:zf9NnwiErHIgm+OZlJgVoD2LJGPbfyf+ZPbH8Zk0r1GuKF:zVNnVao06/jyf+18uv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771073875, "uuid": "3313aaad-9417-479f-af92-d7b4a9660c33", "value": 93896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771073875, "uuid": "7867e403-e9ca-4235-b681-efb30ef89167", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771073875, "uuid": "4be2b5e0-427b-4b97-a110-c10cc59d2636", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71a29820-09ec-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771104654, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104654, "uuid": "04e4c0c7-64fa-42c9-8191-3e6bad146cc1", "comment": "Malware payload (Mirai)", "value": "c92a2c18a6592829a50d93abc5b9bf2e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104654, "uuid": "9c61531b-092f-4a3e-9fae-a40ec5b7cd40", "comment": "Malware payload (Mirai)", "value": "5ba236db3c05c210acf1fc0d930bb137c1ab53b7700bad38fe2a085b38383913", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104654, "uuid": "04e5e0aa-9a9c-4edc-9596-0323b2592f2c", "comment": "Malware payload (Mirai)", "value": "9bab23c63018af0f78e7b374d370c55b75d75d29", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104654, "uuid": "126cdd12-bd8b-4ac0-92db-874ae2223c9f", "comment": "Malware payload (Mirai)", "value": "e799ca2962eb459d0ce74a40ec0df3df0aec139798d414173543874054ed7302357241134c64f9e52afa4021a735d927", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104654, "uuid": "cc2dc969-161c-4a8d-802b-45a5736f15d0", "value": "T1A0834B42731C0E47D1775DB02A3F67F093EEAA9021F4F684255FAB8A9171E325186FCA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104654, "uuid": "917bbd51-cdaf-4748-85d6-3b0498daa9c2", "value": "1536:rLblgTewtHfOoA4171kBcyQDeWKDDqIiSmJXSZf2ikBIH3j8Jgy:ry/WoJ7em+vm3ikcVy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771104654, "uuid": "14efff28-07a0-44a6-b834-1fd3e1ef35cd", "value": 84704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771104654, "uuid": "c7f258dd-619e-4b54-b912-e14891cde9ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104654, "uuid": "af064716-6072-4f01-a7b6-dee6f3930931", "value": "manji.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12c9d726-0992-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771065841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771065841, "uuid": "dd81b41a-8ffa-44c8-ac89-408a28d69d87", "comment": "Malware payload (Mirai)", "value": "1d20f1db1d25f6f3db34edc12668bf75", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771065841, "uuid": "cd99bf9b-fc2d-4b09-b047-6b7643892456", "comment": "Malware payload (Mirai)", "value": "5c796a121909151e3ff6a07c27bcd02bd76191118f801b67f8ef5885303e7159", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771065841, "uuid": "241856e2-81e4-46ff-87ce-6b03bb6afd1f", "comment": "Malware payload (Mirai)", "value": "cf7f2d29c1d3d466f61359ed466b14895a54c813", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771065841, "uuid": "fb1a63e3-c340-4b76-90df-afa03a5262de", "comment": "Malware payload (Mirai)", "value": "eca5383a96f787a6cd81296906f5e51e52a245e6aa5acad609582c85d025e2fd6618a55a525dcaf2b9a53dbed743e165", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771065841, "uuid": "a55b463d-aa5a-4e3f-ab0b-d60c0a016bfd", "value": "T11CE3E5C7F901DEB7F40BE37648A308157530FFA60D625A72722779AAEA390C51067F86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771065841, "uuid": "658943e4-10d3-402e-89a2-7e1c905a21dd", "value": "3072:6LzdcPSUk93vyt87zv538g9SUVQ8aq2V6jbi+LKlN7Ul:4SW/ytszvd8glDaqPLKl2l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771065841, "uuid": "b2d50fb2-2bcd-48bd-ba7c-a65d5d805cfb", "value": 154824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771065841, "uuid": "a6584c6e-88d8-48ca-af6f-b08e55e36247", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771065841, "uuid": "dd64eacb-2457-4702-b268-162b5cc20086", "value": "israel.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "764adf3b-09ec-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771104662, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104662, "uuid": "ae960da4-f929-4829-9e53-c39424578750", "comment": "Malware payload (Mirai)", "value": "f8b77c21e069283ac1d436924e1d761b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104662, "uuid": "624cbd6c-d523-471a-a2c0-f8b5ad9a2f27", "comment": "Malware payload (Mirai)", "value": "5cd937095432d33c33b70f846eedc91dd18eebc83662d80a32aca9498bdf50c8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104662, "uuid": "158b46c8-1346-4c4b-ae70-c0239815a22f", "comment": "Malware payload (Mirai)", "value": "3761935eaa4e08ff90ad32c5ee3f1561cebd0fe7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104662, "uuid": "e8492cf9-d575-4261-8d2e-b0fe662d97fc", "comment": "Malware payload (Mirai)", "value": "a4ea601aa36bd460d8c3bd39dc4a5ab595272c05ffc669c1650820467dd5cd8c45c0f89818c4c3d63997ef8769a3e4ed", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104662, "uuid": "e2ef4094-84f2-491d-97f0-758a0598e5bd", "value": "T146B3E91E6E218FBDF769C73447B78E21A79833C626E1D645E16CD2005E6038E542FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104662, "uuid": "42b5d76b-12cf-48c0-bf29-2e8c7eea1e56", "value": "1536:0w4lPfv7d7Y/YL1dUo1DNNKHvntki8hPDoM1ISWlKnKevNeTh0n:WlPfDdMWdUoXEHvntOhPDoMCsnSh0n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771104662, "uuid": "798df46f-ca66-4718-addb-4861e41cd365", "value": 114308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771104662, "uuid": "98abce04-850b-49cf-b99d-d4efb02d1fc6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104662, "uuid": "1b861e75-532a-42c4-bb34-ce042705aaea", "value": "manji.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d32400b3-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037387, "uuid": "b6c77887-93ea-4cbf-a63a-10c6d543145e", "comment": "Malware payload (Mirai)", "value": "dd765f11b167a26cc20b3429382c92ca", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037387, "uuid": "690fa91f-c69d-43cd-87e2-aa0f24549c6a", "comment": "Malware payload (Mirai)", "value": "5d661030d47a753c89f8546737b44446edabdfd7d3b3f07f157e2f30b6883965", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037387, "uuid": "83a01a3f-5ed4-4b0c-ac67-924d49cd9436", "comment": "Malware payload (Mirai)", "value": "0ff412e96a4b51a87d202531c5ce0b556ef3c217", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037387, "uuid": "3060b36a-e49c-481d-b6d2-a4251ee8885f", "comment": "Malware payload (Mirai)", "value": "8f8587d189120cdc70b10ae7085fae19095d552b4957b7191a45d4dbc1da73b16caee0ae4131595c7109c33ea3e2e898", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037387, "uuid": "cbc75af1-5b41-414f-b18c-c354cd9e1fb3", "value": "T1F843F7A2FC92859AC6D05772636E568A33A263A5D1DF7303DC184F1067CA60F8F6BF41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037387, "uuid": "295225fe-034b-4b51-a0d8-9dec3b71f0d9", "value": "768:99woXlvWp8/wdRc358qnStt5f7lJes3XGesKP+h3GeXuioKrM7RNod0nNzB:5vd/IRq5TETf7lJes3XhP+h3GEuUTdI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037387, "uuid": "fe13f805-2a00-4ff8-a66d-0307ae1bb7bf", "value": 55176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037387, "uuid": "6f607715-a73f-4c0e-b04f-88415af9373b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037387, "uuid": "46aa3261-73eb-4cac-bd0f-70e758206ff6", "value": "nwfaiehg4ewijfgriehgirehaughrarg.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b772872a-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037340, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037340, "uuid": "748a3cfd-2cf5-4405-aeab-145c0b6316cd", "comment": "Malware payload (Mirai)", "value": "d0b3c2108a68b4c429fa5b57ededf58e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037340, "uuid": "e866b4fe-7e46-4585-8c78-714a09c80c69", "comment": "Malware payload (Mirai)", "value": "5e19885bcfb7036c325d73ee9aff9958300e534817ed53f2d3bd027bd941cca8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037340, "uuid": "524da925-fee1-463a-a67a-51170f1a334a", "comment": "Malware payload (Mirai)", "value": "dcccf349eb483c17f91f9c7b025fdd686e9d5e9f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037340, "uuid": "6a164182-36ce-4d13-81ab-73b8b86f70f9", "comment": "Malware payload (Mirai)", "value": "5a673bfd449fac2d01d23b4d2ee660f80a32d824ee1e6fd208857bf80ac2f0c6f948a8d557f0db6a3111b10e311d1c23", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037340, "uuid": "9cbc2421-7c41-4c69-96db-fca3a3cc7659", "value": "T19313E157473BEA36C837EF7112B08BD0EF8132DB15A90B5F85EB71250D9BA1C2411BA1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037340, "uuid": "5d3041a1-54ce-4f99-8539-128218015579", "value": "768:pQvccpWOVK5yLqmplYraKHg4YZkoQoikjRXK0dX+UbFRU9b5Oyv8kK9VPzKHoaSi:wpVeApl8HghyrCKe++FRU9VDtyVPeGEn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037340, "uuid": "d52bc9e7-c12f-4841-a140-3d8496ff352f", "value": 42004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037340, "uuid": "951f59d4-3b02-49b0-a6a4-7b4a3d46ff54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037340, "uuid": "70776bde-44e1-4db3-aa32-c75390a2f757", "value": "nwfaiehg4ewijfgriehgirehaughrarg.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3414812f-097a-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771055588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055588, "uuid": "6dcccd29-3938-45f0-8246-49a956db78ac", "comment": "Malware payload", "value": "fb42dec2c39cd7884ca4cb6b76308f51", "object_relation": "md5", "Tag": [ { "name": "0APT", "colour": "#EA07F8", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055588, "uuid": "0f15934b-a73d-4212-a5ed-f0f8f84417e4", "comment": "Malware payload", "value": "5eeef93bf1ec0664067bca6c0f074d237d056741ed1fc78a846b00f08a859f43", "object_relation": "sha256", "Tag": [ { "name": "0APT", "colour": "#EA07F8", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055588, "uuid": "d9f82494-c5af-496d-bbc2-ceef5e29b233", "comment": "Malware payload", "value": "e486fdb87974cda8dd3419182b99950e7bf90d65", "object_relation": "sha1", "Tag": [ { "name": "0APT", "colour": "#EA07F8", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055588, "uuid": "444a9d74-a149-4aaa-91f3-e9191b4755bb", "comment": "Malware payload", "value": "2a9368051ab893b1fd22ea356b0df19c4a6ef896c7e3a07da4e23827381d3345544bf042ca9b6190647974a3cac2aefe", "object_relation": "sha3-384", "Tag": [ { "name": "0APT", "colour": "#EA07F8", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771055588, "uuid": "7aecc8b4-c6b9-444b-bd95-a995a85b2932", "value": "T1DC465B0568351D5AD5FA7271B1FFE33CAFB31925812BECE74966A8709D2B243B90C20D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771055588, "uuid": "caf787f3-9a2a-4ffc-88a9-7efaf8fccd1e", "value": "cb58379f7d884f9f3aff3bb2ea402281", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771055588, "uuid": "dcd33c82-5b73-4747-b800-7fe4e5e3b6ca", "value": "49152:yjtho7LuSZqQQlWDzHz04GuaJEOEb3x/+G1YhOLpJMb3jbi8g2Hb95iVedNIufPY:yhhon5F1bnPMbmLpK5FKBjJNbAa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771055588, "uuid": "fe3f1e37-781c-42b9-bf10-2c7f964ff654", "value": 5828535, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771055588, "uuid": "8571aca2-f1ff-4a06-8759-7b0f8cfa4b57", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771055588, "uuid": "20a8b1f6-1b5c-4e30-b303-c0ad0ad25d04", "value": "EF72-BC3B-BBD4-0APT-KEY.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f7c430f-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048736, "uuid": "d9aa0b99-f256-43ed-9be8-8c5e18c97448", "comment": "Malware payload (Mirai)", "value": "0e3c30f9151468646d6a2ab7c0bef999", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048736, "uuid": "eba9196b-e671-486f-a65b-9e1cf4b3062b", "comment": "Malware payload (Mirai)", "value": "5ef3c431dff6e5e6b23f98e17d1d5b1640ab67c94b4eb8f78be5d8fed3b930e4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048736, "uuid": "0a57764e-e24b-411c-a83d-816d29b8c6b3", "comment": "Malware payload (Mirai)", "value": "5d00b2daaa8e9b2bd91d66ad14dcc284430e2495", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048736, "uuid": "80b6a905-d999-4931-a01a-2473d373aa02", "comment": "Malware payload (Mirai)", "value": "ec876cd2abdc23f0ba405abfc1afbc54299d8a3a35410d6d8a767c106155f083a57914a63662531a0fef9b0ac231df87", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048736, "uuid": "b43e00a2-619d-4e62-8f7b-c5963394de13", "value": "T19304392F358191F0F6411B746BCBD3976C390BBF51A9909F6B416329B6E0B7BA02C487", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048736, "uuid": "30dad5eb-f8e8-4602-b766-4ece932d5cb8", "value": "3072:7mPX5bl7RDfPIX5eG/L1AL0SFU66gOSNL9CnNgRdgJi55wBUXS:7eJpJUVD1A8n0YNgEJi5aSi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048736, "uuid": "7bdd1cb6-8e37-4613-9cfc-e83acae5ada7", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048736, "uuid": "a8be2e78-314f-4c68-9d42-bdbffb407199", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048736, "uuid": "08157c0d-bdc5-4ca1-a252-b9ab008e820f", "value": "xnxnxnxnxnxnxnxnor1kxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6128f50e-093c-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771029035, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771029035, "uuid": "6feb6be3-ada4-4bf2-ae22-df4b46d148ef", "comment": "Malware payload", "value": "cfc0043473a481e632ed99dd6bdf138c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771029035, "uuid": "2ff4c5b1-925f-4ca7-a2b2-0b9f08d8bce1", "comment": "Malware payload", "value": "604d50fb0c440775292d8eb2f068f9afbd6614e319dd2f8c9e15836fa7a48437", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771029035, "uuid": "d6574d0d-44ad-4127-9b07-4357ab97fd6d", "comment": "Malware payload", "value": "abe8be663b6c372a32a24fab67123e8288f4c833", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771029035, "uuid": "79b64e3f-f027-4e2b-b842-727e53ebc746", "comment": "Malware payload", "value": "3a4ee8302fb3449a66d90b9525e4f3a1e994f620395a3dddca68d0dac67074d522d92254de7b5be7ef2f0c74758ca103", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771029035, "uuid": "3063e4cc-bd91-4d98-8fb1-4862fc9894d2", "value": "T15FD4232C816ADA75AB9C28B677ACC17E2133FB87694FFB8165F0D5047B47038604D39A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771029035, "uuid": "6ac6771e-4377-4fee-a59e-d93150c9d67b", "value": "12288:oYkiQprdFz4/PzSupPF32i/LYD8mBdILKF90xlEZ0DJ1JglIxI:RzOnel5KDZdILKFKxcKJ1ayxI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771029035, "uuid": "07c1d153-254c-4d90-b821-a62040f26262", "value": 618791, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771029035, "uuid": "0feeddeb-407d-4925-a4cc-090faaca05ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771029035, "uuid": "35fca222-a0b8-4ee0-b5ee-fc44f5acba86", "value": "bizy.mipss", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be43d23b-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037352, "uuid": "bf42d965-8309-457e-a1a5-304ffc398300", "comment": "Malware payload (Mirai)", "value": "9cfa9bbaa358d800c7f22305a22538c0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037352, "uuid": "a3a63e88-012a-4272-9119-fd46a6ae64ed", "comment": "Malware payload (Mirai)", "value": "60fdf6b774ab527caeb5d638cdc85f106021d4ede9433a20a7cebdfb9d313ee1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037352, "uuid": "ed216e33-db74-41e8-9aef-36973e7d88fa", "comment": "Malware payload (Mirai)", "value": "898084cb50839f72184e4674ca51c4aeb2b8eaf1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037352, "uuid": "823ab548-2ae2-4d72-ac50-b5e2110ee18f", "comment": "Malware payload (Mirai)", "value": "f28a47ddc7738994bdf857abe08178db0b162f6e0c76d49144dfcbe32bdc14bda72ca0b672e6d72836ad30aa8ad2f77c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037352, "uuid": "c0bacd8a-a34f-44f2-9e2e-6bc375aadb74", "value": "T113630242B4F73026DDF41D7078FE8DA29D8D3EF410DEA36699685798A3510D36BE0887", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037352, "uuid": "b3ea4da3-09b1-4a25-aedb-c5be63c2a0d0", "value": "1536:IU/l5P5W7XJrn+e03qudI4k2nZwTwPULXA65Tje/WtY:pN5PwbJ23qAI4ZudLXb5Tje/WtY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037352, "uuid": "ed60bcc4-c1c7-40cf-8d5a-a55960019b94", "value": 67140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037352, "uuid": "bf60bb9d-3b1b-498a-9857-66fe8830837d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037352, "uuid": "3823ab4c-ddf2-446b-ad07-76e1c6997fb3", "value": "nwfaiehg4ewijfgriehgirehaughrarg.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94c46bd0-09ed-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771105143, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105143, "uuid": "c240b7eb-c4a6-46b1-812f-74a3a77d8b37", "comment": "Malware payload (Mirai)", "value": "3a1f6d8675a6da122edf3bba4b201eaf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105143, "uuid": "c9040bb8-10eb-451e-9ee9-bb6a71ee3b37", "comment": "Malware payload (Mirai)", "value": "61849ee8c07d3a0f176ca8c28693daccc254f94df51924c8b66bbf01a7c916a9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105143, "uuid": "eb098919-6f4b-4156-9826-f3d6c7998aae", "comment": "Malware payload (Mirai)", "value": "d8cab7c071795f89de8e7d8ee2bcdff3894f9777", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105143, "uuid": "2756e476-11e5-46d0-8fec-1202800f45b6", "comment": "Malware payload (Mirai)", "value": "9d667060532eaa88e7bebb208d08b4fe97b035887e9371d331c41a344ff007568e510815930823c9ca8dd1924dd9b8ea", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105143, "uuid": "9fafadc1-c0e9-419d-855e-a86ae0810a10", "value": "T17C056C1BB2B374FDC057D43443ABDAB2A935B42502226E7B65C8D6303E27E701B19B67", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105143, "uuid": "18f04d31-5724-4080-a41a-3906d90875b6", "value": "12288:TKnWRlZPkK0zoBi+SQ4sCvD/NkH8HlMlZvv6vMb6DtdEkFEla+p/M+dzuFjpJykd:TK09wZM4sCkH8FIn6Eb6DtdiDpRV+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771105143, "uuid": "159b325b-5e98-4ab5-94ef-944c9e4e2377", "value": 871080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771105143, "uuid": "a2ffb105-c472-46d9-b53c-ecf72aae866f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105143, "uuid": "a6f1e665-b5d6-4c51-b801-1e62cd4bb7fc", "value": "data.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edc9570f-09a6-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771074798, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074798, "uuid": "991b1744-1e64-4639-b3c7-f8e8a55b3b55", "comment": "Malware payload (Mirai)", "value": "5c42c5aa0c5554ddd9adba932531e5b2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074798, "uuid": "da1caab5-5e14-4fd7-8fa4-50ba66eab3c4", "comment": "Malware payload (Mirai)", "value": "6566fcfa7146aa2216c1d1ad0dc62e65265c40294f1d3993312a7df88ad70047", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074798, "uuid": "69419d37-82ff-4338-8edb-6e9da39ac377", "comment": "Malware payload (Mirai)", "value": "74de9505090b637368270a91bac6796f0a148346", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074798, "uuid": "02fe3ab3-021d-48e4-be14-8d9d7c0dc8b2", "comment": "Malware payload (Mirai)", "value": "7dcf6435a7efe7f0e3b88ec4b587a341dced1e34ddbc841b513cf659d2d7f431153c6b47b02f0709acb47977ea629e81", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074798, "uuid": "b92c5d8d-53e2-4ac7-9cdb-4924781ba9db", "value": "T1B2C3F185BB6369D1C1A242BDA4C00AC387912E318FE317080699F674387DDFB1F69DE9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074798, "uuid": "16df23ba-d8f6-4104-bf77-82fc28213851", "value": "3072:OBb4K+nqsnSjZldbaUXGSgqTWo1OWqEwztlMMTnr:0OCDjXG9qTWywxlxTnr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771074798, "uuid": "060af389-5b66-4053-aab4-13705ad0c707", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771074798, "uuid": "73353862-9eca-47ea-90bd-87c1618a94a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074798, "uuid": "10f8fb39-5f79-419c-834f-b424a70ed0ef", "value": "xnxnxnxnxnxnxnxnriscv32xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ed9350d-097a-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771055660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055660, "uuid": "7c631005-af74-4274-aa9c-32ab0b53060b", "comment": "Malware payload", "value": "370fbcc6711fb983ae4679f02c5ac461", "object_relation": "md5", "Tag": [ { "name": "0APT", "colour": "#EA07F8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055660, "uuid": "a9272372-a1af-4b66-937e-9bca865e44a9", "comment": "Malware payload", "value": "660f0eab11b7fc3db7da4b5c103afba236d77cb9641b158f22852578632125bc", "object_relation": "sha256", "Tag": [ { "name": "0APT", "colour": "#EA07F8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055660, "uuid": "f18e1187-2fb9-4498-938a-1fa89ae5239a", "comment": "Malware payload", "value": "3c4c27ab353d658df0a26ea9cfcdc5e174d8665a", "object_relation": "sha1", "Tag": [ { "name": "0APT", "colour": "#EA07F8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055660, "uuid": "2fe94331-3ce9-4989-944c-9d3b454bf54a", "comment": "Malware payload", "value": "6ab4051e83ca1655a687e5e45c039830152d9b8e3791ca7ac43435fcc98ba35d85a8d87e834835f28d9f355e354d2d46", "object_relation": "sha3-384", "Tag": [ { "name": "0APT", "colour": "#EA07F8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771055660, "uuid": "be545123-f1ce-4ada-8374-bd4c9fdab8fc", "value": "T196558E01E920D979C7A310F0045FA3E889601A35A513DBD3EE6AED78A53E2539F1E737", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771055660, "uuid": "6355c615-1e28-488a-ab48-f51040949803", "value": "24576:G0Dtycbg8hGZy75NQ5bR5cwq6V7LooTcUEDFDDRLvypbK3szFbq3uxxg:6cFhDcPcwqqvo/UEDJVepbFbqexxg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771055660, "uuid": "735a7a2f-62ab-4a48-a876-1ef818c1f7df", "value": 1392140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771055660, "uuid": "b1ea8ea4-37b9-4088-a4c5-196dd14fb6f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771055660, "uuid": "75634e7f-9ab6-483f-bb1b-d9d49c0959ec", "value": "BAB6-D9DD-DFFB-0APT-KEY", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c57d433c-09b6-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771081602, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771081602, "uuid": "23d4b643-e25e-44ff-8180-03c5092b1048", "comment": "Malware payload (Mirai)", "value": "3ff068c4e8f18aee4c95eb1bd91962dd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771081602, "uuid": "f16389d9-5c28-4e70-aaa0-e955ec5feb76", "comment": "Malware payload (Mirai)", "value": "67582e0edb033e57dbc0d236a61199b688fc65c8c52fcc272ff16ca20428fd22", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771081602, "uuid": "5bc19ae4-e8be-4d88-b5a8-b9b2d294404b", "comment": "Malware payload (Mirai)", "value": "d23559b61f5cfff9237827dd46569632d3b6bca7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771081602, "uuid": "4f966e1a-a3b9-4c91-95ce-de64e90646d0", "comment": "Malware payload (Mirai)", "value": "a17478d25cd0647b376cf23219624753bf8864320f65e8ab4640ec38488cc7edaca79bd004cfa43598aa43a21de38294", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771081602, "uuid": "ca91a350-ab89-4db3-b0a7-af72f3bb57c9", "value": "T11904D706AF520FBBD86BDD7302F90B0129CCA81726B53B753274E924F64A58B59D3C78", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771081602, "uuid": "b80c2f68-9cd3-41d4-a0ca-8919fcc8cfc4", "value": "1536:H5Y8Sx1Px4sN5ZTanXIJTFIHaxKBd13ldw7ALUj/xZreUGSRYeUq8oPDtsHoP74N:WTZT44DMLmPRkeDtCoj4oUz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771081602, "uuid": "2800a3bc-31da-4259-8073-a56c820fe369", "value": 178932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771081602, "uuid": "58dcb6c0-5f60-4f5f-988c-a9e96702454b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771081602, "uuid": "848b4e53-b6d1-4edf-bbb7-4bada26bc781", "value": "israel.mipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "03ff55a1-09e6-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771101893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101893, "uuid": "ff6aa46a-8631-48f3-9c1d-ff70bbe1458e", "comment": "Malware payload (Mirai)", "value": "022535141063e25a45202de24e1f60e6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101893, "uuid": "732091af-6756-41ae-8d7e-d43f4fd767ec", "comment": "Malware payload (Mirai)", "value": "6980ea980e373af17b8e7bb6de51ac977f698c00e6b19f90fdb08428778d64a5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101893, "uuid": "2a036c64-f2da-4f82-a8e7-1ef7e625be21", "comment": "Malware payload (Mirai)", "value": "c82d629cbe048228dcc0563e758e373230e89d9f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101893, "uuid": "e82f429e-87c3-48a4-b2bb-148ee6da00d9", "comment": "Malware payload (Mirai)", "value": "607c14e105bd04e8a7001097c2b5821ff9429641fd3bf8fa93fe521e8f6996c3a2fc6e42d2b4dae6b86a1ef896174c4f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101893, "uuid": "586e1041-fc68-49af-a3c6-fc4a12ba9bb1", "value": "T14A63E646BD828E16C4D512BAF92E018E331317B8E2DFB2239D146F2077CB92F0E67556", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101893, "uuid": "2a292f26-0f72-4897-9842-c9acd7938876", "value": "1536:TZn3xRZOk3U1V6V8glRZgWBP/0GX+VQnPPI0iVITdGsGC:VZ9BSGGIdGsG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771101893, "uuid": "3342ee35-d7b1-473c-a4ee-ab812b562446", "value": 70788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771101893, "uuid": "569224c0-d449-4be2-a9e1-333cb7702703", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101893, "uuid": "ddb04afd-09b0-4d17-9369-c99dabef47e2", "value": "kwari.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a89eb1fd-09a5-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771074252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074252, "uuid": "1da763d1-e27a-4f62-b939-bf65779345e7", "comment": "Malware payload (Mirai)", "value": "403f895a306d25e5177b3ea0c656b4e9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074252, "uuid": "8f6ffecf-3f48-41f0-9a79-65c46577b2e1", "comment": "Malware payload (Mirai)", "value": "6ac687fe2d17458c25797df96cb5bb6655ea48613e81c277fdba94415bf108a2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074252, "uuid": "95fcf9fc-39c6-4885-97ec-1b7cf4774bc2", "comment": "Malware payload (Mirai)", "value": "3152e1815ea15a5edc53dfbf32a0144c5f9db7c4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074252, "uuid": "5c4b3f22-bd4c-45a5-8033-93d0c50456f0", "comment": "Malware payload (Mirai)", "value": "eb0c4c529a728f88607d96d97797c3d81f868cea1b4d6ef1ac4defdcef0775f6d67c7d6de9b1c5c9552a50d798907668", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074252, "uuid": "521897eb-723d-4f12-8d9a-577008c19b72", "value": "T16D93B84E6E219FBDF668C33547B78E31A75833D626E0D681D26CD2011E6034E646FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074252, "uuid": "4aeb396e-cf0d-4873-9f23-ab4015433375", "value": "1536:B2RVU7sGKKx779Mm+U/IxmaxmDnmQ88Oz2tbL4sNYGffem7kW:kVYTx77mbUDOz2tbLdNLfBkW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771074252, "uuid": "275aa4ba-1b11-4de1-b28b-d1a6c9504764", "value": 93608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771074252, "uuid": "2453b864-616c-442b-bd29-7a29b9bc2873", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074252, "uuid": "875dd68e-0453-4191-9f03-7ec8cad77261", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92cd0c7a-0997-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771068203, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068203, "uuid": "830fd1d4-7993-4fc6-8d71-d0accea167f7", "comment": "Malware payload (Mirai)", "value": "605f69c6a57eacdd4f1775db0a3eef82", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068203, "uuid": "737f2d68-a0e4-4aab-bfbd-0dd18e42d1e2", "comment": "Malware payload (Mirai)", "value": "6ae86053e263af3ad1c2e0278cf1d5298b48f72ffdc5a2b351b98550a7aa1c78", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068203, "uuid": "306cbca2-b98e-4839-b6f5-17f516e32efb", "comment": "Malware payload (Mirai)", "value": "f5ddccf1e857f06c9a24d932ac6df0529237af7c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068203, "uuid": "ffca9120-7be7-426b-9f7f-9dbe43b03bbd", "comment": "Malware payload (Mirai)", "value": "8a4a10eb904e61c88e0087fa748947a9c0801cd44e10a15340871950f233aaf9696030fd95e85e060db46134b86214c5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068203, "uuid": "1d13c16a-4ae9-4ea1-af6c-ca7fbaf4d4ff", "value": "T150148D68FE4F68D2D2C7E37DAE4A0FA231277D749565C0B51A00A29FD5EAFD488C0613", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068203, "uuid": "42977d46-bd04-4867-bafa-c9101a2482f4", "value": "3072:badBpAIWIfbEdOcdY3rZiigZ2eNRzPxm:bOVfbEdxm4iub0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771068203, "uuid": "c901e9e7-0667-47de-a262-0a0710685eab", "value": 197488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771068203, "uuid": "ba3118b7-ce73-4efb-945f-2280ad723840", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068203, "uuid": "1ecef084-fd28-4f1d-a39e-b08ac8f1f679", "value": "SecuriteInfo.com.Linux.BackDoor.Fgt.6204.7445.2559", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a87f173-09ba-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771083248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771083248, "uuid": "dae9ede3-1328-4541-a694-b070ffc2105b", "comment": "Malware payload", "value": "82dd39a0c280d2c3c7d45459168db230", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771083248, "uuid": "4a27a007-76e1-488b-a837-cabce065af7a", "comment": "Malware payload", "value": "6bd1f3734896ee37b26a838fcc20c5a9915f58ff9bad49a9debbfe5a42b988cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771083248, "uuid": "ae9cda6f-4db6-41d1-8434-546042003e5c", "comment": "Malware payload", "value": "38d08f7ee8122630570f22ffeff6e143e2073d72", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771083248, "uuid": "038b305c-9315-42a5-81f5-7460d336a00a", "comment": "Malware payload", "value": "e6924a0d3b70971bc20347ee7784773e0dca83ffb62f4fd22f1522e74cf1e551e9161e3a5fc51703a3a39828c92664d2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771083248, "uuid": "86c2a7f9-fe3a-4fcd-8c81-336600cc8005", "value": "T16845332B2523DA3997DC58E2A7DCD26A1065FF8B884DD79A30A0C041FB5722D610D7DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771083248, "uuid": "e77b87c6-27fa-4deb-b9db-b5a5e2135187", "value": "24576:RzOnel5KDZdILKFKxcKJ1ayxqFz3bhAGc0iYdUTdH9NydY46jxhnyad:R9XKNdI+FKTxqd3bhg0iYIddNydYkad", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771083248, "uuid": "f51bffdf-d1a1-4324-afc4-a5c1ace64d2b", "value": 1221959, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771083248, "uuid": "13239000-31f9-4108-9c73-1c573d62c032", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771083248, "uuid": "4775577d-23bf-4fe4-9d80-f908e406cad1", "value": "bizy.mipss", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8e12226-096f-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771051194, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771051194, "uuid": "dffdfc0e-97e1-4275-aa54-d963096b6da1", "comment": "Malware payload", "value": "32ac4444364a71a232441fb8091be32a", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771051194, "uuid": "ffd1cded-fbf0-4a4c-aa66-ced7c4f1357f", "comment": "Malware payload", "value": "6d3fb4f6928ad7f0cbf89778e688d67c2793549ab35a3b900afb0a323fb6d82b", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771051194, "uuid": "3101c1a0-0d64-4d8c-85eb-4ecd0db4b310", "comment": "Malware payload", "value": "e140b580842bfd5afa4c306fa32ccd4d5cfdb0db", "object_relation": "sha1", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771051194, "uuid": "948d457e-a217-4f78-af5e-1d8edf03f799", "comment": "Malware payload", "value": "f31424408c19d5432260e3d9c0926df8419a600fb2c1b277d9a6b07462e56d06b56a33b5716c3aa2814bab4675b7a02f", "object_relation": "sha3-384", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771051194, "uuid": "c7ba7bec-12e6-4e42-b906-f1b7297c2598", "value": "T1262412C536B7E678E8C6233990C8F45311643D507CC9BA401512EF92AA7EA6FE34E58F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771051194, "uuid": "b78b877e-a8d1-4d5e-ab8d-eb730cae6f95", "value": "6144:qjGoL2Rq6S7aAj6ZfXZA9eC0Pph8OlM6YQC/w:rosCOZBBC0PTaxr/w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771051194, "uuid": "3fc598ae-a082-451f-9599-4398de7ae6d3", "value": 227423, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771051194, "uuid": "882ee74f-1c34-4ca1-8e91-f8c9c9141344", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771051194, "uuid": "88a4b210-72f8-438a-bad8-d7276f1fc481", "value": "Chat logs between Capital-coins investment platform exchange and Joanna.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68ea1665-0977-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771054389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771054389, "uuid": "750e44e0-027c-400a-92de-52ea2280ee6a", "comment": "Malware payload", "value": "22942187eb564f3c0da3e7d549ffc329", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771054389, "uuid": "e509ebe5-6f9a-43d3-8026-007f0a8599fb", "comment": "Malware payload", "value": "71c88ae3d1f5fbef1250506f433526b0f65624bfe4ea3bd05e0307c24840de8b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771054389, "uuid": "e3cc7cb9-3b2e-44a8-b8e0-b1c4849521fb", "comment": "Malware payload", "value": "e38053bc14a57eea6d25ae7da86ee9244376b515", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771054389, "uuid": "b98dd53f-ec61-4212-af26-f68319c360dd", "comment": "Malware payload", "value": "9953f09f655e76b138c2251d13bbda1d4059e838e947976114b89d99d2ea5677e75eb0d2deab022b152772c5b0a2b113", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771054389, "uuid": "4ac1e2fe-0c6b-44ae-941f-01f813e1eb07", "value": "T1C425238CF8CF3C66D7EF88DEF34913894743EC58C958D8E311236A71B121E68AE26955", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771054389, "uuid": "b45464c7-b9cd-43a0-b72d-193449c622a9", "value": "24576:VC3SCD5aVjKXpb9KyHK7nIgJtTpYIHzpquVF2TFl2w4rnglV6r:VTCNmjK5bBKLIgJtTWWz48F25l2w4rnr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771054389, "uuid": "51e032b7-2607-4f00-a52f-f0cde63a6d29", "value": 1032067, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771054389, "uuid": "174a7649-8dc5-40bf-bddc-70ddb3c64edb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771054389, "uuid": "7e6ee6c8-2480-4de5-91e7-0f914bb6ebb3", "value": "bizy.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bcaea93-09b7-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771081747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771081747, "uuid": "d3f45f51-d6bb-4de2-962b-0d320f806ab3", "comment": "Malware payload (Mirai)", "value": "0bc1ffef5db7e5c9774dbb960565b84d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771081747, "uuid": "611fe91f-54f9-4fd7-b93d-cad4b0ef5518", "comment": "Malware payload (Mirai)", "value": "7205de836fde1eb31c903a31ce94f8de8b1cfe51b880a04b63e0050d29a782bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771081747, "uuid": "8adaa659-7d7a-4aa5-b12f-879d6c998a33", "comment": "Malware payload (Mirai)", "value": "f6eaf63a560d7dfc99f27504ddae748aee2e7c01", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771081747, "uuid": "4b679986-cd2f-4c87-8993-c712b988155d", "comment": "Malware payload (Mirai)", "value": "7326f7dd585602f4bea427b0703a457d90ab84af5cae8543b3e71d930ac1f4bb3e527938c24aa7096e18c7af098ef919", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771081747, "uuid": "9b6aea81-e8d0-4b5f-ab25-6be275910a05", "value": "T16CE30A06E951CF12D1C211B9FF9E415D37136F78E3EE72029D24AFA067868EB0E7A116", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771081747, "uuid": "dbde168f-143a-4c6f-aec7-645acc84d4f5", "value": "3072:Jc447oQggWOfarK2ag/KdcgG9fDT0QCS9nF37/rPu:K4LDyfardaH2fDD79F37/ru", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771081747, "uuid": "a612c242-f580-4323-9b4b-ac614b3a7f37", "value": 147428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771081747, "uuid": "bb964764-7f2c-4bd3-a623-a292af122683", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771081747, "uuid": "33c77bb2-6b96-4173-aac0-5a65e69ab734", "value": "israel.armv6l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f15ac612-09d8-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771096279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096279, "uuid": "abc95d28-64b5-496e-9041-2974dda6ace7", "comment": "Malware payload", "value": "e52455a8dbbb1beec20a7ced41bd6af0", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096279, "uuid": "46c8c5e4-0504-4c11-92be-b507d482f624", "comment": "Malware payload", "value": "72338acaf95cf0e6347393b45d080bde00964a23023f39f563c971a8158d1df0", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096279, "uuid": "25d1ebd9-0fcb-4e4b-b83b-f7a63cb2a9c2", "comment": "Malware payload", "value": "1643c6665365107f1f90f31225f36519a6ac285a", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096279, "uuid": "7936f40c-ac02-4cdf-88e9-f9fe8639a8c5", "comment": "Malware payload", "value": "040a910a19f1294488d278b3a24014caaab99ee7add35d88c0425d745c541eda9b7ce36387c1305067408d3dd1ac1d17", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096279, "uuid": "991fe761-7551-46df-aa3d-9495e00e0d4f", "value": "T10131848F71B04A69A5CCCE4071E16DC8E78599A97FB00A32DDD10EEB44C9E4437CDAB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096279, "uuid": "8f345004-3c8b-4968-ae14-eea62551d334", "value": "24:MIgeHDd+R56qO1Zdit848BM/hIIlI1bZINI2wxhE6fyGUo7cXtgKmMdJ0Z84+GPd:Gw1i1jo7+8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771096279, "uuid": "1500b3ef-1e3a-42a6-aa04-7cfdc4ab4a82", "value": 1873, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771096279, "uuid": "0bcc7a22-14f8-45c0-b74e-c3e151f398ad", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096279, "uuid": "39d0b1f4-dfa7-459a-bf50-dbb6737f034b", "value": "cat.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74d81e79-09e9-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771103371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771103371, "uuid": "40cc8ecc-1c2d-40ae-adc0-499a64eac200", "comment": "Malware payload (Mirai)", "value": "66b529b7180f2a0679f23e63767e8828", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771103371, "uuid": "d17d15f4-a8a2-433e-b077-a6cfb435466d", "comment": "Malware payload (Mirai)", "value": "7285cbde2ac1379d50bf4c87d84c516740859b1d981e81c6e74b2940edaa44c6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771103371, "uuid": "464f4193-143f-4f4a-a6e7-36dbd8d5b6fe", "comment": "Malware payload (Mirai)", "value": "c6a3ac76fd7055655f81d21511138a1c8fa3b925", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771103371, "uuid": "afe561b9-e521-420d-bf6a-8434f84b3665", "comment": "Malware payload (Mirai)", "value": "d4a1856421617aec7f948817632417a751a311c69cd9e82bcf3795c8beffcd7ef0284c17607cbbb88f6a27fa85f3a9fe", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771103371, "uuid": "e61a9baa-c2f9-485a-85ae-360d836ca582", "value": "T1DBB32942B70E0F03D1632DF02B7B17E2979ABD9114B4E584712EFECA42719F62281ED9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771103371, "uuid": "abeb9a55-5319-4220-a852-8a4759b396dc", "value": "1536:Dh+oyAcmpK2eKloG2EBv3Mt9HQ+hKayF/ZOdql5O+nMHQUIppYjbQPoM90D:DkijiUsMVYE5O+MH4sLD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771103371, "uuid": "64ccdbbe-aaef-42dd-b94a-7a2ae5b2ef72", "value": 110212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771103371, "uuid": "3ce16904-2c08-4bdd-87bc-8df484eab98e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771103371, "uuid": "d15ebeac-3cd9-45e2-af98-01a50393d23a", "value": "data.powerpc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe3a7e47-09a5-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771074396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074396, "uuid": "8e71b686-9ee0-42ff-8ab4-e288d6c2ea19", "comment": "Malware payload (Mirai)", "value": "62425251d256c09cdd3c3121701a5c73", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074396, "uuid": "81e10ebb-0982-478a-ac10-ee8c3d3aea4a", "comment": "Malware payload (Mirai)", "value": "76c2fd1f54711c66d37ebe3bfad62895dff1809fb811654e601cf0291298c16f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074396, "uuid": "f86dd774-396d-44c1-935e-3ed6c5fb41a6", "comment": "Malware payload (Mirai)", "value": "b6189ea9452f77b9055542c71665378e4e284668", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074396, "uuid": "5db15580-868e-4d05-9ed7-35c1186b25fa", "comment": "Malware payload (Mirai)", "value": "1a0ec8714c91de81b014bd0dbfb3df9a065826f21c0a4472ee95331c187b42b9a926735174b86512a099d7cc33bb6db6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074396, "uuid": "b47bd415-2357-4031-a0bb-04d6c87ef080", "value": "T10ED3CF32E0086DA0DD2117B43476597C0340DEB40AD59243EFBEE5AE28B7DA57DEEB60", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074396, "uuid": "ad960531-6c63-409e-8fed-448211ba037d", "value": "3072:jNOFV2mOAc6NBmjOd1CVOHVv3WDxGGRhaUNhkv0Z16:xOFgpOEoVv3MXL5NhGO16", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771074396, "uuid": "9e8b0f68-b80b-402d-8627-726128f77f78", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771074396, "uuid": "399ecd70-199b-4f17-b54b-864f7f3e3a46", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074396, "uuid": "5d921b51-f748-491e-b4bb-5cb947e41ebc", "value": "xnxnxnxnxnxnxnxnsh4xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b42de08-09d4-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771094336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771094336, "uuid": "cbbb2bb8-c7a1-45db-b669-bf5e5e46d06e", "comment": "Malware payload (Mirai)", "value": "5e4ecd90ef10f6a806f9bc0fa15b600f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771094336, "uuid": "292bc9ce-14ca-4191-834e-7bab36a2a3b4", "comment": "Malware payload (Mirai)", "value": "7a5101b02f9bee20a8b6647ee25799d958fcbb06d378dc55295a1c37e9ad51c7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771094336, "uuid": "171becef-960c-4712-b375-375c0cc25f55", "comment": "Malware payload (Mirai)", "value": "36146b86773e705d42964724eeb8cf8fc8e22ee4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771094336, "uuid": "eb4ad860-4a03-4ece-bc85-71c4270d0ee1", "comment": "Malware payload (Mirai)", "value": "8561e8a4e677fe9155f75f08157faf1133ccd5211baf95fc43d8ffdbc955a049aae2e381775566a001b986678e072a96", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771094336, "uuid": "c1bbaef8-35e4-49cd-b5c6-9317a75973ba", "value": "T1F004A81A6F228F6FF269837047F34E30975976DA26E1D684E1ACD5141F202CE641FBB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771094336, "uuid": "ab90e0f6-c564-42ef-9de2-cfaff1c9e64f", "value": "1536:KSQ0IVf+rfGWCoP2qS0JO81BZUPnlXRhjiKA5eVZtnltrJyuWMTpRTA/2dT/JW4:KSzzf8qS41BZUvlXzjlA2tr0MTA/2F/X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771094336, "uuid": "bffc007c-f90b-4fcd-aa1c-b4e0b89ed9ee", "value": 177332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771094336, "uuid": "83448d72-18cb-4b9e-8faf-b465f728a3a0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771094336, "uuid": "4e5acf42-8034-42c9-aaee-c170a57f3ddd", "value": "israel.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e569a38e-0985-11f1-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1771060610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060610, "uuid": "3d27fe3b-c2e4-40a1-af31-5c6067f99ce8", "comment": "Malware payload (AsyncRAT)", "value": "e6b3c60f3287a1bb533624a4b05af364", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060610, "uuid": "71d6d195-0d2f-4c1f-9874-e53170e0625d", "comment": "Malware payload (AsyncRAT)", "value": "7e0102c1b17b939cccd283cd8a8fe771fa5c7e16d3e4f4d8c095fedea18442cb", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060610, "uuid": "bc1f90da-5654-4eff-a233-39cb12354a8a", "comment": "Malware payload (AsyncRAT)", "value": "6921a68e1c96f33dc6c81eeabe6111f7f0de4a11", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060610, "uuid": "c8050819-dc83-4893-854a-9d2f1ad47269", "comment": "Malware payload (AsyncRAT)", "value": "6abe2026dfc9e4fb1163774f8159f23093c90c70af78419551702351c6b041ae480f16947f023911a44412a1458f6002", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060610, "uuid": "15434d3d-a0af-4dc9-9b6f-c5fa45c664fc", "value": "T177636B1C7BE94466E1FF9FB41DF57212CA39B7231903D25F24C9028B1B27A89CE416E9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060610, "uuid": "9be40369-91b1-413e-813f-ae716c8a48be", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060610, "uuid": "aa2f954e-90db-4ce8-844d-09a5b2f802a7", "value": "1536:kopln8lKPT7tG6T7bP7lgBG5mbXSwt6sx6SOrQ+gEV6:kMn8lsg6T7bPhVmbX7Px6SOr1g26", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771060610, "uuid": "830b180b-4740-49b8-849c-79cf19ee5c55", "value": 69632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771060610, "uuid": "0d1368d6-e234-4746-867a-1f59c65617bb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060610, "uuid": "b5be5a3e-01b6-4473-8613-9283dc34d300", "value": "7e0102c1b17b939cccd283cd8a8fe771fa5c7e16d3e4f4d8c095fedea18442cb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "72d67a72-09ef-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771105945, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105945, "uuid": "5600781f-0794-41b2-ad01-f3d55ceea46b", "comment": "Malware payload", "value": "ea701bcb0fed223a64a840829872fd10", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105945, "uuid": "0026f41b-a1b9-4258-9420-39a368ca90dd", "comment": "Malware payload", "value": "7e1af1415909ff1488ecde4f2382a7c246333a5ea3f6d2d4e3154080a5fb15f5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105945, "uuid": "72d58b40-a487-4f6c-b523-c9009d8781ea", "comment": "Malware payload", "value": "d9a6baee25094ae4836a6b405a52bcb70434f945", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105945, "uuid": "5a6ad29b-46ab-4f8a-8103-1111fd8a033e", "comment": "Malware payload", "value": "be38e726a22137bf18830c53e2a47db39ce87567184878da17d00ef85422f85e32cc5736d7cc808ea5caa83a255b343b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105945, "uuid": "f48d9ce9-f5c0-4794-a1c3-3ecf5f9735b7", "value": "T1B6C65A51FA8B68F5E9031831415BB23F63315E048B28DBDBFB547F6AFC7B681192A205", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105945, "uuid": "3ac0dec5-d21d-4eb5-966a-08ce19e97ade", "value": "4f2f006e2ecf7172ad368f8289dc96c1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105945, "uuid": "f6a689fb-2130-4c09-90da-5e49e12cbe0b", "value": "49152:DHVgzQb+WYSaZIogVhfUphwfueOVH0zwl8D+hap1yCNW+zZvDtQ5PBQkQkCDMmDW:rCzQbgZsiUp1m+zB/k1AmeXQ9q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771105945, "uuid": "ca81a933-fa3c-4c23-a005-3218c94beae4", "value": 11670528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771105945, "uuid": "4c908c39-c5ab-41c2-b7e2-075a43b64358", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105945, "uuid": "a104ad20-9907-4322-af1c-f64c15aa1fc4", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84f48b3a-09ab-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771076769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076769, "uuid": "e8f236a3-13c2-499b-9b44-a940c455840d", "comment": "Malware payload (Mirai)", "value": "8b41a9ae867d8388d5c2b3290026c84e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076769, "uuid": "e7fafd20-7e88-4f1a-8ebc-7424085017b1", "comment": "Malware payload (Mirai)", "value": "7e615ff22ebe50de9f814d950bde10a0d107ac05e75c4ad832413d7ae6c03ec2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076769, "uuid": "fc728cb3-559d-4a67-beed-3c793391f617", "comment": "Malware payload (Mirai)", "value": "adbf89dae8d62f38a4ebe6bff99d13b21ca3824c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076769, "uuid": "68c4576e-8b5c-42b5-9211-6475551d5a15", "comment": "Malware payload (Mirai)", "value": "90f17642e296e365b0f3394673c7e22dbad982e87be60fd307ce82102e35490af783a361c06b8192517911e375ae06cf", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771076769, "uuid": "49342d55-8074-4de4-bae2-8c45453e4937", "value": "T116F44906BF409FEBC4AFCD30493EC35715DDA9D712C5A62A71FC4A8CBA5921A4BC3588", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771076769, "uuid": "5187a4e4-f171-4af4-942e-ec6f12bb6b48", "value": "12288:9rjId06FDJQ62CChwRpTbJCQYAGWCtdI/e519V+7TqUviJKz7KXm4E+8pm8qPbRN:Y0roW1r271+kg5KpxFqq4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771076769, "uuid": "716e8433-26d0-46b4-88cf-e8d243aebc18", "value": 775413, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771076769, "uuid": "07fc7c10-76b0-41fe-a4a8-aa31e9e9d163", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771076769, "uuid": "60399ba2-829d-4e6d-ba7c-009306abe4ff", "value": "mipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69885fa9-09dc-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771097769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771097769, "uuid": "4d92c819-6484-40e9-b586-739671344295", "comment": "Malware payload (Mirai)", "value": "28215fe333aeb2860fddfd17a23fc6c8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771097769, "uuid": "684d057e-f152-4859-9a97-dbf337479395", "comment": "Malware payload (Mirai)", "value": "819c9bd4817be5930309817b24d71a867a3e71af6385ba8a3b52208dfd2e9021", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771097769, "uuid": "bead7a58-e3bc-41bc-b090-b1e7ef304868", "comment": "Malware payload (Mirai)", "value": "0b87a8b5c61b6a5ad864f192621e794ba0b4e2b1", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771097769, "uuid": "a8e8a6d1-ed48-41d1-8356-0b3608e3d3ca", "comment": "Malware payload (Mirai)", "value": "cc227138cea51469dd6b824d5baf96981b92118b0019ae73cbdfb9ecfc2135eaa98030000abfc29427425b1815cbc425", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771097769, "uuid": "2c4ada62-830c-4902-9860-92e1bb0279a8", "value": "T103E3FA06E951CF12D1C211B9FF9E415D37136F78E3EE72029D24AFA067868EB0E7A116", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771097769, "uuid": "71d21c4c-4be2-463a-87d3-78a7e391819c", "value": "3072:eIZTQ0fMOfbSPq7aV3dYCM49z+kNECNe9FHgir:eevxf+PYaDn9z+dwe7Hgir", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771097769, "uuid": "55c27dc2-3f53-4baa-a963-d73be97171fa", "value": 147448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771097769, "uuid": "515b9cb7-0d45-4c49-8eb5-3fa34721ed18", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771097769, "uuid": "e45f6b66-6b08-4812-ba02-2bc69c5162fe", "value": "israel.armv6l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0864b412-09e6-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771101901, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101901, "uuid": "7dbe12ea-200a-45ba-ad9f-03b146c80cfc", "comment": "Malware payload (Mirai)", "value": "de31a2ecbff6fb4749c67ef404423ea5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101901, "uuid": "162d2f7a-93a9-45aa-a8cf-14690c62b4ca", "comment": "Malware payload (Mirai)", "value": "8323dbc476d4dd63075a0512394b0695d1093bc2897b972d43f5aeac6dbcabf3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101901, "uuid": "eb437a44-2971-46bd-b259-f1874b77df6e", "comment": "Malware payload (Mirai)", "value": "0260633300fea8e96100f76f3256caf4f14f1385", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101901, "uuid": "63c79da0-fc70-4bb9-9505-62452bb63070", "comment": "Malware payload (Mirai)", "value": "0b10644f999b585ca07fc18dea16cac875f6e3186861272aa0149a03444737a2b5c37373f169feac5775234b4092b363", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101901, "uuid": "a8673838-7341-4a9e-8ee7-715984d5fcd8", "value": "T16F434B0232680E17D5A21EF5353F27F083EEED9121E4F689254FC796463AE33458AE9D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101901, "uuid": "de9e33a1-c8df-4ea0-b70a-2cc5802d00c4", "value": "768:vETst2s/uhZo7Fgbb1vJdQ/uQ4GWLK5302vyeLr6QjMXjhu6keoSnuNRvVx:2hrb1TY2cB2foSnEdx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771101901, "uuid": "a7181f22-8a5e-4a7d-b0bc-fddcdccbe099", "value": 55604, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771101901, "uuid": "1765c427-02d8-47bb-8b62-c1ff5c9430da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101901, "uuid": "141ec9f7-b4eb-42b7-9926-22133b6606c0", "value": "kwari.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89bf5774-0997-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771068188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068188, "uuid": "0f3f1b62-faa5-4a97-886f-4457c87ba908", "comment": "Malware payload (Mirai)", "value": "3a803f13f69a9d848607c4ff087bf51c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068188, "uuid": "2bc26474-23b5-44b6-a550-20200d38171a", "comment": "Malware payload (Mirai)", "value": "84401833b9107cc6c2c378194f3ed1c3f2c8e24abec0c892f85e22170e0b3a7b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068188, "uuid": "3e692307-50eb-4e92-9da0-b88f34d56cf3", "comment": "Malware payload (Mirai)", "value": "d7e355d42e9124b8218a89cb6dd76e3944eda14f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068188, "uuid": "dc2e18f7-d73b-45fe-ad7c-9c93599530b7", "comment": "Malware payload (Mirai)", "value": "13d4db66045e444cb940eb367797ee8b78ae0e9f78a85437f0ccbb8098bcfbbe5cffd0b0eb6129ca9def14e8d0e9914a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068188, "uuid": "8a5275d2-434d-473f-a5ca-73472cad6779", "value": "T194630267FFDC1BA8ECD92AF407AA26DB13519035507380E819EA5C85C59FEB1119B8CC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068188, "uuid": "a7fcbad5-a741-4a5e-a9a8-d48fe036174d", "value": "1536:Jr7MbwKNGjjH+Xq34n/q8Zu41zmX3sDgchjrPY:J7Mbp2L+Xqdfoz2sHrPY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771068188, "uuid": "c2f55ce0-1732-4a47-98fc-b510ca99e1b6", "value": 70852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771068188, "uuid": "59824cb7-2374-43b1-a3f6-be9d80b8b854", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068188, "uuid": "8b46e906-ef9c-48ea-a7a8-0946198489fa", "value": "SecuriteInfo.com.Linux.Packed.2037.11903.7724", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2f31a30-09c4-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771087665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087665, "uuid": "bfb6284f-41ba-4a1d-8f50-370861b467b9", "comment": "Malware payload", "value": "61775216485fb3db7f988bab86780f91", "object_relation": "md5", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087665, "uuid": "1ae03655-bf64-4827-b6c5-5729eb67c9ad", "comment": "Malware payload", "value": "851c19a2b56216bb8a7b86233bc65dbcc0ad0ed4db33ef00cb21d2a45b4128a3", "object_relation": "sha256", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087665, "uuid": "23a8129e-76f6-480f-b21e-b56fba88c5a0", "comment": "Malware payload", "value": "f7c6262c8beb1ca60f75ea58003628e3343f73d1", "object_relation": "sha1", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087665, "uuid": "66c4187a-83c1-4de4-9dff-1dff073b6c62", "comment": "Malware payload", "value": "0ef8f9716943693bd2f5ed19a86045f150b5f1576b4b05650fdee3ca83d664f57106bb2c0ade8ecb39daedee34d4ee9e", "object_relation": "sha3-384", "Tag": [ { "name": "bat", "colour": "#2812F5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087665, "uuid": "b71cd9a3-1cb1-42d4-91db-563dca3eaa89", "value": "T12B43F71511AC39DBE8D772013A8A6C10519ECD05A1FDE418B50CADBE02EB750BDBF7BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087665, "uuid": "59570e0f-1245-42b9-bb42-c29be20a935f", "value": "768:UYG71bJu0Z3nMF54qRvP1qQKBbxcBg0XMCA5Rwyk7/0Bd:zGJbJu0dnzavPxKJxCgrCA5A7/6d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771087665, "uuid": "d4411ecd-e28e-4272-ab2b-7e41a754989d", "value": 60368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771087665, "uuid": "7d907cda-9092-4d62-8270-e48356f09385", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087665, "uuid": "eb1b45fb-1755-4236-894f-972c86f7afe3", "value": "SystemUpdate_7537.bat", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52fbc722-093f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771030300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030300, "uuid": "630341c6-a768-4cd1-b743-c05c05d05f8b", "comment": "Malware payload (Mirai)", "value": "85d1edb63cff6cd60472d1e17518c613", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030300, "uuid": "0b502184-93db-4c19-97cb-1d2180fea3fb", "comment": "Malware payload (Mirai)", "value": "874d90524d5a28d50f97943d35f86c753f1699f317c8120401ddda4fe8a8bdc4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030300, "uuid": "8344e737-2132-4919-a802-cd0bd2cc76d8", "comment": "Malware payload (Mirai)", "value": "13ae36a4e4507ab91ce2021718b3268415149727", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030300, "uuid": "849aeac1-a67c-4083-9a3a-5ad6103ebb25", "comment": "Malware payload (Mirai)", "value": "e24e58569c41e40f5edd9b0284e59b0fdf5f5633c2cab5d3fc820829e027624bfea1e5af6bb22bf796fb434c6d398ff6", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771030300, "uuid": "a9fd0e6e-e51d-4f49-9afc-28c585d002c3", "value": "T11233098AB8029D7CF91BE6BE54160E0DB92177C111830B2767BBFDD3BC721A45E12D85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771030300, "uuid": "25cb345f-8605-49da-971a-d5a72f7313f4", "value": "768:vcP9DRxFpKqI0oDTasLtPK+aolUGhS4+VZXIja+wpcqeWT28T6MJTvzEfjXOZL+G:EyKd4+rYjRileC28T6M1EfjX0L+ad", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771030300, "uuid": "bcb65911-0dcd-4252-8bb2-9d2b44e11722", "value": 55024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771030300, "uuid": "bef972b6-bc4c-4821-ad23-2f2f4dc4adbd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771030300, "uuid": "db89f29e-6bb5-4b11-b064-1928e3cf89ae", "value": "boatnet.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33cab728-09a8-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771075345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075345, "uuid": "8a602eeb-5dde-4639-b64f-e1dc5ed24cd9", "comment": "Malware payload", "value": "a0449cd30bcd9d8eeb9c4e4528299dd0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075345, "uuid": "2d66daa5-b292-4525-95fe-4b1f106aa439", "comment": "Malware payload", "value": "885b57ac755eb84c505fd41c55bc451746b29fb8101a8e1cff74d46e85a80bee", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075345, "uuid": "4672ec61-bcc2-41d3-ac9d-e4423eb30505", "comment": "Malware payload", "value": "0d501cd70e386944c9c89c8ca17c1bbe06ab3e87", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075345, "uuid": "d715d7ce-3664-46b9-a126-55014b067c28", "comment": "Malware payload", "value": "dbb06dc61a3b9c2a20da83a04db0d17fcb8dd90cba08bf89f3c3aa624cacab5c8f471701077ca14407a38c5c4ccbed60", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075345, "uuid": "cb810121-995a-46ca-abd2-853e69abd815", "value": "T1F31633BE4B8AD8B3F529C234D151A7A10F90B1F4CD8815B367DFAE371B1217687AA407", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075345, "uuid": "e143d3e5-4bf1-42ee-bfe2-88a6b71c290a", "value": "e4e7c560e86639269dcf5a60c8dbca8c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075345, "uuid": "5fb0a5fc-bd1e-46a3-952f-659f48b8aa4d", "value": "98304:44m87uj+73Mj5nZHoMBncpGNmbmy60yALdGCK5oUTlGLyd:44moe52MBcsPypytP2UPd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771075345, "uuid": "2160821b-b121-4832-9d91-41feba84551e", "value": 4109312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771075345, "uuid": "8e527d76-856a-44f2-aeda-3bf260fdb73f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075345, "uuid": "59328c81-3298-46c6-9290-8f517175d3bb", "value": "SecuriteInfo.com.Trojan.GenericKDZ.116158.17734.5168", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c266486-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048730, "uuid": "bf46a4a0-cf36-43c5-9b53-e4ccf769507e", "comment": "Malware payload (Mirai)", "value": "59c8b1fc59183aa235ffaeb5e7ba6a79", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048730, "uuid": "db6d491a-6f1c-47cd-b557-78423b399116", "comment": "Malware payload (Mirai)", "value": "89092a1e9f15116b7ba745a1b532e8cfe5229fe10ca4b5fc6e95a9414c110566", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048730, "uuid": "605636ce-76fe-4f38-887f-56e31678218f", "comment": "Malware payload (Mirai)", "value": "28b8d9882ab6a08a3b78b98ee66a8a5d762d195f", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048730, "uuid": "5f49c7ea-b195-4ac5-9542-39fd2d2d4847", "comment": "Malware payload (Mirai)", "value": "7daca1cc98fd9eabac3f7f6f4caaeea848547e1a4ee17223f4052fdf903efee61b3cd0d9c0ac347cc66bfdd8f158f523", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048730, "uuid": "156482cc-29a6-423e-9c1b-74fe7acdcffc", "value": "T151B3E095B210AA45C02672FCB187099093B17E7B4B9A150B44B3F9B46DBCCD47E0BEDA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048730, "uuid": "dd928e7d-c10d-4a67-bf1c-9b5f5fd88f8a", "value": "3072:jx63zpjhO5z01nCU375P5wk5SOez7wub:as5zqhr5Nzy7wI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048730, "uuid": "1209ae8e-4f74-4d3f-a85f-54410c7acc58", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048730, "uuid": "49feba84-1f6d-4b61-bb7e-5cc7fea1045a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048730, "uuid": "3d146f98-8294-484d-9a0b-5e3e5115a3ec", "value": "xnxnxnxnxnxnxnxnriscv64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ad28d21-0942-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771031709, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031709, "uuid": "e687fbc4-88b5-42ff-8b49-8362f161cc22", "comment": "Malware payload (Mirai)", "value": "de5a33002b2c823f1da04ae19f218ce6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031709, "uuid": "918f03da-a247-4fb0-9a1e-79669304582c", "comment": "Malware payload (Mirai)", "value": "897bb7fbfc6acb35b7ecb2e6f1ff59c33a0723bb0f0aa09244fbc5855e6d3878", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031709, "uuid": "a4915c26-872e-4910-bdb7-26c12107863a", "comment": "Malware payload (Mirai)", "value": "3d4fd6d055aa543477cd73377c2f63d478caf034", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031709, "uuid": "0896fd5f-f02b-4e3d-aace-fe64316a0d8e", "comment": "Malware payload (Mirai)", "value": "29ad710b44410b58385a3cd5b828458c2277978f1985d727999c36dd611ae20530da4321262c12b8615547b32c80a6f1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771031709, "uuid": "8848368b-ed61-4c45-8be0-d2ad1e4f4a73", "value": "T1F7A32996BCC5C602C6E0B1B6FB0F519E371643A8E3E6B107CD19AF29674B85B0E37251", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771031709, "uuid": "63834747-7ee5-4be6-a349-1b97ff031592", "value": "3072:k3W2vbPwsnvzB6VJbFGjlS3K59G7EXkeu:cLvbYsnsVVsBSE0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771031709, "uuid": "3b00df20-3ae9-442d-81c7-9d96998dec72", "value": 99720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771031709, "uuid": "a6cbf6cc-59dc-42b3-8a02-3a2f4c59bff8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771031709, "uuid": "005c7777-e886-472c-8c4e-db5277cd0b71", "value": "jklarm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00ced74e-09a4-11f1-a129-42010a9c0007", "comment": "Malware payload (SalatStealer)", "timestamp": 1771073541, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073541, "uuid": "21101a32-7797-498f-8c86-4a445514181d", "comment": "Malware payload (SalatStealer)", "value": "4680107aadbfb7f77314cacdfe1f2694", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#CDACE8", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "sexsoldier42", "colour": "#580AE6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073541, "uuid": "40a3d332-b940-4f90-97b0-fa6972bc9daf", "comment": "Malware payload (SalatStealer)", "value": "8a116e67de1378ff68529774ec5bb984c41de823080256ae4d679bf28c398c8d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#CDACE8", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "sexsoldier42", "colour": "#580AE6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073541, "uuid": "8142368f-ee3c-4cb9-866a-4dd92ebb699b", "comment": "Malware payload (SalatStealer)", "value": "c1b73b9560f7046ede4b583dc413401cbc302a73", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#CDACE8", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "sexsoldier42", "colour": "#580AE6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073541, "uuid": "a835b030-5470-4453-9fb3-573bd677127a", "comment": "Malware payload (SalatStealer)", "value": "2c56da6c9904caa6118bdc4a0aaf74933a9bbdb9fd5166092e8245392197a0ad94002fd3ec262c7e13176eb7cfd39c52", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#CDACE8", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "sexsoldier42", "colour": "#580AE6", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#CABE3B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771073541, "uuid": "a670b1f6-51d1-448f-8b46-aab05d4ed84d", "value": "T1EE162328B7A5317AD3768AF8C95C0541DD7DB4477F60D28B07818A8A3D1E3AD4E2BB31", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771073541, "uuid": "5eb5b305-73e9-4aa5-b333-26cc63083d1b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771073541, "uuid": "a8825c1d-fedc-4e55-b9a4-e4e3140063da", "value": "98304:iYMrRzF/w07QRxyRTJ+MAGM0nGwIk6C0FdJY:iY8lFYoQRMP20nGwIHRd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771073541, "uuid": "8ee8e9b6-6acf-44cb-9018-938a4fcc7e65", "value": 4157440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771073541, "uuid": "b0e44230-de92-4d43-8fee-ea682726c1ea", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771073541, "uuid": "9a69b097-286d-4110-a523-80b8bec5b96f", "value": "Telegram Fix by Sexsoldier.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "426a9b28-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048741, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048741, "uuid": "431d69d4-675c-401e-be01-e24f87773e94", "comment": "Malware payload (Mirai)", "value": "17c9d4752650537af74591a653edcd41", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048741, "uuid": "225c7f64-5910-4df2-bbb9-ee9dba41a525", "comment": "Malware payload (Mirai)", "value": "8ae6cadcf9bbc69f3ff03e1ac345aa3035215596c92ca5571443e2b1064ad6bf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048741, "uuid": "2ccf02c0-afda-4a27-bf5e-2899adc60328", "comment": "Malware payload (Mirai)", "value": "2db99de9ef983c4f0cc29660d5a2de73a4e0b80e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048741, "uuid": "91c9a863-190d-4221-bd9b-6d95d705bc2b", "comment": "Malware payload (Mirai)", "value": "997d87afd225669c003edc33b4d670d2bdff48b37f0a70d1e923252d3b1e3e5299d188eb29170ca6930dd371c634877d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048741, "uuid": "fe5d1c11-0743-4734-a949-88162c34d139", "value": "T1FC5301F750943DCCC1A69734020B0A863AC5A2B86056663B76D5F2A84FF2B80DFD8BD5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048741, "uuid": "034783d2-5974-4937-b0df-f03ce44578ac", "value": "1536:C1/S5aOdeB51F+yuXkoPgvFbFX6hTZ0f8ASAjAI3Lkg4azHx:CM5az1Fy0oPgdZX6hTo8RULLGazHx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048741, "uuid": "586fa106-4fe7-4ff8-a892-b59ad797bb2b", "value": 60808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048741, "uuid": "d51c0487-99aa-4fd3-b5e3-3a4ea44b3dcd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048741, "uuid": "acd5856a-d8b4-44f4-a0be-42ff352736fe", "value": "xnxnxnxnxnxnxnxni386xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3245eb7a-09a8-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771075342, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075342, "uuid": "aaa10716-fbce-4128-8163-d3a6e7f537fe", "comment": "Malware payload (Mirai)", "value": "de4c10658308f799bb3a7dda04fc9e74", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075342, "uuid": "26df345d-9a92-42fb-aa29-afd34d1f9cc5", "comment": "Malware payload (Mirai)", "value": "8b1a1d4407401b388b58e1830406bd6efad4a91a82ab5f27a911fc2cb9ebcfe6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075342, "uuid": "6423186e-509c-4cbb-8f66-e3e5bbf4e625", "comment": "Malware payload (Mirai)", "value": "b1d177b57a91ae04ff28bbfb5013d8a9bb21c1da", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075342, "uuid": "5b077645-2d57-4c06-bddf-83aff4857129", "comment": "Malware payload (Mirai)", "value": "1e4440124c69c6106ba921b827542eb1c3ba2fd4b663860c308a6690c7b731de0f5b0966335ed457012cee7d8fda2e00", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075342, "uuid": "0b9a965f-e587-4652-82d4-75ed6e6e0424", "value": "T18304392F358191F0F6411B746BCBD3976C390BBF51A9909F6B416329B6E0B7BA02C487", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075342, "uuid": "dd359d75-0f33-4444-b4bc-d311d6e33501", "value": "3072:7mPX5bl7RDfPIX5eG/L1AL0SFU66gOSNL9CnNgRdgJi55w2UXS:7eJpJUVD1A8n0YNgEJi5aDi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771075342, "uuid": "d78ad9c6-7432-411a-99df-07d44757b8a2", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771075342, "uuid": "0cefec41-eac5-42d3-a731-a04032de7ee7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075342, "uuid": "cc1a9de2-f9d7-43cc-a11b-8dd0e9bc87fa", "value": "xnxnxnxnxnxnxnxnor1kxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9de81d5-09ad-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771077771, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771077771, "uuid": "aede0a9d-fa54-4480-bc86-ae3b2657ae3b", "comment": "Malware payload (Mirai)", "value": "0ed905e85235efcfce5ba4c042375b63", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771077771, "uuid": "b561bbb8-528c-46f2-82e2-9dc5e58a7ec8", "comment": "Malware payload (Mirai)", "value": "8b67445cce8d0c0729abe7b3e3bfd93cfaa3121d264218b3792470c7ab187ce9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771077771, "uuid": "6c453a40-71ee-4f53-9e15-a7141701e8d7", "comment": "Malware payload (Mirai)", "value": "af181833fb6d4e2430d8913e36fe5eecae6f2df4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771077771, "uuid": "9a27142d-cc05-414b-83b3-cce263df146a", "comment": "Malware payload (Mirai)", "value": "8cb5d8ca2c3be0a92281e99a8accdbf8ff7d7b2774adbe0ce0a704b2032073fb7471c72d323530aea4c6d77f7cb7880e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771077771, "uuid": "9c35a344-b37a-495a-9ec5-f60138c2bb7e", "value": "T182B3E085B210AE55C02672FCB187099093B17E7B4B9A150B84B3F5B46DBCCD47E0BEDA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771077771, "uuid": "db112f14-174f-4d81-906f-5a1e9624d8e3", "value": "3072:jx63zpjhO5z01nCU375P5wk5SOez7wug:as5zqhr5Nzy7wf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771077771, "uuid": "ef8e123a-3452-4ac0-9748-69b6f0f30cf2", "value": 107680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771077771, "uuid": "44a150cd-98b8-4f3b-91a8-fa8271293587", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771077771, "uuid": "7f9b4269-bae3-427a-9686-e3db68f03e40", "value": "xnxnxnxnxnxnxnxnriscv64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eddf4a5c-0988-11f1-a129-42010a9c0007", "comment": "Malware payload (njrat)", "timestamp": 1771061913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771061913, "uuid": "ac3650aa-9399-4107-8bd8-802086ec80cb", "comment": "Malware payload (njrat)", "value": "783e1ed2786f3501d3c7019c1a315709", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771061913, "uuid": "1a6dd693-d67f-4ddc-bd9f-3eef887ede5d", "comment": "Malware payload (njrat)", "value": "8bc544386ccb4eb630c4b8df83be99b28e8c0f1b45a17126178bcfb25ea668a6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771061913, "uuid": "119b035a-4c09-4990-bec4-7f18f21e6d3e", "comment": "Malware payload (njrat)", "value": "58b113114bf9ffba8bb7d07f2d15d2b452a32f92", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771061913, "uuid": "00d67e75-83c5-46db-829a-c4da9e5266d8", "comment": "Malware payload (njrat)", "value": "c55b75de45ea2622f4645af8eda73ac1158f46534cc9459b648eed0dccb8c61ea7e7141a8649803efac37b4b6cb19bab", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771061913, "uuid": "a1b915e9-3272-4b2c-92cf-9ab84a36712e", "value": "T165C35A4EF7459A84C35C6E778463504CE2E9DAA77C27F73F39C81EE19C23889858BA50", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771061913, "uuid": "66059062-75a4-453c-b7cf-0d549b8f599e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771061913, "uuid": "5756b244-20ea-4f16-9f95-b7fb99f0a152", "value": "3072:h7uuDoPtXWUuLtrkcq5MllnMCNFb0fsE6X3Jt:l+PRSLtTq54nMKb0EdJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771061913, "uuid": "2d33acd6-a8d0-404b-bdba-34922af86fc1", "value": 122368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771061913, "uuid": "43370a33-b8d9-46bc-9c43-ae4fc2913d48", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771061913, "uuid": "e89c9ae3-ada7-43f0-adad-27b8c4387a84", "value": "8bc544386ccb4eb630c4b8df83be99b28e8c0f1b45a17126178bcfb25ea668a6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a35efac-09da-11f1-a129-42010a9c0007", "comment": "Malware payload (Ladvix)", "timestamp": 1771096777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096777, "uuid": "e3b15246-9e0a-4f6f-881f-d497472849dc", "comment": "Malware payload (Ladvix)", "value": "c932d799043caaf12cf5681b77876a57", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ladvix", "colour": "#45ECE4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096777, "uuid": "9c0dfa4e-1b4d-4b79-ac2c-d942690c927b", "comment": "Malware payload (Ladvix)", "value": "8c64f8eb95e25727612477f9616367adb6995b5e528f2e861c9a3d377f2e9a82", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ladvix", "colour": "#45ECE4", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096777, "uuid": "99fe3c63-e11f-4644-bb06-df4212ff1e65", "comment": "Malware payload (Ladvix)", "value": "b70507c577135a48b74171b310cf85b7061c7785", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ladvix", "colour": "#45ECE4", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096777, "uuid": "d5aa941f-d823-4f3c-88aa-d1d48174dc28", "comment": "Malware payload (Ladvix)", "value": "5fc07144e9a1241df7844eb8b23fec1836752c1d7ee82e0c7898b5331f226c97f37c6485eea57e8cbcf380b7f92dbad9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "Ladvix", "colour": "#45ECE4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096777, "uuid": "601c2469-f3f0-417b-ae78-afd962817f34", "value": "T17F468C87FC4455EAC9AAE53288A241517B71BC482B2063D73B60F33C3F76AD86DB6744", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096777, "uuid": "49e8a770-1c2e-4e88-8280-d93d23c01c7e", "value": "49152:6AbyohlrYzG2yZEgY4mB80+U99LHb7QzyUinfwkJQc8d2ybcrUtajKtdrtC1ygL4:xvEylZYwNcL9JlQjCdjKDQ4gXgmI/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771096777, "uuid": "978c5466-5f6d-433d-b47f-296439688cb2", "value": 5444657, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771096777, "uuid": "c121ff44-16ac-4477-ba16-15d5f29fecde", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096777, "uuid": "f2c8643a-1ebf-4182-8c7a-5f48fd2e66f3", "value": "bot_linux_amd64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c0da8d2-09a9-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771075734, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075734, "uuid": "6e791c0c-4d72-4dc9-b8e0-03edfbf372cf", "comment": "Malware payload", "value": "bf218104dd6a5efa58ba7563bab7f7c0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075734, "uuid": "dc4259af-ec88-469b-9ba7-5425778aa989", "comment": "Malware payload", "value": "8e5a845b7176e34ad6f2756ab0b417de30c8f5a7b3268cba3a56df373b6fe9b4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075734, "uuid": "9f703c22-48db-47ca-aabb-97147a658d2e", "comment": "Malware payload", "value": "a8873be5dd5e90f5283f88ee342c92712559c29b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075734, "uuid": "b72c0fff-2b8a-4195-a6d1-9092a3de4fda", "comment": "Malware payload", "value": "77549cd23551aa9ef335e7bc32ced72d676ba8195a3ace15b5c618c08c8f4f1befb8c0fbf73d30ab313fdb351e81f040", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075734, "uuid": "7dc21706-9339-4dac-833e-1b83c38bfe7c", "value": "T10E25330467645CA0D7B8E8484ACCF8BD63394960167B5FC7E43248F727D9D23369AA7C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075734, "uuid": "b9d09944-ac9f-4a69-94cb-2564dd9a21e1", "value": "24576:hzfEtBkjj8t0D/p5fAZ6LNnw3sXQyXQ9enZM/CTC26:hzKB8j8y/fvNn005geS/AX6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771075734, "uuid": "a2cdabbe-b5c0-4571-927b-041ab9c8085a", "value": 1031932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771075734, "uuid": "9689f985-4a12-434e-bca0-944df18849ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075734, "uuid": "d926563b-596b-4c16-92c1-1801ddaec599", "value": "aarch64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a127b9ff-09ff-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771112895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112895, "uuid": "40dfede5-9893-47ca-af0a-c0c8e287c0e5", "comment": "Malware payload", "value": "2d3976e1c1cba9abd9b3a9feef0b96b4", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112895, "uuid": "3a3c1bea-937e-4f0e-8c6b-2e310813ff8d", "comment": "Malware payload", "value": "8ec809c41cba7fc6dabf56ddac952366deb68aba8288bbfe14431ee305d6ba3a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112895, "uuid": "3b0c584a-fd04-4ba8-97b7-6de476001adb", "comment": "Malware payload", "value": "3e704995da8f3cd414b80cb509446006628094d2", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112895, "uuid": "e69c1229-5641-455d-99f3-41e1b32df4c1", "comment": "Malware payload", "value": "35740a8681254080a6b41f6139da3beeaa6b55db9bb5d78b54dd1b5062b95d16c3556526c7879424a4b1072383d65048", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112895, "uuid": "9908cb85-7b12-47fb-912e-74f6fa54b5e3", "value": "T1BE058D3527A8691FC29F577CF0E21E3A53B0A4553422EB8F698859DD2E43384B4C17AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112895, "uuid": "9a117b56-db96-44b9-8fad-0bfc9c0dce05", "value": "24576:vjoC4DmmxhlqCVKtbW8FWwhYHCJZ6ztRVq:vUc2Ktq8TECJZC8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771112895, "uuid": "96f896d4-8a4d-42e8-a29b-d572d8a83117", "value": 851592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771112895, "uuid": "0e2171ff-66a5-4b3f-a465-fa140874db0d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112895, "uuid": "16ccc0ca-acd8-4ab4-98be-e885db340564", "value": "ShellHelper.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85e5e387-0997-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771068181, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068181, "uuid": "940e1639-be4b-43c4-b5db-505f37ae5bc5", "comment": "Malware payload (Mirai)", "value": "16c2addf057b3e3b2703500462e38c1c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068181, "uuid": "a99e368b-6348-4600-94ed-044dfc2c8e48", "comment": "Malware payload (Mirai)", "value": "8ee25ba8e786dbf18d846454331c9bc2116be4ed9f113847913eaf4e69096627", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068181, "uuid": "b0535a80-8aeb-4589-8cc8-b61eec47f774", "comment": "Malware payload (Mirai)", "value": "d590045d7fee92df511a3abd26661d74cd54aae7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068181, "uuid": "d991aa66-786a-4c44-8d71-b796fc2ca9b7", "comment": "Malware payload (Mirai)", "value": "044af5b8b1526458f5980db7ddd18a9eee7bd091d742bef6328bca16bf67f6ac6911282170042bb89e48ffdbaa4a85ca", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068181, "uuid": "bff684f3-601a-44a1-95b3-dd4c6647b5f9", "value": "T1096301CB7EB06F26D0DCA2B2703415D5DC3A9DCAE6938A9C83E2E755473847650C8B1B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068181, "uuid": "c97b4621-1f45-449d-a776-c32dba6ab913", "value": "1536:zaxZLmYKVDNSl2y08yumeJyGYVmIMGCNV:zaxZLmYKX+t08jmeJhYTCNV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771068181, "uuid": "44ff7cf0-58bc-4290-8956-abbc2723cc4a", "value": 70460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771068181, "uuid": "eba73509-b468-40c1-9d12-44174402b124", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068181, "uuid": "1cac327b-4eb0-4f01-9cf5-e5cd57c7dc88", "value": "SecuriteInfo.com.Linux.BackDoor.Fgt.6204.7445.2559", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e376895a-09eb-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771104416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104416, "uuid": "2a1c78e4-ae2d-4e98-9bea-e3576dff1254", "comment": "Malware payload", "value": "ae48112d69c8c72c43367525ee07c772", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104416, "uuid": "cb8cf79d-91b7-4390-ad1c-d28008671a27", "comment": "Malware payload", "value": "923f7a0e17c41e6c925883b14242dba94523e60662fea07ed0c29c2f7f38da37", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104416, "uuid": "d3f3db32-ff46-4634-a571-b30af7dc8c6b", "comment": "Malware payload", "value": "79fd30f68462ada566eb012e0f90149338231845", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104416, "uuid": "bd8af965-f55a-4028-82d8-170276a1a26a", "comment": "Malware payload", "value": "24f6601492dc0c555683508f1c110897db2c10b2160671eb4df71d901d19431344b081712b7df378b217ea32a65f74e7", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104416, "uuid": "eb0f4ee6-c319-40ea-b07b-b770d816590c", "value": "T1D4514406D2F2316127529C2412B72E3F9AA99817DE07CD50355D1EE8BF79870FC03E8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104416, "uuid": "54c8497a-c439-45bb-82e9-2a81364c7e57", "value": "96:mYPYSyiXfUJMPqUpIHHHHHP9naHHHHH/1ldW:mYP38JTWIHHHHHFaHHHHH/zdW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771104416, "uuid": "2603fbc7-a9b0-450e-b75a-ae9f8fc96a7c", "value": 3113, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771104416, "uuid": "ff4f694e-905f-4430-a3aa-dd73e3582fba", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104416, "uuid": "d00f0fd9-e6a0-4d71-8331-e9cee0013687", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe405515-093b-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771028869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771028869, "uuid": "1ebc2103-9018-4803-86a6-b796bea0adb8", "comment": "Malware payload (Mirai)", "value": "c7a058339d0569af9bcf29dc1f342547", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771028869, "uuid": "a9d6c37f-a3bd-4231-b25b-de9edfd6f39f", "comment": "Malware payload (Mirai)", "value": "92eeb6ca571b1cf96eec49377c3f9f1bed193e14323b629edf83b2733575cab0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771028869, "uuid": "fd1d1f46-8ad1-48f9-9af9-92e9c21e2057", "comment": "Malware payload (Mirai)", "value": "f12c52dcf47905c5e46019a064c4bd59307f7554", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771028869, "uuid": "1340137a-ce8e-447b-99c5-a4c382df7e8a", "comment": "Malware payload (Mirai)", "value": "6731eddbada88d558c00191553174e5193467e001f33c77d536d4ce7702c8f676281af8c135c8685f94c6deec2ef3932", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771028869, "uuid": "680672c6-bf61-4eeb-b8fc-51ae813f298e", "value": "T153B30999BC858B11D5D535BAFF0E518933538BB8E3FA7113CE185B2E538A86B0B3B501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771028869, "uuid": "82b03590-69dc-4601-a950-6186303b1e48", "value": "3072:cmrhtoPQOinGElcfHkr5SxneIjH6DDWoaWNsOPkjq7wiu:uij8a5SxN2DDWoaWqOPk+7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771028869, "uuid": "9b61a856-e625-46a8-8a9d-ade086c21795", "value": 115640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771028869, "uuid": "648c6a72-3dbc-4d9b-a08d-23a1c4aa21aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771028869, "uuid": "52d1d3dc-6972-4e58-a3c4-9ab99b4bee6c", "value": "jklarm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b27290d3-09a9-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771075987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075987, "uuid": "9c083fb3-bf3b-4cdc-b8dd-2b1f463e9a3a", "comment": "Malware payload (Mirai)", "value": "b26072ef0b76bd39f10d4721e04d926f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075987, "uuid": "920bb977-e7b6-43ba-b8e2-b3703f0c5389", "comment": "Malware payload (Mirai)", "value": "9405eff2220bd2d54d33cdd17f85a66742efd840889d76871f9ac5cc06d23ef1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075987, "uuid": "57d8c0cc-b066-45c6-8639-d835b2ff4a34", "comment": "Malware payload (Mirai)", "value": "5947813470d96407d7db7626b78dbe594da6cf37", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075987, "uuid": "0b66a210-eb8d-4634-971a-3eb95e022cea", "comment": "Malware payload (Mirai)", "value": "773e6f1848da5c4b95870091d8373b7c5607f03006363d14554e1507a8512ad0a4b82d1c0ccab1e326e81655b1f7c7ed", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075987, "uuid": "176c8e5b-f462-4eb0-832d-59cb97158b4a", "value": "T1FAD3F946BD418F13C6C321F7FBDE429C3A166F6DD6EA32029925BFA137864D60E36211", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075987, "uuid": "b8902ebe-6e78-4b14-95c6-9a47918c9415", "value": "3072:Ocp/LThLvWIS+v7IjA6KXdvSQjN5LJv971a3:OoWezIjAZXJSQJ5LZ971a3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771075987, "uuid": "8df03614-c440-484e-91e4-1c022f5fe126", "value": 135000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771075987, "uuid": "890d7665-8ff9-40c6-8e82-2d7597cfb920", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075987, "uuid": "2a59cf59-afa7-49cc-8911-5599d012fccd", "value": "israel.armv4l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7269010d-09ec-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771104656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104656, "uuid": "6ef9a1b1-87bf-4f9d-97fe-909391b1f3e0", "comment": "Malware payload (Mirai)", "value": "3c0c9a41964138fcccbe814344c6f6be", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104656, "uuid": "20df7010-8128-4258-91ea-21e64c1a9c74", "comment": "Malware payload (Mirai)", "value": "957c9c06f6a663801811c490825f27054c1563ded3af094fbe309717a92ac34b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104656, "uuid": "f56f148e-679e-48cf-855f-104c24fa9242", "comment": "Malware payload (Mirai)", "value": "53c25c5e733a6b52d66043bb98760f1552919100", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104656, "uuid": "f3faa830-d484-4e3e-bb93-4656070d0f4a", "comment": "Malware payload (Mirai)", "value": "2f9063e43c472faf4e14136486e4dedf6acd23c4dd240fa301f1b115e74be1b5b7ac7c7bec2ee17d48c3a278f4f12439", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104656, "uuid": "91eccb4c-35f9-4c63-92e5-c073c6dc1c32", "value": "T16B732982F98BC4F5D81708748077F33FCB32E6294135C56EDFA9AE36DE676419216248", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104656, "uuid": "068d575b-ab62-450c-a9f4-7d30ba9a16ba", "value": "1536:y+ml11IujxuIX9GtkxBP4Hojcs/jjee/riWj8iamQuPbiXaGYjqrU9+6:y+ml16ujxVXPBP4HojcEd/3wiam/DiXc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771104656, "uuid": "04e0af27-f86f-4fd1-83a2-63c16be63153", "value": 76388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771104656, "uuid": "59020f3e-23b2-4593-99b9-88be05f40bcd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104656, "uuid": "bec9de5d-3da7-4261-9e00-bcd760b3129a", "value": "manji.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6147c3bb-0993-11f1-a129-42010a9c0007", "comment": "Malware payload (LummaStealer)", "timestamp": 1771066402, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066402, "uuid": "bb4f5e87-bb30-4188-9884-35ffbd320792", "comment": "Malware payload (LummaStealer)", "value": "903179b79bbca476694b0c480e034339", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066402, "uuid": "2e386e8d-6b09-4b9b-baf4-0ca3c4154549", "comment": "Malware payload (LummaStealer)", "value": "96ce37b257d068c8e67e50af8f52ef82afe7639346c1a44419b979eeaef840a0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066402, "uuid": "e4b3846c-b1fa-4b72-8fe1-dd2b7e8b38f2", "comment": "Malware payload (LummaStealer)", "value": "09febd9c8677e04c91d9757dc4eff1ef28345593", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066402, "uuid": "456f778f-8d24-47c6-a1fe-6dcf175cb292", "comment": "Malware payload (LummaStealer)", "value": "c5ca3c9c3a739eaaee06a8d9d9bdcc0ce39aad5ee05276a1b73bc8b0fa8fa81cd99045414972edc81c63e68b758b38c3", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066402, "uuid": "a9d0fd55-2547-4a5f-802b-c255049c6315", "value": "T1C5D5CFE2F5FF6162E0CD15FBC080FB871866FB5A4AC5437BEA8CC4655C0E9913E9A025", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066402, "uuid": "2bfab7c2-1ccb-4fc3-87c2-9982b64bca60", "value": "fc26bf23d6d19dd93692eae045c9fa64", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066402, "uuid": "a751cfc6-8d79-4795-b726-af8b5bfdceef", "value": "49152:pT9jRm/1Q375tSbGASvzUxL0+x3x1VyPZrceNLuT14F/:pRle63qovzO1tMPZwKKTm1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771066402, "uuid": "1abb0c6a-a864-4354-82d6-a286b2082531", "value": 2927616, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771066402, "uuid": "db946b49-21b3-49da-8a20-92dae3b9665c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066402, "uuid": "aab23520-509d-4ee0-955d-d4ff1a0aed64", "value": "ws-Setup-Complete.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74cf8884-09ec-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771104660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104660, "uuid": "da1b506f-6450-4034-980b-a31172e7fb95", "comment": "Malware payload (Mirai)", "value": "10090133772fb46c8cdda65445992053", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104660, "uuid": "d8031aea-d547-44aa-ab04-5bd8872f441d", "comment": "Malware payload (Mirai)", "value": "99582e02fb210aacf73eaf00907abae929a3527a152aa2505d28744abca21127", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104660, "uuid": "5c235998-c30f-49f3-9744-45ccc214c186", "comment": "Malware payload (Mirai)", "value": "43f383bf75e16b5eba1cea13a45609b66e9c85f4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104660, "uuid": "2291fa1c-5d30-442a-b15d-280bb7b5849c", "comment": "Malware payload (Mirai)", "value": "3b8269f7113c2623b8af63bac1a3675fdc9f83beed584b4981c32b6e16383c07a2bb9cf2f4c14f365421c3d2d1ee1fc4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104660, "uuid": "70fab3db-fc28-4a5e-9307-15aac3e79f9a", "value": "T1F0B3F78ABD815B11D9D522BEFE5E018933535B7CE3EE72129D205F2463CAA2B0F77502", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104660, "uuid": "f6d71a75-b7e7-4670-b6fa-1e7a0a43e0b2", "value": "3072:bqiy9qVvpOFnQfG/7/0VZYPY9On5NaBF7h1uzagz8fBZI0cMbA:bqiJKdQe/7/0VZYPCK5NaBF7h17gz8gT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771104660, "uuid": "b4e14808-198e-4648-9c1f-7219b7250b0e", "value": 108572, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771104660, "uuid": "5e317b0f-0799-4590-a900-256a30a05be6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104660, "uuid": "ea6c567b-9329-487d-add9-4965c2000cc8", "value": "manji.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36fa5021-09ef-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771105844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105844, "uuid": "1509d1a3-e53c-468b-9287-1deec80fafca", "comment": "Malware payload (Mirai)", "value": "12344d1cffd1a53fbc0ed623ef89bcf1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105844, "uuid": "8c7fb070-d8f1-4220-a695-2d81b530f079", "comment": "Malware payload (Mirai)", "value": "996b94e8e54c3642292acdbb70e97d346be5e531ecfbdd5548f788d44d7aa12f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105844, "uuid": "65925dcf-4b2c-4fbd-83ec-58e943c84f02", "comment": "Malware payload (Mirai)", "value": "496bc0e0b91e28f8210ea69c3a03e51c735d8ba6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105844, "uuid": "d6af1d35-287b-4d9b-8546-728aba816b6b", "comment": "Malware payload (Mirai)", "value": "20dfdd1a3fe7a81bab821ec0098b87d8d7b839c52a935dda2498b69f62633a15e8c8fa455100ed9d14084476ca758199", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105844, "uuid": "b7db111d-4418-4986-ba8f-85d2881949b1", "value": "T1D5B3E606AA429B01D49735FAFA9F41593353AFBCE3FA7101D920AFA123C65DB0F76112", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105844, "uuid": "840577eb-70d5-4c97-80ac-b65859afa35f", "value": "3072:L3fVJyfkpd6TaE0gXFXKhDTUeWmjSgIjO:pJy8pATaE0gXFatUnmjSgIjO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771105844, "uuid": "c0d8c032-90c4-4090-90f2-f839afd5b6d4", "value": 112668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771105844, "uuid": "6b4baea1-639a-41b3-b451-fb441dc63c7b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105844, "uuid": "fbd5d49c-6b59-4e3f-90bd-72320615de8e", "value": "israel.armv7l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91702920-09c4-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771087528, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087528, "uuid": "12cc3d89-ab63-4405-b456-1a14f3f9e112", "comment": "Malware payload (Mirai)", "value": "152e82e54acd12c1b3636b52210c0069", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087528, "uuid": "fbe989e5-83fe-412a-b459-eefe59e4c8db", "comment": "Malware payload (Mirai)", "value": "9b852ed78adeea32ee3619a21d66ab158d65b4ea247e0ab42359ad148a9ae024", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087528, "uuid": "75f5ca4c-1396-49db-a6df-85237381adf7", "comment": "Malware payload (Mirai)", "value": "d23f6683893fe15e6d10d1efadbc452acfe88bc6", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087528, "uuid": "69e43378-a8bc-40af-9fda-e86b434969a6", "comment": "Malware payload (Mirai)", "value": "ef0d8dc920e120975abb9526a1b79dc6d7dcfa7daaffc29a926ca018672996b24d51949f1c02c19118bbb8bdad4892f9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087528, "uuid": "53a27c8d-405e-459f-89e9-d39da89c6e0f", "value": "T190D3E90AAB610EFBE86FDC3346E9270518CD591A26B97F75B530D418F24B28B15D3EB0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087528, "uuid": "4272333a-17e4-47cb-8737-e361c5feb2b4", "value": "3072:vpoglmlj4d2WS8jZRG3TAxbKS5YyAMfb:vpogla4d2W9jZRkANeMfb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771087528, "uuid": "212ce692-d188-4632-bedf-39259217651e", "value": 138472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771087528, "uuid": "d6e85c86-2250-48e4-b7bc-403b2c125a3f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087528, "uuid": "9139fd97-069d-434e-9d41-0e78dbc3e849", "value": "m9x7k2v8b3.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18cba7b2-09da-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771096774, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096774, "uuid": "f2123641-b701-420d-9f2d-964f5d2c55d6", "comment": "Malware payload", "value": "63c72a347056f39d593324e0214c0ba5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096774, "uuid": "d317a7d8-8624-4020-a4af-20019e91d972", "comment": "Malware payload", "value": "9c26b02fdd41e3271eee16c8e04e4a7f3eb5de6ae070e9c0b7c9c77bbf78f83d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096774, "uuid": "cca990b3-1a4d-40b9-bcab-37aa922597e7", "comment": "Malware payload", "value": "ea6320e8f92a8fdcd8d2c40ec15f71e9661a84a4", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096774, "uuid": "b125d0bd-017c-45d1-aa00-b7ecd7e47346", "comment": "Malware payload", "value": "bda2d1b62265290dd92e42411ff058694263391df7ac3abd070a2c06a7f52419e4ff31493980c3c548730dbdb285cafd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096774, "uuid": "051089b1-8088-4c35-a8a1-621d9692a019", "value": "T10E467C09AD852AE7C45C4FB444EA8A9537748C040AF1972931A4FBAC79B727C7F879CC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096774, "uuid": "12e6a778-b6ab-45ef-a6f9-7eb5df9ec31f", "value": "49152:/iruAc9zAU8UXUHGinIfSalUiI0RWPo6B68zDgxcs9ymYpD:VVXUHGuayPo6BRKdRYx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771096774, "uuid": "765d9e67-af61-4ddb-88e5-982bdb87767f", "value": 5558105, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771096774, "uuid": "c17531bf-0a44-4b46-ae72-61dba5a6f01c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096774, "uuid": "c20c7665-2c9f-432f-95cf-31121b5fcfeb", "value": "bot_linux_mipsle", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74052302-09ec-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771104658, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104658, "uuid": "d7939475-7555-4dbd-aeff-653d1d54a311", "comment": "Malware payload (Mirai)", "value": "797e992e5ee2ebf09445cfb50c4b77d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104658, "uuid": "a253ee9b-31e8-4e06-aac7-48aaa6ca1fa5", "comment": "Malware payload (Mirai)", "value": "9dbb011ac1cd32219d29bb3555f38d2f49a43a15b88953d49924f34c781661f1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104658, "uuid": "abfc0538-f629-48d6-9dd6-8b1566d7952d", "comment": "Malware payload (Mirai)", "value": "4e915e35d3c84dfd8add1d36f187f19295386f2c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104658, "uuid": "13362b6d-6e18-4a46-afc9-b96a6f282409", "comment": "Malware payload (Mirai)", "value": "716b150eb9e27319ba79ba459a349bda5be3e323bf1b34cc9a8fb7e7e735bbe31649faea8472e7557cc4df3c4588034e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104658, "uuid": "f65d4f41-a332-4b07-8ad2-49963dca523d", "value": "T12A934A32BD75192BC4D4A87A62F70731F2F6438A24BCCA1A3D710E8DAF6464036576F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104658, "uuid": "bcaaea29-8cc6-418e-94f4-23393aff19e4", "value": "1536:uS8MSzlPyzhCJuWsZIJfQlSYJRDRtDogENWq52YMAdhctid:uS0A2jWSodpxENlyqd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771104658, "uuid": "b3258e7d-bbf7-4515-a05b-d933cc6c508a", "value": 91692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771104658, "uuid": "31719681-a422-461c-a195-823ca7affb6b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104658, "uuid": "f20ece1d-58a6-4ba0-9f95-879781b538db", "value": "manji.sparc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ba592b3e-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037345, "uuid": "23efa94c-8952-43ec-9825-3b40e1fd5f55", "comment": "Malware payload (Mirai)", "value": "241001ee9211c23d3f2b8cbfa02cfced", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037345, "uuid": "5002d816-5ca6-4d68-82e7-9fd0f5c4fcd5", "comment": "Malware payload (Mirai)", "value": "a04f3a246ace12389597a2c42676f089f3ac05594e6d5824b1e49f8e94ebd9ef", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037345, "uuid": "b5fec194-f70d-4b16-bcf9-e593793baa36", "comment": "Malware payload (Mirai)", "value": "1fa1e5279cc338f1aba4c3c12649a0f34d067da9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037345, "uuid": "78bcee66-89e9-4085-8850-f403659c0be0", "comment": "Malware payload (Mirai)", "value": "86351ba8b8340bd1e80c29c1a254e341d4f6e3be95dd086046dc091c57011bdbd22a6265e6c89ee01097cba942dce875", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037345, "uuid": "12fb8b7e-9afa-40a1-9a79-05ff9e0a4946", "value": "T1D203E123D9B95B81CE3FEC555E95E1C4F7A41EAA3BE28EE501103A034D36CBA6507EC4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037345, "uuid": "f2457f19-8c3f-40f1-95d1-9b67291e67bc", "value": "768:8tYdwLuaCfIxltBXZoAgAfKRnlVfGJzaFtGeyJkoPDWWrrrj94uVcqgw0IO:+kgCfSltBXfFun3KzaFAeXkWWb54u+qo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037345, "uuid": "7af6501f-f534-4cb1-acd1-62dcbf0e045c", "value": 40072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037345, "uuid": "40a930a3-6314-42a0-b115-6cfcde6b6f7f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037345, "uuid": "2d755acd-d24f-40cc-9114-0722babb0c2a", "value": "nwfaiehg4ewijfgriehgirehaughrarg.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5ea3eddc-09ac-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771077135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771077135, "uuid": "db37711a-302d-4137-bd14-d9759ba77357", "comment": "Malware payload (Mirai)", "value": "e033ab92ec648e9c9602d174a39c3658", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771077135, "uuid": "522fab4e-bd36-4eb9-a2a3-8cdb92aa0f81", "comment": "Malware payload (Mirai)", "value": "a09628592ca1a272beb5fb5eadd420fbdfe8896a08af14f72136b4d3683229ce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771077135, "uuid": "f8293cd4-2435-40a7-82d2-2e9e590204cb", "comment": "Malware payload (Mirai)", "value": "45ba2978792cfc733beb3d10d13ebb81e309578a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771077135, "uuid": "edf28fda-5c6e-4bea-bfe0-db5efc1d264f", "comment": "Malware payload (Mirai)", "value": "ca3e77eb87b1340c14f3000f7e216e2017fc156cf76b70443899c4410d8e500dd9e3bb3a88eecbe098e829b08e24e9fe", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771077135, "uuid": "617d543e-6343-47e6-b95f-8423ba8c8aa2", "value": "T104635C85BD819A13C6D513BBFB5E42CC372663A8E2EA3207DD255F20778781B0E7B641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771077135, "uuid": "28c0311d-0c04-4090-b437-feea4d0de2e5", "value": "1536:UHAZxyjy+Rc7qZwIKfcMuK06L2UzjVzOKmc5Zeg4CM:UHAH5J7uJ76L2QR4gC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771077135, "uuid": "55319edf-eb6d-4d9d-b756-fa87c5de22ad", "value": 70976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771077135, "uuid": "5c0a0799-0949-4551-94da-7e07c1c9ca17", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771077135, "uuid": "1ef2fde3-9b1d-4707-982d-855582cce186", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b43e31f-09a9-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771075733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075733, "uuid": "de3a39e2-6c74-4473-831a-e2b3d7f0c3a8", "comment": "Malware payload (Mirai)", "value": "419fd71aad57a1d948806c179bac7544", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075733, "uuid": "facef609-8536-476f-acc4-33a4dcc4df60", "comment": "Malware payload (Mirai)", "value": "a12651c0e7f050689128f648783e649cf39e66b6b607445ef000c20b923fab26", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075733, "uuid": "96ffc88f-6f6e-41d1-ba3f-fe2d5bcfb0a8", "comment": "Malware payload (Mirai)", "value": "c8a999483e6241801765bb37dbd9c1fd6a3dbada", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075733, "uuid": "c2ffa9be-1edf-4b63-acb4-63ed70bb364a", "comment": "Malware payload (Mirai)", "value": "e8822d5a0cdfc860c744da2921244338193cd5192a686c1572485e0ab093a9cfa4f8a16f3406043646981a44fd3e5a38", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075733, "uuid": "18e72baa-32b7-4bd0-9143-3cf227290443", "value": "T105D318037B82D9BFC49BD1F44BEB9536DC32FC2E1935715A67A0BE921B48DD02A19720", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075733, "uuid": "f96ee9c2-f128-4dcd-9155-8b94b5c0b1bc", "value": "3072:DvIyrBuRIH42zHVQrOSIFFlB6S5htx2IP9:8yN3zaSPMfS9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771075733, "uuid": "191cc8bf-da8b-48fd-a2a0-0c401f3f916e", "value": 141512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771075733, "uuid": "84c63914-c27e-4995-9ff3-695fb967ce6e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075733, "uuid": "1d3f464d-8f19-4634-a1d4-dcd6922f6327", "value": "israel.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "877d003f-09a4-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771073767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073767, "uuid": "7f0798c0-2494-4adf-b3a3-117d1570d561", "comment": "Malware payload (Mirai)", "value": "8dc30e641ffc28c4914d53be7ea0831c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073767, "uuid": "77c0b0a9-30db-4247-8f91-f46ec9afae7c", "comment": "Malware payload (Mirai)", "value": "a33a1d9fbd91ad5a83bfa7f42387b1ef35d945eeb7db75667a52607860d513e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073767, "uuid": "5d917a80-1c0b-4bc6-898a-491b24ff4f86", "comment": "Malware payload (Mirai)", "value": "fd0d0dbd66c497ff6dc180f2ebe3504b58b3c41d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073767, "uuid": "9b8d99f6-ab7f-47c7-b9aa-28c385908a9d", "comment": "Malware payload (Mirai)", "value": "6919fedd35d738bc773628d385f4e37e46f3761ad023c3488ca64ea3d3188de496f9dbc8cbcd5fe82c8aeed96bc9553b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771073767, "uuid": "01c3b8fc-76f6-45e1-9a70-fe86c3990e69", "value": "T19DD3970B6E228F7EF269877443B78E30A75837DB1AE1D684E16CD5501F602CD241FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771073767, "uuid": "82ca3882-3507-4621-bffd-a8b851ff18cf", "value": "3072:6mg/IwtuSylBr4GDl4YAG4DP4DqYbxtsoptc:6mg/IwtVylBr4Ml4YAlkO68oU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771073767, "uuid": "bdf7d986-1504-4c74-8b89-378fc57754f5", "value": 141448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771073767, "uuid": "aba9a770-e0ea-451f-9647-92e61e748bb0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771073767, "uuid": "102b7401-a765-470e-871a-175b90c3a363", "value": "data.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a43b844c-09a3-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771073386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073386, "uuid": "c980df26-eec2-4e53-98e0-e11c20335958", "comment": "Malware payload (Mirai)", "value": "c48ddcc1c6fe3def284e29d8e837362f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073386, "uuid": "d8539b95-d5cf-41eb-be87-0b33858dc97f", "comment": "Malware payload (Mirai)", "value": "a33f6b45971ef20cee23f527b41193a99904a70e81871d55e9a71013c6dda262", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073386, "uuid": "f7df2a7d-52d7-4fdf-bda9-087d9fdc95c1", "comment": "Malware payload (Mirai)", "value": "bde9bef9e25f46e0ccbf79287030d4346c16b7d8", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771073386, "uuid": "fc4c0d01-69fb-4bc8-8be0-335b7f96deb5", "comment": "Malware payload (Mirai)", "value": "2fa3bf7adf542d4e34f6eaad4756e63a2a24edab7d553742c4587adda9d349723afeae8a7aa51a8e85e73ef5778ef749", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771073386, "uuid": "b8504466-0d97-4813-b7e4-be6dd9b6deea", "value": "T166F3E7C7FD01DFF7F40BE37649A308157530BFA608521A76B26779AAE93A0C41426F86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771073386, "uuid": "0c2e7b71-1132-496a-9ad5-e44bf2267b97", "value": "3072:J+CKtVYfr0RyvArSTadw71PCTbpj3hXVdjbiHLITnXOce:1iq4yvASTaa7Qdj3hMLITece", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771073386, "uuid": "ccb93655-45a8-467e-81ee-de9b4ae1c648", "value": 159448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771073386, "uuid": "91494040-861b-495f-b30b-61121d8b91a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771073386, "uuid": "6a48ddce-8e01-4ab1-837d-0eec3a4d8fe7", "value": "israel.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1877707d-09d6-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771095056, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771095056, "uuid": "bfaabcae-c911-4a6f-8f1d-ccf1d071da87", "comment": "Malware payload", "value": "42ec5e40ad58fceb77aad9d4a9ea7e89", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771095056, "uuid": "7d6c442b-7e52-4895-a6ba-23e7f3bcbb93", "comment": "Malware payload", "value": "a3facdbc47d52be5995ae4fb2b25a21e1826c3db1a6e0b2f720d9656e54bd790", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771095056, "uuid": "56c763d6-7e7b-4519-a4f0-112d61b800c6", "comment": "Malware payload", "value": "4ccc772e3e7f998a2fa9fcc47768ed3d8d71e38e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771095056, "uuid": "a2dd5da0-65ed-4d50-9c4d-498a03201b29", "comment": "Malware payload", "value": "c53b2acec44a14568d30dd960c9ddf4e442125a88985a2ea83f862820d2497d82e43016e4f9993b0547fb3b4ffbb4c0f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771095056, "uuid": "d8323dff-ca42-4c78-97ba-06f8cd3a5cc9", "value": "T10DA31236A43742C4CAB7D03804356F256C174DF67C978E53FE1CB272CB5822B44AAB61", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771095056, "uuid": "7293a321-4ea0-4fa8-a0e2-c7a8d8d4eaff", "value": "1536:i3ICzYNYavPUVdtTfcJv8EZXqYKitCNjbzwrnc7n3wayIWgdeyJN1B91Vyo37Egb:imN/vPozEZaYyjGcTxIgJH18o3vb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771095056, "uuid": "3a64b32b-d9b4-4777-bb67-fabb663a2704", "value": 100992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771095056, "uuid": "787be61a-b365-48a0-959d-a5954167b0ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771095056, "uuid": "519a1aaa-04cf-4128-8ad4-a8a96984a8a5", "value": "poop", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a29fbf2-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048780, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048780, "uuid": "b0206ed2-c4cf-4948-898d-ec209cf35b02", "comment": "Malware payload (Mirai)", "value": "e16de8394ceaef348704aef9e785698b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048780, "uuid": "e83d7621-f3ba-4319-8424-54273304847d", "comment": "Malware payload (Mirai)", "value": "a49badd4422dd5e683850a0304cf83846696ff1819cca5b3f46463ad072afcb6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048780, "uuid": "4527f804-5038-433e-8721-46aa00f00d22", "comment": "Malware payload (Mirai)", "value": "ba7e525a27fa6d45a91a265a2f5257f52790adfb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048780, "uuid": "8bb481e4-3186-4437-9fa7-445a4f2b566f", "comment": "Malware payload (Mirai)", "value": "06d6fe02e3cf272f710a9cb58c167085018f7051195abcd6450a90bea4a580d32be9d6c8dd38d502155add46b88cf066", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048780, "uuid": "5c1fceb0-4118-4d61-97d0-3732909513ca", "value": "T13DC35B82E6A2D0F1E68701B00557F3E68935EA305416CEC6EFA93D71EC717829D9BB1C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048780, "uuid": "d11bd7de-dc97-4f2c-962c-3327c1e087f7", "value": "3072:3atpsoRNjmj1VGCr75MoS9SrPwVrx5tiyuw:VoRNjmj1VGFVrRiyJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048780, "uuid": "80d50f92-b08b-4f18-8541-b0f572d16265", "value": 123472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048780, "uuid": "d12eba60-a6af-4014-a814-0806c8c825e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048780, "uuid": "9787e68f-c450-432d-a394-c1b2b12deba4", "value": "xnxnxnxnxnxnxnxni386xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e693d0f-099f-11f1-a129-42010a9c0007", "comment": "Malware payload (GoToResolve)", "timestamp": 1771071578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771071578, "uuid": "b3df9871-3d24-40ca-944c-f8937ba5b966", "comment": "Malware payload (GoToResolve)", "value": "5d3907c834943fbc34926dff2fa868be", "object_relation": "md5", "Tag": [ { "name": "GoToResolve", "colour": "#D940D9", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771071578, "uuid": "093fa397-f3a2-4ba4-a978-50460b258197", "comment": "Malware payload (GoToResolve)", "value": "a5f0f0c581b9e235ed2ea2866719dbcb0027b16d126db952e343af050b9c2998", "object_relation": "sha256", "Tag": [ { "name": "GoToResolve", "colour": "#D940D9", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771071578, "uuid": "c16cbea0-403b-4c05-b7c0-7c74fd32b111", "comment": "Malware payload (GoToResolve)", "value": "00d0159140d684059701f18ced0c4db8f6fe741d", "object_relation": "sha1", "Tag": [ { "name": "GoToResolve", "colour": "#D940D9", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771071578, "uuid": "63fc35cc-40c7-49bb-a330-4f3ea8e59789", "comment": "Malware payload (GoToResolve)", "value": "9c755b7277bec3a09ed59c39c28edf21134bfd36b5162f4d259fb482374673c6369dd5e1d5f31f7840d38ffcf45b1fb8", "object_relation": "sha3-384", "Tag": [ { "name": "GoToResolve", "colour": "#D940D9", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771071578, "uuid": "518271a1-b3fc-4a3e-b3c2-3d001db50cda", "value": "T18E3733207649C171F53E10B289286BBF427D6D320F6580DBB3DCFE9A5B312C16B36A56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771071578, "uuid": "11f779d9-981c-4e30-86c5-f9d0f505ea88", "value": "393216:ru0G/h3+M0v1UuQHRTRGH6JHfTF7UY+/kqFj4eFSmJlVvKneUdPlZQnl2H7gOnhI:S0GF+Mm1UuQ3H/T1uThFJll+eUdEnwHo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771071578, "uuid": "745973d6-d602-4890-9fd4-eeb0613c3a6f", "value": 24530944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771071578, "uuid": "6d752b7b-4670-4362-b79e-f42904b66844", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771071578, "uuid": "4e1f6f7f-ecc0-4c7b-bd21-4e38fc93a502", "value": "LogMeInResolve_Unattended.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7521e38-09f1-11f1-a129-42010a9c0007", "comment": "Malware payload (SimpleHelp)", "timestamp": 1771106919, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771106919, "uuid": "4d4002bb-557e-4e8c-8155-b866c6f27137", "comment": "Malware payload (SimpleHelp)", "value": "bf7419f94145568e17677e9c8da0e2cb", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "SimpleHelp", "colour": "#C5DEB6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771106919, "uuid": "acd2c082-4a8e-447f-ac2c-421087558b93", "comment": "Malware payload (SimpleHelp)", "value": "a79be0c9d7fc78d869fd3cd858dc90bc544c81cba74b29bcb461db8b32d6dfee", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "SimpleHelp", "colour": "#C5DEB6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771106919, "uuid": "79869a30-bce2-42b4-be4e-916b9421daa8", "comment": "Malware payload (SimpleHelp)", "value": "4f821aa92192ee4347793377540d6387ed39bcb2", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "SimpleHelp", "colour": "#C5DEB6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771106919, "uuid": "87f46bc4-9642-4ff6-8e7a-e5fb3dfc5e82", "comment": "Malware payload (SimpleHelp)", "value": "a625aa673fa75c664ea624e4edc193abe2f47a00dccb4f357f318d88b39fff3593b62ed5073d5a2155df26bd9f7d4b95", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "SimpleHelp", "colour": "#C5DEB6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771106919, "uuid": "5ce0a398-a32d-410c-8e4b-73b17b4c89aa", "value": "T1F7973324FA9259BDDE2399BCD85A8087FB59EDD30389211727F049D78E202C0952EF7D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771106919, "uuid": "a840c922-613d-46f6-86ae-86be8dde1754", "value": "da7539752d4292fc084c7d813366cc8b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771106919, "uuid": "225f80b8-0cbb-4bea-a186-88a07df67763", "value": "786432:8tGOTXLwnQ6t21uSmtrYCViSVVOd/OdBt9D7aR65lIBE7ZVWhro/fraaXCI:8T7gvFLiSVVO6l7M8aE1VWhroHF9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771106919, "uuid": "f53a7a15-f7ae-471c-93a1-5e8a79b8fffb", "value": 40678128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771106919, "uuid": "1b8cdb86-0030-4f3a-968b-ec51a47b4651", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771106919, "uuid": "2124d176-50bf-4d6a-a2b6-37d6ae72be69", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "940273dc-09ed-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771105142, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105142, "uuid": "3eaed392-f914-42e0-9681-fdd88cbff277", "comment": "Malware payload (Mirai)", "value": "1b50a4cd48042193da83978a14616d34", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105142, "uuid": "21cd7fd2-39ae-414f-aded-8825becb400b", "comment": "Malware payload (Mirai)", "value": "a8c7a7ba537b7c2cb95fe6e8066e67fb258e11ca0a75686e3026aef0d219a949", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105142, "uuid": "4a51dd16-5222-4aec-b73b-e28998a4d418", "comment": "Malware payload (Mirai)", "value": "3d1b9b01ce4e4ba42579cd243d0c064cca893687", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105142, "uuid": "34a22910-1407-4fb8-907e-570b0ef3f38c", "comment": "Malware payload (Mirai)", "value": "23ebab73b54ec7cc3646e1c6d305208139d033e6f6b2cce20137171f804120d149ef9050b9a96e988c4e12f3577e41b8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105142, "uuid": "f066eead-bb12-4955-8afb-088ce01d316e", "value": "T199E47D9CFE4E3C42E2D7E27C9E4987E1732771E4D32391A33982434CD5CA9E98BA1516", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105142, "uuid": "cf3a459d-0307-418b-a7dd-b6888b2caff5", "value": "12288:N/WYwVfn8hMfMrn+ajey52N+6R+EX7Xvv+m5GSPOLw5dzUy+nEGU:N/WYw5n8hHl6q2N+C+27/cI75", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771105142, "uuid": "2432f09b-eda1-4683-906f-b05769d7df2d", "value": 665808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771105142, "uuid": "81b45508-2b16-4e2b-9973-30632c936cb7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105142, "uuid": "078c3e66-e338-4001-b564-f44e4babaaa8", "value": "data.aarch64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73de4a2e-09e9-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771103370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771103370, "uuid": "6110a594-1623-452a-b242-1a54960fc578", "comment": "Malware payload", "value": "44dd6a3d5b73b3c39e8f97e0c1c1388c", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771103370, "uuid": "15ff74e5-d8f8-4458-8261-a2548166b671", "comment": "Malware payload", "value": "a8d754d93a4316ee36de8020e49a46c6985f33f70db95a8899ccb3decc7ced3d", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771103370, "uuid": "bf673b15-cfd8-4670-9173-640f36b6b2ee", "comment": "Malware payload", "value": "84ebfe797ca901ba60b7f6bf084d35485ee0da91", "object_relation": "sha1", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771103370, "uuid": "8e49a7d6-fd82-4da6-9937-58f705bafe7b", "comment": "Malware payload", "value": "a52fd6f4aa8cba94fa0e3a08cfaa581015f7ea50bbcda6e038cbe99f58c81459f30715a62d545adf482af4e80a0fa50b", "object_relation": "sha3-384", "Tag": [ { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771103370, "uuid": "d6ab05eb-b2a3-462f-9d6c-917f28509341", "value": "T17B2184CE704D657D7A490E8270E0AA44A504FAE69D9F0E18BE4C0472FDC6E3037AEA5C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771103370, "uuid": "970d3433-5eac-41a2-8110-69eb7d93cd08", "value": "24:OB/iQNIByKRAwkAGw/hU3hSkhIAhE5Fc/Z+1lU:+vG5UxSiI2EwgU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771103370, "uuid": "7de2a3a6-fdae-439b-8b10-d8844292cdbd", "value": 1111, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771103370, "uuid": "a24cab31-f3a0-41f0-8d92-b00c459d22db", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771103370, "uuid": "0984b2d7-72ac-46ca-bdd9-d1ebd56ae7de", "value": "adb-soap.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffd48998-09c3-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771087284, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087284, "uuid": "3ca3b699-8359-46b9-872a-1f1ae24f62d2", "comment": "Malware payload (Mirai)", "value": "717858eb816ce33300e4aef1649656ea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087284, "uuid": "80a963e4-6418-473e-8f72-1a5c254fd934", "comment": "Malware payload (Mirai)", "value": "a8eaed04cd9f0e44803791da31b80c0235444138116b1793a8bc8a0ff70ea246", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087284, "uuid": "648cc376-7cdd-483d-8cf3-adfd1db58d69", "comment": "Malware payload (Mirai)", "value": "6d8293c92610805c4ba10335eb5a8c651728607b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087284, "uuid": "3cd15baf-9950-4d4f-8b8b-68a24df6cd79", "comment": "Malware payload (Mirai)", "value": "35a631c296a9c89869738897829689cbfff9e4e0404b9a12e7e991986d9ed339fb18f995f694186104f44199c4227bbd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087284, "uuid": "633bf02d-f0bc-4222-8424-e2b58ec0fb2d", "value": "T1D0D3E846BD418F13C5C321F7FBDE429C3A166F6DD6EA3202A925BFA037864D60E3A151", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087284, "uuid": "be8d6cbe-b0a1-4ee9-a922-67bf9f05c18d", "value": "1536:c4Sq00q5Lr6qyHcvnqPbADHzTKSWAx0QP/Oj5szCX0z+GnlkGwywzPxP7CbA9r+V:c4Z00q5H6qyHcv6AHrWAxf3Y0CnAb93", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771087284, "uuid": "f96be00d-377d-442f-9ef3-b6d16c537cd6", "value": 130904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771087284, "uuid": "8a85104a-0df3-42cc-b097-cea5af47b8b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087284, "uuid": "9d29219a-c6f4-4931-a23b-0e2bab1a7e0f", "value": "israel.armv5l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75c26656-09a1-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771072449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771072449, "uuid": "48e46605-d9b5-4211-9083-911b60c5d61d", "comment": "Malware payload (Mirai)", "value": "2c5989f72bf85e35b3ba93e51d8f5f23", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771072449, "uuid": "0ab8b1b9-01f4-4afd-8283-526f13af09ee", "comment": "Malware payload (Mirai)", "value": "a91bba4fe2b1022d32193780a61f08418558f21e6f6e3aeed9b0332b71ec0a65", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771072449, "uuid": "19d06eed-60ad-4642-8d89-ea4ae89a8f0b", "comment": "Malware payload (Mirai)", "value": "1eae7959fe49ef22f8601227d7a1f45e892d1588", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771072449, "uuid": "af8e8b74-ad0f-434f-bc2b-9310fe1749db", "comment": "Malware payload (Mirai)", "value": "1cdfd59ebb3b0c5d2b72cee6abc3504c87284dd99345e3e7ccb932f328d0ba3350678ed4a29c694abaaf84770934062c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771072449, "uuid": "b53fd933-98fe-49f0-b70c-a3e5df1f8bc8", "value": "T1E8D3D846BD418F13C5C325F6FBDE429C3B166F6DD6EA3202A925BFA037864D60E36211", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771072449, "uuid": "05ac1709-a22a-4a6c-bb62-d7eaead7511f", "value": "1536:zN83tPnSwqUSq6OlMnGZQADO8TAVyqeHWkAOvHHFLG4AvZullewywKWMPL2Y8TUe:zG3xSwqPq6OlMHANAyqe2wq4mH+EI3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771072449, "uuid": "815bfd34-8f3a-490f-a5c3-badd2421eb99", "value": 130872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771072449, "uuid": "8159ea64-1a87-40dd-b239-de9b862a3a71", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771072449, "uuid": "761f4087-13af-4667-ac7e-da0e472a2fdf", "value": "israel.armv5l", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4387aad-09ff-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771112900, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112900, "uuid": "c80f0667-db9c-4191-83ee-c0871a0073ea", "comment": "Malware payload", "value": "8cd653cda44d730f3d6086a756cc01c5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112900, "uuid": "e03ee323-1b83-4a25-a193-6c8031002f0c", "comment": "Malware payload", "value": "a95a8eb2744e047a1305b3d2ddfc7a095249a9549ad4d5bb60855c075e2b9b73", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112900, "uuid": "9f929426-1507-42df-83ab-ebb02d54b914", "comment": "Malware payload", "value": "52075e79bc49921ad4326601faae6d60f9559b14", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112900, "uuid": "607b779b-e84f-4881-ac62-7380eedd3ddd", "comment": "Malware payload", "value": "2e7284b8a661a3be215f565f6a45dace65f371403c81211e2cf0678f1e02f49d8f00c411c611125eca64b9bab68c9818", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112900, "uuid": "1c0ec10c-a869-40f8-be41-2223d08cc1ca", "value": "T16B252317FAED358DCBD68FB0657511D0ED326653990AD1A232EE78EC44E96800F0A1FE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112900, "uuid": "e164ee3b-b4ba-49e3-98d5-5b710fc8ac80", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112900, "uuid": "5335ed15-2e3d-463d-9dd6-3f9577a2a1b3", "value": "24576:fzwfj2wt9DtcNiRQYvdGTr2jG3GixVpA15XUfyZub38GVVy:rw5PcNiRQYlGT6jZ6kbUaZC8Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771112900, "uuid": "6470a748-01e8-4678-90a5-27be6128e463", "value": 985352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771112900, "uuid": "494d1533-ba6d-4834-9d0d-1a40179282b9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112900, "uuid": "3f04d85a-063b-4aaa-a9c7-f275cc172ec4", "value": "ComprovantesPDF.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "625bb091-0997-11f1-a129-42010a9c0007", "comment": "Malware payload (OffLoader)", "timestamp": 1771068122, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068122, "uuid": "0b714bc9-95f9-4eb4-b9be-6ad74382d02a", "comment": "Malware payload (OffLoader)", "value": "7e78540ccf976131ef149e8d44a62b41", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068122, "uuid": "9cbcebfa-63a0-4adf-b122-636f912cbb1d", "comment": "Malware payload (OffLoader)", "value": "ac43c5d225758269c056dadfbc92c587b3a1da2b8d19bfc1014a154d207455cd", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068122, "uuid": "43021c9e-147e-4b2a-b1c3-29c98337202d", "comment": "Malware payload (OffLoader)", "value": "5894b339c8a6f9a5aad86c73b0494c0f39cc676e", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068122, "uuid": "188d1df8-6f2e-4391-bbe6-607e554f7b0e", "comment": "Malware payload (OffLoader)", "value": "1a09e4b8bcc830738f76912ccd0751eb8e2b1a0decc6468e192a81a8078a998fd652601f1fb5596ca147d623d6b723ba", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068122, "uuid": "d2090dee-5873-4adb-ac7e-4ba1c40b0787", "value": "T1B0961227B28A673EE06A1B3B49B2D1109D3B6E61651E8C52DEF4684CCF3D0B01D7F646", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068122, "uuid": "36a4393e-899a-4d66-8c34-9750bb1afe10", "value": "ac4ded70f85ef621e5f8917b250855be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068122, "uuid": "74a61e61-338d-4744-bf66-0d6fd6110f85", "value": "98304:QN66kMQexqUnmKr/8+RtzK6fnhrNGgRGOSZNJ/ManWdn82VvU6TA9mWxe:Ek8tm6/8+W6PfGaGZZrpnOVvUwIZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771068122, "uuid": "6eb7831f-183b-408b-a375-49bb00d1127a", "value": 8658820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771068122, "uuid": "c5f8467e-43ef-493f-88ef-cd1a597945f5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068122, "uuid": "10f1aaed-7e98-4531-9899-2969efe33341", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8df3fd5-097a-11f1-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1771055784, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055784, "uuid": "d0c1657c-adec-4613-8f25-035ad683b4e0", "comment": "Malware payload (AsyncRAT)", "value": "b225d4e7b8282dfdee97a2c48c698f68", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055784, "uuid": "a210069a-4d4d-4739-b5a6-954acac5fc0b", "comment": "Malware payload (AsyncRAT)", "value": "af77bb57c12e40a0f4ac6831bb8e6951d0c583fecea0f0132341ac676933e2e1", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055784, "uuid": "00e39a1b-d243-493b-8ba8-c319279a45df", "comment": "Malware payload (AsyncRAT)", "value": "5eae8af320739b2d233f62aaef9bc6310f7fe365", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055784, "uuid": "853c51cd-445d-4c03-b62c-4ac1a86a29ad", "comment": "Malware payload (AsyncRAT)", "value": "af8e04a65de1f4304cadf2d9924e887d6dcb92116ea3aea48a05ebaabe4eec5d1f92f58d7b6c544a829e3ce4b1653e9f", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771055784, "uuid": "6735452c-2f98-497b-8dce-3c6d967fa6bb", "value": "T1FEF412144ECA59DF40AF564E327A2725CE39E10534729C1E321B9BDB6FE0F9B8502CB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771055784, "uuid": "04bd41b1-6075-49b3-bd0d-c2852b77c6bd", "value": "192:WpPF5lIu+Q++Qu7r5CZrWCHFdoZuu2CzrVrCnHAz8Zp+9sgnAzfx+TCjXDE9GKwS:YNIuXDArWUoLwjmeE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771055784, "uuid": "c5dcfb9a-5d61-407f-abeb-0fe6eb2d78f8", "value": 773010, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771055784, "uuid": "f9794342-d9c5-4696-a384-138c5f665736", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771055784, "uuid": "fb6d1c66-d9bc-4587-a166-8dd151081916", "value": "Habitacion_305_estado_ingreso_12-02.js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69dc0cdd-09a9-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771075865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075865, "uuid": "2bdd6894-acaf-4cd0-b881-8eaed10aac04", "comment": "Malware payload (Mirai)", "value": "b266a7f254f58ba8976d54b10b946306", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075865, "uuid": "1a0fd0b0-c30e-4c65-9a4d-1fec5a3b1315", "comment": "Malware payload (Mirai)", "value": "b1368d7136320bb92735a43f6c6612efe03f9a7ef2d65e7eb9a5851ddf7e7e23", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075865, "uuid": "67e632dd-c0a4-4feb-8583-d2b2933a3708", "comment": "Malware payload (Mirai)", "value": "a34aa161954070678edd1bda875480b4903a8df9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075865, "uuid": "2dcf8d9d-f7bc-4612-ab3b-3d78148af27e", "comment": "Malware payload (Mirai)", "value": "25b950fb4bd289147101cb08ecf8ea1c2dc3e73a34e96ff8003f3735e50c4ed63ca8108daa1d04f95b47d8f8f4441b85", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075865, "uuid": "4787e8e0-95ab-481a-b8ac-2411b789e60c", "value": "T10D7312623176DE71D6B2C03363436E597932C97A077853BEBC78672FB486D14580C89E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075865, "uuid": "593a2155-db33-4b2b-8822-b067031b64b5", "value": "1536:a8zRnwvX0/jMQwZuOPFPijvDMwhQi1rYGhQZ9zWmjiyorU:hzRnwP0bMQ2RijvDZZ1rYGhG13jiySU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771075865, "uuid": "40210a0f-16fb-4e85-9114-83667ae50430", "value": 74780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771075865, "uuid": "4bcd0998-bd43-4064-8c52-4e14a462b59e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075865, "uuid": "3e57eb66-b190-4aec-b740-7678b2aa303d", "value": "xnxnxnxnxnxnxnxnmipsxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f612f80-0999-11f1-a129-42010a9c0007", "comment": "Malware payload (CoinMiner)", "timestamp": 1771069056, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771069056, "uuid": "9a38bcc3-794c-4e75-bdad-b6c06e0c1ee5", "comment": "Malware payload (CoinMiner)", "value": "0458eb4d882661a3e8c930093acb7b30", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771069056, "uuid": "cb5457c6-45db-448b-acf9-8f364c35951e", "comment": "Malware payload (CoinMiner)", "value": "b291b864abd5de39810dde3f77b9027d1aa3c63107c97841a003103822414f1c", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771069056, "uuid": "25d4cd86-4168-4a4f-81ae-51d0671c63bc", "comment": "Malware payload (CoinMiner)", "value": "22266327634e53595de046f389c1736e823354f2", "object_relation": "sha1", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771069056, "uuid": "1cc429f5-bf2a-4313-b1c3-9ba0126b7327", "comment": "Malware payload (CoinMiner)", "value": "cfab1f10959b88b26b1d1049b7c9e85d5a6a385206f62a08baa670e02593640b28e496846a8b1ed93e30fa8701dd574d", "object_relation": "sha3-384", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771069056, "uuid": "c02bf295-cbbc-4511-83d2-aea29fafb8b3", "value": "T188D5331B4547E1DBFF72CB3462702A904EC6BC1EB02EBA6D12593CD7813D0960A5BB5E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771069056, "uuid": "dddf1777-83b3-4b06-a09a-e72fab08ded8", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771069056, "uuid": "5329bcab-cc66-44f1-98cc-fe58cbb083ac", "value": "49152:hgNYVx+yxx6CkHDco98OBeZWsOnYRGUOWcrsmvQL586AEAde+fgUzzU:eeV5OBeZ1RjICa6AEWfg1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771069056, "uuid": "81785ed0-3fcd-4117-9586-661a1ad9b4c2", "value": 2954240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771069056, "uuid": "a39b72ed-afcc-49ba-914d-57be64321d24", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771069056, "uuid": "9a54c250-8243-4712-831b-3f3f8930995f", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71529aec-097a-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771055691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055691, "uuid": "3a18a675-d6b5-4808-a019-755dfe5255fd", "comment": "Malware payload", "value": "0ec7d167c7ee8764e21c792d6a65d059", "object_relation": "md5", "Tag": [ { "name": "0APT", "colour": "#EA07F8", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055691, "uuid": "964a86d9-8d44-4a41-96ee-e5b31a6fa39f", "comment": "Malware payload", "value": "b2f915cbf1a2b6879d278f613b13d790de9a460759142f30457c3238e598e077", "object_relation": "sha256", "Tag": [ { "name": "0APT", "colour": "#EA07F8", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055691, "uuid": "3649884d-22bc-40e2-9243-6fce8a8318e5", "comment": "Malware payload", "value": "976230f9d94fbf5798f20a2eea44248be74aa82c", "object_relation": "sha1", "Tag": [ { "name": "0APT", "colour": "#EA07F8", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771055691, "uuid": "9d5ae7a3-36fe-4c12-b7f5-2d375b815f42", "comment": "Malware payload", "value": "a493c3c24d8f56a50f2d0228c8137e6e01410b47f05a4eb252943dc3e979841eb911bcd55eb5ba83adf3976fb659892b", "object_relation": "sha3-384", "Tag": [ { "name": "0APT", "colour": "#EA07F8", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771055691, "uuid": "47f7760b-258a-4b82-8b09-b048d67954a6", "value": "T13A465B0568351D5AD5FA7271B1FFE33CAFB31925812BECE74966A8709D2B243B90C20D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771055691, "uuid": "012a9f2a-be31-4eac-a13e-6361ed111543", "value": "cb58379f7d884f9f3aff3bb2ea402281", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771055691, "uuid": "b52ddb2e-1f9d-4043-8f07-2351a5e4fbcd", "value": "49152:yjtho7LuSZqQQlWDzHz04GuaJEOEb3x1MG1YhOLpJMb3jbi8g2Hb95iVedNIufPY:yhhon5F1bTPMbmLpK5FKBjJNbAa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771055691, "uuid": "03b97887-3545-48d0-aa12-bb41020b9768", "value": 5828535, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771055691, "uuid": "0d37e73a-8471-43c9-bf88-c8ac45d927e6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771055691, "uuid": "9bfcf74f-15ca-45e9-849c-a8ff04683cf4", "value": "6BE2-1B07-2D14-0APT-KEY.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbf25acf-09a7-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771075197, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075197, "uuid": "4a946a03-6397-40aa-95a5-372fb7ebe2d2", "comment": "Malware payload (Mirai)", "value": "5a67f06434f58276d180c38559f44801", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075197, "uuid": "9835ef50-7864-4602-8b34-dc883617aa10", "comment": "Malware payload (Mirai)", "value": "b36f3499dd7b752fed1259d89db0c7a78e38d50abb4cbf8b5aa2adb27dbb5493", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075197, "uuid": "cef5b859-4236-47bc-b6cd-8e6a5c490e28", "comment": "Malware payload (Mirai)", "value": "7677fd99e86365a018dff471069a79fef5adb869", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075197, "uuid": "3f504e87-d8d1-43f5-b6ce-b86678aa30c8", "comment": "Malware payload (Mirai)", "value": "c55fa33d357b6217d258c7bf823728c81d39b265ec32238bb83040a495aa24ab5fde78a16a6bced706a9b48fac3ed8e2", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075197, "uuid": "d3b54299-f726-42b8-9e2a-c4a6ebd2ff02", "value": "T169146C2BB3C39CE6C51063308C316362776FD7081958EAFFDA1B3794A9977225A246C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075197, "uuid": "068bfc44-f418-43dd-82b3-46d39f7da4f9", "value": "6144:1R9Om5159ZA0mzoWcz4Mm4ztkES7IKTtO:BZAyFzQSdS7Ij", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771075197, "uuid": "ea0058b3-e948-4b10-bd17-ae50815a0d1b", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771075197, "uuid": "ece79f48-fd6f-4876-86af-19c2c844b9fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075197, "uuid": "d0e2f76e-e7f3-4c00-92fb-89499b58dec3", "value": "xnxnxnxnxnxnxnxnloongarch64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f6a570c-09ef-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771105805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105805, "uuid": "8842b33d-ba6a-49ac-a935-2bb23de440f1", "comment": "Malware payload", "value": "0c3b8cf710e0931bef326c7e360d3cd2", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105805, "uuid": "7de3fd2b-8a25-4285-b1d0-2dcf39093891", "comment": "Malware payload", "value": "b5366263fcff36ed9f1b5010ab134a77937e1959e7712bbeb5821f2af146ae32", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105805, "uuid": "4a4e151b-4277-4a68-9da2-044ae4eb3ee3", "comment": "Malware payload", "value": "d88a6a07e539869928cfcc2ea4286b5736cd5623", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105805, "uuid": "81d91525-f3e6-4c3e-bfb8-475774e130b7", "comment": "Malware payload", "value": "e75bf3d46dc03eeb72b268b1ea674989bed9a0f3a4fb1e2c6f8da3cb589c4bc9d2559d9618eb1ae5b44b74d922e392d7", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105805, "uuid": "a6b020db-6a5f-46f9-9a50-b073246aabb7", "value": "T11651460692F2316127529C2412B76E3F9AA99817DE07CD50355D1EE8BF75874FC03E8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105805, "uuid": "0152f154-0c1c-40c8-b0a7-ab35db09e9de", "value": "96:/KYPYSyiXfUJMPqUpIHHHHHP9naHHHHH/1KPq:yYP38JTWIHHHHHFaHHHHH/EPq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771105805, "uuid": "c6d5d66d-e0c2-4900-81e9-aaf2e9442038", "value": 3136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771105805, "uuid": "44975603-6850-48ef-90a6-3ec47eb3dbb4", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105805, "uuid": "3a0bb9f3-eccb-4c38-8688-9e843cf60e0d", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e07341e-099c-11f1-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1771070154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771070154, "uuid": "44e40696-926a-4818-a816-881b53d24cc2", "comment": "Malware payload (AsyncRAT)", "value": "bee9de31e7ccded2f9312b2ff57161f0", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771070154, "uuid": "2f07fba0-8522-4dbe-9b01-bb4c602a8b1d", "comment": "Malware payload (AsyncRAT)", "value": "b6349177c94fce84c3b3493cfd6c1194ba0cf95673a3d9d15b98f9a7f539de51", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771070154, "uuid": "d8284064-777e-4098-a36a-14b5c570374f", "comment": "Malware payload (AsyncRAT)", "value": "890164140bb154e0294be89d5410236ed50f7e1b", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771070154, "uuid": "f9b4a95f-a20f-4212-b364-f4f0988e31be", "comment": "Malware payload (AsyncRAT)", "value": "3089eddda444e7c829a319d01f792f00823cb0e1d89a0ab6aab7683e4456882759bbb3df6881a477da0f87e6a85ce35a", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771070154, "uuid": "ee83fdf8-ebca-4e85-81f0-284fd8dd0884", "value": "T12E637D1877E50139F4FFAFB54CF132228639FA136903D21F14C90A9A2A37689CD917E6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771070154, "uuid": "14721233-d94d-4090-98e0-98f6b6e3dd70", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771070154, "uuid": "dfda7235-1648-4eae-9961-7133bd75155f", "value": "1536:w7PzMFNh5e64HHyz1YwZbDDym0KYo+E3u6bF5W3L3zOnz7RWInMy:w7P4F1XeHY1YwZbD/+yFu3zOnVMy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771070154, "uuid": "c51cdc90-6b25-4c9c-a295-2c0987651ab4", "value": 72192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771070154, "uuid": "e30db06e-f952-4061-9896-1e2a7f844778", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771070154, "uuid": "9bf3aacc-7f5a-40a0-8148-9757f46be61c", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcd68f4c-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037350, "uuid": "e21a04c4-120f-42ee-831f-8b39296aca3c", "comment": "Malware payload (Mirai)", "value": "ebdb4364d453949f8f475581dddcc96c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037350, "uuid": "78dab57c-5d49-482b-8e2f-13cb636159b1", "comment": "Malware payload (Mirai)", "value": "b68e9648048abe101d05e3e0c0c35a002dd95bc0f106429d0649ca2a4415f6e7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037350, "uuid": "daf3c1ec-66d4-4151-bcac-cf28bbb60e25", "comment": "Malware payload (Mirai)", "value": "81ca1837aefa3a3f8b5e312b72d5584a1394c564", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037350, "uuid": "0b63397b-320c-46e1-a108-31dd83e48691", "comment": "Malware payload (Mirai)", "value": "25f1d58b6a84ebd15dc39f9381634ce948cc410bf574185cca206536106f694161a1799dcd4bc876fbc78eedde628cea", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037350, "uuid": "11a6a1bf-0e86-4c02-a998-ebbf8129e47e", "value": "T18CB2E1300DE61C31EBF16C3AE76D4FCA6ADD8AB1C4F6603D6114D3185D8AC0A98D5BE9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037350, "uuid": "3018e5a5-7e2d-4200-a79a-066aabd22fb6", "value": "384:YiCFd5XBWSVogC+k38vDiCXFVBfkJ/U/kPrWjYWK+jEZqYviiraQ/MhymdGUop5H:yFd1j/k387iCdfkJ1PF+jEZZGFs3UozH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037350, "uuid": "477b4521-4db9-4571-8beb-d6a98d7f5304", "value": 24160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037350, "uuid": "27031241-ffa6-4b00-90d7-c8c66ef279a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037350, "uuid": "31604d96-80c8-4320-8784-793443c65469", "value": "nwfaiehg4ewijfgriehgirehaughrarg.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3da86126-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048733, "uuid": "482f158c-c55a-426a-882b-598150e97be2", "comment": "Malware payload (Mirai)", "value": "a67e774542ff9309ef9cbbae8095dbb0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048733, "uuid": "d8c6a2ae-141e-4636-8b8e-a82ab2fb109d", "comment": "Malware payload (Mirai)", "value": "b8a419c78886083ee0c49414348bc8bdf2fcbe5725b9be86a13553440ecd9233", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048733, "uuid": "93464a79-d521-49cf-8e52-49e23c09243f", "comment": "Malware payload (Mirai)", "value": "d235d40d156af9ac160a5a13cdfa780734b92471", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048733, "uuid": "ede614d6-8d0b-4b0f-87e5-0f430639f9d3", "comment": "Malware payload (Mirai)", "value": "c5f27fb8248c99b7c62b957a48c1889ce74b93c86348c4d6ad5cdb27a0b096a99ddcd65b5d878462761f1c27bbcfb5f8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048733, "uuid": "ff7e26f4-8a6c-4988-ad4a-9407e75c8c25", "value": "T12D73026221B6DD62D2B1803363877E597E238876037453BEBCB9A35FF482E615C4C45E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048733, "uuid": "38a2df11-7f3a-4288-946b-e9ff9f40b1a8", "value": "1536:l8zRnwvX0/jMQwZuOPFPijvDMwhQi1rYGhQZ9zWm5vorZ:SzRnwP0bMQ2RijvDZZ1rYGhG13lSZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048733, "uuid": "66e65843-d189-4ce7-a6d8-3c2420ba177b", "value": 74780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048733, "uuid": "11c0c08a-8ff8-45ad-8e3f-74f911fd0481", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048733, "uuid": "ded01d8c-af30-41b3-ab3e-8c791fe2f8bc", "value": "xnxnxnxnxnxnxnxnmipsxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2efdc2d-0985-11f1-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1771060633, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060633, "uuid": "2098f5cd-150e-4a0c-ac7a-b47f384b3916", "comment": "Malware payload (AsyncRAT)", "value": "3284137a71bb9285ff6eb1ae74014a9a", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060633, "uuid": "afcd49c0-166a-4e3d-b5ca-2106111c1703", "comment": "Malware payload (AsyncRAT)", "value": "b8e11214feed627b08e9f8c4c8fcae51a21d71d49f3c89a120276d7aabaa1bec", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060633, "uuid": "a153fab0-b8f3-4bca-aedb-891ac3bdad5f", "comment": "Malware payload (AsyncRAT)", "value": "1639d6e445b6ce1e83c837889ec79c07be14b066", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060633, "uuid": "463caf46-70f2-4de0-9799-f82e95d3fca5", "comment": "Malware payload (AsyncRAT)", "value": "036fd661771861ac5687120b4e3e92b1f6315dfd8cddd91cf14770554a4761f3d311746e29396bc35445e0920cbd1a53", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060633, "uuid": "b712a9f0-d799-48fd-a0e3-5af517c9bc81", "value": "T1CF134A057B918625E5FDABB419B266030731E6039E23D79E0CE896DB1B67BC0CE407D7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060633, "uuid": "c02377e6-0cc9-481f-9a18-56bbb6549b36", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060633, "uuid": "8b0925cd-c735-461e-8344-9f59db2fb673", "value": "768:GbsRtmbHIZRqF4k8womL1clrF5Pr9p5496iOwhr3/Oq:GbsQIZMmvBJpFp9T496iOwdh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771060633, "uuid": "595c350a-df42-4ad0-830c-2626db73556b", "value": 42496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771060633, "uuid": "a6387813-6a9c-436b-ba34-875064b94d06", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060633, "uuid": "bd48f08f-1ddc-456b-980a-0f69bacba9bb", "value": "b8e11214feed627b08e9f8c4c8fcae51a21d71d49f3c89a120276d7aabaa1bec", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e7fc1c8-09cd-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771091227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771091227, "uuid": "f2090d89-087c-48d8-8f2d-c464a42126a5", "comment": "Malware payload", "value": "f7230de4bd2abe73951f053812a2c87d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771091227, "uuid": "4b1f4083-589f-4ae2-ba18-80778f4de95c", "comment": "Malware payload", "value": "b8f15a41d7aa2c8477b2586d5eaa914d5f4d366e0b66fdff2901c55173e0774d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771091227, "uuid": "c562e841-6859-4de7-8a4c-124c3913767f", "comment": "Malware payload", "value": "436719775faec219bee5be617ee0f5f0b83ad93a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771091227, "uuid": "0e99db65-20d5-42da-b632-37af39790004", "comment": "Malware payload", "value": "20938aba5ea3b9168984e8629547ba96b698d78733dbd5dac1ea2b0967b5b273e99b58f5fc3effac9b0c470986fff380", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771091227, "uuid": "3ff95b2d-0763-41d5-b08d-cebd8fc673a1", "value": "T17FC4234FE021DBC68424B85E6A4C95B6F3C1AF9B7516309BF8AFACF5D5C30CE2260581", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771091227, "uuid": "9a0ae3e2-109e-4535-9429-3d322906c190", "value": "12288:YvIF8fwnwykKUsk/86PrgBRJ1cI8KyPIXS87a:jFGxoS/FrclyPOS87a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771091227, "uuid": "6f9ea8d0-4589-4468-bd4b-d2e7f22a58a1", "value": 571599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771091227, "uuid": "e6c2b687-e4fa-421b-b0de-199273668453", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771091227, "uuid": "8e0eee02-1b54-4e21-a3a9-e8df3711f33d", "value": "bizy.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "043b1f25-09fe-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771112202, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112202, "uuid": "548e44c2-a30a-4d09-b450-ee5c15a2841b", "comment": "Malware payload", "value": "3468a7c52163612dab53979360f20af3", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112202, "uuid": "2779bb0a-dbc3-49c7-9271-e7bacfc74263", "comment": "Malware payload", "value": "b9b07224e5840482a5bf351c3f4984e46387dcf2808f9324c0da343d74136e1d", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112202, "uuid": "5e62f8e0-2573-4b6f-a39f-5e81124b7b4f", "comment": "Malware payload", "value": "7786fc25b14166d41bc252ab6980c6319d877286", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112202, "uuid": "61af7458-eb2f-4c71-9c52-5e9534b8bb59", "comment": "Malware payload", "value": "72863c46958e01e74e712a2a1fa414aa913953a3ffb2681c5279eed8d65f01b5d1710b64b0aace99a251fca536b03ceb", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112202, "uuid": "e2756326-ac51-4b96-8e5c-4ff5d9f59c02", "value": "T147D59D11B697C136C97E45712A78EB2E50BE7FA51F7444EB27E85A7F0AB14C20231F22", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112202, "uuid": "0e2d60da-a6bf-4a1b-8a63-e2c4096bdad5", "value": "49152:qNOY9c9MftgkKAcVqVZ9Rw4YP/BD/vT4PduTRUhfwESB6zDojOwfFlspqLOSGRzs:lYE5AYqrPdsBqwApqLN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771112202, "uuid": "d4caefc4-041f-49e5-9ec2-fa9516ad180d", "value": 2853376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771112202, "uuid": "a5ddc2dc-313d-44c4-b840-f785490e821e", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112202, "uuid": "2cb996f8-29fd-4ee1-894e-8d27195f60bd", "value": "AIED785.tmp", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84954a04-09cc-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771090942, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771090942, "uuid": "a899b877-ebbe-4a61-8b6d-8a63be90d2e9", "comment": "Malware payload", "value": "367eefddb7878c5f48ee4cb4d349f3cf", "object_relation": "md5", "Tag": [ { "name": "CVE-2025-55182", "colour": "#999986", "exportable": true, "hide_tag": false }, { "name": "React2Shell", "colour": "#1617EE", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771090942, "uuid": "e1914bb2-d06a-4db4-9bb3-dfc8f78ebc9d", "comment": "Malware payload", "value": "ba43e447e63611d365300bf2e8e43ccb02ea112778d0d555ef9a9ccf6169808b", "object_relation": "sha256", "Tag": [ { "name": "CVE-2025-55182", "colour": "#999986", "exportable": true, "hide_tag": false }, { "name": "React2Shell", "colour": "#1617EE", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771090942, "uuid": "48eb4587-4325-42bb-893f-47609253ca83", "comment": "Malware payload", "value": "f88c7a07b24f317928b5e9bcd93c2a90e15511aa", "object_relation": "sha1", "Tag": [ { "name": "CVE-2025-55182", "colour": "#999986", "exportable": true, "hide_tag": false }, { "name": "React2Shell", "colour": "#1617EE", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771090942, "uuid": "e74482f6-4266-41e5-a70b-7e67e18640a9", "comment": "Malware payload", "value": "541b33fea3abf8d5136dfccf52a25ffdedad0f76e0465b3e3c53b78bed254eb4d536fe256a87c568df8fa70e183192a8", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2025-55182", "colour": "#999986", "exportable": true, "hide_tag": false }, { "name": "React2Shell", "colour": "#1617EE", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771090942, "uuid": "8d92cc99-63dd-4081-8fb0-d636313df889", "value": "T1AEA14302A4A4EAF47D4F41394FBB31103934618B1F45BE6874FDA0625FBC78643BB66A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771090942, "uuid": "bce782e1-31b5-475e-b935-99275e6b0820", "value": "96:NQoZnBXPQQDUSHUStVhzp1t8SN+xEDB9Xt8SdQpKtH:NQslMSRpthvnXthgW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771090942, "uuid": "1714aab8-bde1-4b1f-aa94-7cad0cabe5bc", "value": 5014, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771090942, "uuid": "656f5c19-36e3-49c0-8dc1-f3c230cea7d3", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771090942, "uuid": "97d6afc1-997a-47a7-a5dc-4a2a8e83dd4b", "value": "sex.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5f88884-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037338, "uuid": "7c443cda-0c0d-4406-9c2c-63ccace77633", "comment": "Malware payload (Mirai)", "value": "d260ad80336fc7a9aea63b90e70e4188", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037338, "uuid": "e110d663-ab3f-4065-881c-3d4959f0afb4", "comment": "Malware payload (Mirai)", "value": "bc5df244bc1c2664f7ea2b216ab22ce80ad4ba125eb8e34fb015d9039106eadd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037338, "uuid": "2ce113a3-ba12-4d60-a5e1-226023b0cbac", "comment": "Malware payload (Mirai)", "value": "db18e7cadd0c23c6e9468e092cd19bc75a306b2a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037338, "uuid": "b0566456-9ed6-42b2-80b5-2b46d4a11200", "comment": "Malware payload (Mirai)", "value": "e7ce6b70d7b286ed0928ce8f0f9542134a804e63a2e1ed0caf10a5e42cb1be7d92460495ef92ca8d0a0fe916d6b1c4d7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037338, "uuid": "e942bb93-bcee-4d4a-8027-93afe961a3d6", "value": "T1EC13F198740805EEDF3A82F52FA4079892B84BFBD55A2D6EA517C740EE5E0247FD3284", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037338, "uuid": "7594c55f-432b-4cc7-9f24-248fd5fe1dc3", "value": "768:NUPX5JgBEzhNItOgmVtYrS9AwWG4FSqQ4b5UTlUDJPzz4A9XJgGlzDpbuR1JOPm:N4XoMymLYrflbKTlUND9VVJugPm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037338, "uuid": "e19a8f45-a901-4b14-ba6d-4e6b4a294d05", "value": 43324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037338, "uuid": "8fc86d00-c08a-4b78-84fb-a27f5a0e0562", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037338, "uuid": "64289d0b-ace2-48ef-9e27-705ebacf5311", "value": "nwfaiehg4ewijfgriehgirehaughrarg.mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9875a2d1-0a00-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771113309, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771113309, "uuid": "1a979789-d899-479a-b882-050ebe10b9dd", "comment": "Malware payload", "value": "dcc491a1192ff49e2f9a85344ba7ccc8", "object_relation": "md5", "Tag": [ { "name": "CVE-2025-8088", "colour": "#53BCD6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771113309, "uuid": "d45350f8-da7b-4fc7-b7d3-c70bb781b3ab", "comment": "Malware payload", "value": "bd7cec7ba3ed6ba25df64cb3028036c04e6ff1a1f4da272e249190ef6e6e3c55", "object_relation": "sha256", "Tag": [ { "name": "CVE-2025-8088", "colour": "#53BCD6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771113309, "uuid": "cbd2e7b4-63ba-4646-9387-1490e591cae9", "comment": "Malware payload", "value": "df5d05ce139d692a6f79a9cbc8c788f552193563", "object_relation": "sha1", "Tag": [ { "name": "CVE-2025-8088", "colour": "#53BCD6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771113309, "uuid": "83770388-bbb0-44b5-a296-8658eab58afa", "comment": "Malware payload", "value": "c25438bfc42fb5f15a25d93e631587117109195813bb0cb87d4c491f0fed666dd5db82369f2a9445aaadc116d1925bd2", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2025-8088", "colour": "#53BCD6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771113309, "uuid": "02c643d7-afba-4385-a75a-034ec2fd3d54", "value": "T1C0534DEBC26CC74155B17E16B856DEFA82B800C9CEF425440CA2F57ABA8D9C5CD9C0B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771113309, "uuid": "fa73b874-0034-4fa0-ba7c-4a36c154a061", "value": "1536:JXzHlLReb5+u+u+u+u+u+u+u+u+u+u+u+u+u+u+u+u+u+u+u+h:BGb5+u+u+u+u+u+u+u+u+u+u+u+u+u+t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771113309, "uuid": "28fdf722-a083-4b78-b132-b9c01576ee89", "value": 64940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771113309, "uuid": "a302a020-7089-4093-8a6f-728fb24115ad", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771113309, "uuid": "3f5d91ee-e61c-4b8e-bb11-076a6b4bd247", "value": "5_19_4_1312_12.02.2026.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d79468e1-093f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771030522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030522, "uuid": "7cb19826-48b4-4d21-95c5-90e487b8af47", "comment": "Malware payload (Mirai)", "value": "09deb2a48f0f70a2b618326a65750268", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030522, "uuid": "24b6a1f6-0bdc-42bf-a060-67fc8154769e", "comment": "Malware payload (Mirai)", "value": "bdf309fdd8c1a0ac7a36e7d5bb48ddca60195ec040f0499547a87e6edf1aa0db", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030522, "uuid": "508cfb9d-2fb0-4030-9e7e-5dc1bbcd87f6", "comment": "Malware payload (Mirai)", "value": "34f769afef08b399f07eb621aa5e43c05744aa7e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030522, "uuid": "69f80f52-9083-4a84-8c01-4c5c9eccdb27", "comment": "Malware payload (Mirai)", "value": "1e46de07555c1418485fb5a77d8bec92c4e0372682b01246a8be0c45196b60e3f30082cc74cd0d1ea7f11c9ffd800540", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771030522, "uuid": "9c63ecbb-2be1-4767-8039-b762dd48901e", "value": "T11373A5097B600FB3DCABCC3705AA2B01399C665721B97F36B934D918B94B25F15D3CA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771030522, "uuid": "8507021f-c768-483f-915b-3af500e26df0", "value": "1536:jJPEhGW5iNWqAWTuws5Wb86wnr4/aZOn5Co:jJPEhcNWqxNEO/aa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771030522, "uuid": "15458dbd-0e43-4a48-b766-a21e8b35b013", "value": 76120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771030522, "uuid": "3fed4c93-6183-4fb9-9cb6-dea12033bd5c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771030522, "uuid": "bf61813a-9a22-4591-9773-2af054567fab", "value": "boatnet.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "960ccd2a-09fd-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771112017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112017, "uuid": "d24a13d6-7c50-40ae-9d87-d49b12580e1b", "comment": "Malware payload", "value": "1438333fb8d814a1205016f44a973465", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112017, "uuid": "4914d3a6-1697-4643-8c2c-839486724747", "comment": "Malware payload", "value": "be003b840738befeec9336f4786b26c501c1a322555d829e230ae4f3fea33b03", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112017, "uuid": "65e68308-4c92-4111-b751-582b926c77d3", "comment": "Malware payload", "value": "a15b3bb2ac38faa049e56171500249c04af55c67", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112017, "uuid": "a61c2a60-a642-45b7-8097-b6c7ceeb97fa", "comment": "Malware payload", "value": "9de8bdfc7d8580a3397ee91ad48bd2b696a1e36e95103e398ed8952cc76b1ff8df5aad1c649cabdf45af3de4d030507e", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112017, "uuid": "40a5b033-4497-4d3b-8509-4a4de8d0e687", "value": "T12A33088667E94124E6FE9FB0AAA3D2050774E317490BEBDD6CC405BB1F637C04D816E6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112017, "uuid": "111c0b3d-5dbd-4cb8-a34f-abbfd83f577b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112017, "uuid": "880cd0ed-9839-484b-b7e4-4e0e75345ef2", "value": "768:acEaOEK2K1mQZIjz7dtbLgO2LKgEl95vDPuzn0OwLDkHaXbJ:arN1mWazbaol957DOwLKsbJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771112017, "uuid": "e2b7b767-42e3-4963-96db-42afd30beefa", "value": 54784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771112017, "uuid": "3489925e-5039-49f5-82de-e66732ea3119", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112017, "uuid": "eb11df8e-9628-41f6-bb04-8fa42443883c", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "403b8176-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048737, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048737, "uuid": "4ff3d063-48c8-4017-ab1b-f695ffede3f5", "comment": "Malware payload (Mirai)", "value": "2a3dc5e406d4df8dc58869b2e4328848", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048737, "uuid": "cec6d714-d755-4b97-a910-c3be9bdb5e4e", "comment": "Malware payload (Mirai)", "value": "c04ae9b25c574646a4e1d52542664f7d4085111ed3f83367e98f6b0c4d1cdc51", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048737, "uuid": "724db792-ba9b-4db2-9f65-0790f4c07187", "comment": "Malware payload (Mirai)", "value": "88d68bd4e8512d0e7aa788696ed6530983a9c561", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048737, "uuid": "6c5dd2fa-4aac-4a0c-a87e-fa75bc3853b7", "comment": "Malware payload (Mirai)", "value": "4e6d3cff53362ba7bb11def4f1d55b2a86d6a5e597e2004a46c348617dbfc060d5ad55c6a0a945b80228c5ec9ffa4683", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048737, "uuid": "b4a6ade8-ec44-4206-bed2-706bb301cffe", "value": "T11AD3B021E4006DD1EC2129F578BA96B80350EE740BDE1582EFFDF95E747BD9438AD2A0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048737, "uuid": "e7f7acfd-a7a4-434f-b833-69475e26a4fa", "value": "3072:PnicTtkAg7FSGp+VJE6AqUjq+c7zAbpb9/x+:PiySSGp+PMmT7zMpl8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048737, "uuid": "24b9bd56-e061-44ed-82c0-73c6bf2c8af8", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048737, "uuid": "c41b0676-0548-42a0-a8b8-adfe333d3027", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048737, "uuid": "257e5863-caa8-47f0-b80e-4313f1de2255", "value": "xnxnxnxnxnxnxnxnsh2xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4933801-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037336, "uuid": "13e7f696-a28a-41a9-8d38-c597c43f5da6", "comment": "Malware payload (Mirai)", "value": "3c41250705544d913e5a5978a3e18c41", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037336, "uuid": "4de318b7-564d-4d29-aca7-5b4f2a920353", "comment": "Malware payload (Mirai)", "value": "c147bde4ce423c3470b86e69dd5d9251aa2d5654f40b0a7640f0dd2f613b639a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037336, "uuid": "38adc91e-d6ef-47b4-99d1-a39fe0478cd8", "comment": "Malware payload (Mirai)", "value": "bdd3f28b45958b4cc02675b8fa3072dd6b7c9f81", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037336, "uuid": "304906c2-bf6f-453b-a9e7-b286ee4d5e5b", "comment": "Malware payload (Mirai)", "value": "1b3fe32ad08caf1611de2d508bdf51e7c8281cc0e7e4acd68c967c95193f733aab3bb1ef6c54a2f5fe33b3e90e5d301d", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037336, "uuid": "e09e89d1-adfb-46f0-8c71-bada6959fb7c", "value": "T14913F1209651E950C6A41C39DB3E4DC336183779ADFF9C9A223C87BC299B3586CB94C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037336, "uuid": "90a297b9-b8db-48da-afe6-4203ab524fb9", "value": "768:C2t52vXbC5pyt1Xl5gpMWPhlCwBq9q3UELzX:Ca5kbZspMMJfLr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037336, "uuid": "f7fd2fa2-e159-4be6-b31d-fe336674572a", "value": 43844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037336, "uuid": "0d301df8-aaad-4617-9130-13b2bd53e42a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037336, "uuid": "4f67cad0-5692-41bd-9302-781dfb18ad03", "value": "nwfaiehg4ewijfgriehgirehaughrarg.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "956fff04-09ed-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771105144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105144, "uuid": "c1d702fc-ddbf-478c-b6fa-eb13dd9b3a75", "comment": "Malware payload (Mirai)", "value": "1fc785020e2d7686e1b106a468e56f53", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105144, "uuid": "4e6a3a93-6f6e-4276-8cc2-aa5c8d54ce5b", "comment": "Malware payload (Mirai)", "value": "c1fa740cb8fbc7952a82ac1e9c3d29323e909d4d73dca8046002b955069486d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105144, "uuid": "8c0def85-b6b0-4f44-8864-d75df7f6e997", "comment": "Malware payload (Mirai)", "value": "a23f634f7ef6ed13674b2b72171668d625e72329", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105144, "uuid": "0ede98ce-ca6f-4aca-a421-8df0179cea18", "comment": "Malware payload (Mirai)", "value": "f3210b55d872523e00a4641ccd7264268b0b61b69613543985c5472992e56d0a450f54f74cdb281ebbce4d90da1b95db", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105144, "uuid": "dd02d969-5432-40e8-aad4-39b7356a1657", "value": "T1FBB32B56B992CB11C1C326BAFAAE414933136FB8D3ED7202DD206F6067874DB0E7B516", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105144, "uuid": "d8256856-646a-46f9-b6cd-7b93ee8f36fd", "value": "1536:JTnpQTYCi/9h85aHzdAQ9m3CgRYtFcvNC//GNkcaL0CcD8VyzU7i+U0wBGe7G1CD:eYCiBaWmnkHokcaLzUDBGeS1CP52i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771105144, "uuid": "1907c5ae-e155-416f-9431-629dac747216", "value": 115872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771105144, "uuid": "b5c3d448-1d8f-4b1e-ab1b-f7647328e1ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105144, "uuid": "591ae77d-fbc4-4725-b831-4efdbaf80121", "value": "data.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b75df06-09da-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771096779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096779, "uuid": "69babf5a-968e-4715-a0f5-f0c35b9b3eed", "comment": "Malware payload", "value": "ade250cfbbe88abcaf6a2118546a24ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096779, "uuid": "32aed3d5-9b41-48c7-b599-de7aadb52e32", "comment": "Malware payload", "value": "c2443f3aafd02a41fc8c77ed5d06d478d5e917ed179e21572947294a6dac57fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096779, "uuid": "4af53633-491e-4eef-9dcb-f392a6b6ab52", "comment": "Malware payload", "value": "e6ee740573ef4ea29dc5a19c29ef61d32f1cc3a0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096779, "uuid": "d0e00c13-f409-4e6f-848e-51ebd186dc38", "comment": "Malware payload", "value": "203c929c81e35dc7196a34b4b4547973681369a64a2c9b44554b2e044d36ca4a8c75a509aa77a4d0d4e3e97a049ae9f7", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096779, "uuid": "66db9064-7c80-4854-ba96-d83e70f8d445", "value": "T1A0365B87B8824943C6E42A3BB8BD80D433274E798B8663466D04FA7C3BBE5DD1D75358", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096779, "uuid": "3c5017d8-ad84-4b8e-93e0-5d8ff3b7c4c4", "value": "49152:mxZwPrGPvjQCoylLzecghOVTTSz//ah6MbYfnn2r96ohZbPSJwn3:mxaGPHqnhWTuznc67vohh68", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771096779, "uuid": "8108d876-e4f1-472a-a960-ae2c742627a7", "value": 5080407, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771096779, "uuid": "b8f3d7ee-7e13-4b32-a044-b0271ef8d084", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096779, "uuid": "fda55b12-d41c-4daf-b7e5-e145df778348", "value": "bot_linux_armv7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d68c340f-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037393, "uuid": "e9007628-b545-4188-94e5-4768ec03b1c5", "comment": "Malware payload (Mirai)", "value": "a91662847f19cb74c73b4e519d5bb04a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037393, "uuid": "25ae29c0-f2c0-44dc-9c49-1353e13105e3", "comment": "Malware payload (Mirai)", "value": "c2ada2e61df0821ccbaa6e2fe199b850a5f33a7041e26f977ccd1c9065ced013", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037393, "uuid": "f5d60d09-13bf-40f6-bc05-1e7a3ebf6aca", "comment": "Malware payload (Mirai)", "value": "24cbe4f700e13e3c284f389c862c251052dd10f2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037393, "uuid": "052828bb-4ac8-4b81-aafb-a7b18ac0dbc7", "comment": "Malware payload (Mirai)", "value": "d6bcca043398b59f04adbcbd4753d134d45f86a7c6098f5e1a578ebfc1201c042bd09b673249a6126c63a4a32cff86d3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037393, "uuid": "cd5a3089-757d-4965-968b-bfb8d6f5f4a3", "value": "T13B043B46EB418A13C4D227B9B6DF424533239B64D3EB730699287FB43F86B9E0E67501", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037393, "uuid": "e3bb3cbd-0eb9-4e37-8443-3960f2bac486", "value": "3072:Go+YGOeetEGjResamDQhzhFjtJ4fzeQlpkdN3NLStbqM/9w+8OU:1xGORgsasQhzhFn4f7p6N9LSt2M/9IJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037393, "uuid": "9114fc94-6901-4dcc-a061-0d1cb1af01d5", "value": 178067, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037393, "uuid": "096d80c7-839f-4a0f-a883-9e1b58a1a9db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037393, "uuid": "da3a8ccc-7d0d-4195-bd0d-814e2d61ad7d", "value": "nwfaiehg4ewijfgriehgirehaughrarg.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed6d05f6-0985-11f1-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1771060624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060624, "uuid": "0fe6d901-4bee-4da3-bab0-f38ee051df63", "comment": "Malware payload (AsyncRAT)", "value": "2c4e55b433574ce5904121901ad41fb6", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060624, "uuid": "d8845838-6deb-4400-8a1e-325c75afe64c", "comment": "Malware payload (AsyncRAT)", "value": "c77f7ae0879c5e23766b5dc1d4b010fb04d3457344f975a6e81b567ed0426470", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060624, "uuid": "4046526d-3355-4b93-b9a6-07fe88c3fc82", "comment": "Malware payload (AsyncRAT)", "value": "a524c4def8aa72490fc021815764e9be53d1cdce", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060624, "uuid": "f8556db8-22b7-40f4-932e-0230c85000fc", "comment": "Malware payload (AsyncRAT)", "value": "2554ab744c16d55a1cb5bb8005973e27d270e622c3253a9a03d89157c1ceaf7a324c723de9d6356da43a749cdc6f71d2", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#E0D5D4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060624, "uuid": "3318712a-5d3f-4486-9779-b406e40eb695", "value": "T17D937C4437F60227F1FEAEF244E57BE7CA39FE231502967B1884B57B1E128449D80AE5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060624, "uuid": "94b1581c-b9cd-4382-b60b-4bd872bd7430", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060624, "uuid": "9caf420d-4759-4cee-9531-9856461d4710", "value": "1536:dS1HAyX7hBjNMttqfC48aPJPvJAP7lA7SVP66Ql/OTDQi6CoqtU9vDDDDEDDDDNN:dS1HAyX77ItEC48ahPvJmxPcxOTUJClT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771060624, "uuid": "42941ca1-ff4e-4b13-b016-0ff93b9271b3", "value": 95232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771060624, "uuid": "9acb8900-7e93-41da-8505-e563ad45b520", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060624, "uuid": "38f3458d-f043-4a44-9310-cc8eb764e670", "value": "c77f7ae0879c5e23766b5dc1d4b010fb04d3457344f975a6e81b567ed0426470", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99e80f56-0984-11f1-a129-42010a9c0007", "comment": "Malware payload (OffLoader)", "timestamp": 1771060054, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060054, "uuid": "717c82f8-14bc-4c7b-9fee-b54286888e3c", "comment": "Malware payload (OffLoader)", "value": "d729b0be4981e9e0aec6dfd8fce26ea8", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060054, "uuid": "a6b2cb4d-8f1a-4163-965b-bcf6aba11116", "comment": "Malware payload (OffLoader)", "value": "c7b91337fa49ba5b41d71ed0dbc04e249e06e59acd4c6f21722a31e91ddea0fe", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060054, "uuid": "3dab6279-4926-4bac-abee-ccd426e4b363", "comment": "Malware payload (OffLoader)", "value": "2cc03aaba44284fc701c74369ae3f77d410867e0", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771060054, "uuid": "dc18fdff-5c48-47a2-bad4-25eae45e76d4", "comment": "Malware payload (OffLoader)", "value": "8d8b46f0f0d54faf7f2b0b79655406b254080d880a26d0b75006827890170d63bcb425e79f35fa4d42934e9d4c995463", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#89C7C0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060054, "uuid": "e3f30025-80c0-4d7c-b5aa-fc7e67a3c2ae", "value": "T141762237B28A673EE06E5B3749F29221593B7A20A51F8C1697F40C8CDF690A01D7F647", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060054, "uuid": "b867a735-4613-4775-9d52-cd8c7752af10", "value": "ac4ded70f85ef621e5f8917b250855be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060054, "uuid": "bea678f7-931b-4e47-9527-0e5298b71c47", "value": "196608:8vkH8mce3BqdYGqi9gX2JtijmCYQbWWoOPLrGC6Xy:8v288Bqwi9gX2J4j2QyOPGFy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771060054, "uuid": "5b1d6789-162d-4763-86ad-26b2128a817c", "value": 7573794, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771060054, "uuid": "965ac275-852b-4a93-a7c6-9f038167a694", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771060054, "uuid": "36df5e9f-709c-4795-af5d-b033bb43d62d", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97adef53-0997-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771068211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068211, "uuid": "3c456ac1-f735-45a8-9611-ec608cf40390", "comment": "Malware payload (Mirai)", "value": "e699bed494fbae24d501b3f2386bed67", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068211, "uuid": "8906f4cc-62f8-41fa-bacd-0b489ea39157", "comment": "Malware payload (Mirai)", "value": "c7f5bb4ecdd08137d77827aa0b5b8b3c9d964bc80c634b67ab3aef7f80f6490b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068211, "uuid": "7c5e63a5-8fc4-4407-a012-0e675a625a27", "comment": "Malware payload (Mirai)", "value": "1a6596e6875759f3760762570fd64cb2b0318640", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068211, "uuid": "95c041d4-1e4e-4f63-8d10-6d110a3a24b5", "comment": "Malware payload (Mirai)", "value": "ba34dcf2e31374320d71b29aeae3032959cdf2c6d0d61e4bb47ef7fc11dbcab517fee3f1402e86e38af487816667eebd", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068211, "uuid": "5da7c0cd-357b-42f9-8e1c-047ecde62a36", "value": "T13D145A05FB0C0463CA931CF48E3F0BFAA3621A9115F99115250D7F5A1A32DB7A68BFD9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068211, "uuid": "2bb5d1ee-f315-4c98-a9d6-2413ee5c74ba", "value": "3072:ESZAGIiEgACYrerYqlNSwppHaecY4NXJUaN:HZ15BTYCrYq1QDY664", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771068211, "uuid": "f5efdad0-d445-4ace-9851-1c96db829f87", "value": 197308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771068211, "uuid": "104a9a1e-7449-49e3-9c36-e33b8fa94762", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068211, "uuid": "7812d763-6663-4c2e-994a-5fbb4e12a47f", "value": "SecuriteInfo.com.Linux.Packed.2037.11903.7724", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f974ce45-09ff-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771113043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771113043, "uuid": "a6806b9a-781a-4abd-9da4-d297e4ccd50c", "comment": "Malware payload", "value": "ba805149c4da95f8060226d4469ad63a", "object_relation": "md5", "Tag": [ { "name": "CVE-2025-8088", "colour": "#53BCD6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771113043, "uuid": "4f1df49d-3160-4386-bf2a-199dce7b7f13", "comment": "Malware payload", "value": "c9408cc616e2eefcff4f6dc0a41178aeca03c9250a39640552807804d8c04a3b", "object_relation": "sha256", "Tag": [ { "name": "CVE-2025-8088", "colour": "#53BCD6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771113043, "uuid": "78909107-0d2b-4f26-ac82-c2ab56e139ec", "comment": "Malware payload", "value": "2aa21a7252215963a70cc5a36bf92231fca26447", "object_relation": "sha1", "Tag": [ { "name": "CVE-2025-8088", "colour": "#53BCD6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771113043, "uuid": "ea680b79-fe93-474e-a169-08b743cfdae2", "comment": "Malware payload", "value": "fd3ed9c84b631870aabcfd6f42752bb1838a2196f38f0061801fe191e32662fbb096c87115f26f9405f1e4158025f9f9", "object_relation": "sha3-384", "Tag": [ { "name": "CVE-2025-8088", "colour": "#53BCD6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "UKR", "colour": "#5E818E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771113043, "uuid": "b0d72ad6-9d3b-4f67-8889-beafae614e02", "value": "T17BE5334ECB6BB3D94A9F85539DDC2E023E572E1C73260BA5E4F25A305560A04AF43FB4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771113043, "uuid": "626714cf-f594-4260-a68c-3b61c6cf4c9d", "value": "98304:R01avRLQpu3Yevm845WVLjWjU63kj9+EU:RL33DJ4cjWjSW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771113043, "uuid": "10dc522a-aa07-4d5e-ae5f-51fd6d64d792", "value": 3302059, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771113043, "uuid": "4815c354-282f-41ab-a6cd-01e7a69d44b7", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771113043, "uuid": "ea383678-fc7a-436c-884f-3c1657c2f864", "value": "\u0431\u0430\u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u0445.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "caba1cc8-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037373, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037373, "uuid": "1806dfd1-a495-4807-ade8-f9827af48b53", "comment": "Malware payload (Mirai)", "value": "907b96c1e6f0a251576faf087fbc17e5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037373, "uuid": "43682ff2-ec40-4b21-9681-2222be6c8b86", "comment": "Malware payload (Mirai)", "value": "ca15e5007cb42b30c1edc4e8eb840a7b0d1f976545a2552c8939714ea135f35a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037373, "uuid": "0a55daf2-607a-43e4-9d0b-2bc658c26416", "comment": "Malware payload (Mirai)", "value": "930a0d8484448a8b93166efcbcbd7164677d2a67", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037373, "uuid": "76ebfe32-40bb-4c3d-b404-1f35472ba3d3", "comment": "Malware payload (Mirai)", "value": "b4629969e66a436a64b2ac27a82e037a645f6ab3c1d67a1533148b1c855812f77763b57f2af1324824a2e5541ed10081", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037373, "uuid": "6f91e1c4-d2c8-4ca8-836f-096db71ad134", "value": "T1CE834A0375C080FCC89AC17157AFA636C863B47E1239B15B67D8EE26BD8DE502F699C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037373, "uuid": "f8406a63-3b42-474d-b275-0ab7cbfa5940", "value": "1536:XsgnPjmT9kcaTBS1aFACgf2Tj1yG3DrCkTNXTC0MsOoiNS:zPjmTZaTBS1QWi1yG3DrPNXTCGBiNS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037373, "uuid": "ee02050c-dd5c-4a5c-86af-6461fe020cbd", "value": 85952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037373, "uuid": "828656ed-ea21-4535-9f69-c8de617f3f00", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037373, "uuid": "8c603d22-cd1c-4c12-a5d7-2ddeca43d47f", "value": "nwfaiehg4ewijfgriehgirehaughrarg.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbe0b9c5-093e-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771030154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030154, "uuid": "682152d9-ed59-4290-a8b5-c9d4240f14b4", "comment": "Malware payload (Mirai)", "value": "2e013673f149c2c61ab3d9b2b0502801", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030154, "uuid": "ba803694-8d26-42ba-a8af-ed7db68899be", "comment": "Malware payload (Mirai)", "value": "cbe6af3513bd86238b2224413bacdb0940470f98baa34f166a9fa1b56e5a9cad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030154, "uuid": "2429c9eb-d651-4000-bf70-d06fbee9e0ec", "comment": "Malware payload (Mirai)", "value": "dffb00c235e0a472f25c2f6a54c866cb5b9784ba", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030154, "uuid": "e119a74b-f721-4476-8ca2-698ec1eff5fb", "comment": "Malware payload (Mirai)", "value": "c24e8edd6f582a553970ce34e5e951826ea734ab1643607199396eeb976fc026db0635a4128706dfb279f8649dbc49ea", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771030154, "uuid": "e824a6a8-7fbc-4728-b280-c9c08665a917", "value": "T1B9431891BC819A13C5D4137AF66E56CD3B2133E8E2CB7217DE214F6036D582B0CABE95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771030154, "uuid": "f0b62f4a-9521-4c6a-8cac-113ac6a6508e", "value": "768:0exgC1uOTSNtAGdTX2kMtQZQoPH1mwkR8+hTxztgO33/N4HQGSeDKICkOs1zRp1X:TgCxGdakMtkVH1mZh7geFszjnaGIr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771030154, "uuid": "e81c1828-9c75-487b-8df2-47daaa3e964d", "value": 56248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771030154, "uuid": "146ccea4-0139-4c40-90ed-1a6746967449", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771030154, "uuid": "9f31a288-d728-4d57-854b-8a223e1d4d88", "value": "boatnet.arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9dcc5db-096e-11f1-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1771050713, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771050713, "uuid": "7ed55c86-898a-4f7b-a317-e35e4c25fddd", "comment": "Malware payload (AsyncRAT)", "value": "89ca8db2cbaf8e9dcbc93954e9c0ba4e", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771050713, "uuid": "bdfec737-9f2a-4cd0-a9d1-28973bc4822f", "comment": "Malware payload (AsyncRAT)", "value": "cc0b49534ed2e901372ae56799699553cffc0b097f4f4b6ebcdd3c98a9cf2109", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771050713, "uuid": "7d1c706e-7581-4a2a-9c21-4734a02c7eab", "comment": "Malware payload (AsyncRAT)", "value": "29a379f132b1e74e6285e141e14799e2cf50838e", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771050713, "uuid": "d1e573ac-a9ce-4d4e-814d-379d109f9786", "comment": "Malware payload (AsyncRAT)", "value": "10d8509fab018f37ba967f5f978e25dddd1087ec0bf87aabc9bec079a0bb3a966272747e7dca880ecb149f320e7fbdef", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771050713, "uuid": "80d8f377-7f60-42d7-8df4-21d4967a2e9a", "value": "T15FD23A08B3D48561E1FD57B94C7293048775EA5BA973DB9E2FC440AE2623B88CF15BE0", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771050713, "uuid": "d4adaa7c-cc98-4461-b5c5-2b054d60316b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771050713, "uuid": "c72c2cae-7318-42ea-9ed7-ba8bbdd910d7", "value": "768:wAMRXpZrm+iUg/cIRGqom/Rb7fB/dTS/+:rMRXHrm+iF1i4RbN/8/+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771050713, "uuid": "fa1e1035-6acc-4732-86cc-6937d224368b", "value": 30720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771050713, "uuid": "b5f2fba2-76bf-4f4f-a07b-1895f0d309e2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771050713, "uuid": "c75b4779-7f60-4e10-a508-5b2e0f159c98", "value": "AsyncRAT.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "926e8dc2-09ed-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771105139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105139, "uuid": "14be4870-3d3b-4874-9e19-acf6f804d6ac", "comment": "Malware payload", "value": "219b6ac0ba484229705d14844e93b8d1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105139, "uuid": "074cf11e-8163-4601-aa77-6ee445ae8243", "comment": "Malware payload", "value": "cc4268f51ac41eae384d0c67a2f4b756960c263a7761942be7cd7066e6b83835", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105139, "uuid": "a658e83c-1848-49fa-85de-d241967ea205", "comment": "Malware payload", "value": "6435cd48b04d52dbdbc953847c3523fc75472a11", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105139, "uuid": "4a6a12ac-ecd0-4db5-87e1-fe4a50736b65", "comment": "Malware payload", "value": "40ffb6dfc66e78a1af12af005f8d824ce7e66bd73682da4119dd77c03e8abb985ec83573afc13387e18bf900ac783508", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105139, "uuid": "054210fd-4706-451f-b5a9-7489e2aa7ed6", "value": "T169B32A52BD52CF13C5C221F6B7AE46493B126B6CD6FA3102ED257FA0678A4EB0E37111", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105139, "uuid": "a4edcdbc-c748-4028-84a8-f131e71c5ac7", "value": "1536:4reMf0aY+w4kLyt1obHQ0SmOBC4fFnuDllcbONGh9AeRZx/vSzTSE92Mi:4reY0u2u4HYk4fFnu3/Y9Mi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771105139, "uuid": "640cab01-c551-4613-9b82-c7d56a893533", "value": 109144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771105139, "uuid": "a47272a7-810a-4fe5-ba46-1a026d0cc57e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105139, "uuid": "fbf0c764-a1c0-4889-9785-a7add0cd19f7", "value": "data.arm4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c518f42a-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037363, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037363, "uuid": "2706bab6-cc2e-4d08-83c9-4db574bf7b63", "comment": "Malware payload (Mirai)", "value": "1c357621260fce8d68c873a8f74df67d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037363, "uuid": "1e9b4e4d-5eb6-4aa3-a3e9-9d272153838c", "comment": "Malware payload (Mirai)", "value": "ccc2cdef6ccee17294e6b1ed30dff557702bf63fca2017d656b6ea4d8413ffdc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037363, "uuid": "5b7c21c4-2268-40ba-9a39-98a211cfabf2", "comment": "Malware payload (Mirai)", "value": "8bec248d24a0ec6aa90326fae5eb97f6b6ff7e90", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037363, "uuid": "34e08ad5-6037-40e8-9ca9-77d941dd6bae", "comment": "Malware payload (Mirai)", "value": "4454a9422305ed04f292dae9e08f9daf1545bb7000a903a59f3e43cae08b604a8d2fd0a3d73cca8fecf22762a701416b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037363, "uuid": "dd3ed06a-2d4a-414e-9032-4c057baafb24", "value": "T163A32A56FD818B21D6C112BAFA1E118E3313177CE2EE72129D146F2477CB96B0E7B845", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037363, "uuid": "87273d5f-f056-43ff-bf7d-913138f1189e", "value": "1536:ovnMWtxcd+rnbHKOLqrwt4sWT9IL0amNcuGCpDki4XUIcwB75R5aY1gJoY:ytxcO7FLq0TW5IL0am4XUIcwBlRApo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037363, "uuid": "887c8b97-7611-4d49-8c4b-1365a0a5f1f6", "value": 100128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037363, "uuid": "fea1fde4-fa2f-4aca-baf0-a673ef40c90b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037363, "uuid": "344b95a3-ad7d-4ae9-aa15-b202863e0ae3", "value": "nwfaiehg4ewijfgriehgirehaughrarg.arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cedbfea3-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037380, "uuid": "ad9c3af6-bbc9-4be6-bee1-f4557cf972e3", "comment": "Malware payload (Mirai)", "value": "7bb787204a3e66960b79848a387be2d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037380, "uuid": "9c3634d6-ec4a-4285-aff4-3f1c8697fb07", "comment": "Malware payload (Mirai)", "value": "cd96f5c8d4a1344c8887eaac2b8283d87516f459a162cadb2948551d6be40af6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037380, "uuid": "19a6f0da-4dba-46c9-a739-9b3bda267eb8", "comment": "Malware payload (Mirai)", "value": "7f164fdc927047a587aa54967ee264461a6d3e80", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037380, "uuid": "8281c31e-abf9-4275-9c03-5055012d9294", "comment": "Malware payload (Mirai)", "value": "cc4fddbe16c2e3a1eb2c7e479ba72c4d6291525e4c929fa40999869dda697cbc65abb0ceb73f6925d4e6aa0999ed49a3", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037380, "uuid": "d5f61b0d-c267-40ca-958b-7209f6ee00db", "value": "T10E935C02B70C0E47D1675EF03A3F27D1D3EF9AA121F4F685651EBA4581B2E321686EC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037380, "uuid": "bb411648-22db-41dc-9c17-1901ce81d83e", "value": "1536:w6+pgchJipS2fY5VbT7GrlqRxxNF0HiODM2idOza++aOTfsJVRZda862ouOzb0V/:w6+pV53TxJ2afYRZd6ZRK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037380, "uuid": "a06e911b-a086-4b88-907b-6cf2ad9e0396", "value": 89712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037380, "uuid": "ca1a8da7-a056-4e22-8d43-74cd2cccb1a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037380, "uuid": "10870c5d-bcd0-4c2a-b282-d331f55560b1", "value": "nwfaiehg4ewijfgriehgirehaughrarg.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5405d85-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037337, "uuid": "eeaec503-6af3-4fe9-ac14-5a3c3569a416", "comment": "Malware payload (Mirai)", "value": "29850167bf3083594406da90e5961050", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037337, "uuid": "7271803b-e74e-401a-bb6a-0d5653135d7a", "comment": "Malware payload (Mirai)", "value": "cee4796f5d3797fed42ab13d5de3a5bc27bc5be89f62a052ffd87091ff87aeb2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037337, "uuid": "9e375c44-50cd-416d-9e19-598d8be19121", "comment": "Malware payload (Mirai)", "value": "75d23ad97b98a716d88955c93926a5fcb5a31419", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037337, "uuid": "217baacf-c645-42d2-bffc-6c99947d9fa7", "comment": "Malware payload (Mirai)", "value": "2e6e8498b2f52b14c4341d4a006c68373e48b7330544aa3b20379e7b4271d8a07b471fb972615eb981d79a119688928f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037337, "uuid": "48af3fbe-f012-4e1d-bece-050728fa743f", "value": "T162432821B97A1F13D0D1A47D21FB4B59B1A15ADE22A4C64E7D320F4FFF21680A943DB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037337, "uuid": "58a6c202-07c1-4577-8cd1-7553daafe9b2", "value": "1536:5pAJWxcii/JTP/WXHbtoHMU8y0uc51Xk3nZpS:7IQ88yVc5EZpS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037337, "uuid": "af6ca6f7-b8c0-4916-bc0a-40c3ba7d79f1", "value": 58376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037337, "uuid": "02a1ec32-26ae-49d3-87c8-bf14d08d9a14", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037337, "uuid": "fd2177d5-af01-4f83-af95-7fe363ccf8b9", "value": "boatnet.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5d3db5a-0993-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771066517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066517, "uuid": "8f6bbf42-fbb7-434d-b44b-f39942a7ccd1", "comment": "Malware payload", "value": "d3cf36c37402d05f1b7aa2c444dc211a", "object_relation": "md5", "Tag": [ { "name": "py", "colour": "#E74BB9", "exportable": true, "hide_tag": false }, { "name": "Python", "colour": "#D6064D", "exportable": true, "hide_tag": false }, { "name": "TrojanDropper", "colour": "#48F501", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066517, "uuid": "88e33edb-b8bc-498b-9ce3-c9d0d3749709", "comment": "Malware payload", "value": "d410c41b9ed69673f53f75ebe6649bfa4059b9fac2d8e9a638672f53ff2219ca", "object_relation": "sha256", "Tag": [ { "name": "py", "colour": "#E74BB9", "exportable": true, "hide_tag": false }, { "name": "Python", "colour": "#D6064D", "exportable": true, "hide_tag": false }, { "name": "TrojanDropper", "colour": "#48F501", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066517, "uuid": "a264c6a2-4ebb-4102-a6d2-1b7249ea3688", "comment": "Malware payload", "value": "3529b14eee788f2a0f4d701a4b908dbf0cd028f8", "object_relation": "sha1", "Tag": [ { "name": "py", "colour": "#E74BB9", "exportable": true, "hide_tag": false }, { "name": "Python", "colour": "#D6064D", "exportable": true, "hide_tag": false }, { "name": "TrojanDropper", "colour": "#48F501", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066517, "uuid": "065f45ed-0cdd-4ecb-be6d-56c0b4912c15", "comment": "Malware payload", "value": "9e905c654348c40f7d8ffdb2b001de2d733722dd1f978ba086aed4ad53b1c8f2ba15b037a9d816d039c5c3175b59aaea", "object_relation": "sha3-384", "Tag": [ { "name": "py", "colour": "#E74BB9", "exportable": true, "hide_tag": false }, { "name": "Python", "colour": "#D6064D", "exportable": true, "hide_tag": false }, { "name": "TrojanDropper", "colour": "#48F501", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066517, "uuid": "56224b20-f207-4082-b112-72f6ca93b7a1", "value": "T1794132A20C18246EC30BC559C507D184D25A7D97078A9934BB9CA3AD3F40231D1F21DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066517, "uuid": "6f2f4e23-5c34-4438-9b52-6aa377d56b8d", "value": "48:k9fMUe3Jk/e9/eY0gwu6fGaGrag/SxR7BD:k9f9yJkGteY0I6tgKX7BD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771066517, "uuid": "3ea39b1c-98d0-49f1-a06f-3eff1f368892", "value": 2019, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771066517, "uuid": "0d7924f4-1c60-436d-8c1c-7860cfeaf9ae", "value": "text/x-script.python", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066517, "uuid": "088d269f-5b37-4ab3-9176-e5e0fc8a8034", "value": "__init__.py", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d059721a-09ed-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771105243, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105243, "uuid": "cde94cda-8164-4bc9-a40b-7ab26e75ab8d", "comment": "Malware payload", "value": "419926da463d84d8cdad6bbe8540bf0f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105243, "uuid": "8f424c4e-f562-441f-b480-d3938efbf79d", "comment": "Malware payload", "value": "d556a0e9a3bc7f61690c6bc16491ede7dc65212c39e3cdcf2336bfb67a861850", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105243, "uuid": "71d3efeb-6861-4c53-acd2-21ea06a4c8be", "comment": "Malware payload", "value": "95ecde5f89bab9b3fbaf09b92a2d166bf71c27a9", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105243, "uuid": "fdb23b3e-2a45-48be-b5bf-3291662d7816", "comment": "Malware payload", "value": "f3fd4a2d393e5b2749922d2f342276972a05f33adcd335d0618d3cc6a598b40cb681d9ce3019163fc2b4572db3373135", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105243, "uuid": "3022a8e7-8343-41c0-a601-7f83f7531126", "value": "T193455E23B6C67D3EE05B0A368A73E158D83F7361671A4C5687F0184CCF295A12E3EA57", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105243, "uuid": "2b7f69eb-1192-4eb1-a8db-80cdac5b7fbb", "value": "39c61d6731c29eaaec79b77e3082cafc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105243, "uuid": "eb58a46f-387e-45a5-8df0-e040ba2c1f58", "value": "12288:cmE/bX6eP3jAe7IgNNHpGXUfBFmUTgW+adegB/kp2Nw4s0S:cd/ueP3jAYn9GXUfB4mgRadePCw44", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771105243, "uuid": "a7eb6914-1a49-47cd-9655-3241abd9790a", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771105243, "uuid": "61a639fa-3b22-4fdd-a697-e767774523a7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105243, "uuid": "49529f57-ce00-4783-b767-1d08c91b6e31", "value": "SecuriteInfo.com.Trojan.Siggen32.25064.21512.18737", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7572b346-09ba-11f1-a129-42010a9c0007", "comment": "Malware payload (AsyncRAT)", "timestamp": 1771083186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771083186, "uuid": "c1335fc3-95ef-4486-ba53-8ae514622666", "comment": "Malware payload (AsyncRAT)", "value": "00ca5f39ac3e10bacd20be2ac1747395", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771083186, "uuid": "9bbfa9b6-5797-4e37-8dd6-a57e516554e9", "comment": "Malware payload (AsyncRAT)", "value": "d6c8c18dbc47521d80575eee4f4267e8076eaf360d72d423e4b7056cbc8bc830", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771083186, "uuid": "99a3fe02-2364-451d-9644-35d9b9bd66ce", "comment": "Malware payload (AsyncRAT)", "value": "3d170d7278bfe3dac685f8bd3f45d663c13dc4b2", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771083186, "uuid": "991da7de-9ebe-4415-baa6-23eb5332482c", "comment": "Malware payload (AsyncRAT)", "value": "99b476f574caa5cb40ad37ae1c2ea0d122962e2e6d7d56b3d97b096c535a403b1d1fdbd4e570a4c46269c77f161350bc", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771083186, "uuid": "de8fe17b-10da-4b9e-9337-59ccacee75d7", "value": "T11254D881DF88148BEC3A9F31E1B0B7654B7BEAD0B89A9F6D205D3D2D7C54A409C02779", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771083186, "uuid": "ea4bde72-7cdd-4c1a-9c97-d6d6d95e8df6", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771083186, "uuid": "9e645804-3daa-425f-9b14-12e64e61bc05", "value": "6144:h0BG12DErVbTDa3L2iTVVmVVV8VVNVVVcVVVxVVVPVVlVVVRVVVtVVWV60jVLVVE:h0Bjy5aB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771083186, "uuid": "ba0be615-c0e1-4a00-a62d-649961bb84e2", "value": 287232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771083186, "uuid": "858b1e95-3e7d-4066-a46b-79e42d8cc5eb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771083186, "uuid": "93f52485-44d7-4ba4-829f-f6416eef2c0b", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f77e73d-09da-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771096920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096920, "uuid": "b56ebfd9-1a55-4a51-9099-ae2a96df3d5a", "comment": "Malware payload (Mirai)", "value": "46c038baaa94d20b705f5a09215ecf67", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096920, "uuid": "67ad7d77-d31c-4057-900a-5cef6a36e1ae", "comment": "Malware payload (Mirai)", "value": "d9a9eefa0fa3208b7f757efb774a1a5e53122e4fdd4d6c1f09e3495231c654ff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096920, "uuid": "7d5aacae-0789-42ec-af9f-c6b0871734b9", "comment": "Malware payload (Mirai)", "value": "8fcff3348b5f8b8a27ad9579f38fc9479b64fd9b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096920, "uuid": "93da6af5-5321-427f-b477-fcbec135464e", "comment": "Malware payload (Mirai)", "value": "2a970f24846622b6fe1ffd5d2e38378c0bc52aa7f3da58cc9c1a3c9cfd84a4205256b082645dee1675201efe9cf55c68", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096920, "uuid": "ef3760ae-9199-4b46-baee-3f1ae5d3ae3e", "value": "T1BF143D13BB324F90D351D6724BB38F5959EB02421EE258D5936CCB103B207AA689BFF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096920, "uuid": "949d7a06-977d-411b-b291-c6756e260834", "value": "3072:pemsGDRxiu0vFd02fdk2NXN42maSHwaa8THiG+mGIyJuVmqV+ppk:p5DRxqvX02flmaSQaaQRHGHutV3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771096920, "uuid": "294026e9-e1f2-45be-8023-ba437566c498", "value": 193092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771096920, "uuid": "261a9e30-5d1f-48d1-a11b-7538282a21a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096920, "uuid": "c5befc0a-76b9-430b-b40a-e49151f36d76", "value": "data.mips-uclibc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d68e93f3-09bc-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771084208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771084208, "uuid": "acff24a8-166f-4378-98ce-7705836c7734", "comment": "Malware payload (Mirai)", "value": "f24384ead61d00ba9160e4b92929ff67", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771084208, "uuid": "c69f9e65-e625-4f8b-b93d-61da8fb48f43", "comment": "Malware payload (Mirai)", "value": "da453804c6974c36d91d72de3c1f542c5729f22f268b621eff2feddfc6b13a11", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771084208, "uuid": "896aea44-2794-4d9b-a38a-200b6133fd8a", "comment": "Malware payload (Mirai)", "value": "4ad894158661093cd599eea5e97172b281b51b72", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771084208, "uuid": "8b889a7d-8946-40fa-8d4c-9a0642e3f3c5", "comment": "Malware payload (Mirai)", "value": "5d4806bd014e365516a3481ddffdf500ae1c07e7dd5fa881f14f4d78c18c65dd6f180e615f156b7586061253f559be7b", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771084208, "uuid": "9057d6c4-778d-451c-8f30-c52b51235e0f", "value": "T17DF3F7C3F900DFB7F40BE37648A308157130FFA60D521A77726779AAAA3A1D41426F86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771084208, "uuid": "f876e725-387b-4af0-9c2d-b593bebd14f4", "value": "3072:q8rT7idTYhzymDyLfHqJFfSlOxTQZg54NVzjbiAL/IJ13h4:NvK3YyLfqJF6ltC54TL/CS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771084208, "uuid": "cd4b3a96-e577-49cd-a3c2-38382aec1fb7", "value": 159768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771084208, "uuid": "abb3b010-0750-4172-b76d-cd63fbd98270", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771084208, "uuid": "442500ea-cae8-4e84-9101-8e8271d3ceec", "value": "israel.m68k", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09639ccb-0994-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771066684, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066684, "uuid": "a74fa076-e846-408f-af44-37e48186865e", "comment": "Malware payload", "value": "d04f9d0b75d122046adc8ee7b895638d", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#288F7C", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066684, "uuid": "c54db8ec-b1e6-48b7-86d8-1b46e4112e2d", "comment": "Malware payload", "value": "dab744a533bcbc4a2d3f19a54694ceb00587a0ce68d046ca9085d5013321ea5a", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#288F7C", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066684, "uuid": "545c617e-fa5c-4ca0-b254-3b83b8ff1455", "comment": "Malware payload", "value": "d74ed1d3d9cfc1617749acaf83c42f1561da7287", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#288F7C", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771066684, "uuid": "5779cc77-1f3e-4672-9c17-162f5cbb4f2f", "comment": "Malware payload", "value": "8bd051725cfff3f8977ae561371125be49b544df016548a4e0d4f6fbc02c576f3e2495e904ede00200c802f4b8ec4693", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "infostealer", "colour": "#288F7C", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066684, "uuid": "a462b2a3-57b3-49d7-81ce-68a94eefd428", "value": "T101354B23AA51C535E0511BF8BA779639F9ECBC68D600F1A3B787DA19AF712C06253313", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066684, "uuid": "048943a3-881b-4ced-a523-97ceead6196e", "value": "8166a3e26d7c023a459a1c6f8c656d80", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066684, "uuid": "9585ed25-fc72-4c65-8d8f-2125b6f433c5", "value": "24576:WAOrBANpUIEBwqgc2HwteS+sLuJIGhwc4:ZwANpUBwqgccwt7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771066684, "uuid": "5171b877-b4f6-490a-aa5d-d28dfc4fdf6b", "value": 1060768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771066684, "uuid": "cdb56bc4-0033-4572-9f9b-b689c452a9c5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771066684, "uuid": "a1874f62-169f-4d40-a911-b20b652407da", "value": "dab744a533bcbc4a2d3f19a54694ceb00587a0ce68d046ca9085d5013321ea5a.dll.sample", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "879aafba-0997-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771068184, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068184, "uuid": "0d3371a1-1076-449a-bbbe-13bd0aa2ba28", "comment": "Malware payload (Mirai)", "value": "17212e14813a2d5eb0ec9d9cb4ed6feb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068184, "uuid": "88fe40fe-6783-4305-a0ca-4d63d9078d5e", "comment": "Malware payload (Mirai)", "value": "de33250eb480be5551552cca83b497f03500ea4a76db519dfa6444668bac5eb4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068184, "uuid": "a0ac55f9-3a8b-4024-97c3-cc63e8f22ebc", "comment": "Malware payload (Mirai)", "value": "5d82671ea76c86dd453523fc2678888c76d8613c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771068184, "uuid": "1d57384f-d64f-4ece-9ce2-e227f63313ca", "comment": "Malware payload (Mirai)", "value": "ca7ce59454f3f8135c2035ad135ee9d48001923045215b6c62b116923bb586cf25414f6048cd9ebbcdd63c847701b770", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068184, "uuid": "e1f4d2a2-5bb0-44c9-ad6d-80e10f8f9aeb", "value": "T1AF5302F690D4BDCDD2958730050F1A073EC57678A19A663AB6C4F2A88BB1390DFD8BD0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068184, "uuid": "321d5e72-b3e3-415a-9ef0-24a490915e57", "value": "1536:C1/S5aOdeB51F+yuXkoPgvFbFX6hTZ0f8ASA8l7TLkg4azHG:CM5az1Fy0oPgdZX6hTo8RPl7TLGazHG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771068184, "uuid": "d4fb6800-4095-478d-9618-7f6333e18e4a", "value": 60808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771068184, "uuid": "5f7a6938-3952-4cce-b20f-90bf4dd7a0ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771068184, "uuid": "6fcacdc1-bd60-41b7-aea3-80d95e7be0a1", "value": "SecuriteInfo.com.Linux.Packed.2057.8557.30737", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fbf7df9-09ef-11f1-a129-42010a9c0007", "comment": "Malware payload (SalatStealer)", "timestamp": 1771105913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105913, "uuid": "95beab43-ea20-4430-bc5a-8aac7e035a0d", "comment": "Malware payload (SalatStealer)", "value": "b6dc91f04225fb3de7dc4daadc815ae8", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105913, "uuid": "421c07c5-c969-49ca-99e0-71d6e3b00b39", "comment": "Malware payload (SalatStealer)", "value": "debe06f29030037bde2986a205f41de8330b158a15cc7f8942e0cecdb3260a5a", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105913, "uuid": "423c28be-5986-40d6-867c-60e2c7362b5e", "comment": "Malware payload (SalatStealer)", "value": "2abf4112f132c999540d9e17938f49d0367482eb", "object_relation": "sha1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105913, "uuid": "76bea999-9a19-46cb-b823-a94d401d4e6a", "comment": "Malware payload (SalatStealer)", "value": "c2d5bc4c120f4cee75721f9f9c17a18477558e040099538c3cbdaa74192a57fc7716a097de15d450a6ccd8e93c6b14ea", "object_relation": "sha3-384", "Tag": [ { "name": "dropped-by-amadey", "colour": "#F2C079", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#54A111", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#7097A1", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105913, "uuid": "9bf90a4c-e4c3-4734-bcd9-98341e44691a", "value": "T1D8E533DBB610B2C7FC2291B59C81AFB9090A0A1D9BA4CCB096CC8D5F546DC77791BCD8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105913, "uuid": "d449cb06-c7ad-4029-a9df-69174e284a00", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105913, "uuid": "593c8332-028a-4960-9a72-1ee690dd3ac1", "value": "98304:uDqJoBxk13xqoGThqIj3BvZGwSpnYXgRig:1CBxeBMkIn8YX/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771105913, "uuid": "7e001f1b-7c7e-48a6-8c63-8e42ce7d499b", "value": 3298304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771105913, "uuid": "1edaf222-c7d6-43ef-b5bf-7e4e4578f17d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105913, "uuid": "b47709ea-8aca-480f-9bf5-7aeed0f27822", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecfc1627-09a6-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771074797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074797, "uuid": "a7dbcccf-b994-4218-8a11-bf84ef92dcc2", "comment": "Malware payload (Mirai)", "value": "f9721858b3dff0ac8a6361d10d6c0d44", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074797, "uuid": "b991c853-1b49-4de0-937b-59c6d41b3e0e", "comment": "Malware payload (Mirai)", "value": "df26331410be26b135d430b7cb7429ea4f944a5b5e4be7ac365bf689f42a0212", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074797, "uuid": "6b1d28a4-3510-4ecf-9106-d5499b852415", "comment": "Malware payload (Mirai)", "value": "0c8b529d54e04898bcc6043bcd8873cc3bb11279", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074797, "uuid": "81d817f0-b18c-4f01-9e10-9734ffba3d70", "comment": "Malware payload (Mirai)", "value": "93061949b6d2592beddcb2dc8b4a3749700aa9b69f75fe748ef9110bdbe47569ee7ca3b21aa1936b9a2d754c12d2dc3e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074797, "uuid": "bbe0c039-af13-4830-993e-115ac8f5de7e", "value": "T150D31856A9919F11D4C735BAFAAF414933536FB8E3EA7102DD206F60278A8DF0E77102", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074797, "uuid": "e70cbcbe-df66-4609-9b18-03c0a673d129", "value": "3072:vhdVcxW1B6lanQ42FRm3y90o8grn5BYfjUhH+:vhsxvlaQ42FRm3K0oDn5+fYB+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771074797, "uuid": "d67294c6-aeb5-4d96-a1fa-aac53b2f69d8", "value": 133716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771074797, "uuid": "c1fa926f-5e6a-4520-925a-bf21aed67927", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074797, "uuid": "35e3a5ea-0d6d-43c0-8bc3-08dffbca83aa", "value": "data.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b81d7dcb-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037342, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037342, "uuid": "bc28e93f-c88b-4065-879f-e43dccb518b0", "comment": "Malware payload (Mirai)", "value": "5832405223209b0a343d8ce23f2fa558", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037342, "uuid": "6d1323cf-9159-487d-a84c-d346b9ed5ec4", "comment": "Malware payload (Mirai)", "value": "e07a3bfa3e720e8a3df6775e7a0f9e0d785805f74a3662bf537bff9e9df6e371", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037342, "uuid": "0d605d96-bfb1-4adb-9b8f-b5cd183c1c78", "comment": "Malware payload (Mirai)", "value": "338f3fd197bc43a71cecd26139fc9da78e282df3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037342, "uuid": "231ef645-52cf-449a-9e6d-3627e4dbf41c", "comment": "Malware payload (Mirai)", "value": "e1ca50dcfc52e23012a30536832113bb4f33f5cf62c155ab07d1c09531d8e6db12cce5ac5d59f8b1aef9df70536240c0", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037342, "uuid": "ce696414-bbe3-4fdb-8862-387ff804d9ee", "value": "T1FA935B22F979193BC4C4A87622F34372F1F6438B24E89A1EBD720D8DAF1465026977F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037342, "uuid": "f75ce74e-982a-4609-a196-582e4731e35b", "value": "1536:9imLFjrlEKbNzO0eI3dw0rmm/UUXFttqlOPq51dGiEi5itM3Qun:MWJOm3UuXqlo61d9Gun", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037342, "uuid": "7cb5ee10-49a2-4cab-9bf1-58d7816e0454", "value": 95216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037342, "uuid": "f60c10dd-35ce-469b-8b29-f012b6141c57", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037342, "uuid": "b8ac5c95-fc03-40b3-9243-d9c392246432", "value": "nwfaiehg4ewijfgriehgirehaughrarg.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fdba422-09ff-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771112812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112812, "uuid": "d6966f39-1006-418f-98aa-77f3bf10d975", "comment": "Malware payload", "value": "18253c2186a20538503b6f87542c599b", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112812, "uuid": "507b90b9-4ad5-460c-b85c-a98d19370ddf", "comment": "Malware payload", "value": "e0cf897ce55ca398a9587c3b8a99ba56b6e4d6949bbfac8e0d31cd7fe90bcc11", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112812, "uuid": "97c611be-8a3c-4023-a1d2-1ec9667e3d2e", "comment": "Malware payload", "value": "16856dab26cb04f9a51c4d95de1ab641865f1552", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112812, "uuid": "1449a535-0488-421f-bd1a-137f5b5886b5", "comment": "Malware payload", "value": "1bf3c7c28328eb58e7575c06a39d675f0bf3523a653b4b7b8c14036f980ea75b5ff93322d598da725ef9274082189604", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112812, "uuid": "925d53cc-5205-4930-84f0-f3f8f4e7e236", "value": "T112360812BCFA5565C57EE03494B112927A313E550372FBD34E84F66B1D3AAE82B3E318", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112812, "uuid": "ec7446d7-9d9c-4c4e-89c0-359a2dea977c", "value": "91802a615b3a5c4bcc05bc5f66a5b219", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112812, "uuid": "8396e110-d2c1-4bca-ab9d-52948947f289", "value": "49152:ojySdTrxSliX2jQpajrKW9TwHej+GaeIv6l+FW:2x4/PmjHej+Gqe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771112812, "uuid": "15e21aaf-c8e6-42fe-b25a-1be21891c5bf", "value": 4954376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771112812, "uuid": "995aac2a-8473-4fcc-bf15-67cf2aba7b68", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112812, "uuid": "9f122464-d1da-420d-9f71-34a0b3b7c170", "value": "DocSend.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00396ae1-0943-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771031879, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031879, "uuid": "46b274c4-3acb-4d17-9bf8-d52c2856b322", "comment": "Malware payload", "value": "46d83b8e8b0a762ec8c1bfc910aee593", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "vidar stealer", "colour": "#059359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031879, "uuid": "8309940b-5c9b-4d36-9cd1-4b393c14f9ad", "comment": "Malware payload", "value": "e1427745d8b7ee49b92552b8cc33654b035a1632901fd6400a86086f4a87a17f", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "vidar stealer", "colour": "#059359", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031879, "uuid": "d510f339-79fb-4cc4-9195-cf23f8cf6aca", "comment": "Malware payload", "value": "80323675239d1592dc4ba5cc7abd209c28bd54e3", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "vidar stealer", "colour": "#059359", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031879, "uuid": "cccba764-5039-428b-af14-fc0cb280adca", "comment": "Malware payload", "value": "4360fba5315e1bc55e745ae8e7d66de9aa9d4d10c9754d18f6a2a47e963a073c7ead2a0b3f23d9614c2f2bab80bc28e8", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "vidar stealer", "colour": "#059359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771031879, "uuid": "c4d97f08-55a5-40b3-b9cf-46d551c12151", "value": "T115460916A8A2C5A6C17EE138BCF113143A71796947727FC30A9735752CFDBD82A3A318", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771031879, "uuid": "ddffd2a1-8156-489e-b902-a1e9f403d7ae", "value": "e542a0030c59ac8c1d215d99d2cfa082", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771031879, "uuid": "dcd44ff5-8e8f-4ecf-839c-b158468a1192", "value": "49152:YtPzHBfRW3NzljS7HRZrcLl+oNxfA4p9Kx9boi:A9YWfxAqoi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771031879, "uuid": "44cd90ec-559e-4701-81d4-267a7bda184e", "value": 5402608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771031879, "uuid": "86b4f60d-1857-4f79-b169-62ab1e31d4ed", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771031879, "uuid": "74367419-5747-46b2-b495-6b3875d6f585", "value": "intl.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73358ceb-09ec-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771104657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104657, "uuid": "ce5d2a09-a78d-4749-a322-465f952d7ba0", "comment": "Malware payload (Mirai)", "value": "2e57206839c935b3dc7809e50f9d7cd0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104657, "uuid": "41c95128-1244-484a-8d6c-be77b676e4ad", "comment": "Malware payload (Mirai)", "value": "e47cb1b7b49ba3b09a0c96ab5a3a332d3b457474dd899162345bca700142d0f1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104657, "uuid": "3fcb39b4-df44-4196-9d26-412d0ddd96e8", "comment": "Malware payload (Mirai)", "value": "e0bff5c5aa06423ac8fbb1f3048a496ac0719ee3", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104657, "uuid": "660c4eaa-d119-4e51-a7bf-a3185ee9420b", "comment": "Malware payload (Mirai)", "value": "11415f035f4590b5aa441cfc2bf31c5bf8328712413d9c13d1c079a5da307f5c15ca5d1f1ea847a5e422b8610304dd54", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104657, "uuid": "ef8b62f5-2817-4788-9f8d-033ecfa29a24", "value": "T1F9735B07B58190FDC599C1740B6F723AC973B06D223AB2EA63D0FA237D89E215F1E614", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104657, "uuid": "f122d64b-5943-4cdd-9d97-414352a2f4d2", "value": "1536:qvvVSMA1b8od48VfIPAzeXASB+jGiFrFGhQiecjp+URvI1F11Bg13AWQUxJgP2Eq:oVbyb81+aAaXT+jGi5FGhQMjp+x1F11w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771104657, "uuid": "af009294-dc3a-40e7-a82b-741e2ef4a559", "value": 79264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771104657, "uuid": "92ac79bc-b40b-46f0-aea1-e4799b38f478", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104657, "uuid": "7f62b96b-6e35-4983-b073-599e5ea368c6", "value": "manji.x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8d5c6b5-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037343, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037343, "uuid": "659c07bc-1173-4d1b-b1af-3975cdb9c886", "comment": "Malware payload (Mirai)", "value": "0696e58150332f51a33868d734e1d63d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037343, "uuid": "f9dce414-e949-4f67-830a-dd45e48005f2", "comment": "Malware payload (Mirai)", "value": "e4d60f6ceb6243a8949799fe3ef8edb79e9b972d05053f7a7f52d7cfa5848a8a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037343, "uuid": "8cb1dfed-090a-41e9-8617-1574920be674", "comment": "Malware payload (Mirai)", "value": "58a6aa6ae7915b218476a45effd024738f3d439c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037343, "uuid": "05879f89-2244-465c-90c8-6295f4336ad7", "comment": "Malware payload (Mirai)", "value": "1870f7ab009bef558d42bd019f12b222bc33af5453fdbf48e807d5f6a5c70fc6a4e41656258143f0b503383ec22d9397", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037343, "uuid": "68235359-ce13-4382-a454-9c1d00c2bced", "value": "T11703F12DD1DC08C8CCFCD07B84DE39960D65D4DAB180C792EF60A65B02CA7A9EA5D393", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037343, "uuid": "f9725038-e766-4704-aa45-6ec31aba42df", "value": "768:YdplYQ3xA4INaAAo/45y2ADL7X2HU7TypItiE3cjXwTLVnbcuyD7UHQRjp:UxENaAN/4w2oNXLMDInouy8Hyl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037343, "uuid": "1b56fcb5-b523-4760-b508-6aed1e9d571a", "value": 40696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037343, "uuid": "17b6c570-3d4e-4aa8-aa29-3e1306e9dd68", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037343, "uuid": "a7214a84-2531-438a-824c-7c5c01c08f69", "value": "nwfaiehg4ewijfgriehgirehaughrarg.i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a3c949d-09b9-11f1-a129-42010a9c0007", "comment": "Malware payload (GoProxy)", "timestamp": 1771082711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771082711, "uuid": "b544b1e5-abd4-43f7-9005-c74fd772b200", "comment": "Malware payload (GoProxy)", "value": "9c511884e8934dd95e4673647615a26d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#E1423F", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771082711, "uuid": "18b424eb-8cb1-482d-a16b-eb4aa5e2ea13", "comment": "Malware payload (GoProxy)", "value": "e5f83c66e93fc7e36cd7141ef14520ddeb95e90a8d86db4882fd9c04c68a1aa0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#E1423F", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771082711, "uuid": "261f32ca-2ff2-42fa-aa4e-dbd39a0ee728", "comment": "Malware payload (GoProxy)", "value": "1ac1b65e8133560a7bc071d8593dc9d7b8156035", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#E1423F", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771082711, "uuid": "c0c62245-cad4-4278-af93-a6ff7eb851f1", "comment": "Malware payload (GoProxy)", "value": "c6ae15e926adb54564b8f20cc19f94170fd1b4736a8e210a97e9c91e389233987e3cfe6014b6fd6bb1d542e7572beb0a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#E1423F", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771082711, "uuid": "9cb29796-9543-4426-bc0c-b149097eaa4d", "value": "T151764903ECA545F9C0AAE23189639252BB71BC481B3123D73B50F7692F76BD06EB9750", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771082711, "uuid": "86c88787-5f2a-4d64-9280-39979f607322", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771082711, "uuid": "af4e6f45-ebad-46fb-b4fa-0721182a3be8", "value": "49152:YQ+lcq00YZBSPoN709dHl/Fl7/UMIYWfqmdjY5tNmioyqmOG2ThJ9MfzQ8/I3ejG:YDJAYbFSL1Hs5yfXmSPdmFcvrrev8OEP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771082711, "uuid": "1b29bcad-48e5-4e0e-90a9-70a2f09b920d", "value": 7783808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771082711, "uuid": "b8ccae22-a91c-4613-9505-f80ab92aa606", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771082711, "uuid": "adb17f09-d2f4-4c0d-8575-70077049cf18", "value": "f12BhQB.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d011ae19-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037382, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037382, "uuid": "fcfb9f64-dc6a-43ac-8865-0e299f654cd4", "comment": "Malware payload (Mirai)", "value": "2279970b50e7d9dfca113554a2840ad8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037382, "uuid": "679ad3e7-ec7f-4708-8605-0c523f7754d8", "comment": "Malware payload (Mirai)", "value": "e66293538b3d5992818f3e209574cd65c0fc2496bd187ffbd410107a046e85c6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037382, "uuid": "d015b9c7-35bf-4697-ab55-024710e84e6e", "comment": "Malware payload (Mirai)", "value": "2973bc1f70f4c59e57f64a0a3c933a8ad9236147", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037382, "uuid": "96bf4aef-7f0a-450d-a03d-f786ba625285", "comment": "Malware payload (Mirai)", "value": "32a099218282928bece14b79df12448f5e3e6b81d99038873de4d544e350227897e8173c38152f501e8a21833f9f0c4a", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "upx-dec", "colour": "#6186F2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037382, "uuid": "3a441668-ea90-461f-802c-7c6d34b41272", "value": "T162C3F709EB610EFBE86FDC370AFD070525CC651722A87B7A7574D928F64A24B09F3960", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037382, "uuid": "cd23175f-162e-4abd-a6bf-28d9c20186ab", "value": "1536:ZOWeUSZ25TuMePxR0hFX+SoGQHW2qDOUu3upHiJ1XgZOKrNEM/ldnona8Qjl0qD2:EWeUSZo2R0ystiJ9gZp3LM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037382, "uuid": "c7597bb8-48dc-422e-8a6e-618765e2275c", "value": 118376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037382, "uuid": "0e31bb6e-ce7e-45b6-87a6-4ec3b3295c86", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037382, "uuid": "bcde6ce3-8931-42b0-86da-b853ba904f83", "value": "nwfaiehg4ewijfgriehgirehaughrarg.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77086697-09ec-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771104663, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104663, "uuid": "e5e8dd6d-8844-4560-aec4-7ad720d0a2d0", "comment": "Malware payload (Mirai)", "value": "9ab9e4c3bdf7b571831221f0a18128d6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104663, "uuid": "d514d930-5eab-4e6d-8534-5f65c38d4bd2", "comment": "Malware payload (Mirai)", "value": "e6c180d1c9eb78f8f0e6ba8a91a2d48e76101a7131b3fa01ea848b6c9bf96920", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104663, "uuid": "1a3c2cb3-f7a2-4a33-8dab-126156070353", "comment": "Malware payload (Mirai)", "value": "d99b20db1661998ee7f90972de6ba52e3185f484", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104663, "uuid": "e4d78ae7-5be0-4f73-adf4-e60b46433b3b", "comment": "Malware payload (Mirai)", "value": "1afc86b313b182e8523a0440a4d141a32a8d9df114845168068d4a51353a9f70d75cc4135f832cc4b37480983cab4295", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104663, "uuid": "2949922a-ca93-4baf-960b-efedc034ab88", "value": "T104835B43B30C0A47D5670DF4263B57F183EB6A9121F8F689294EAB4992B1E325147ECE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104663, "uuid": "26a21933-03e6-46b3-82ce-c27cbbb94a1c", "value": "1536:nLM+0jysRh/6YwSKc4bS6WtPIw7zPVzo7q+gQVq7QlxnrsevVhF7:nOPRIYkTWIIPyVq74rD37", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771104663, "uuid": "9b32d903-7329-4b4c-aea5-75fefe265f10", "value": 84784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771104663, "uuid": "3b8d837f-620b-4122-8ed0-550097275421", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104663, "uuid": "5c97d92a-54bf-411c-8555-25de9ade0ea6", "value": "manji.ppc440fp", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78073bac-09ec-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771104665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104665, "uuid": "2e016d30-228d-478c-9236-af8ef101f21e", "comment": "Malware payload (Mirai)", "value": "03baf55da5eb3829e8eac4b90e0448fd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104665, "uuid": "278a8c3a-1689-438c-be87-2272d44a3d86", "comment": "Malware payload (Mirai)", "value": "e7c8c625e17a2ff2737bc14214f00f1c6e1436a353e2951691acc0e427ce75d2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104665, "uuid": "ee24ab73-b6e7-414c-9a9b-68082b0ac8e9", "comment": "Malware payload (Mirai)", "value": "09bde8570186677206455706d9164405c3a9bb5c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771104665, "uuid": "eb9ac551-ed2c-4cf2-ac1c-1eed41f11f1c", "comment": "Malware payload (Mirai)", "value": "96154551edba5261d10c04bdea66579e083a800cbe9cd3469e95ab4d7c6923ac872c39fab98a9f0afdc0dc4e28e25f5c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104665, "uuid": "cf4822b3-c997-4a8b-a567-dd3f2f2ff617", "value": "T18DB3E70ABB650EFBDCAFCD3346E9070525CC655A22B93B367574C828F54B24B1AE3C64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104665, "uuid": "7d9c574f-9aa5-42a9-90c1-d9642bd34625", "value": "1536:c4w4zW/h4SZsqEz3UrgiDSAPrfO4jaXbzjZjCfPNXm/iRK0UgSSWs:BxW/rZsqcUzfHjarzjD+XWs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771104665, "uuid": "bdd9de34-ef37-4572-b4c8-a7a9c858be23", "value": 114308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771104665, "uuid": "3f95db55-5d07-43fd-a8a7-d8dc47bce5b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771104665, "uuid": "1f1bda6e-73de-4984-9864-a8bbd573b964", "value": "manji.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39df1723-09a7-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771074926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074926, "uuid": "8cb98627-7571-4722-ae99-66cc6c817d2e", "comment": "Malware payload (Mirai)", "value": "cbfd4dd3a8541600c397908c52a61b2c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074926, "uuid": "578125b6-5f94-47b2-a12e-2d4dba9c0c08", "comment": "Malware payload (Mirai)", "value": "e8a12119fea4b87a35a32d2cf6a22eeddf8983a93c2e685aae98279f68ba817e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074926, "uuid": "a5bd6c06-233d-421b-98b3-13f3a7a7e7c5", "comment": "Malware payload (Mirai)", "value": "1cfe62ee8055765113025d18a19ce2919314068b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074926, "uuid": "dcfbacac-f5f9-446e-98ba-6fe7ecaca167", "comment": "Malware payload (Mirai)", "value": "3cab8ae9a1f5c89c8537749da36e3e6f03e16e4b2918bedd6bc11bc62cedbec45304203521b8f1b89097df187009ee13", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074926, "uuid": "375a6f1a-d758-4bf2-b8fd-1d6c0fe37e14", "value": "T18473394AF793E4B1E90705B002EBEB794A34FD620520D95ADBA4FFF19E216C2714672C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074926, "uuid": "473ca941-0c61-48e9-9cd7-52d02ff908e7", "value": "1536:W1+KPEkB8poyhQwWeUg31MLZoomRfAqovwlfcmr:TyE48prfeaomR0u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771074926, "uuid": "d806c9f3-30e7-4985-8fd6-65d7c150488e", "value": 74036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771074926, "uuid": "8ba54b06-f398-4428-b662-871213ad07ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074926, "uuid": "ec36ed6d-ca80-40e3-9db6-5316e0bf3f16", "value": "israel.i486", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89a97abb-09a7-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771075059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075059, "uuid": "f4193b9b-ccc0-4a24-925c-2f103fcd5dea", "comment": "Malware payload (Mirai)", "value": "7e65234f638dbd4a38aa53b340ab849c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075059, "uuid": "b2423a96-623c-486e-8c2a-92d9253c039f", "comment": "Malware payload (Mirai)", "value": "e8f86bbb012df85e09b46d1ed85a51c0427c2bb38fd2c3265b85e196d776255e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075059, "uuid": "6aba169b-b6cb-403b-9c2f-1cf435ec199d", "comment": "Malware payload (Mirai)", "value": "5f46dbbca810d8d2efe1c2afa6e64dd06f7f1579", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075059, "uuid": "e57c9f27-cfb5-49e9-bea0-d19fa718a703", "comment": "Malware payload (Mirai)", "value": "7e2832d070a7e1b02d9bb636e9f1fd66ee6b8c2b9b8cc2389e92f342d042d634e1d5cfff8edc5669d1b06eb73700f61f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075059, "uuid": "1cf56161-7c0a-43a1-ab80-255c8936c9ae", "value": "T1D9C2092306B65D07C0C5627560E35323E8AEBF694624434F7E995C8E6EE13D13A3ABD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075059, "uuid": "3cc30720-d5c0-4a38-8a0e-fc30f70a7be4", "value": "384:a7s2JK7ryAwYxRhCvdGxr7Wt7Lba9Jbb+LsyiGkG:ag2JK7ryAdfhCvd2utLCTysG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771075059, "uuid": "31abbb5c-5f97-4820-82d9-805725d8951f", "value": 27248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771075059, "uuid": "679f99de-e882-4d4e-80e9-c5f6b7257d5d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075059, "uuid": "d746f4f8-276b-4cd8-8186-4a1c8f0a9c71", "value": "israel.sparc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cd886f5-09da-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771096781, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096781, "uuid": "fafd5265-8e99-4de4-809f-e9865673bbbc", "comment": "Malware payload", "value": "11c401789a029234eb54b56d2840dd5f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096781, "uuid": "a13d45c0-5412-4326-8dd9-9e59e955b5f1", "comment": "Malware payload", "value": "e9f94d3d116425d80997dea47f885154fd392a12eac270ee886614e7c4bf6ee0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096781, "uuid": "adfd36cf-4bc1-4687-9a3c-4a7f79724ec4", "comment": "Malware payload", "value": "59925cae62f2bfb41925e7581d055a64add9c925", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771096781, "uuid": "f77d871d-67e0-41bd-b668-07748f237fd4", "comment": "Malware payload", "value": "f371338f840b26845ffa61f6db183f8be8df982d7ecfdc7729f9627127efa2bcea5fac5d0dea8b4c39d290d09b819258", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096781, "uuid": "8ff2b351-79e5-4d8b-99db-868cc5f8d903", "value": "T138369D45FC0E5962DACCA6366D760194333AAC088B81E71A3618F3BCBBF165C5FD3691", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096781, "uuid": "b63a4da5-a109-4e52-be24-84b677613952", "value": "49152:L+6czdPIjjBkgyYViHnBLvOnBgL7rGud9Tkz2CZCbKkTsQst5d9Eca1ljUYMBNlY:yDojEK2CQbKV5bDVlllGonSwnK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771096781, "uuid": "e839c5ce-4845-4fb3-80f0-7ecebbd64628", "value": 5280607, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771096781, "uuid": "c7a99340-d97c-41cf-8130-fbbe651b9cfd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771096781, "uuid": "c6427cbc-0c53-4897-a92d-710c912a9585", "value": "bot_linux_arm64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b51d2121-09c3-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771087158, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087158, "uuid": "3931fef3-62d1-46df-9715-cf808efeb2ef", "comment": "Malware payload (Mirai)", "value": "a325a4718d9f5a0d940f4916201806ca", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087158, "uuid": "f715294d-1c4a-4610-b75d-4f10b5f1be38", "comment": "Malware payload (Mirai)", "value": "ecc2776d913f49deb2b270563bcfe39ba84484580a99df6cbc749f99b3cd52cd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087158, "uuid": "8222e540-be46-4bc4-8d6f-5c5760a5474c", "comment": "Malware payload (Mirai)", "value": "634a1f6281bf44b8e7ebca84bf169907d36dc98a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771087158, "uuid": "357152be-51d7-48cc-8de3-d9bb763e33a1", "comment": "Malware payload (Mirai)", "value": "5154df42fa247296c5f78fafffc35f2ebcac70644d8a62dc10de8c5f931f3a4b494e9bd697ca7d53c0d89f818c0229c5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087158, "uuid": "bb9567e2-9a9e-4741-b5dd-230236d69f1e", "value": "T1D8D3BE97F74B2491C86203F407CB7BCC2EA36111DE2BE9E76C1E657B1A750DB0906392", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087158, "uuid": "1f48c7d0-92fd-4545-8446-5a22108fd550", "value": "1536:RLanjXS51Gu8BHDfopGTdcZka42q630i7luj8BazxZJQsgznzJZR/LWa:RLanjCrSBHVTSZkht1i7c8Ba2sgTz5q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771087158, "uuid": "658734bf-6308-479d-a3c9-f699c05ccb79", "value": 132544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771087158, "uuid": "6f179e88-79cd-4a6c-b3c6-c42fc3a404e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771087158, "uuid": "798dacc4-4c96-4c0c-af67-3ae4b7bdfe51", "value": "m9x7k2v8b3.arc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40f0dc20-096a-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771048738, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048738, "uuid": "c3884d64-b750-4756-9fbc-ee0022f35b70", "comment": "Malware payload (Mirai)", "value": "81f9c3eaee2f707ce36671842a212def", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048738, "uuid": "cc1c9f5b-bdd1-43ac-8221-946448b18bd4", "comment": "Malware payload (Mirai)", "value": "ed4cc31af837cc89b663adbad3c0c9808b020eb990dae59a5bd3c061afb4254a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048738, "uuid": "c760c36c-10a4-43fb-b790-8e82e897e6c1", "comment": "Malware payload (Mirai)", "value": "fe97f6a8d41c9bcc8a1381aa05164d0b86352f2b", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771048738, "uuid": "5cbdb1dc-1c5a-4c6b-a524-2a4e78cd0a62", "comment": "Malware payload (Mirai)", "value": "6f3927f264580b9d978f97e2da7406a5fbcda9a8a4939aa356b1bd25cc26917ac39a386472d343aafa5fbdff0384b23c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048738, "uuid": "b24d0782-8bb6-4f3e-80f3-4d86aacd0b86", "value": "T1655302412A69E83BD9D2D5390B3C41E686C89DE4A4D3500F43CD7DF84E06D68ABD86DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048738, "uuid": "9976b348-d3e7-47fc-a3bf-2e297694ebb9", "value": "1536:Mdcqm5iERozq3p7o8FwOA4zCKOFGUfKbeH6UhV/umFFAQC:MaHJgMo8FwOA4zUFGUO3UhACeQC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771048738, "uuid": "1f4dd7f8-b450-42a1-b968-760dc0090bb6", "value": 63928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771048738, "uuid": "b5ab99c7-bc43-4ce5-a55e-7cb72aa789ea", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771048738, "uuid": "167c3b81-9828-48a7-85e9-8f5939e46a9a", "value": "xnxnxnxnxnxnxnxnx86_64xnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2600a88-09df-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771099180, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771099180, "uuid": "db4ba16b-0aff-44d4-a13c-6338e63ec040", "comment": "Malware payload (Mirai)", "value": "47f7551cafc01d44c7ae64a6842e94db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771099180, "uuid": "8c4be11c-63cf-44d4-9ac4-d8ccbb7e4b17", "comment": "Malware payload (Mirai)", "value": "eda3f92d30d86d828ce0c1c96c697b7c692fa5ea74ffb9f1e7e4df10bfaea5d5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771099180, "uuid": "0f40bf74-2019-4685-834a-d274cde5b70c", "comment": "Malware payload (Mirai)", "value": "e2ee6096d7c5e99c98c71e078b08006a036dfa25", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771099180, "uuid": "bf93c17b-be27-4946-adc8-ba5764e52f71", "comment": "Malware payload (Mirai)", "value": "a537400baea853caa13f8ce45666b1d961daca11644aecbe32f9e74a4170cab6e98755df7ae2a360e7dba2ec66917596", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771099180, "uuid": "b3bf0567-3364-4cb1-b214-bd5ed4e84f45", "value": "T110635BC4A683D8F4F96A01761137E7375737F6390039DA8BD764A832BC62601E6673AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771099180, "uuid": "00e60781-ded2-4dfe-860a-a3ed04114476", "value": "1536:gcK8MffyU5RL+r9RS3TlU0f/wEBOVkVgu3Urpbr5ag1416mEv6+80:gcHCfyU5MuTlU0nw/Ygu3Spbr4q4HD0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771099180, "uuid": "024f5b8b-9c2d-403b-baca-b154dc86ad36", "value": 71588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771099180, "uuid": "af1b9cd6-32cf-470c-83bc-ffde916d6c98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771099180, "uuid": "0feeba90-f6e2-49e2-8705-87797bf237e8", "value": "manji.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "842202be-09ab-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771076768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076768, "uuid": "51092ceb-e728-43ab-adb9-fcef1097d840", "comment": "Malware payload (Mirai)", "value": "9ce953f6c6e84ee67a626da8ab0a22bd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076768, "uuid": "b91bc498-d219-44a2-ad70-e90157abee92", "comment": "Malware payload (Mirai)", "value": "efcac976366347028ee6ecb7f67b511d889dfbfff1e1bf050b77756aef0ff707", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076768, "uuid": "8ca09d1e-3109-4e4b-a300-1a5846f51e27", "comment": "Malware payload (Mirai)", "value": "ae544516da9d182eeb3686fd61089422fc02bf60", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076768, "uuid": "f7277741-fe57-4d7d-812b-9702fefdfb10", "comment": "Malware payload (Mirai)", "value": "9ffcc03d46030d00158a4c0e48d37b0c21542b94b01db1acdb81305f4a048a50608380492788930c9d91190a436f323c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771076768, "uuid": "e6fc0883-6ec1-4e66-828e-ce10b36c13de", "value": "T10BE3C70AAF610FB7DCABDC7706E90B1135CCA91B25A43B757534E818B64A18B19E3C78", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771076768, "uuid": "a0131e84-89d0-4b56-b200-8488da85673b", "value": "1536:oVEJIADaJdMTWtCyQ7lT0kG0ktNq1DHrO8VAIQo1aMmTQpAwXgtAs5OE4Gsr59G3:NTYFe9vktMFHqUZDp2b4Gdg0YRoTpBx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771076768, "uuid": "7903df87-b8b1-49c7-bf47-7770b98baebf", "value": 144152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771076768, "uuid": "c6d8602b-862c-4729-8be2-93c998fe39a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771076768, "uuid": "78e694f4-5d3d-46b5-9e9d-ae4383f0e830", "value": "data.mipsel", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08dadea6-09a7-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771074843, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074843, "uuid": "b28870b5-200e-4a2f-acc2-d324d74be53d", "comment": "Malware payload", "value": "d762790d777da9fea08e167686e6b1e8", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074843, "uuid": "ea2e8fae-10e0-434a-b78b-ad645dde4349", "comment": "Malware payload", "value": "efe4e6e031ef557c1d8bb48a845442948be51e3070fb98bd230b4d7d787826f6", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074843, "uuid": "0f4f4c8f-ca68-4313-b046-9c958106d9ec", "comment": "Malware payload", "value": "964e9ec9fd7df0af230c7104140a81e45a3fef06", "object_relation": "sha1", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074843, "uuid": "aa2d073e-63f3-42e8-bed5-21d7971686e7", "comment": "Malware payload", "value": "48de77611ecf07edd4f7685a3fd436e1070e8bfef8fe5322baba89ad8257c338cdf118029df851e844035fb777a8210b", "object_relation": "sha3-384", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074843, "uuid": "f58ff36f-dd48-4d1c-9b30-e26d6ae2b8f3", "value": "T11FF73351E293BE82D1281A3E1F740EF1BA211074DB8ED9833E9C5BB52F07A493715AD7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074843, "uuid": "1b2ffe76-4293-4f80-9036-3123a409c849", "value": "786432:rezwKGsZkQVx5Aapa8nHOBgid0FcTutOObGoSkbnWQFW2h9WNfiR:rOwvs+UXd4+H5i+FiVJabn7k2hMFiR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771074843, "uuid": "fc79a903-a81b-42e1-9ed9-50d1eee3039d", "value": 72308813, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771074843, "uuid": "e68aa3bf-1f31-4b5a-911f-d402e2c42696", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074843, "uuid": "e50a16b0-24ea-4dfb-8777-a9d3a3cdf91d", "value": "content.bin", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04c28e53-09e6-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771101895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101895, "uuid": "d5601ff6-734f-4ab5-94b9-7aa4f93eea8e", "comment": "Malware payload (Mirai)", "value": "7ed3fd5515036cd70e0949caaa695fe9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101895, "uuid": "bddad278-aac6-43a5-9d7f-a16c18dae771", "comment": "Malware payload (Mirai)", "value": "f0b6631feabd0ab65764848d5d1b9be360b5d5cdd8a5e52fbaafe13ad861748d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101895, "uuid": "2ab27be3-3916-490a-b8a3-cc627de0101f", "comment": "Malware payload (Mirai)", "value": "af00823aa0e114421970e50f9e2118dbf9d2f215", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101895, "uuid": "62ca3f9e-9d9c-46ec-9946-db7710c7e2af", "comment": "Malware payload (Mirai)", "value": "5de77336653e2dd2f6ca26cfbe9bdc986b73724dcd8958c441d3070838e85866c522a64d83dbb0c9f752f005d4a9099f", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101895, "uuid": "d8cd8737-9a35-40ec-8cca-2fbebc63e0d6", "value": "T16AD34A46EE818F03C0D5177ABAAF424933229765D3DB73079D285FB43F86A9E0E63605", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101895, "uuid": "196f4046-d8ce-4a3f-afdd-dc6851efde78", "value": "3072:b2N8tJq98/uHv8BFVlX0CTgb7SzM/9Lqfe:yNgqGuHv8BF7X0rb7GM/9Wfe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771101895, "uuid": "19638084-0953-4e62-bec3-460e94449499", "value": 131489, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771101895, "uuid": "fac45265-b0db-4ca5-8e44-6319f78f8342", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101895, "uuid": "37f91f4f-07ee-4f7e-9bf2-639ad2cf72a6", "value": "kwari.arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bef7c754-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037353, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037353, "uuid": "ee0393ab-e99d-4d52-b328-423a433049db", "comment": "Malware payload (Mirai)", "value": "b6d001d0a7c179d0bb921440a5c378ff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037353, "uuid": "dae5f6fb-fdfe-4bd5-8a1c-d067278eed2c", "comment": "Malware payload (Mirai)", "value": "f1b86d24efac2fd777770704efde87023f5473d8c88dafc0167a1c1d5d9371a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037353, "uuid": "fcc8a9b9-e3aa-4230-94f4-bb0a7d36e4ff", "comment": "Malware payload (Mirai)", "value": "4f08cfdf7fd329eb268bead0d536b457fa06d723", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037353, "uuid": "009b38f1-1510-4933-b685-0955819477e7", "comment": "Malware payload (Mirai)", "value": "eacf57734211b99c66f2d1e2e9794e210b48dc686bbd8674621888bc28669236f7b007b28ef9147ab07e373ba0155cd4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037353, "uuid": "d8cf12a8-2141-4ea7-b91f-cba3227acf06", "value": "T12C83BD73C86A5D28D44848F070A49F3587A3E111C5A72FF6989ACA79D08BECCF6427F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037353, "uuid": "1ae146bc-9809-4ba9-a7c0-828f2b709905", "value": "1536:PjJrLxePogaAQ+Ymfd2e+KBBV7GTKeBCnwo4WxDpa:PRLx3uYmfdRxBiTKeBRD28", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037353, "uuid": "4ea14f67-2643-4431-a5f8-0939fd2d4f8a", "value": 81320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037353, "uuid": "97c573de-84cf-4e7b-98cd-e60afa7de07f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037353, "uuid": "5aa614f4-8e7c-4bbf-b6ff-c9c206e87241", "value": "nwfaiehg4ewijfgriehgirehaughrarg.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "644fb847-0947-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771033765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771033765, "uuid": "67396e47-ca4e-479e-8093-446433c631c7", "comment": "Malware payload (Mirai)", "value": "4e52e07d2422d2472923cca06f8e465e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771033765, "uuid": "463d1de7-ae5e-439f-9506-986bd453d7db", "comment": "Malware payload (Mirai)", "value": "f23cebe723fcb75f3eb0918a73ef84cdf8d051a57fc9df675559ec981eb87a59", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771033765, "uuid": "3a11a065-ba58-4a8e-8c0f-03e709752b05", "comment": "Malware payload (Mirai)", "value": "ce21e238d5f1aca2f98b893243de8b4f04f9ee59", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771033765, "uuid": "32794ebd-a943-4e6b-b7de-efaae11652a2", "comment": "Malware payload (Mirai)", "value": "0449f1696ed89fc6265cf00058154314fb2a333003736254238c6e71cf9d5107220fa061e2c9be2528eb365cb6529407", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771033765, "uuid": "a861c80b-2124-450c-9664-093d25e5bc8b", "value": "T1BC82BFB4878622F1F530143DDD7545852B8247B8EAED35B730052B78E58490AA6B9ECB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771033765, "uuid": "2c2aec52-e38c-495f-9524-f61e48c23273", "value": "384:6m0KcaqHzPbwdfxhfYpVuMol94TjdKQihymdGUop5hXf:mKcaqHzPbwhxhfsdolIjdFis3UozJf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771033765, "uuid": "5a959f33-fe49-49a8-89b1-e780b928d3d1", "value": 18508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771033765, "uuid": "fc78b3bb-d5e8-47b7-b531-651cd55f5ae0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771033765, "uuid": "5fb53e64-462c-4f4d-8c31-edd1ecdcd129", "value": "boatnet.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b2d8684-09e7-11f1-a129-42010a9c0007", "comment": "Malware payload (Adware.iWin)", "timestamp": 1771102416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771102416, "uuid": "4cf685e2-0ae9-4d35-996b-f8dae4566c26", "comment": "Malware payload (Adware.iWin)", "value": "967006ca917bcdd6fdf3fad1ff6a5316", "object_relation": "md5", "Tag": [ { "name": "91-219-237-175", "colour": "#A4538A", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771102416, "uuid": "50f526e1-0664-4899-b13d-26d3f208a707", "comment": "Malware payload (Adware.iWin)", "value": "f26a03250340467f2e8985c35b85674a74d0f0afb4542fb2d506b19e39e7f399", "object_relation": "sha256", "Tag": [ { "name": "91-219-237-175", "colour": "#A4538A", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771102416, "uuid": "099bd56b-4f55-4dbf-ad31-f004be0ff831", "comment": "Malware payload (Adware.iWin)", "value": "63830aeae04506cc022c5ea2d133148a3d7bc835", "object_relation": "sha1", "Tag": [ { "name": "91-219-237-175", "colour": "#A4538A", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771102416, "uuid": "5fe3b16a-991a-48e9-a59e-d9c438aec47b", "comment": "Malware payload (Adware.iWin)", "value": "26a7ec5f38a3bcf38aeb728d48e08dfd1d0967f00034c59429f63e3a20caed623fa266f26c99ddb7fcb3f8765786ffea", "object_relation": "sha3-384", "Tag": [ { "name": "91-219-237-175", "colour": "#A4538A", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771102416, "uuid": "3a0e950e-86d1-4280-ab35-e2dd46a1f83c", "value": "T17808339E546E00EEC581723E932EEA398A457D4B1158916B33CFAFAB30FC78B4765053", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771102416, "uuid": "b61a192b-c89f-4b3c-b5db-0f61e633f7b9", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771102416, "uuid": "66d8196c-c18d-4876-a5e5-6583c95741d4", "value": "1572864:5wBAV6xfuj1w9/CXkkxvCIIlGf6tkx9KOWWVSfGBR:5wBAoxfyC9Ckk6I6t49ctKR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771102416, "uuid": "c59e986e-43db-4516-95e9-52cdbdfe28bf", "value": 81484296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771102416, "uuid": "c23aab78-f7d8-455c-ad8c-82621afe37af", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771102416, "uuid": "a36a52b7-1edc-4469-a244-7c2f89500b31", "value": "DroneHacks2026 Setup 1.8.8.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb09194c-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037347, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037347, "uuid": "a42c77bc-220d-4391-badc-ea1e72da90ab", "comment": "Malware payload (Mirai)", "value": "85445e239b9c89ab58069e85459b978b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037347, "uuid": "1d3f27d8-54a3-4943-90de-5c2a824b6894", "comment": "Malware payload (Mirai)", "value": "f35aecd697d86fc503f5ee413e2965c215a056f8a3abd3438d49532d3a9e9045", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037347, "uuid": "1d0fe9e2-4db9-43d3-b437-ab605d54f8bf", "comment": "Malware payload (Mirai)", "value": "33bd040847300f7d7179d9d927ef215e8c40a68d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037347, "uuid": "0d8943d5-e153-43e5-a6e0-09c739cd7979", "comment": "Malware payload (Mirai)", "value": "6e623aab8c20f4501b311190ebffd2ce16e1c301be98134dfe35b9cdfd1a11013c54124504b709328fbea17ad0a992f8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037347, "uuid": "290cab39-07f3-4a0c-875f-3694b74259dd", "value": "T16513F19FCC992840E76F5DB5395E2B70A45660C437E706D9B7070DC86320E4BB61CEB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037347, "uuid": "83831121-8a56-4d39-bb04-708f5d836226", "value": "768:ZQG/XPpMVYr/P/9CZHb9/hGUnVZT5Ju/Co+O0q/NMvM0xZdrUUPSWN:KUXRMqf9CZHb9/h7fvU1+u3OvhPt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037347, "uuid": "166e7435-ed89-4358-8e2d-de826283a452", "value": 44204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037347, "uuid": "931ccfac-f29d-41d5-a00b-66f661602c26", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037347, "uuid": "d572c3df-f898-4f03-ac30-3b823e374632", "value": "nwfaiehg4ewijfgriehgirehaughrarg.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd8d3c93-094f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771037351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037351, "uuid": "9ecd4c04-f25d-4c98-b03c-afa4e28ba078", "comment": "Malware payload (Mirai)", "value": "3013008553ca5e4e9751e6404553cc17", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037351, "uuid": "63c75592-151b-42f0-9ec2-78b43014873f", "comment": "Malware payload (Mirai)", "value": "f3a909873a7f84b50e8090511e503cba962e37df5bd586026127ce50c31b2321", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037351, "uuid": "e3e914bd-ea3f-4001-95a0-77b70278d399", "comment": "Malware payload (Mirai)", "value": "3f448bea58e8c037a872bbcc240562a1315fe58d", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771037351, "uuid": "f796672c-0e84-42b6-b6dc-4872e46b6f05", "comment": "Malware payload (Mirai)", "value": "e0f67f01ae9690ef47c69866d7691c8e0cb203b09b98dc5d74174bf57ee3108e29f8420fc36466d31a9c37f6798cc6ea", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037351, "uuid": "358ac9dd-c477-4aef-805d-08532fcb8907", "value": "T13903F166FD68CD88F92D8278C9AA440F19019143F768A4976F64B87FFC31B1A72277C1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037351, "uuid": "76baba20-03a6-437f-8e11-0094baacec9d", "value": "768:QWEpd2cR0FVepN18qzdmtRPwZVpFneONN5sz/zo1IyiJS1tZuIsWysvQkGqQEVCP:QXjnGMN18EUtKcQN+z/z+oWFwEZLnouQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771037351, "uuid": "cf979bf6-00be-472c-a575-10410a332721", "value": 39496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771037351, "uuid": "98a148c1-fbfe-4621-8907-36a63b665a4a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771037351, "uuid": "f28c49d5-aa44-4aed-b616-892b23ad551c", "value": "nwfaiehg4ewijfgriehgirehaughrarg.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0638476c-09e6-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771101897, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101897, "uuid": "ed74a859-cd8d-40cb-b87a-2688d541027b", "comment": "Malware payload (Mirai)", "value": "8a98b136a59d1f4c75e039b9ae8e7414", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101897, "uuid": "176a4f33-f2df-47c8-80b8-5e47cbad8e5a", "comment": "Malware payload (Mirai)", "value": "f4166ebfa24eb25aa55633367bf063edcc8ad61675f7f7f94fcfa6da990f8904", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101897, "uuid": "8bc2225e-0f87-4556-8eb6-dc35e9c52bb5", "comment": "Malware payload (Mirai)", "value": "a3883b9e20a026786e9029ebbdc3a8aacd8cb2af", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101897, "uuid": "935b8270-1b4e-44f7-8c20-6d50c0161b3b", "comment": "Malware payload (Mirai)", "value": "1152779f7b211b5dc0f84b07bfb5adb3e736a52ecabde453ca48cd7f55a94fd4b9aec1ba117a7209ba46d7bd93672082", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101897, "uuid": "a1689995-af59-4f44-8a5d-fc18302ba8bb", "value": "T16E334AC5D997DDF8E8201A793077AF3296B7E13E2128EDC3D3999937A942A03D10724D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101897, "uuid": "8b12903e-4039-48e3-94de-cdb1e5d0bc05", "value": "1536:PS+dEczOjRC6qf1dhWphmEB019/MEgnNxg+kC:bOjRC6qf1dhWphmEB01FMEGN+H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771101897, "uuid": "306dd264-b584-488a-8169-3dd045a3f7ac", "value": 53852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771101897, "uuid": "0b8992d1-df11-42a9-b7dd-f07c562ce2eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101897, "uuid": "7f48eab7-6008-41fb-88aa-354185877b92", "value": "kwari.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "933383a0-09ed-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771105140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105140, "uuid": "1976bc43-8052-4708-85f9-255cf39f8489", "comment": "Malware payload (Mirai)", "value": "e59eb8da94da751378499bfba6a09f3e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105140, "uuid": "257824f7-a7d4-4635-80ec-01bd8a7587f7", "comment": "Malware payload (Mirai)", "value": "f602c617ea0621d86ab1eaa15a762d5e3d00384f782b98140faada41c6c6fe3a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105140, "uuid": "a53e6644-f2a3-463d-9516-b4dba120ef23", "comment": "Malware payload (Mirai)", "value": "994108c09f736851c2642a51a2915eb5d823af63", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105140, "uuid": "863d1f99-b1eb-4df4-8f39-b7bd8e2e17e5", "comment": "Malware payload (Mirai)", "value": "e882e4cedc4b91131ebe893636b8ef34cce09d38dd5e1d3f95c4e57f3acead804edb592f272b581c970ca82eda2f14b4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105140, "uuid": "6e2d422d-052b-4e1e-ac1b-1cec752c1092", "value": "T1CF158DD8EB86E4E1F27304F1024FDBF65574A1265013FAF6EF86266370327616F1A21A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105140, "uuid": "0399f056-dcc2-4b7a-8690-3e0c2bcd88db", "value": "12288:ObAJfyT5GE4h3XhzotI8LM/YFTA49A3m4PNMl/oS2pIPyI/vqVYL62EvLuA:DJfyTIDh3XhZ8LYYa4iWSNMp2pEyVY+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771105140, "uuid": "b37fe667-53ae-40a4-8392-299c2dd0055d", "value": 899160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771105140, "uuid": "ca0c5c32-1f6d-42fa-8be2-639628e7744d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105140, "uuid": "fb9dfe1f-fd6c-401a-b585-beef410e0151", "value": "data.x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b05f28b5-0941-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771031316, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031316, "uuid": "6b5c8ad8-579e-446d-88d0-836a5a55aa7a", "comment": "Malware payload (Mirai)", "value": "96a0f16ecc31b63b0ea2ec9719c4018d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031316, "uuid": "a55248fe-4aa8-4c33-8a2f-5da7873899eb", "comment": "Malware payload (Mirai)", "value": "f66ea0287b6f59a9a503d8a21f541129ff2c09eae30bc94f499063f313eda150", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031316, "uuid": "da4368c0-7465-4cdc-992e-aae34a5dc336", "comment": "Malware payload (Mirai)", "value": "1584d6a2bd6cdda0dece2e38c9f5d6d4871e0fae", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771031316, "uuid": "7b3587a6-e691-450d-a457-5945f4298901", "comment": "Malware payload (Mirai)", "value": "4cab1f79adda21e1c5355a477c890792e0df37620a4ad41d57941ede99e96c3927802a213b9a9b0210a1a6384368a8ec", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771031316, "uuid": "65109200-aa11-424d-bdbf-c874094090d8", "value": "T104A2C084F3FADAA1CEEE5E709CD1E28537670E542B61DD73E6D0EB010A57C0969492D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771031316, "uuid": "7a58b5f2-25b9-4528-bda4-5833520a4b00", "value": "384:AeYpXNttnUOlXn5DJ7sZjeRtqbhDEiKPpsoWodBDRJvc58qgKNQiqhM4uVcqgw07:QbtdhJwZjMghIV9WwDLvdk4uVcqgw09R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771031316, "uuid": "b1b9c9a1-46f9-4bba-b836-f1d6f314a629", "value": 21920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771031316, "uuid": "f9e6824b-b829-4698-9028-eccb9375a147", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771031316, "uuid": "4d2fd762-c39c-49ba-8fb2-86899af782e0", "value": "boatnet.ppc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8a82fd70-09a2-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771072913, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771072913, "uuid": "67b6dd8f-0eb8-41de-bffa-6a1245b4de8d", "comment": "Malware payload", "value": "6a31b3c1bb349295f739c3e4335b71f4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771072913, "uuid": "0cc67e6f-5a21-4fd5-8388-fe90f1d21a19", "comment": "Malware payload", "value": "f7335c21183b6134ed12191d2c2af815d05b11849c5fa43b7c0c163332b1df78", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771072913, "uuid": "afec98a4-e8cd-4ca0-a567-b7e1b4d06c9c", "comment": "Malware payload", "value": "af199d5d9fcca8dc3957b6932b1e83cf0bdac87c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771072913, "uuid": "d3e42134-063c-4ad5-a8e8-a6fd928122ba", "comment": "Malware payload", "value": "3b4c48c77813f725cf5e8837292a0b2dba8311301932c90b703b626bb6419e01106bc733230dc73b3a450657a93ccab9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771072913, "uuid": "9d7b9951-ea1b-4093-878c-3eef0854df04", "value": "T1A6F42329523AEE76BBAC15F676ACC2792122FBC7949DFF8521B0D4007B5712960083DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771072913, "uuid": "aaaccce8-3776-40ab-adb9-271d623321c7", "value": "12288:oYkiQprdFz4/PzSupPF32i/LYD8mBdILKF90xlEZ0DJ1JglIxqFz39FhAGc2zuhU:RzOnel5KDZdILKFKxcKJ1ayxqFz3bhAk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771072913, "uuid": "d0cb3f07-73d8-4a49-9274-b7abf59c174e", "value": 768695, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771072913, "uuid": "cf94ce69-ef6d-48a5-a232-a9f84535ac7b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771072913, "uuid": "7bf8f38c-4a6e-4b0b-a4bf-7062ce4b83a2", "value": "bizy.mipss", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8b4c1d50-09a2-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771072915, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771072915, "uuid": "d8bb4851-6175-4869-abbc-e7589ef30f09", "comment": "Malware payload", "value": "1c5e77323ff6d45f7c61396113858f07", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771072915, "uuid": "0d770e6b-5a45-47fb-93d3-93295d505df6", "comment": "Malware payload", "value": "f73da05833f88dd898d365f6a19b179268fefa71718edb764946ec3f24bf3c41", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771072915, "uuid": "026793f5-2198-41e2-9144-755daeb129ae", "comment": "Malware payload", "value": "01619a677960139d09aba1166eb0658f1369c416", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771072915, "uuid": "de9ecbef-1ded-4180-8163-87c494547aac", "comment": "Malware payload", "value": "c67ac43147e335efcba0c748e57cdabb61e589df9152a9a2f4f1d06d541869cb895891831615f040f42b7e6d533c15f1", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771072915, "uuid": "7349656f-037c-4267-b52e-2b9db694fabc", "value": "T166D42338A5814E18266B1FFC86925123A9EB7FC71040FD89A669D4F86D4422C733D9FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771072915, "uuid": "fb78d5f7-3302-4b0f-b612-c3d5fe4f0327", "value": "12288:1TJ7ePVOtbMPMxTF8nD3f1CyQ11RUi0g0BOBFGcANeop:1LtgPMxTuZCyMPxb0BOftA/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771072915, "uuid": "3a284a9d-a114-49f4-bfd2-f51995d2c63c", "value": 638716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771072915, "uuid": "7ab4454d-78d9-41d7-8dac-e769d6e06150", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771072915, "uuid": "0f08021c-f3a8-4311-84af-55b83ddb3b07", "value": "i686", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e60b50d4-098e-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771064477, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771064477, "uuid": "b30e959b-9ea4-4d68-94bc-fdbccda7aad0", "comment": "Malware payload", "value": "718f0fb3abb9b2e7456742cb22491819", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771064477, "uuid": "ec397c29-a917-4a9f-9d15-9606d9798bf1", "comment": "Malware payload", "value": "f7dd13bfce124d2210d93fda6bf698415318fedefd932063974c829fc1763900", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771064477, "uuid": "e932f35d-d4aa-42cf-9795-dcd83cbf9d58", "comment": "Malware payload", "value": "5b062288da33e9e9384d6ae3baec273d6e22a0af", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771064477, "uuid": "f5ddf54d-6574-4e51-8962-6e3cb50b6721", "comment": "Malware payload", "value": "3900c45c15652b132e6bebd02e71119193d0c1181d819794df538634f24d24d9d5d4ba905f93cba0096ba681a6e8d7d4", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771064477, "uuid": "bf20c5f4-5651-4441-8497-b3ae0b663588", "value": "T12F55332B3172D73A57DC5892A7DCD26E5069EACBC44CE7DA20A0C441FB5722E610CBDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771064477, "uuid": "16a949e7-0274-4ac6-83d5-6177e0900104", "value": "24576:RzOnel5KDZdILKFKxcKJ1ayxqFz3bhAGc0iYdUTdH9NydY46jxhnyaOrzs9:R9XKNdI+FKTxqd3bhg0iYIddNydYkaOm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771064477, "uuid": "524d8623-38b0-41b9-95ec-2ef9e6641d9d", "value": 1359983, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771064477, "uuid": "6f04259a-6023-46fe-904e-c37fc43fdc61", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771064477, "uuid": "80e34abd-bdb5-4fa1-8383-95283bcdb833", "value": "bizy.mipss", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84dd0da6-09aa-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771076340, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076340, "uuid": "f762d3e7-2fe0-474e-91e5-92286b0d4dfc", "comment": "Malware payload", "value": "c302090e3862d08ad9b30ab6fa4b25a3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076340, "uuid": "eafaff14-0cdc-4a2d-a257-c3b24e66cebc", "comment": "Malware payload", "value": "f85a52eaea71bd6450be726d7ef9af9c08c8e9e86a52b736c7e250eebabf7615", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076340, "uuid": "838b64a4-daa4-4ad9-a162-248f56ba8f5d", "comment": "Malware payload", "value": "0ac9e961a997151c44233dd21e0386e7f4ba53a0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076340, "uuid": "f12cb7dd-fd82-4593-8475-d78812752ab5", "comment": "Malware payload", "value": "f1c305038e3406a48cc33469604a8d39e7b61187e683d85d06d930492a5d0bc62aa3f741986c02b6b2aacb6315470db8", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771076340, "uuid": "778a3d00-0586-40f8-9dc8-a3f77caa4027", "value": "T103F5FA25AEC22F66C1CC07B445ED635B62503E454A96073723E4EBE83AA773CDF5688C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771076340, "uuid": "1e116805-c866-46c3-915d-5e869b8301b1", "value": "24576:qLHAr6Z0h+4pE/shMld+cnuf2adRRQreTEj7pXmL/jYhifU+tJfwutuHoXT0qUww:KH9Z0hSlicu1dRRDPuHoD0qU5p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771076340, "uuid": "625ff37c-32ba-49a4-ab5b-b8ca288a2235", "value": 3386715, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771076340, "uuid": "71de9850-0480-44fe-ab13-e590c9ca7759", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771076340, "uuid": "f451c835-34a3-4577-bd29-4403e4e304a7", "value": "bizy.mpsl64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0117afdf-09e6-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771101889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101889, "uuid": "c5822059-ab07-4852-9100-bacc3a6ab354", "comment": "Malware payload (Mirai)", "value": "9df64215333d722cfd4ab12ce334e936", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101889, "uuid": "86f228df-2d52-466d-8f52-3baf3df76600", "comment": "Malware payload (Mirai)", "value": "f8dd88a26a4718451ff3e927763783bf4f1120a6244f34f2f52bb4e449e1085e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101889, "uuid": "caf04193-8691-4779-b069-cd401dcfef5d", "comment": "Malware payload (Mirai)", "value": "cef96f5156d6ad6d6723d4aca5f74e02e24cb6e7", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101889, "uuid": "5a9e2065-708b-415b-9484-2dffe6cefbcd", "comment": "Malware payload (Mirai)", "value": "2eed9b574c28171882093d3a98bf15dfca1e141835756e51d66306dc4d0ad144670da104b1254fd1523577e5239433eb", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101889, "uuid": "8fef311d-e672-48f4-8cce-0d9dbdca9195", "value": "T1B8535C21BD3E2E17C0D4B47B62F78754B2E1274E25A4CA1E7D720E4EFF12A4066631B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101889, "uuid": "18d0bb8d-4187-4576-a8dd-46d925edd140", "value": "768:wVoEN7X6F4mvqvgqW7NAma6eFDaamv2qBtnO+CPKWgrqmK:wVBX6F4mvqvgqW7NMuaYt72ezK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771101889, "uuid": "e7e549a0-54c6-41fe-8c3c-88fdbdeb0584", "value": 61076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771101889, "uuid": "2d1d487d-6541-4dd0-a42b-b4b2d406fb27", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101889, "uuid": "99d5dee7-240d-45a7-bbee-66b3fc05ffe6", "value": "kwari.spc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01cdeaf8-09e6-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771101890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101890, "uuid": "040eb6cd-88b7-43a8-8216-dc2207b8ff51", "comment": "Malware payload (Mirai)", "value": "8153380e0bff2d837a7525e42ec784e0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101890, "uuid": "9b83ce33-fc52-4707-909f-75f1276cd02d", "comment": "Malware payload (Mirai)", "value": "f99b7c76f81d4d5bfd4fbccf674b58418f8bf0019e8f6c5d5f30320e913a703a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101890, "uuid": "19b8c91c-61ff-4723-a214-e1940aa66f4d", "comment": "Malware payload (Mirai)", "value": "c973363a8620ac6ca25a1bff15180e8a57e951e0", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771101890, "uuid": "d84e9cad-ccd7-4c1b-a4dc-08392a08fef7", "comment": "Malware payload (Mirai)", "value": "48aac45ef7886108191363bb011032c030d5212d60e6f4648e918595773fd93c02cf9ddea9444eb064ae2ea1589c525e", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101890, "uuid": "fd3b3b20-3cfd-47d6-8d23-6ffb1765596e", "value": "T1B8337C67D82A4D98C5194278E4688D391B13F408A2973EF65E8EC762501BDBCF60E3F6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101890, "uuid": "ff7b30bd-b5b2-4b0f-b127-b51327ea6245", "value": "1536:uaok/dgBORYzVUsvbE0Q/EFDBiSurCei:uG1ftsvbE0Q/wDYSur", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771101890, "uuid": "f8542acf-0334-4263-8c49-f31a65c1b19e", "value": 51968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771101890, "uuid": "458be8c7-ad35-4ea3-ad64-85fb987fb1af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771101890, "uuid": "79d60b6b-35f7-43cc-a137-c2724e7a3d17", "value": "kwari.sh4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a255921b-09a8-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771075530, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075530, "uuid": "8e12396c-c341-4c88-80d3-b6d56e03ef50", "comment": "Malware payload", "value": "245926d976c375993bfb61c0a18696d7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075530, "uuid": "e28c3e3e-d684-4415-88d2-2ae31cbd0de7", "comment": "Malware payload", "value": "f9eb68b91c96aba18f84fe595ad2772a8dd0e9e5223e8c2088c8a3e2b97a2b0e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075530, "uuid": "5947d2f1-9a42-4257-991f-14894eb98534", "comment": "Malware payload", "value": "a10970c6dd3d468975d82c79ae5d7532a51d2be5", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771075530, "uuid": "ebceb183-c4cc-4b0b-8f50-5c6d8d3b0a7e", "comment": "Malware payload", "value": "c8eefb1be8e1e21da3b48829803b3a98c3fd46a8e02e6bf415703eabe4700e2c65ce961c733c86962e03d3ea2f2b9b58", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075530, "uuid": "265c741f-40b3-4548-b7f9-a29e45e0b481", "value": "T190E49F21B5C68076C2B323B19E7EF76A9A3D79360336D29727C82D315EA05416B39733", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075530, "uuid": "1e3b7774-bf25-4070-a951-e8834cfafc35", "value": "996ba3d23338d63c8825c8141d814e4d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075530, "uuid": "a6f97b09-2995-4767-ac5d-c4320b06e4fd", "value": "12288:xhkDgouVA2nxKkorvdRgQriDwOIxmxiZnYQE7PJcbNyp:/RmJkcoQricOIQxiZY1WNyp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771075530, "uuid": "317dd670-bf01-46b2-a534-6cb18be8536a", "value": 662815, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771075530, "uuid": "46a5085c-3d8a-469f-8573-15141fa7ad0a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771075530, "uuid": "f5b5abc4-f21f-43de-b916-de3d5ee34b65", "value": "f767750fdcbc4023b8ca4cadb9ef67e131b2b113", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91bd39d6-09ed-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771105138, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105138, "uuid": "6a1f9434-c14f-4f4f-98b9-0224dcfb5d80", "comment": "Malware payload", "value": "aaeea8d32977c74cfcb06ee5fdbb353f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105138, "uuid": "916b02a7-475b-49c4-8533-7435bd88dfae", "comment": "Malware payload", "value": "f9f2108e4aa1ff6f324d30124769b2b8c04d78de17ff93dddea243bc7a291f4c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105138, "uuid": "eb684487-9c4a-4e2a-bb21-bb69d35afa77", "comment": "Malware payload", "value": "7aeb441a6905c474c55e174663eaaeda2ed39429", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771105138, "uuid": "5d95f3f6-8d09-4f9b-ba2a-c7eda44baceb", "comment": "Malware payload", "value": "26368fb121af5a4b51ba81b42f86e083a578875ffae0dbdb07b8b9b519c88aedc392183c7f30e1e0f432a1f8c193cb82", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105138, "uuid": "d65d2a01-3f32-49b1-90d3-72c627d4d69b", "value": "T12EA32B52BD52DF13C5C621F6F7AE06493B126B6CD2EA3142ED247FA0678A4DB0E37211", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105138, "uuid": "9f9e3f3b-4e80-423a-bddd-5b386d3802f0", "value": "1536:FUsNUGPSOW5o87kmsGmDh2Dvbl6HVjeG4DgcNOON2+cqUBYEhqMSNrl92oSi:FUsNj01DKh2nQHVjeG/Q0qasrG/i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771105138, "uuid": "41ca8b50-9497-453a-9de9-16ebc7c04ee3", "value": 105624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771105138, "uuid": "479f1ba5-0c0b-4f04-ad15-3c5e19d54c26", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771105138, "uuid": "4de73123-f7ba-4d84-a300-1b1ee705372a", "value": "data.arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "768fcbbc-09a1-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771072450, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771072450, "uuid": "a3a91177-c010-49ba-bbc2-b17bc8bc72ed", "comment": "Malware payload (Mirai)", "value": "5092967ec7f0ebc3b790c4957750f884", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771072450, "uuid": "4ccd2eae-1758-4791-a876-2f7ba79178b6", "comment": "Malware payload (Mirai)", "value": "fb8c72ecc903de60a315a647996b49b9132d1d367b84e7b38de67325217d55fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771072450, "uuid": "72b013ae-e2b3-4736-bd2f-0ab495e9f2f3", "comment": "Malware payload (Mirai)", "value": "2c361bdffc7178b6dda151725c6a470aaeceb65c", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771072450, "uuid": "6c740ec0-61d1-44fe-a13e-35068afcfeaf", "comment": "Malware payload (Mirai)", "value": "537d5e70e90014659aa12f44d050ab9dd1bae2ce229fcf827cba325abac97fa37dcd89ef0db39a4418e98c9b5ec7eac5", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771072450, "uuid": "120d9744-18ac-4faa-b4dd-4916cc09f464", "value": "T1E0B3AF87B2907ABEF0A45E3FC4135E26A6259F705583273D71FDF9906E3A3503292E42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771072450, "uuid": "11e81a43-0885-47ae-82e2-bcaf711f830f", "value": "1536:tdNSXAeuUGWnKYUqwaJ1Xq/3A5hcB57laZeCNjHWBOdiyWT15Ov6fHzk8rSR:t3SrlGWnKTU83AQB5A5Liy36fYUSR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771072450, "uuid": "0ea583b0-5f5d-4052-8c77-6603f7b516de", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771072450, "uuid": "1664be99-97d9-4b1c-a0a2-4abec2a41431", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771072450, "uuid": "e3bec34a-f76e-4652-8419-1f587bce5e2a", "value": "xnxnxnxnxnxnxnxnm68kxnxn", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc4c4809-09ff-11f1-a129-42010a9c0007", "comment": "Malware payload", "timestamp": 1771112994, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112994, "uuid": "19f3cc44-ef67-4c19-9db5-5798ba4442d9", "comment": "Malware payload", "value": "063c0a161047cee141ad6b3f84a92b53", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112994, "uuid": "0b0a46da-903f-4eaf-878c-082d1da9e7a6", "comment": "Malware payload", "value": "fcc68fa324c98554b43c87798b630a81ed2a6df24387a9a0ab3b798f4ac9b66c", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112994, "uuid": "d8f6c8ad-0a4e-4cd5-b5c1-4e8d85b862bc", "comment": "Malware payload", "value": "4022647a48481e6f5c3b5d389f15da19921e41c6", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771112994, "uuid": "ede0cd41-9f8b-498a-9c25-8e38d0229ea2", "comment": "Malware payload", "value": "6ac05f166bb0fc7bff5aa7f1ab7b00995615306dcce530cd8d148b8c658377662b1be6847b3681cbe85d3228c832f782", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112994, "uuid": "92991332-cf72-412a-8b8f-ab16d32bca49", "value": "T1E467BE12BBEFC1F1CF4E92B8085A9B1E4136A9454B605BC7E24B7B1F1D312C17C76A4A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112994, "uuid": "3033262f-8f93-4e8a-a8d5-3d3bb0cf9f46", "value": "393216:hSsg/0wo43Jsv6tWKFdu9CPr1ZZMtoRaZn0DeAkdJQPsWcLvS:hB20WXr1Zk/iDgJQ0vS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771112994, "uuid": "6fae9ef6-1517-45a6-98ef-3eee31cc74ef", "value": 31981052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771112994, "uuid": "255c3060-b0a2-4d7b-b35b-8a7314900e1a", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771112994, "uuid": "d95f0c0d-2597-4704-b06a-9ca607c1a5ec", "value": "SecuriteInfo.com.FileRepMalware.27253588", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffcae761-09a5-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771074399, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074399, "uuid": "d97fc6dc-fce2-4383-a3a4-f00d06a45ab3", "comment": "Malware payload (Mirai)", "value": "8f5dcaf5c98fa349d8c6f093f404ff87", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074399, "uuid": "f9fd5e4c-3863-4588-bf1d-c601c774e45f", "comment": "Malware payload (Mirai)", "value": "fe77e80c4d156ec1cf5e831cc6c4bb7cca37f15cc19ac7e360ad5b7aa2f6fede", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074399, "uuid": "56f392f3-cade-4af9-8fd6-2ca047929655", "comment": "Malware payload (Mirai)", "value": "9829fd4223e266ee0869a681d34a91e0b9f1ef4e", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771074399, "uuid": "f4ca98a8-33c5-4066-9721-c13b50076264", "comment": "Malware payload (Mirai)", "value": "d8394d4762cb177c44b6a29da90ea78664c22d09cc4584f08841507b38c25e9904520de75dee70979143d3f8336ab2dc", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#DA83B1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074399, "uuid": "ab2a272c-9882-4be9-ae4b-faee7c04cca9", "value": "T1AA6196F693D246305EA55733A378A904BD89E1F3B0862E209CFB25BEF84CE047005E97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074399, "uuid": "030bed85-bdb8-440c-9869-820c86b8b0ff", "value": "48:i+/RC2Qa8tnAm+ukOo2VYhA9djRgkLthJmrAuUqTrGTV/36cdpo1:ilVF9h5F1LZmsmK13dq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771074399, "uuid": "4ca79369-736f-47ef-98a5-0aa6fa62770a", "value": 3183, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771074399, "uuid": "74c92b1a-d5ee-4914-98b8-27a7714a22fd", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771074399, "uuid": "0f24e0e7-281c-457b-985e-a90fb5afe4e3", "value": "newreaxe.sh", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b331efdf-093f-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771030461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030461, "uuid": "b33b479b-0f90-4e2e-a733-8248c0ab2cbd", "comment": "Malware payload (Mirai)", "value": "7baf43cbfe55694f4a2b2217255e1998", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030461, "uuid": "d070dc54-1351-4023-9d9d-f456e11d4ba9", "comment": "Malware payload (Mirai)", "value": "fed408c881008e7394077c415b0f90d5af274585c387af1feb34aabdc574b02f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030461, "uuid": "0aaf503b-a70f-40df-93ec-895007eb26f5", "comment": "Malware payload (Mirai)", "value": "b73152d0374e9e08ba419ffeac583e598b2a2583", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771030461, "uuid": "63313944-9bd6-4035-9b6a-29f4f6bb88c7", "comment": "Malware payload (Mirai)", "value": "1969a3ec95af5ac922889ae45e6ca5582780ff697644a9bc1d3f8aaa630eea5c307de188425eff11d88cf7ff912b9cda", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "UPX", "colour": "#67320E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771030461, "uuid": "f09c2f84-49bd-49f4-9e95-ae8f72dda76c", "value": "T1E1B2B0CDF9687449CADD6C7837EE43718F88F2C8215B5E5E970288DC66924BB76CC064", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771030461, "uuid": "856f9b45-630b-4dcb-b20c-bf3829cd40b0", "value": "768:3AZwaSgus30qQ8Dlc6UW82QG/sVwCqyVOWn:wcguZqWJW1EVzqyVb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771030461, "uuid": "26c00be3-8a1c-4ffd-a1c6-25cd3ef050d0", "value": 24968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771030461, "uuid": "172a1800-b008-42a7-af15-d5956ba224bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771030461, "uuid": "bd3321c3-2eb5-4704-a33e-0e32c4265c4f", "value": "boatnet.mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e79509e1-09aa-11f1-a129-42010a9c0007", "comment": "Malware payload (Mirai)", "timestamp": 1771076505, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076505, "uuid": "d70eab7c-a3c5-4bd7-84c7-809794f8a1ad", "comment": "Malware payload (Mirai)", "value": "18de645e2e88b518aeefb31e64a602e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076505, "uuid": "bced9677-3639-4ed2-92bc-2e751b719a9f", "comment": "Malware payload (Mirai)", "value": "ffa685241743e9f829d362231384bb59c66af15998021410811cd52b82724f3f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076505, "uuid": "013cd92b-9a4f-455c-ac04-1ef816590659", "comment": "Malware payload (Mirai)", "value": "db73951914c3e5164e098f26a2fbceaa9b7c4032", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1771076505, "uuid": "56319901-c85d-445c-9114-23fe1e3542e2", "comment": "Malware payload (Mirai)", "value": "be920adb7e318b8e84a174839c958dca1ddf51a44238761e04758eaaae075affd6289cbdd5a822b1b9bb2283c7a18e84", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771076505, "uuid": "23459ec1-dd6f-45ba-8b37-49088e3f9ddd", "value": "T120145A47EE890EDFC45BCEB086BE836B19E7559B48D2B2F4487CCC0C795D28945E3688", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771076505, "uuid": "e0e179ab-6df6-40de-aacf-1d3888146864", "value": "3072:mFatDK7qGRQ0SzRA21TxEZl4SguEDqwB9btAin4yfOsMTgKqv/:bzhtrETSDqwBFtAiF9MTgKqv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771076505, "uuid": "1a66e679-6f9f-428b-bcf3-4170ec4f9d84", "value": 197192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1771076505, "uuid": "c53ec79f-6606-4a4d-b221-611a2f6b8268", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1771076505, "uuid": "3b760249-fec6-4ad9-b5d8-24019102d72c", "value": "data.mipsel-uclibc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ] } }