{ "Event": { "published": true, "date": "2024-03-17", "threat_level_id": 2, "info": "MalwareBazaar malware samples for 2024-03-17", "timestamp": 1710720182, "analysis": 1, "event_creator_email": "bazaar@abuse.ch", "distribution": 3, "uuid": "f0c1553e-b9de-499a-8c49-58b98208b75b", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70649270-e497-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710704957, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710704957, "uuid": "bc7a6c86-f6f2-40e9-85c6-4a02b9e12ba2", "comment": "Malware payload", "value": "dec66aaeb59703d474d31a29fa343e38", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710704957, "uuid": "5ab99c6a-12ba-4050-b4ff-cf4a4489be1b", "comment": "Malware payload", "value": "01bee747d7db18ae7d08f9a3e0fdaf20dc126e0721082ab33e5cfc53031835e7", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710704957, "uuid": "af80ad9d-6fbe-4694-8b47-9b23e0031a35", "comment": "Malware payload", "value": "a305f283a16f3c5ea168c6ac7ca6083e779f8221", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710704957, "uuid": "68d1fdff-7da4-4eec-b661-c8ebd71c0f6d", "comment": "Malware payload", "value": "000cc39ee3e7699169eacf5e7081d962279ef30490573698d3c33f474f492e243d800bfd25644c5e9f8d3d9d3887cdd3", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710704957, "uuid": "d9adf75c-335a-4f51-af45-b74265d9b216", "value": "T101B60187F75C9A2EC47741B2CC6A5232D66E4F118A8397876848372D38B35E44F79BC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710704957, "uuid": "be0d13f3-c320-49b5-8605-b72332b550dc", "value": "196608:PdnX0ovSxz96pfwB1mXFRfPMjL/BrvAvrA3h6v4DkgXKi3:Pdnkoe50qk1PM2vrA3Qqz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710704957, "uuid": "a7e13ee9-e2fe-43b4-b5a0-a6c4dff2933a", "value": 10592665, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710704957, "uuid": "ae931b7a-aae4-4fc2-acba-9499e02a2310", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710704957, "uuid": "1dc8a89d-d726-4723-8b9c-413655b6e40e", "value": "app-release.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2f1c608-e437-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710663810, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663810, "uuid": "cd1645a7-b551-4fe5-9115-117f621a7aec", "comment": "Malware payload (Mirai)", "value": "440a5e998ed7a79bdfa79650760b0dc6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663810, "uuid": "171cbb5e-0a71-4315-8312-a918e2b55b1d", "comment": "Malware payload (Mirai)", "value": "062e297a4c16433ab34fd7169998554f07edbc3c87af1fd34b18b7f6241cee93", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663810, "uuid": "74888ccc-8997-4d37-b7d6-28cc4107d2d6", "comment": "Malware payload (Mirai)", "value": "2dfe35049ea232370f9f5dcbe88f398a39f6a3a9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663810, "uuid": "21df6cfd-ec4e-4fe4-b301-65be17bedaa3", "comment": "Malware payload (Mirai)", "value": "27d51d35b97d2aefd4e442b17eb8463a83e2e740f7b2e64c2ed8cdfccc46db598eb4b1965fcc4b7fe84d4016ced9698e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663810, "uuid": "a027eb11-0603-4b8d-9f84-0daffaa6de9b", "value": "T111D2F685BC919A26C5E423BAEA6F018D3321B3E8E2CF3627CC254B457B9553F0D63B41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663810, "uuid": "4c117578-c59b-40c7-96b9-4ec689a43b54", "value": "768:Oo2T9m0hsZN8/29/dc1pUug1mQ4MNgk4avPSmhLUnyN:4T91OZvBo+6Q4kgk4aHS0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710663810, "uuid": "1f257b28-577d-4b27-8add-6560d860d58b", "value": 31008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710663810, "uuid": "c8247ab8-e6f8-417a-80c7-0b035af6652d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663810, "uuid": "6ac57c3e-f123-449b-8d94-805fc08ac45b", "value": "440a5e998ed7a79bdfa79650760b0dc6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7a9d27b-e461-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710681991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710681991, "uuid": "a5b6ce2a-7d3a-4e66-9ace-8b465ce57abd", "comment": "Malware payload (RiseProStealer)", "value": "c9eaae81c7280390e3d7303528ec2fcf", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710681991, "uuid": "4f310662-0c50-43ca-a7bd-0937747c8f7f", "comment": "Malware payload (RiseProStealer)", "value": "06310ac4f0f5bd745ef86d8c4b7b21cd01a080b139171e29494db1eccb3aa88c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710681991, "uuid": "24a04f80-5c83-4315-b862-a9de04ed53a2", "comment": "Malware payload (RiseProStealer)", "value": "a23a6bfc3b7549b5396697fcc922cc605077964e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710681991, "uuid": "ee8713a1-f0b7-4653-b65f-a4d2b69ce3a4", "comment": "Malware payload (RiseProStealer)", "value": "3c6798bc45df38c696229d2270d5f43a462f00905abd1f4f2ed2cb046f17d8653fd05901b445720258999c306d914e08", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710681991, "uuid": "dfb845f6-4155-4110-a8c6-e8c11af1bfde", "value": "T109F55BA2B94A72CFD49E13788567CE86597D03F9473509C3B868F4BA7DA3CC111BAC24", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710681991, "uuid": "e06f6fbf-abde-4d76-802b-36ee5cac6aa5", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710681991, "uuid": "dad1cdd4-5b74-4fe3-ac94-8ac38402a103", "value": "49152:7XN3u+RkDMYW0cNwFCM/yOIj82//+imnvdyjjVlbiXEzSwnN78NR:jUTVQ6IM/yrj82//+im1yvVlbiXEuem", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710681991, "uuid": "1ed90ebf-9116-4199-ab92-05ade296efaf", "value": 3356672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710681991, "uuid": "e1103799-446e-4031-b0fe-3a670f8d06c1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710681991, "uuid": "5e6f4329-2d53-4965-b63b-70830d79e620", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92dbcf7c-e45e-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710680533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680533, "uuid": "764ce0e8-3c26-4d5a-be14-db260b51521b", "comment": "Malware payload (Mirai)", "value": "2e5913abaae679095b8673639bbc0668", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680533, "uuid": "6489b697-e924-4a58-8dfc-b391210ceb41", "comment": "Malware payload (Mirai)", "value": "06820bbd9f1e69739e9af2a446cf71bc4c8d4eb15cbf8771fca5b0c06a906a33", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680533, "uuid": "84e13ea3-74e3-420f-9649-b7bc19a80464", "comment": "Malware payload (Mirai)", "value": "3ec02a636e5c7ce0560d5def5c998a539ef6d736", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680533, "uuid": "a5ded873-e200-4d53-a4a3-a4f166bd4a4f", "comment": "Malware payload (Mirai)", "value": "8b420f3e0f911342f6f477e0ec6bef2575f82b5d09d68983bd163ea46d243629019ca0d1e0a055e2cafd5ffa62ac85fb", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710680533, "uuid": "0b75411e-16a4-40a1-bef9-33ff43eb648b", "value": "T113631A91B881A626C3D1537BFA6F018D372457D8E2DA33128E351FA0778A91F0D57F85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710680533, "uuid": "ddb8479f-5d59-4ed7-8e87-af312d47808a", "value": "1536:+e3/ExW8nIDGxuy1+DvkYxAaE78fhW957xtW:+e38M8pWAaE4ps5rW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710680533, "uuid": "d2c9ba3d-6372-4dcd-958c-f21db0727c15", "value": 72492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710680533, "uuid": "bd5c9aa3-bb21-47d9-8960-9a0fb2bd6637", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710680533, "uuid": "0eabcb54-5dc5-4f5a-936b-cb19b56e5239", "value": "2e5913abaae679095b8673639bbc0668", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b08fa233-e465-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710683590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710683590, "uuid": "ed114254-c36f-46d2-8ddf-edb7e0d2f140", "comment": "Malware payload (Mirai)", "value": "ec17107e7451cf0f9a1b289aab078f80", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710683590, "uuid": "4d283813-8d50-4034-afd7-094f62cbfba7", "comment": "Malware payload (Mirai)", "value": "0915733fa9c4f553d3401fe325459dd625edd851f9deebd71d5fb0834d59cb3b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710683590, "uuid": "e594d49c-15da-43c4-9a77-050402089021", "comment": "Malware payload (Mirai)", "value": "fcf159a5a4521769fd5f71918a52dd4f6136bf8f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710683590, "uuid": "51be9c8a-aa77-4121-8c02-52267b6402c5", "comment": "Malware payload (Mirai)", "value": "95ae5b1d72ae1143856007c7416a9abfb17a07c3a0ef43bc5fdd53d7e957450224226a0e681801852ce31f7a1041b961", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710683590, "uuid": "12070bba-1cd8-4b4c-b3d6-3b7c1d170fe6", "value": "T1CA733A29B9391E22C0D0A57A20F78B11F6E627CE26F4C55A7D720E4EFF207406912BF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710683590, "uuid": "67aafbba-97e8-441f-ab7b-d574d4584401", "value": "1536:8biNJ+46rcnuWtOO3CNGMwApIUslWd6v868PzEaKTH:CiRyiv8JGTH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710683590, "uuid": "66c0ce62-e16a-4d81-8412-3ee30f8a0e04", "value": 75968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710683590, "uuid": "13f738e3-5ce9-4123-b8c0-a26b712b0121", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710683590, "uuid": "ba5e1ff3-3eed-46bf-9ca4-9625607d54cd", "value": "ec17107e7451cf0f9a1b289aab078f80", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ca9ec68-e437-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710663799, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663799, "uuid": "f880e883-d770-4de4-8b6a-c6a4d57d508b", "comment": "Malware payload (Mirai)", "value": "e54301b3cb013718d0658415d3463f95", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663799, "uuid": "ae6c94a9-651a-4a02-907f-adc227b7f23d", "comment": "Malware payload (Mirai)", "value": "0ae6c4ca3deaf1f600199a80d5e2047c154f602543ee741a70f43610d4d43aab", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663799, "uuid": "c454e97c-c598-4dc1-9900-1190594f8195", "comment": "Malware payload (Mirai)", "value": "4a0d0d52c6bed6934ab3dd01208587edaff3cb9f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663799, "uuid": "f297b979-60ac-418b-bce9-5b57be0b0280", "comment": "Malware payload (Mirai)", "value": "c82007d0c07535faedb3dee4f20a69195bd26676067c73adbc5bfdd1ae14841019bb91da91a964ddcba9fe4dbbfa70a0", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663799, "uuid": "6a3889c9-c777-4d1c-b7da-245c9ad4e8a2", "value": "T1EEF34C46EB808B13C4D22B79FB9F424533239B64D7DB23069528AFF43F867990E63615", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663799, "uuid": "6d9e653d-7af4-42c9-8b00-d46043c45360", "value": "3072:ndjOKL7fDF++1EaI06zsgZ0MhrmxcSUjqeaLzxM/9bLbAaia:n0q1EaI06zsA0QmiS6qeaLdM/9bwaia", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710663799, "uuid": "297de3ba-ab94-4add-bc96-ec9737555825", "value": 159367, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710663799, "uuid": "4ee3b400-f154-46c4-8909-79be583e7116", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663799, "uuid": "e8cb8c1c-9bb7-4b09-b4eb-558d98735bc1", "value": "e54301b3cb013718d0658415d3463f95", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a00cbd4a-e426-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710656504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710656504, "uuid": "23acda98-9089-45bf-b0e9-093b48e25b82", "comment": "Malware payload (RiseProStealer)", "value": "fced8bcfb4086ca32f77a41fb3ad8e56", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710656504, "uuid": "11626a42-a033-4c2d-b5f4-7b0505176f14", "comment": "Malware payload (RiseProStealer)", "value": "0bd849791686a13624f2f8230ac4319854e398f7ef9c31af88b415dfc8068b53", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710656504, "uuid": "5d4152f4-c413-40f9-88e4-3d323536a83a", "comment": "Malware payload (RiseProStealer)", "value": "c211a06c6cb380caf97fda53a1c089a3d63c893a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710656504, "uuid": "b7287ef2-52f1-47bc-95d4-ec4467dfe2ab", "comment": "Malware payload (RiseProStealer)", "value": "16c480eb89fc0f8fd711c1e61abe5cbcdefa6d410efa6331eb42c3d0fc544de6946badb1f7cfa9deddbf30aea93c73b4", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710656504, "uuid": "276b001d-e5fb-4afb-994d-0bb6b7be3258", "value": "T1F3E56BA3B519B1CBD48E17B8D467CD815D5D03BD5B2048E3AC68B8BE7EA3CC015B6C29", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710656504, "uuid": "18c24acb-ebfe-45a8-8dfe-b4cd163ed79a", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710656504, "uuid": "f6d982e7-1c49-475a-bd30-45e6e3c4121d", "value": "98304:b5HledxbSzK+i77NcB6rbJlkUXJA7bXWz0H:dlYb+FVx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710656504, "uuid": "f3a61568-5acc-4b85-95c4-1ce34ff5723e", "value": 3235840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710656504, "uuid": "5ee7a5f9-c81e-42dc-88ba-420908aa2861", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710656504, "uuid": "ab3579a8-e0dc-4a74-9a0a-05023dfb81c8", "value": "SecuriteInfo.com.Win32.TrojanX-gen.18528.8977", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bad07732-e4a3-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710710236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710710236, "uuid": "6b50ba85-9aee-4293-9c0e-030d367431d5", "comment": "Malware payload", "value": "a40f95c8f424fa4cf03cd7ff2a735c86", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710710236, "uuid": "1697d0d8-c9a3-443e-b7a5-6434fc613d6b", "comment": "Malware payload", "value": "0c91ff2aaea6a39f39bdebb800c1fccae6bbc572a4a739d050f7829c79bb9c09", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710710236, "uuid": "ded1b726-4e21-4b8c-bd1a-eb4f65a2a5ec", "comment": "Malware payload", "value": "11ed1da05062365417067aeeeb958ab47b3d5dbc", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710710236, "uuid": "6291b941-a36e-4268-964b-6e326a2bed46", "comment": "Malware payload", "value": "d47e96780631f523aab2bc7a7feb30f767e86588d3f8394df8dd23a10ea53d9ecc3e6db37958708009df957d7873ca20", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710710236, "uuid": "16d1c02c-a23c-447c-bee1-30c41057bbb2", "value": "T132E57DA2E54971CFE88E17B49167CF82995E82FD073109C3A81CA47DBDA3DC515BEC24", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710710236, "uuid": "7889ecda-3cf4-43c1-b8d0-b7349e983ef1", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710710236, "uuid": "047855d2-3b48-4422-bc06-bef2fb157710", "value": "49152:7XN3u+RkDMYW0GdZRUUYd1QBGpLgSuCoVI66KIk9i:jUTVSdZRUUYd581CaI66d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710710236, "uuid": "14d5cbc0-1976-4703-b562-fd61d282d132", "value": 3308032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710710236, "uuid": "6bebb142-fbf1-4ef2-939e-b5e1c8640270", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710710236, "uuid": "2cceeef9-0318-44d5-8c6a-4c02d0bfe431", "value": "SecuriteInfo.com.Win32.TrojanX-gen.873.30616", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a794f91d-e45a-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710678850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710678850, "uuid": "b9708b6e-24dc-433c-9331-462d668249f3", "comment": "Malware payload", "value": "9c9b67c1ce3f319eb22f2a25335d411e", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710678850, "uuid": "730f9329-d053-4374-9335-6a393e769e4f", "comment": "Malware payload", "value": "0e42a496d532c63cc4f2dae6af678e01f67723b6664b5deddc13393a12694be0", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710678850, "uuid": "f50e6de0-af2c-4138-a83f-ad9547ed23ed", "comment": "Malware payload", "value": "5d8acefecd355fb85daaee90fa412dcd6c5b7eb2", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710678850, "uuid": "b8ac2a9e-6294-4680-ae7e-9d2126599fb3", "comment": "Malware payload", "value": "67c38766583fccb7d5fbd5f1519e7de24b9de73357eea1d33aff9e213a8478294896dfe00b58133d1d8bc60ef55bad2f", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710678850, "uuid": "7bba3907-c884-41b9-86af-d9129c0b2528", "value": "T193770217F66ED816C8D2A13C7A2F43A273171EA09385A3532414B234BEF7AD54B397E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710678850, "uuid": "0f90350d-b8e6-4040-8618-fa2ae3dc0bbf", "value": "786432:Es5wqp6UmrWpqE+Bq92n9ywqtLsl2yUtzJZ7:mO6U7pk/n92LswtH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710678850, "uuid": "f4782030-613c-4c0f-86ea-002c82f7f7b2", "value": 32809326, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710678850, "uuid": "0b9a7524-efac-44f6-ad39-9c301205ef02", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710678850, "uuid": "5c6b5f30-153d-4bb9-bff6-bdb79298dd5c", "value": "Cool Editor_1.0.1.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9964cd70-e438-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664223, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664223, "uuid": "b7b2171a-c8ab-48ea-be5f-44b50337eff2", "comment": "Malware payload (Mirai)", "value": "3dd4baa4d1104f7e1c2205fcf7728c7f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664223, "uuid": "8707cf58-fa2b-4cc9-bd80-e81e8e0869ef", "comment": "Malware payload (Mirai)", "value": "1015a30e693f7d18dabdcd64cc68191d29580ba4840e76d7579c7e37650dc902", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664223, "uuid": "07d64916-81d8-43da-95f1-e4b39978abd1", "comment": "Malware payload (Mirai)", "value": "9822c02315d7cf434c24d22d941e8ca3798a13de", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664223, "uuid": "fa1cadc5-221e-4cb5-bc47-66681e667092", "comment": "Malware payload (Mirai)", "value": "89c57f0039f65d74a56e99737fd0666fec6443e0a4ebe2dde58928c282e5566124657f57fe4d9b3d40219b23b3083b6e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664223, "uuid": "74e84ff5-3d5c-44fe-88a4-03b9a9f0b79f", "value": "T19F13F795FC928A3FC6D0237AB76E2B8C37A567D8C3CF7213992017613A8611F1D22E45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664223, "uuid": "6bc1fa46-4fa3-4f6a-932e-018ae07a9333", "value": "768:qROiBx59I1e9+tMG50Wa4qLzHKOfjPrlzjDp6gv5Wod4iEkpiTPBHzbqcwfi:qrBxI1e9++G507RfTrlDp6gv5HpijBHc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664223, "uuid": "b7fc2521-5dd5-42e5-ba86-b3be007c5fee", "value": 43240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664223, "uuid": "19444569-47ea-4134-b5e2-dea445f15825", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664223, "uuid": "5533f761-f219-45db-b35e-fee8590d186e", "value": "3dd4baa4d1104f7e1c2205fcf7728c7f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc5e45fb-e466-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710684066, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684066, "uuid": "d4ffc3e6-e2d4-42ae-9ecb-bb9c5eba7b0f", "comment": "Malware payload", "value": "52059f6f9ca6e9b222a7dec65f70ba64", "object_relation": "md5", "Tag": [ { "name": "browser-extension", "colour": "#966E56", "exportable": true, "hide_tag": false }, { "name": "FacebookStealer", "colour": "#8B7032", "exportable": true, "hide_tag": false }, { "name": "FakeGoogleAI", "colour": "#9B9A75", "exportable": true, "hide_tag": false }, { "name": "pw-022024", "colour": "#688463", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684066, "uuid": "99f3db87-5821-4002-937d-934e19ca0a98", "comment": "Malware payload", "value": "115de20891b62253859962ec29b0b7676d9cba8d2bed68614727c0ff39dd886c", "object_relation": "sha256", "Tag": [ { "name": "browser-extension", "colour": "#966E56", "exportable": true, "hide_tag": false }, { "name": "FacebookStealer", "colour": "#8B7032", "exportable": true, "hide_tag": false }, { "name": "FakeGoogleAI", "colour": "#9B9A75", "exportable": true, "hide_tag": false }, { "name": "pw-022024", "colour": "#688463", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684066, "uuid": "31a6cfff-c42d-4d7b-89bf-27670f3c85b5", "comment": "Malware payload", "value": "7b403d3dd5b59414e9d28c11da53bb8f9838589a", "object_relation": "sha1", "Tag": [ { "name": "browser-extension", "colour": "#966E56", "exportable": true, "hide_tag": false }, { "name": "FacebookStealer", "colour": "#8B7032", "exportable": true, "hide_tag": false }, { "name": "FakeGoogleAI", "colour": "#9B9A75", "exportable": true, "hide_tag": false }, { "name": "pw-022024", "colour": "#688463", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684066, "uuid": "0e031205-be14-44aa-b408-0ad30c610d1b", "comment": "Malware payload", "value": "3705c9863b38ed4322f679194cac3bea6007dae613d581b84a52e54dde10cd7b2f20b643da8d2edfc3ffccf1c9c78d49", "object_relation": "sha3-384", "Tag": [ { "name": "browser-extension", "colour": "#966E56", "exportable": true, "hide_tag": false }, { "name": "FacebookStealer", "colour": "#8B7032", "exportable": true, "hide_tag": false }, { "name": "FakeGoogleAI", "colour": "#9B9A75", "exportable": true, "hide_tag": false }, { "name": "pw-022024", "colour": "#688463", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710684066, "uuid": "b9c5529b-2b3b-44de-9bd6-0f318cd32d34", "value": "T1EE84234BD8C50FE45A2F73F7C946FA06CAB1567B2906E0B0717A1C0C87A97CB05AD988", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710684066, "uuid": "7f7eba6f-deb6-4fbb-8234-ec9998861e0b", "value": "6144:pYRbgdDP9OtkniTXEeemWCtosLA5XAKGYxRJkZy/HdrsVqLiK0URD4/W8fYOxV5b:pY+dz9eXo+or5JiI/9rs/1eE/WFqVV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710684066, "uuid": "5b748271-ed70-4858-a9fc-80cb46e71db9", "value": 404248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710684066, "uuid": "dfa8482d-582d-4f6d-9074-10d8082495f8", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710684066, "uuid": "c1f647f1-129b-499e-bd7f-6ff222ae6f10", "value": "AI.Gemini Ultra For EU V1.0.1 PC.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c24c96a-e438-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664174, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664174, "uuid": "d29e2028-a157-496a-ad8b-befa17b419e1", "comment": "Malware payload (Mirai)", "value": "2e5b61d75206388bf62ac110c53c70c3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664174, "uuid": "1b1357aa-0a4c-4d2b-afad-e427a9f1c729", "comment": "Malware payload (Mirai)", "value": "14c0f50970661731f0d84663988bbde2c43295c65d72c3d2e77571e45c6a8617", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664174, "uuid": "3c1abdc5-abef-43b3-95da-cd0e4a30bb11", "comment": "Malware payload (Mirai)", "value": "7957807802a8d43c3576a3028bf6a4d08d6e1e89", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664174, "uuid": "8ef69a54-323c-4a25-bcea-5cb0fcefeb60", "comment": "Malware payload (Mirai)", "value": "e2e31b19a416f9c400a14b8d93fd9cad83dfc63b8cfd80e4af7be8820c38f798fc3deb90b4a3403382798f56c56fafa8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664174, "uuid": "9ddb4297-0312-4bcc-bab6-e50323debff0", "value": "T1C833811ABF650FB7EC6BDD3349A9170531CD641A22A93B397A34D828F24B24B45F3C64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664174, "uuid": "87edc2cf-82dc-4266-aa37-949ca54e55ca", "value": "768:MoS247Jivn5EAB4dCBOhKggZXVjea5Jte8ePXelqvDgwvCE9RBXi1lyC6qOI:MoSlJM5ZBdBOqlRFlmX7HC8nCv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664174, "uuid": "79fe9b16-8ed0-48b8-90f7-504d29ff0be1", "value": 50992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664174, "uuid": "205d66d3-0b03-4982-8be1-a8985a27aa11", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664174, "uuid": "f8f5847e-9206-42b3-b344-da0ebd60dd56", "value": "2e5b61d75206388bf62ac110c53c70c3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f905caaf-e463-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710682852, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710682852, "uuid": "ced26c71-140b-4973-a279-46061337919a", "comment": "Malware payload", "value": "fc4efd7d2f2ed8fa44976cbacd1c935a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710682852, "uuid": "001b873a-2134-4044-bf48-d505bb408e66", "comment": "Malware payload", "value": "173ee6871fed0a073c1d20f6d70fd9ea3d0baf3dd4f2ef47b0369aab5aeab4d9", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710682852, "uuid": "845da113-3837-4cd1-9e24-39ea21d7e8d2", "comment": "Malware payload", "value": "80b93e4b2ac85992ce2792c4df6b2fec14e37cef", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710682852, "uuid": "e525f6d0-26f2-48f2-8c42-02651982f896", "comment": "Malware payload", "value": "fa67c0c2856c8a46677042ab394f770c288d1f461a21b7b314227086f26305d9e4b57d6efeaf8a1e2219f374e8e63fbc", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710682852, "uuid": "209bd6b7-d55b-4e49-857c-cbf1027b971e", "value": "T11067BE2F71A4817EC10BC235C46F9B30E936F6992633C36B53B4C5A86F665A05E7E360", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710682852, "uuid": "69b0bed3-0efd-4ae8-9b69-0beadb5c703d", "value": "abf6e21e57f6eece0e799c572db55c78", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710682852, "uuid": "60dd9c07-5d8d-4e4f-9408-2efbe3f9ea8a", "value": "196608:55o3RUyRlhyC4g0BHrfDyBEryLgVP/x1AqfDj8IxMaUNSku39aIZ:55OHlUDPB/oaU+37", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710682852, "uuid": "493d7c41-246e-4e0e-a03e-d772e39018c1", "value": 32067976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710682852, "uuid": "1be96b15-02ff-4d7a-abb3-854eb06779d0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710682852, "uuid": "57d959a6-4e64-4d70-8680-0fbe0b744a6e", "value": "SecuriteInfo.com.PUA.AllSoftpad.17576.18149", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "506ef396-e440-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710667537, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710667537, "uuid": "038bb7ae-3988-49cc-8a79-61d8f35d7797", "comment": "Malware payload (RiseProStealer)", "value": "811786592c4ef2bfa822d85b30d07ec1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710667537, "uuid": "fbc5ad0b-0a2c-4236-be65-35251a190076", "comment": "Malware payload (RiseProStealer)", "value": "182b644099598c9330e5f39eeb643031f6d9b10196f0028ec6e65bea108b692b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710667537, "uuid": "8b00d272-e644-4185-9b55-be5112460efa", "comment": "Malware payload (RiseProStealer)", "value": "2d1eaa386d8172149b9271af08ce4f92f9a4563a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710667537, "uuid": "48f33a7b-f089-4533-8035-22b1138649d8", "comment": "Malware payload (RiseProStealer)", "value": "2f736c9188cc9725ffdcd36e6ca2330f1a1549feccb59c0f50b208bd82b178a7a580a77ac086b9cecf1f2b1c31395cf9", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710667537, "uuid": "d07f7073-8cdf-452c-82e0-b7e1620b418d", "value": "T1C7E55BA2A74D72CFD48F23744467CE82596D82BA472408C3A85D7DBF7DA3DC212B9D24", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710667537, "uuid": "1901262e-2988-4521-90d6-8e45c3267664", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710667537, "uuid": "3ec0c90d-19ac-4a23-bc31-28cdd0ddbdf3", "value": "49152:j85HXSd4eOzbmhOiL5BNnyawUYVoEKs8Qd1uD2D3Y:Y5HledhOiL5BNyxFVZP8Qd9D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710667537, "uuid": "f51d148a-00cb-49e5-8009-db2d4d87c5b1", "value": 3245056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710667537, "uuid": "3b73da3b-fe38-4f44-9e87-55d0ade6c132", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710667537, "uuid": "fafc8c9f-f397-465a-a362-e1d672eecbc8", "value": "SecuriteInfo.com.Win32.TrojanX-gen.28557.29058", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a97834d-e47b-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710692867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710692867, "uuid": "f1c74502-586a-404c-abc2-536be8ae8f2c", "comment": "Malware payload", "value": "ad56f5a3b392d24540d49db4233238c2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710692867, "uuid": "3cb75f35-bb06-4cff-995d-843aea7347ef", "comment": "Malware payload", "value": "190d883e58943256a7fae3d42a688b12f131bbbde9f72e89fc65b4000c7de503", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710692867, "uuid": "83c5ec52-d657-4e25-82f6-51385a957e5e", "comment": "Malware payload", "value": "1c6a44a9ce425bb90440384b2e1ae055b1fb6ab3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710692867, "uuid": "d5e237fa-92e3-4c57-92e1-3320812851ec", "comment": "Malware payload", "value": "604744b10664bc9e631715b9d4dd3999d7117262d317b9329645ad60f1e645502da89c1eac527754866181137c79f2f0", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710692867, "uuid": "0486acb9-5223-476c-a22a-720f1e2ad2b8", "value": "T1B2A63379630638D8E85A813BD4C2C43166927CD603A6A2771FE42DAF3ECF7E06E35651", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710692867, "uuid": "f8e0e290-e112-45a4-91e7-62d54ca0ebcc", "value": "bae3d3e8262d7ce7e9ee69cc1b630d3a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710692867, "uuid": "9cda89b3-7f6e-45d0-91f0-f27c98933a81", "value": "196608:unmol91LZqCdQmR4uErSEEJw/aA0W8/LV2ckfF1zvbZo6a3:pOZddQf+9JoaHW8p2rz1Pa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710692867, "uuid": "bac74122-5c2a-42c1-805b-fdfbf6f5e3c1", "value": 9521695, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710692867, "uuid": "bdb6eca3-3df9-4398-ab6f-ae8a3428bbb5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710692867, "uuid": "7aa72a61-db3f-4555-b974-40055fdac9ba", "value": "SecuriteInfo.com.Win64.Evo-gen.7808.9614", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d9d94bc-e49a-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710706214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710706214, "uuid": "1360f3e1-a3da-4e3e-8762-8d38f4301f19", "comment": "Malware payload (RiseProStealer)", "value": "211ee41161d41ca62e487ac469cf6814", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710706214, "uuid": "576602cc-1722-4668-83ae-6f6345ac17fd", "comment": "Malware payload (RiseProStealer)", "value": "1b7aabba9333a6127cdce8d0045f75a482d10656842fb8f8b8d2c0febaa90fd0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710706214, "uuid": "28101560-8088-46c0-bc7f-273d682bb740", "comment": "Malware payload (RiseProStealer)", "value": "4baecd9a71bb97c847119d4e59a4e0c9eb3a644c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710706214, "uuid": "33b48683-2e99-4c7e-8162-5aa0b0d42d75", "comment": "Malware payload (RiseProStealer)", "value": "ff15e31712499aa4434322bcb636160de925d2b675e96bd432f66f7e3f2d24ba914a44b78d33a73a35343a8c492f092e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710706214, "uuid": "3e42c4af-2414-4099-9ec7-f592fe8b5c72", "value": "T18CE53A91F40571CBE48A27789667CEC2595FC2BA472448C3A89DB4BB7DA7CC811F7C28", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710706214, "uuid": "21d389d3-954b-41be-9431-f6b4abedf0b3", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710706214, "uuid": "09e489df-d1b4-4efd-9a2c-a3d410d6d019", "value": "49152:y7ksW7d86orJAoyd2AsaCC4pqhire6NiNQOxf+:y7kt7u6CWoyd2PaCC4pRreybOxf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710706214, "uuid": "8face20e-654f-4b7c-882f-aad843528791", "value": 3187200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710706214, "uuid": "ccb89cbc-7f6c-43f9-8c78-4652b787fed2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710706214, "uuid": "d889576d-bb64-4c78-8607-5c03648b40e3", "value": "211ee41161d41ca62e487ac469cf6814.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "865c5fb3-e437-11ee-a120-42010a9c002e", "comment": "Malware payload (MooBot)", "timestamp": 1710663762, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663762, "uuid": "43a6fa86-1580-4a69-8706-c8c677976303", "comment": "Malware payload (MooBot)", "value": "e11fe79f723dba25d68d9055f664915e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663762, "uuid": "a46b3da4-5668-43c7-a821-abfdaa18073b", "comment": "Malware payload (MooBot)", "value": "1c293b89448c0af53d9427fff98ec3ac0dc4d40acfeb898f670fbfd569edb338", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663762, "uuid": "3d319cb9-28e7-4c76-bcf6-1544d9636e5f", "comment": "Malware payload (MooBot)", "value": "1850048b1c456e54c2fa225257d5812dc323b097", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663762, "uuid": "39ff3e9c-c568-49d4-a553-b7a486083136", "comment": "Malware payload (MooBot)", "value": "0793f0740c150539ffb5f53c9c7d1fa8fdd431698cc09992ccca3eccfa10dae86e1232bd37a59a51a999291e775d84de", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663762, "uuid": "89f519e1-478d-488a-a84f-e0c99629f2e1", "value": "T12BE229C6F953D8F4F81206742033EB329B76F03A2159ED97C7999932ACC2A41E5072ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663762, "uuid": "11fea51e-990b-4de0-abbe-4f7cc6e8e3c7", "value": "768:nH723w+JzxiW6uDkKRF2CWLQ+jrCzg9dNcnQyBeeu2VUE:nH7AzJzxiW6uD3FFWLtjrf97cBBeePVZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710663762, "uuid": "42b1e6af-1723-4d9d-86ea-de3ba693b070", "value": 33696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710663762, "uuid": "13c233da-d1d2-4abd-93ed-8317d1a66444", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663762, "uuid": "7854bd9d-375a-407c-8f07-e48f881ee012", "value": "e11fe79f723dba25d68d9055f664915e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3dd4c31b-e473-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710689410, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710689410, "uuid": "0fd897f9-631d-4fe9-9046-084f196d3488", "comment": "Malware payload", "value": "fe62ca2242a995a810ed2d527bcf4ea7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710689410, "uuid": "c5e62c0c-974f-4f6b-b095-8a99f1d56141", "comment": "Malware payload", "value": "1e678145064e31b0d17afa1f0ea21fcdbcd2f7cd1a741be28b8bf6ffcddead45", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710689410, "uuid": "aae36ced-fb26-48d5-9830-29fc7b51c186", "comment": "Malware payload", "value": "b7524ac4004cb94e1975a7f2d5ea4f53ac962146", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710689410, "uuid": "5d207207-98fe-4149-a0e6-f0f71f0d1fbe", "comment": "Malware payload", "value": "05c3a18c74d3dab8bf49d6754ab8aba8b6c682d3b5aaab50ec5f04f64d6b486addfed92eb36d026253fd2238653f5d03", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710689410, "uuid": "cd1e6169-c51c-49ce-8e11-a50e49c8d8f7", "value": "T18B96334DC629A45FCE0FFD33EBD9553681A2BC5BAD24BF1E832214960F2323D572254A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710689410, "uuid": "becab9c8-f402-442f-a693-dc4ccff4d843", "value": "9d6872d1f450876f7f0d8dc687f29c79", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710689410, "uuid": "f0f670ea-27bf-4ee7-9f51-101da2bafd6a", "value": "196608:ba6D7lIMnpVoMTNcyBdJpq+aaoeDDbwSj6kb3WcR0V1BDr23MtdH:bX7mmpK5Abq+aaoeL9j6cW20jNreMtdH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710689410, "uuid": "a8e35fe4-8757-433c-ae20-40972bb89dcd", "value": 9048064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710689410, "uuid": "a3184b78-0f8d-43a1-af3c-46c46402ff73", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710689410, "uuid": "8f730b93-eb1c-4090-9297-1a910939a8e5", "value": "SecuriteInfo.com.not-a-virus.Downloader.Win32.Agent.naxe.3017.1860", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "361c1905-e472-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710688968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710688968, "uuid": "df028b01-cbe2-466a-bccf-a98f1f71b546", "comment": "Malware payload", "value": "bd15134c5a5187705599dc5958855753", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710688968, "uuid": "3a66169f-144a-4084-b90d-d0688f30928a", "comment": "Malware payload", "value": "1e71bcb4133949eaa1bead27b4e01f03f7802c6b92f61acbb6b8d7c8faf419d7", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710688968, "uuid": "5ba89ab1-85d5-44ac-8f9c-8c3a009338d4", "comment": "Malware payload", "value": "9782f2d27bc52bc0210c26106a78ded7fa98f5e1", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710688968, "uuid": "5d4454a5-4219-44ba-b626-b07966cea0a1", "comment": "Malware payload", "value": "5bb21ce6f831d6b027dc123f9850c8e20ae81c30db8039e681c79d8e56b324dad37f655b727930b5c89b0719f31a43af", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710688968, "uuid": "86778180-0ea1-4f5b-b93e-468015b35980", "value": "T1570523606549AD21C481807274648B7FCFFB8D7FA3D4AD82B729ED5E3953784893C2A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710688968, "uuid": "1d446c8b-810c-4114-ab30-159d18c20ba6", "value": "56a78d55f3f7af51443e58e0ce2fb5f6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710688968, "uuid": "69fc743c-ebef-46a5-8707-40a397dc6bc7", "value": "24576:4bXDnGdlsOnEcSDuGm2shUlWRJ68DU3fkW+NebDEQ3rqzoB13n2u:yzGlsOEvDuGmHIWrDU3f9MWJmzo/2u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710688968, "uuid": "c6168ebf-b4a9-48b6-8af0-0062a3d7e959", "value": 816304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710688968, "uuid": "a0422a5e-1eb6-49ee-bdf1-0e8156186309", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710688968, "uuid": "bafd5ad4-e0d4-4cee-9584-528e8e8f5a99", "value": "bd15134c5a5187705599dc5958855753", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c4ee36f-e403-11ee-a120-42010a9c002e", "comment": "Malware payload (MooBot)", "timestamp": 1710641438, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641438, "uuid": "443f8e2f-5c35-4a99-938b-1696bdb506fa", "comment": "Malware payload (MooBot)", "value": "4ea4efe79cdbbe2c97059a8af537e91d", "object_relation": "md5", "Tag": [ { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641438, "uuid": "a1bec43a-9699-4467-a700-78cf8890db30", "comment": "Malware payload (MooBot)", "value": "1ed62720535f9129ce45fc8b4abb077b5e1470cb288357d2b429bbc71355cb22", "object_relation": "sha256", "Tag": [ { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641438, "uuid": "c3a23e7d-a972-44ee-a8a4-86bd681a252e", "comment": "Malware payload (MooBot)", "value": "c8ca0ae7380fe4034501c90ac6679e23d35b55fc", "object_relation": "sha1", "Tag": [ { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641438, "uuid": "bfb9ee82-f285-4c09-8af1-18f7ed4f89da", "comment": "Malware payload (MooBot)", "value": "0df20253bade389577e1009a50936b9d5b4cb997eb711dd97576728990b1ef5d02235a2cc0f2c03f68080a1349d40856", "object_relation": "sha3-384", "Tag": [ { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641438, "uuid": "fd7c5d96-452d-4ffe-a042-722d36ccd35f", "value": "T15E633955BC809623C6D212BBF66E02CD3B2613E8E3DE72079D226F2137C695B0D67E45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641438, "uuid": "e00ddd12-e003-4cd7-9d88-37a8866eca9c", "value": "1536:AOO8C2n2UpvCziVYCUOPKu1oO5zw9F/YV3chY/x+r4vbWN7:AOg+3gcoCzw9F/2Mejbk7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710641438, "uuid": "54c8d718-7648-4e2e-b0fe-dd2f90e1eecb", "value": 71580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710641438, "uuid": "15834fbd-e6e3-4adc-8973-6d8edbbc46f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641438, "uuid": "c64e2172-ac25-408b-8edb-98c28206f9a1", "value": "arm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9b35ff3-e494-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710703818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710703818, "uuid": "764d5441-49e8-434c-92dc-84d78682559f", "comment": "Malware payload", "value": "d5380bf95a5dde267e59fced1ed32248", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710703818, "uuid": "b10377f6-2f0d-41b8-8ec7-3077ca626200", "comment": "Malware payload", "value": "215ef814181f9ca3b8d1457a1d8daf1fbc3bce1a1086eb162b08aa3521651725", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710703818, "uuid": "278958bf-5ccc-4e6d-ae14-c6e3b5d06fa1", "comment": "Malware payload", "value": "966dfeab2423cbbc5d8954b7f0bebace7b8d4c93", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710703818, "uuid": "c731b84d-47b3-44d2-99e5-20e332369f24", "comment": "Malware payload", "value": "d6cfd49435978d870a868064e867c14648960bf22e855b9d46635f8101904e871c85761d3b7530ecab076f346075c0c1", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710703818, "uuid": "1ce00d82-096b-4eba-baef-a88f1f12da02", "value": "T1F5E56DB2E54572CFD49E1778952FCF82695D43B94B2044C3A96C74BEBEA3CC112BAC24", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710703818, "uuid": "e12274e0-8a2b-4fee-a7e6-a6ab7f343dd3", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710703818, "uuid": "168aa0a3-abd6-419e-bea1-f7589d8c7783", "value": "49152:BXN3u+RkDMYW0UxbJpK0dab+MvkkJgI+fKeN116mE6jzg0oBn:lUTVgxbJpK0daRJ8KeNn6G3gpBn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710703818, "uuid": "891cdd39-cb8c-4659-935c-25096dccdb37", "value": 3301376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710703818, "uuid": "159226fe-2b92-4a08-af8a-04fee2012180", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710703818, "uuid": "6bd12b47-7498-4a48-8dec-06e8a22dbd10", "value": "SecuriteInfo.com.Win32.TrojanX-gen.23947.25024", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d91513d0-e48e-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710701267, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710701267, "uuid": "9333cf0d-c4b4-4d29-bc9d-9d4005925863", "comment": "Malware payload", "value": "829b1d17be0de1f466006429ecef48f6", "object_relation": "md5", "Tag": [ { "name": "Amavaldo", "colour": "#9DD98E", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#5CE45B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710701267, "uuid": "add46ffb-3008-42cd-b05e-1ef9efe60428", "comment": "Malware payload", "value": "227f8d0d39297bed9d3e950c4d4bbf296b327ed8d54952837b3f0ccf4e384ce3", "object_relation": "sha256", "Tag": [ { "name": "Amavaldo", "colour": "#9DD98E", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#5CE45B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710701267, "uuid": "feb8a77b-0c1f-411a-bf6d-559009eb2517", "comment": "Malware payload", "value": "29506dc870143bccf4254a0f445b3b8af2927b83", "object_relation": "sha1", "Tag": [ { "name": "Amavaldo", "colour": "#9DD98E", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#5CE45B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710701267, "uuid": "68498d91-11e8-4919-8919-dff59b34911e", "comment": "Malware payload", "value": "aaa30b1e289f3ab8399500f7eacc9cf2bc9af356767cc104381132cbc8d527838c707aa4fc37c99e86607ab7ccf01255", "object_relation": "sha3-384", "Tag": [ { "name": "Amavaldo", "colour": "#9DD98E", "exportable": true, "hide_tag": false }, { "name": "banker", "colour": "#5CE45B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710701267, "uuid": "38fbab6f-bd9c-4922-a5a6-5fe77340f8c5", "value": "T19EA6337A4301843A4B29E8CDDD4E33594240A5F4BDA045DC31AE764E8EBA83E3E6775F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710701267, "uuid": "a8a4e5b4-d784-4287-9293-fbdc12a7ea9a", "value": "196608:KmznoEmxCxmtTrUH7dY6LPI24n1d+aC78RvtQuejlDCp9CoS0p:KmzoE1H7lPT4n1ds78RuuE09CXi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710701267, "uuid": "a8a75147-153a-4478-9890-ff47455e6ddd", "value": 9506642, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710701267, "uuid": "3d0d227f-7a74-42d6-a3a3-52d353e2595f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710701267, "uuid": "2df2fddc-b395-4d58-953d-2b9695c30b08", "value": "image2.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "420f54e5-e47d-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710693712, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710693712, "uuid": "bfa7e2c0-68fb-43f6-a8e8-9eac6869bdcd", "comment": "Malware payload", "value": "0f6cbb333d66e67661d921a35c34ceb7", "object_relation": "md5", "Tag": [ { "name": "absalom", "colour": "#7765C3", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710693712, "uuid": "d04dfb3d-5558-4cfe-999a-254640d3838e", "comment": "Malware payload", "value": "25041fd434b0dd7cac243734e9d9e5b0cc62c39a2fc6f1c124fd0370a841503b", "object_relation": "sha256", "Tag": [ { "name": "absalom", "colour": "#7765C3", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710693712, "uuid": "3f5b575d-b030-49b7-a6b6-9ec8c4eaf9f9", "comment": "Malware payload", "value": "9e45a55b8d6a0ae3eb6fce93e325ceebfa4c56ea", "object_relation": "sha1", "Tag": [ { "name": "absalom", "colour": "#7765C3", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710693712, "uuid": "17533a18-d131-4a95-82ca-f4366909202f", "comment": "Malware payload", "value": "80d206d5a6c579b06f6d2251d7cf318d47ba09ab3cf2bbd21f4e783ad192dd41c925bcd31c161d046b61b3d1912d3812", "object_relation": "sha3-384", "Tag": [ { "name": "absalom", "colour": "#7765C3", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710693712, "uuid": "abada384-6edd-4091-903e-4f050086e12a", "value": "T1F196028EF718992FC87750B20D6A5232265B4C169B8397A7786C371C38B76E80F4D7C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710693712, "uuid": "ad05fec6-745e-4e55-ba99-25b53c56b544", "value": "196608:nzyP6ZyhHJsgg95vhLe8MjL/BrvAlR6k4i:WPZBFgThLLM2B4i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710693712, "uuid": "d669bc2b-4e35-45d2-9f50-db25a1f6836c", "value": 9100526, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710693712, "uuid": "5d5b4cee-2c9e-41fd-a6d0-fa829ba987be", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710693712, "uuid": "e220d947-ecb9-4049-9809-82cfc4428b08", "value": "app-release.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9730b003-e403-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710641456, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641456, "uuid": "f03d71dd-fcea-4a90-aa30-790f89dae92c", "comment": "Malware payload (Mirai)", "value": "88b5dc1a2aa3ead0f9cc61ecac46e868", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641456, "uuid": "4a8964f6-0bcf-4a35-9986-9630b0c20791", "comment": "Malware payload (Mirai)", "value": "25b6ccb658b9717fef41be11ee9e032fbb1934e2a71d195faad274b2d155ef50", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641456, "uuid": "227830cf-b65d-4538-ab47-7c89ab2f5e43", "comment": "Malware payload (Mirai)", "value": "53660dd307aa5b95fdbba6d8d2798c791d7c2bba", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641456, "uuid": "af3b9c4e-478f-41e9-81ca-a046f87242b9", "comment": "Malware payload (Mirai)", "value": "3197d76f987bddac852a2d4c174f6e88c8d41e8ac491cf7f092b2e67df7c4a85f98ab5687f9bbf700e9aabd290099c8d", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641456, "uuid": "e8a7ec16-a385-4295-ac2e-d3cfcd523257", "value": "T10E13F855F881872BC2E0237AB66E5A8C3721B3E8C2CF7217DD656B207AC515F1D26F81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641456, "uuid": "a54e06f5-1262-493b-a590-92504842ef82", "value": "768:vuVpTdBxXSnkG5rvpLh+JdtIymOxIUG8AFJu91pTMPyGrKJZ+eMdDp+o6j7/NQw3:vuVNxXSkG5rn6dtPx+FEI6GrOWDWjWNM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710641456, "uuid": "18310d66-f0ab-41b2-9a48-1223da1b4606", "value": 42460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710641456, "uuid": "4ad13570-c59a-4231-ab46-ff7c7560068c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641456, "uuid": "362f8689-8bc8-4643-8d99-7d82a753e706", "value": "arm5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c87c4c3b-e457-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710677617, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677617, "uuid": "b876bcc9-9e21-46e5-9583-abd090346506", "comment": "Malware payload (Mirai)", "value": "25acfe718b29301b4a8b95ddc0199905", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677617, "uuid": "91e641a5-1f86-40ce-b3d3-2b5f7ad9047f", "comment": "Malware payload (Mirai)", "value": "2647c913bd1e592507c9d8292a5b461383e0880a7ebde4103b61a3fb240453f7", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677617, "uuid": "9d1a3e37-348e-4cb7-964c-d4c648594050", "comment": "Malware payload (Mirai)", "value": "bc18587d588c7012ebe38a0ec9d37e1b4d2c1190", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677617, "uuid": "628dd283-0d28-4fa6-96c0-8e674f55fc66", "comment": "Malware payload (Mirai)", "value": "9842878ce9d675ec641444681eaafeceb87f9017acb61822af6e48c9ca9b59ab12e88007389fd42a205ca0475de5880e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677617, "uuid": "0a825162-49c3-4b16-baf7-8c44a8853a36", "value": "T185431A55B8814B22C5D512BAF96D128E332357F8E3DFB2139D202F603B8696B0E77D46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677617, "uuid": "c1ba65ac-64c4-47d4-bd37-c670302c9eae", "value": "1536:Monaan3Kolm4Ic2czRQAMF6inQDLQKAg:L8yDLQKAg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710677617, "uuid": "9760cf1f-7df5-4ae9-8b19-36f3bf7fbc13", "value": 59812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710677617, "uuid": "9277cdd3-703d-47a4-880b-f2b664a71a19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677617, "uuid": "649a3f78-2897-41c2-9a45-31febd33bc73", "value": "25acfe718b29301b4a8b95ddc0199905", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80ddd405-e438-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664182, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664182, "uuid": "ab53d02c-8797-43c0-bf27-6faa45bf1da2", "comment": "Malware payload (Mirai)", "value": "a8dfb162a960a2daa0b10b47b6a67cca", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664182, "uuid": "d9a35b16-cc8b-4985-9539-282b72888a16", "comment": "Malware payload (Mirai)", "value": "269fa72c6ff741a9518bdafa64ad01ff73596065ff398a7e85f7bc66556a2d8d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664182, "uuid": "0c55feeb-37a4-48b7-b5bc-54e8e60b6cb0", "comment": "Malware payload (Mirai)", "value": "8904f852d89a685c4b16a17a60e52493c160c9ac", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664182, "uuid": "6f111c47-8222-4758-a088-b7dee7065711", "comment": "Malware payload (Mirai)", "value": "49509a0538a2d20f255dbd5785bef9143067a6266d3dce066baa62dce0e12cb4b9822a34528771a34caa38af9a050a35", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664182, "uuid": "e8b15f06-f5fb-4d6d-9fa5-212ea380dcf1", "value": "T1DC033A31BA7A1E17C4D0E87962F34729B2F5064E29A8CA1D3E720E4EFF15948B1076B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664182, "uuid": "5903cc1c-f0d0-4603-b2ea-263d558b77ac", "value": "768:gL+oOq9s8nL1IWSSZwfW2Z/VtlO+uqy7wgu7l:gKnSsm1IWSSZwfJZVtluqwW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664182, "uuid": "a663b3ba-1ee9-4474-ae21-93473781d57b", "value": 40180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664182, "uuid": "b1442a3d-4a03-4a5d-95a1-90eb93966097", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664182, "uuid": "aa9f4972-2086-4999-837c-b18a45c1c9fa", "value": "a8dfb162a960a2daa0b10b47b6a67cca", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f6f71a3-e453-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710675830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710675830, "uuid": "936da289-2fb4-47c6-9e89-2f1eadeca238", "comment": "Malware payload", "value": "f574f0dcc59d975cb9b2bb6165f64919", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710675830, "uuid": "8318c465-41c3-4bba-86f0-aa0c40e58d9e", "comment": "Malware payload", "value": "28b4408ac0b628642832e33fcabef489beded19241fe00c65f8102af4414f56f", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710675830, "uuid": "a70555f5-75ff-4209-b62a-b5b88539ce38", "comment": "Malware payload", "value": "752a3418f6c9f4ad20c71bf9cc7af11e5497275a", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710675830, "uuid": "913e062f-aba1-4bc5-9125-a7eb43a66907", "comment": "Malware payload", "value": "fbb11b955d9956bd1b7bf1d1945dfbe0308f5b4044c1ff9a90156de1e4f74a75112fd649b015241d69f279955b14381c", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710675830, "uuid": "e9bc205d-d13f-474a-a924-1d89fd58d99a", "value": "T1FE35C012A19A80F1E64E1670147777BA9A78AB474F38CBC3F394EDAD2C33550E63611B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710675830, "uuid": "bd509279-444f-4c2a-93e4-daddbe55c526", "value": "bad0a6088e2be51a5d7178752419cbf7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710675830, "uuid": "daae02cd-bb8b-46c2-87da-671c60728c04", "value": "24576:22I6vM7eqXbS5500n535wcrDRbGKLbjA/uu64W:2Ze120nB5HrVK//W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710675830, "uuid": "7a555098-23da-4226-b8b6-7bdb2ac2ea27", "value": 1069056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710675830, "uuid": "ebce21e0-3962-49a7-b2ef-2538393e651b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710675830, "uuid": "544145af-1d48-43cd-9bd6-4a296ca54f73", "value": "SecuriteInfo.com.Trojan.Rootkit.22033.18862.29019", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cab209df-e46c-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710686640, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710686640, "uuid": "8bb6a40d-b17f-4a8e-93cc-3c65e1185543", "comment": "Malware payload", "value": "3d79e598860c39cf2bb86df7a7445202", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710686640, "uuid": "e036682e-22fb-4b1f-8771-916ff5e73e0d", "comment": "Malware payload", "value": "2befd0ef49e34533b8c9b92644e8324989329a7d6de3eaf62466c94784eb99d0", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710686640, "uuid": "6cdeddc3-7d5c-4d4c-a415-2810facdb5f5", "comment": "Malware payload", "value": "1ffe09cb61a8fcd37fe1b8e7509b483928529e48", "object_relation": "sha1", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710686640, "uuid": "bc2bf28e-721d-45a7-b256-43b6509aaa92", "comment": "Malware payload", "value": "aa5cf2073cae497f84b27c56237ca22e4fe1d28697f88479f5472c4fdafe06f71d43f5e6a8ae60c8871889efff75428d", "object_relation": "sha3-384", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710686640, "uuid": "f251c380-3544-4b8c-b661-bc2531cec22c", "value": "T145D7339246F4372BD49A937B248F0C145ED818A5BA0303C7AB31D7952E90D981E3EFDE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710686640, "uuid": "bfa8b8fc-90da-4fde-adf6-f25fe4e780bf", "value": "1572864:xtbnbgoeD2sF95B8fP2dVIFnNkl5bIEouuIs/0uFJhSSeHK:fnbgLKsFnoWVIXAIORO0uFf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710686640, "uuid": "64e63bdd-446c-41e7-b824-62b1fb43cdcc", "value": 58336846, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710686640, "uuid": "f5582bd2-7cac-4b03-a38e-39db6a586fb0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710686640, "uuid": "d4e0af7a-6d2b-4273-a01a-7d0360cd79d9", "value": "Digital marketing recruitment materials 01-01.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b64fe25-e473-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710689406, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710689406, "uuid": "f14f7663-3ae1-466e-8240-836ceb750be0", "comment": "Malware payload", "value": "966b2f0e41c50986eb0ddc498d04c8a0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710689406, "uuid": "a9c464f1-e5fa-4b87-9b90-ab581556df0c", "comment": "Malware payload", "value": "2c2939ae4f508ef7b4efce099f860ddc9b56da08be63f8c52c73d44f8a1b3c5f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710689406, "uuid": "6f784dc3-6e47-4332-b067-7450adb2c09e", "comment": "Malware payload", "value": "f2182630d5e7b71cc01fe05add3b2a49b5a71b9c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710689406, "uuid": "d80c67b2-eb1b-44bf-8252-7790fcefceb1", "comment": "Malware payload", "value": "fb5c4a7031b255602b21cf24eb87179e14bf57537ed957151aa7489dee6f14e082837edbeaedc58dd288f3d3e0131a88", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710689406, "uuid": "e3d80937-32a3-4d29-95aa-3696f2bd7ba4", "value": "T1F094230B15B91B77D81A6FB40FB01B06FD87C5E51C1607EF40652EA717B92C27AE888B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710689406, "uuid": "9d693f7d-edab-4717-b131-12bde6bcbeb2", "value": "0e710d1dedbbf7bc573b5df52d5ee277", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710689406, "uuid": "0a18aa81-803e-45f5-adac-7ce5382ff631", "value": "12288:EpeXjCYrOM5q7T10j9foqfykiq+iM34jNZDIeyf:EgXjnstyqecIjNBq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710689406, "uuid": "12a5901f-1a2d-45d8-b79c-6f92cc57f358", "value": 418584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710689406, "uuid": "2f07329f-ed2c-4111-968f-af3856e55d46", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710689406, "uuid": "c3a79b3e-3924-4ebb-88d3-f113b624dc45", "value": "SecuriteInfo.com.Adware.Presenoker.22558.13420", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf50b2fa-e457-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710677601, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677601, "uuid": "30bef515-ea93-41b6-8138-d53c64e72dd1", "comment": "Malware payload (Mirai)", "value": "61c480309dfd391c43d92967fa487840", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677601, "uuid": "e6c5148a-f419-41aa-9f9d-2a3b20d43b0a", "comment": "Malware payload (Mirai)", "value": "2c4faac04128484e9b45ac6e8111f89c6d5f31b34bb5c59fd84bf92f226fef72", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677601, "uuid": "16f282b2-90a9-4b11-b870-f77f0383d399", "comment": "Malware payload (Mirai)", "value": "10354fb021172c21e04a940cb7df821deff00a54", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677601, "uuid": "72a0b64f-169a-4ff5-b351-b7a282dc2a7e", "comment": "Malware payload (Mirai)", "value": "9a5ad393c71116fa09696b87ab7493cbaefa2566de1b4fe48516f1441f17cd2126eb7f3fc8e6b8e071d840475da4c5ba", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677601, "uuid": "31c0f40b-c72b-4e8c-a58b-4bd9d059484a", "value": "T12053A65A6D128FACFB5D873147B78E21AA5837D637D1C641E26CDA002E7034E641FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677601, "uuid": "c1f25d99-f654-4a01-a9d3-18f6893dfd8c", "value": "768:LK11B+Aje4WYh4WlNJJFc3KS4MkGcl+5uCY0SmvEEt0MSdOy5nTw9K:ui4t42FcFRYkQjdOcncA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710677601, "uuid": "40fa06a2-9192-4caf-8bfa-6fdf3b321881", "value": 63732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710677601, "uuid": "e5fa32c1-9224-48f3-a2c1-eb1b77215057", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677601, "uuid": "9904d062-0e09-46bd-b1e4-e660b1aa3cea", "value": "61c480309dfd391c43d92967fa487840", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92fd936d-e439-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664642, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664642, "uuid": "b3408760-4a55-4e89-b817-e8c159ef2508", "comment": "Malware payload (Mirai)", "value": "09d87cec53f9840a4f46225420ca40eb", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664642, "uuid": "4a24e367-4c37-4e54-8098-1814f52ffef5", "comment": "Malware payload (Mirai)", "value": "2e67e534c3d11d8846d4442b1c3c9c2d3d6f48a9fb946a93a3faf0d4652729d9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664642, "uuid": "51187d00-120e-4f91-97cf-f9483b49febf", "comment": "Malware payload (Mirai)", "value": "c19a3c124ba2e3c94c9577fafc48211e3c421155", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664642, "uuid": "269d3b4c-391c-46f4-87aa-1069ae2388cf", "comment": "Malware payload (Mirai)", "value": "bcc6411a40ec12c00b58250eea7fcaedda33b2467fd58b464e5ee78c8fbc78740a0867804e8418a8787f40a7c2cb9a4c", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664642, "uuid": "3f7abf7f-c637-4def-be22-61fbcd09964f", "value": "T1B6F30A56F8819B11D5C112BAFE1E128E37131B7CE2DE72129D246F347B8A87B0E3B915", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664642, "uuid": "4891f243-6cc1-4898-bc38-e4a96e90a9f9", "value": "3072:UEK0B0VwUtQXfa4XtUXjrjLbaq1uGwMRLSkWWCSLSwRYr:A0Vmka4XiXXDa4p9LS4LLSwRc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664642, "uuid": "1adaf457-9cff-4880-9661-5c984811049d", "value": 159548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664642, "uuid": "27d54279-2c77-4923-8e59-297d4d1586ef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664642, "uuid": "ad9b11e3-9f92-4f93-bc2f-e083e61fe9d8", "value": "09d87cec53f9840a4f46225420ca40eb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abc97f12-e465-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710683582, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710683582, "uuid": "218d8de5-ec55-4434-8959-deb7ddf17063", "comment": "Malware payload (Mirai)", "value": "f16c9da18958f90dbabe0c112473243f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710683582, "uuid": "e6327db2-47a7-4569-b15c-a5c412beb7e1", "comment": "Malware payload (Mirai)", "value": "2e98887e1d2dd0e243a00bc90b29d2fd7f66c534ce1021bb6dfdee2adb5f5327", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710683582, "uuid": "5b17ec4f-3cca-4326-a5df-bab0313b7bad", "comment": "Malware payload (Mirai)", "value": "09fc385a0a92ebff3d211801272e077488b1e452", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710683582, "uuid": "e6e6ca29-9e96-47f3-8297-145d2a08c4a7", "comment": "Malware payload (Mirai)", "value": "f8d56b26eab93a8647842a324bf551fc1916be76ee09ae48fe9cb92572b4ccd401604595a4440e3210181ddac83a19fc", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710683582, "uuid": "8fafb552-0807-45d4-96c7-d55b27f16eac", "value": "T14193E706BF210EB7D89BDD3715A92B052CDD561B21B97B35B930C858FA4B20F19E3DA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710683582, "uuid": "91f9efac-9607-4416-a0ae-36207094e4c5", "value": "1536:oajhcGBV7cegwIVdtPkcjA+TTdz+ZQK2c2Z:oajtBV7csez+U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710683582, "uuid": "4723861b-e46b-4799-a54c-12e03da407c2", "value": 93636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710683582, "uuid": "f554a414-1611-4d61-afe0-ca301c51b772", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710683582, "uuid": "1b584cea-21f3-48f3-8d2d-766d1fea1c30", "value": "f16c9da18958f90dbabe0c112473243f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c52019be-e457-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710677611, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677611, "uuid": "b9a4fc11-db6d-4be0-ac14-c4b2d68e340d", "comment": "Malware payload (Mirai)", "value": "5683a912c86b6efa09b079b9c93dfe02", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677611, "uuid": "9ee9075f-9b5b-4593-a633-a63a48226f84", "comment": "Malware payload (Mirai)", "value": "2f6b91d3c64ed332c3e304d9d3013a498ab89eb3ea0590b55b812db0c5caba18", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677611, "uuid": "3abc77ea-1c9e-45ae-904b-3dc761c6d759", "comment": "Malware payload (Mirai)", "value": "946a4389270595ba41706a4659e2f532c69a098b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677611, "uuid": "9041257a-0da3-485e-bc8e-1cf22dffa5f6", "comment": "Malware payload (Mirai)", "value": "8f55b952b9e58a8b90799b81f4a18c53234bd0148bd7a672fa2b4f5924a4e3aa5eb08167444788258376aedfe7f1085b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677611, "uuid": "9cec0e30-c0bb-46ca-8eeb-7e8b49fce6bc", "value": "T1A353B615BF650FB3DC6FCC3705EA2B05288C654A22E87B367934D868F54B24B59E3CA4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677611, "uuid": "01bbd5e8-2259-4811-bade-c1b0e485872b", "value": "768:Xq0PX0mn0mIrBjKeHne+qeDNBkxlZszfXiowAu4I8qw:XqSX0mMu+nXq6NBkbZszBJt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710677611, "uuid": "606ddcda-9f7c-43a2-8eac-e9edb931797c", "value": 63940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710677611, "uuid": "0821cc1c-7625-4d2d-8533-1e609d71d1df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677611, "uuid": "695831d5-448b-40dc-ae76-2a46d3e19fc6", "value": "5683a912c86b6efa09b079b9c93dfe02", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97339ce3-e3f9-11ee-a120-42010a9c002e", "comment": "Malware payload (Stealc)", "timestamp": 1710637161, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710637161, "uuid": "a70ea8aa-1a16-4487-812b-d543b4c4135e", "comment": "Malware payload (Stealc)", "value": "e32472b49fe6379a7cf4e5c71172305c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710637161, "uuid": "4fc156c0-43c3-4815-a0a6-b9ca10feb4ab", "comment": "Malware payload (Stealc)", "value": "3330b2decb0669df2e83d25f1c2d5821e584331ed567aef5a55c0c7804af2f5b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710637161, "uuid": "0226ee4d-560f-45cb-bf58-767bad9e5b83", "comment": "Malware payload (Stealc)", "value": "f9ca3b81ba3c35b1b776507e0fce8cd607d4f9b8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710637161, "uuid": "876d6109-c060-4c57-817d-f3b133b4726e", "comment": "Malware payload (Stealc)", "value": "9d2e9a895404f004b93e08bcef1f6f93003bb5fcfa097eb35fa8d68bf910b41010a6d3b907e6476c9f86dea2efdc712d", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710637161, "uuid": "cf7825db-9e48-4299-b10c-f31c5a22c025", "value": "T1D7249E4176B1A861E7A2CB31996AF6E8062BBC5CCFE4517F32943B1F1D717C08972326", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710637161, "uuid": "b4e4797e-1cce-43bf-a40b-4df2f777eb2c", "value": "06de3ee8f2bd808cd7150ed6cee11120", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710637161, "uuid": "b4131bbe-ed0c-49ea-8a2e-0cdc66865d47", "value": "3072:Qkui2/vZ82QtHXk2nXbWwR4xZDWOwR9w1RBeg8+/yGYV:fui2/hSU2nXbW/xzkkRBeA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710637161, "uuid": "3bd5cbe1-a99c-41a3-8c3b-d8e5bc1b8018", "value": 215552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710637161, "uuid": "6aaa9924-5986-48f4-ad85-b9cdfa034f46", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710637161, "uuid": "4bc7b0aa-f159-4a6f-9548-f6f95e0fe18b", "value": "SecuriteInfo.com.Win32.CrypterX-gen.10322.6841", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c65fd083-e436-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710663440, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663440, "uuid": "e2e33bbc-70de-4f30-bcfe-92e882dd59a7", "comment": "Malware payload (Mirai)", "value": "d9cce5a44c1dfcd2e7f5ff76e64459ee", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663440, "uuid": "b9d9f19d-f626-4e21-b612-1738dcc9a49b", "comment": "Malware payload (Mirai)", "value": "3531b585a4f925a69afc92625d7d9bf017481a6fc7acbf34530ba108826fcebf", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663440, "uuid": "d03c3bf1-9a48-4c0f-98e9-ef1aaa009c4c", "comment": "Malware payload (Mirai)", "value": "a2051c036cb3959ff86bdc110e84ef1c34116a34", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663440, "uuid": "59d3d394-96f1-4604-a028-38c73c14943c", "comment": "Malware payload (Mirai)", "value": "c0b6255cfdffc3735d6dfb0812f5db2884fa8038ee207d17b131dbfa49269332d6bd4095ecaf5587693241a6143f95cb", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663440, "uuid": "72375e00-4195-4221-828e-9309c6de677c", "value": "T1A7E30845FC518B23C6C612BBFB5E428C7B2A1798D3EE72039D256B21378A85B0E37546", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663440, "uuid": "70743033-3cc1-4789-8011-c46fedbd7444", "value": "3072:MwGVEx5xx58MFyr4JdPNvNM5sRC+yeGEj:MwGqxx1Qr4JZNvNsD3eG0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710663440, "uuid": "6d53a16c-0789-4cb9-ad1d-aef3b8c601d0", "value": 150240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710663440, "uuid": "f479e087-eccc-4d57-9754-36f0be8df1e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663440, "uuid": "984fd437-19df-4678-9f1a-a5fbaf127e29", "value": "d9cce5a44c1dfcd2e7f5ff76e64459ee", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5cd67b44-e404-11ee-a120-42010a9c002e", "comment": "Malware payload (Formbook)", "timestamp": 1710641788, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641788, "uuid": "21266376-6e35-498f-96f0-405377040dde", "comment": "Malware payload (Formbook)", "value": "3f70fe7b7a5a355bfa82429042d168fc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641788, "uuid": "323d7e9a-2021-4d09-9f45-a4b5c6556265", "comment": "Malware payload (Formbook)", "value": "37950119cdd0165154841c1fa0803dacccb63012561ea77cb11a787e2c0fa588", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641788, "uuid": "20721d5e-66cc-4c6a-a180-12a353d8c39c", "comment": "Malware payload (Formbook)", "value": "b5b5329c959a6182a1a2e285b84cef8ece396c9c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641788, "uuid": "84b14200-66bd-4c0f-91b1-493c31e57bab", "comment": "Malware payload (Formbook)", "value": "f12304c4d867ab16a21d70132b9384901a2b5c48e9559805bb8b1b33cf2173bec204e07dee3ce17f335b1996dadd9381", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641788, "uuid": "2dbd96e9-70bf-45f8-b5ae-e83fbd1867d7", "value": "T11605232556C79090F8EEC8B16FBBB723E17169D55105E20E2FA11AB236D9700CB2837F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641788, "uuid": "49c86a69-b807-40eb-9739-678f7601929e", "value": "e2a592076b17ef8bfb48b7e03965a3fc", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641788, "uuid": "484b90ca-8ad4-4bd4-8750-6d7a77cbc8a4", "value": "12288:sqLAuU/hB1xBkVoIyhtZ8/rB/5FsfecrqL3ObwMB8aqEEbViGCyQRy1/6dzgA6zw:jAh1xBkVoIy/u5FoeBoZyQqNbbfNa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710641788, "uuid": "21f08bcd-0965-49b5-83e5-8e8d19f90bf2", "value": 824880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710641788, "uuid": "96b4973e-124e-49db-af60-6f3f054fa03f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641788, "uuid": "708876e3-1a46-45cd-b1f7-1d37d66b7a61", "value": "venerationens.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40303ec5-e404-11ee-a120-42010a9c002e", "comment": "Malware payload (AgentTesla)", "timestamp": 1710641740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641740, "uuid": "c98e6572-f654-4c5a-baf4-a60056e1202f", "comment": "Malware payload (AgentTesla)", "value": "80d8911cf9f3ccaa526a6afda63a4ae1", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#DC91BA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641740, "uuid": "86a1be3f-7166-44d6-8450-7b668087fa8f", "comment": "Malware payload (AgentTesla)", "value": "3854783710a249c1b8d553d298623ec63cc957281d703af14cf778bf18c06a34", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#DC91BA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641740, "uuid": "a1cd64ec-bd9e-4ea0-b955-9287bde13e6a", "comment": "Malware payload (AgentTesla)", "value": "a434e9f052a8c8b5ca0bca099e49317f15033bb3", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#DC91BA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641740, "uuid": "2506cdee-5544-4ada-89c4-4469e2076466", "comment": "Malware payload (AgentTesla)", "value": "a1e6a55783dba9e718ef5deb215f6ba41a849c053472df8f8635f3163c489f77e7c85f7333513999414ae610920b636d", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#DC91BA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641740, "uuid": "bc052a5b-aaac-4f41-aae5-79fec3e59872", "value": "T197150282BD43C2A5EC5C1B3168398C1116227E15ADB8375EFBC8B37EFBB33924516616", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641740, "uuid": "176e0411-9df3-4fa4-9865-c22eda748782", "value": "1f23f452093b5c1ff091a2f9fb4fa3e9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641740, "uuid": "f8b072e1-7b41-4eb8-996d-92738e0405c3", "value": "12288:hIrQbs3XWa23NQHD9Olb6yboUTMJ2qSpGH8VCX5q//X5M/u1Lr:cuQXWj3NQROlOyboUTin8Vw5MqUr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710641740, "uuid": "a4c8ee62-c6e3-4d33-8b19-756964ac1e71", "value": 884112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710641740, "uuid": "bd88bf33-82b1-499f-ac8e-3efeda47287f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641740, "uuid": "9782fe70-a2b9-4d51-8b99-a0b53b5dfefc", "value": "Quote.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2919149-e40d-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710645905, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710645905, "uuid": "cd57e1b8-b0a6-4fef-95c8-1b75ead696ec", "comment": "Malware payload", "value": "33cf01ed19be7ed3b73d736b5298b2ac", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710645905, "uuid": "8149fb02-b162-4d75-bf19-a07e07dd2c5e", "comment": "Malware payload", "value": "38b22225d060713fdb8b40e8731168bcf45f23599e8bf1b9d378b98b8390c1b6", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710645905, "uuid": "c21f1e5e-e3a4-4d6c-9c32-ea89b0f269d9", "comment": "Malware payload", "value": "d9b0e548272ccace4b0da82e1fe0427bb00a1857", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710645905, "uuid": "4aa7d5ea-b5c8-45b5-b609-c02d09e8d487", "comment": "Malware payload", "value": "e1243290ef114181c0021f364736680f3032affcc80cdb9d5e1fb17ba17a6d82f39e9d2a6cf21f89b3aa265f5f7adf8b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710645905, "uuid": "802dcef1-b390-4003-8c23-9d07d67b0845", "value": "T1600733BF36642182D9E44472D623FDD572B226B9CB424CBD58E9B9C03F468E09313B67", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710645905, "uuid": "5a397d42-d508-49e9-8494-5ed0adc41813", "value": "4fdb725103203442d1cba71af9572e98", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710645905, "uuid": "8d03beca-67e4-41f4-8fde-0a81a995ef82", "value": "393216:GROx7nATNyScGtqMbfz6UTFttJL4ecu0VMBWOIVktOZid93I0WotJ:Tx7nDHTMv6URJ4P/v+M4PI0W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710645905, "uuid": "b8b95599-cfe4-4cc0-8037-439a192c3ea1", "value": 17440768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710645905, "uuid": "02f82c91-bb00-4f15-8bf5-6fa0f68c90ee", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710645905, "uuid": "185c7c9a-fd6e-40db-848c-5bae6795e949", "value": "SecuriteInfo.com.FileRepMalware.25983.22631", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e53c75e-e439-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664581, "uuid": "f0f55633-e237-4ecc-8d9e-0fbc5d851df1", "comment": "Malware payload (Mirai)", "value": "1c28f9bbae11f59936fcaedb63cac902", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664581, "uuid": "fd5fc7fe-063e-4957-a42c-1849467280b3", "comment": "Malware payload (Mirai)", "value": "3a040afebb2f4ecbe76eb1d3b37cf45821aa5d041ab33063ab6e7b24fe636c65", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664581, "uuid": "e14da6c7-c307-48bb-946f-7fcd99da6131", "comment": "Malware payload (Mirai)", "value": "6be2b8f6e62eb6d54c607c0a9696cc14fd21ca4e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664581, "uuid": "e46b1325-d641-43c9-bb6d-9fe96948397c", "comment": "Malware payload (Mirai)", "value": "7d0871fcc157e8d8fe602a9ba51c4ae0038879e6b8a4c756c5adfd78f38f82a7b5e0979aec64c1c6815e05ef693449c2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664581, "uuid": "a52c15be-bab9-49dd-9ca8-908e19e8bf2a", "value": "T121C2C1622FEF38B1C2A464BAFC7C8AC7620F4EB965F15521365057A1DDD200352B68F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664581, "uuid": "6fcb2208-b21b-46ac-8552-2628c8b83c8c", "value": "768:AjKX9vt6GqA3Q0jzV7EUyUq9niLs3UozB:AjqtBqoB7EUBA3zB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664581, "uuid": "2ed439e1-5dcb-412e-a534-a54325e13981", "value": 27336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664581, "uuid": "7c00f823-bf26-42ea-b9de-87affdafbd38", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664581, "uuid": "6c28a99a-8658-42bc-9a5c-a465bcd9a70a", "value": "1c28f9bbae11f59936fcaedb63cac902", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "754a9863-e439-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664592, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664592, "uuid": "352f10a5-1a44-4054-87fd-66e7a0b987a3", "comment": "Malware payload (Mirai)", "value": "ac1453f1d66ffbe6fc17d1e58f34c994", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664592, "uuid": "36b29a49-54a2-467d-9a77-d2ab26b92869", "comment": "Malware payload (Mirai)", "value": "3ac2a1f7750b0f7f3e72935bf5723102b6b048dd29183801542dcf7c986a0c28", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664592, "uuid": "72f06bc8-52e9-476a-b922-f35268aace12", "comment": "Malware payload (Mirai)", "value": "05edf63c0c2e2bc41a607328c78573ae683c86e3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664592, "uuid": "2cf38420-1f26-4f79-b071-4da3f82bdeb1", "comment": "Malware payload (Mirai)", "value": "db7199663a0b45bc5c941c342deb1fd6830c9ae39d8ddba7e9207c0095ffe962173bcd1280387c57489fd43fee2f57c4", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664592, "uuid": "c998554a-e5df-4cbc-a20c-452d475abcdb", "value": "T127435BC1E9C3C4F9FC23167D0567F3378672A9265039DBD3CB6BE226AC132529A53248", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664592, "uuid": "aa5d2b56-f4b2-49dc-93e4-3038548a9aa8", "value": "1536:sfsJ10faJOPFgxDXDY0r7n/mg3VFkBjhLLrq+0a:s0J5WFCDXbmgFFcFF0a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664592, "uuid": "c4ac73ad-f765-44d6-b0c0-6afd0c25fefe", "value": 58452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664592, "uuid": "79d2564b-686e-4635-8e54-6f5a16d5380c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664592, "uuid": "b2b425d0-6fab-4246-b8ab-4da3133005c2", "value": "ac1453f1d66ffbe6fc17d1e58f34c994", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3e73ba2-e433-11ee-a120-42010a9c002e", "comment": "Malware payload (PureLogStealer)", "timestamp": 1710662093, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710662093, "uuid": "a68c3bd0-88df-4ee7-b68f-57dce04c631c", "comment": "Malware payload (PureLogStealer)", "value": "3e054dc83f96399848ce95ad93d017b5", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710662093, "uuid": "b2d40dbf-8c3e-4a03-886d-616f865a37b2", "comment": "Malware payload (PureLogStealer)", "value": "3c821865122401bed04e7f7d161cc2158ee65d4a3b707cd0de1c2e5ac29e756b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710662093, "uuid": "8b7eea2c-3476-47ce-82fa-5cdc373d4cec", "comment": "Malware payload (PureLogStealer)", "value": "4052123d353bbf0410e47660ebe9406e097c17b7", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710662093, "uuid": "7320d130-4095-49a3-a32b-41681e4cd0ea", "comment": "Malware payload (PureLogStealer)", "value": "428744b834bac0c362bec404d920393f9912634c5b09cdcf1e8cf5dc277ea48f12995543df176bd298e346d386d857fa", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710662093, "uuid": "913d572f-6698-4a5b-af17-c36fa9504d84", "value": "T1CBB42350B191D5DBDEF522F00E3207BA7A56C96539202703C3527F1EBD61362A82F7EA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710662093, "uuid": "a92ab392-c0e9-48d1-a386-1d11f387516c", "value": "7eae418c7423834ffc3d79b4300bd6fb", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710662093, "uuid": "401bba0f-7ae5-4433-b4e0-f3275a2ea135", "value": "12288:Vs+6hs2TBkhRa9dhIWe/Ra3XfEEDqAmXFZ76x1j4:Vs9swAsnOWe/QBmXFZWB4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710662093, "uuid": "f066b7a1-025a-49da-b563-2638141550f3", "value": 521433, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710662093, "uuid": "9a1c6558-a562-41ac-a43a-2745285364e5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710662093, "uuid": "4db95856-0dc0-43e8-8f8c-8a1b086f0882", "value": "3e054dc83f96399848ce95ad93d017b5.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85c9ee23-e403-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710641427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641427, "uuid": "01fe59ca-3f47-4a8a-82af-6c2b3e020a9d", "comment": "Malware payload (Mirai)", "value": "3658bedee70892e357d56f5a7a994ad9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641427, "uuid": "9baa4e8a-7196-49f6-92a8-468d4d0be18f", "comment": "Malware payload (Mirai)", "value": "3ce74f303906c369a9eb4a7a3f92aad3e037b105999a6b8b1dfaff1a741af7ec", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641427, "uuid": "7dadebbd-cc78-4586-97eb-095e097cca70", "comment": "Malware payload (Mirai)", "value": "3b7e2bcd55ab3aba62685c2026bdf43cacb45cf8", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641427, "uuid": "e32fb6f8-aec2-420c-b5db-ee965000f77e", "comment": "Malware payload (Mirai)", "value": "d1f4b50263a1ea7bc5e0126b36bb96f2211340853f54b0641ae346c38e287d2ef05a11ddbc2623483693265b5c26c4c6", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641427, "uuid": "e1feb1a8-d33b-4738-b82a-5b0e463c7faf", "value": "T15493B71E7E218FBDF769823447B78E21A75833D627D1D645E2ACD6002E6034E641FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641427, "uuid": "ec914a66-5eff-4174-aac8-4784e8ca4b83", "value": "1536:8+5tv88dfOUt6c07n5zWo0I1EeaGaWN152:j5O8dfOU4nB0I1Hak1I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710641427, "uuid": "de869ec3-a0af-4589-918c-740da9d545a4", "value": 89172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710641427, "uuid": "6db22e93-20a2-4734-8f99-ef8ab6f68b9a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641427, "uuid": "b5b396cf-3295-4056-a5e6-0d325167ecdd", "value": "mips", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "341d70c3-e45c-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710679515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710679515, "uuid": "40e4f91e-4d75-4f92-b0b6-b9c6679b6553", "comment": "Malware payload", "value": "82a042f9b430725760a1f6d7e973bdee", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710679515, "uuid": "86052fab-c960-4680-9cc7-c104afcc9215", "comment": "Malware payload", "value": "3f0eb9a74b68d6339bc61d8244cd4723905dd4d533582df902e812f14aa012d2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710679515, "uuid": "71e057d2-424c-4669-8e6c-d42e6c56f2ff", "comment": "Malware payload", "value": "14a5945b19c793c2f5776fee22f36655d642c0a5", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710679515, "uuid": "68fcefa9-d183-492f-adf2-dbcc58d5d443", "comment": "Malware payload", "value": "577aafe08602f0313fd715e9581034ad5211f1a4611a19fb9e365698129b62f1fba75316e7859eb225ddce6860c11a7c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710679515, "uuid": "2438616f-678b-4b06-acff-f0a015dbe5c3", "value": "T11586337E3DB7D457DA165433E4441A63C171A68BC2F22B5B47203B8DCB4A23FEA5824B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710679515, "uuid": "f4a4b685-fd0a-467d-b458-5100ae9577bd", "value": "7fa974366048f9c551ef45714595665e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710679515, "uuid": "65a92c88-f7ec-4c69-982d-c8ae22882e4a", "value": "196608:WJHOr7tp71axrKKQj0QfM2Mns5fJRJxrH/BZnsfI09q4+:Wor3kxHQjXfM2VhLVHD09T+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710679515, "uuid": "f981b98c-baab-4354-862a-9ab83daeda33", "value": 8400752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710679515, "uuid": "9195b58f-3378-4d67-b540-2a7a7341564d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710679515, "uuid": "17526836-47c8-4414-8079-59343d2df901", "value": "SecuriteInfo.com.Malware-Cryptor.2LA.gen.7622.17663", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "109cf1c0-e467-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710684180, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684180, "uuid": "049409e7-2b32-4dd6-ad42-310428fc4df0", "comment": "Malware payload", "value": "20d981e1180fdd3edfb66dd7cde6f08f", "object_relation": "md5", "Tag": [ { "name": "browser-extension", "colour": "#966E56", "exportable": true, "hide_tag": false }, { "name": "deobfuscated", "colour": "#E157C8", "exportable": true, "hide_tag": false }, { "name": "FacebookStealer", "colour": "#8B7032", "exportable": true, "hide_tag": false }, { "name": "FakeGoogleAI", "colour": "#9B9A75", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684180, "uuid": "af99478e-323d-4c29-99e1-a6fbc88de940", "comment": "Malware payload", "value": "3f3d392ce9d0130d4495a1ac7afd895c663e5ee1e754beced890038ee54613e7", "object_relation": "sha256", "Tag": [ { "name": "browser-extension", "colour": "#966E56", "exportable": true, "hide_tag": false }, { "name": "deobfuscated", "colour": "#E157C8", "exportable": true, "hide_tag": false }, { "name": "FacebookStealer", "colour": "#8B7032", "exportable": true, "hide_tag": false }, { "name": "FakeGoogleAI", "colour": "#9B9A75", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684180, "uuid": "7fe958af-5417-45f0-a616-4091e1a2e1e5", "comment": "Malware payload", "value": "6dae9a5368e8ade1f62892dd2e834e29d101dc97", "object_relation": "sha1", "Tag": [ { "name": "browser-extension", "colour": "#966E56", "exportable": true, "hide_tag": false }, { "name": "deobfuscated", "colour": "#E157C8", "exportable": true, "hide_tag": false }, { "name": "FacebookStealer", "colour": "#8B7032", "exportable": true, "hide_tag": false }, { "name": "FakeGoogleAI", "colour": "#9B9A75", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684180, "uuid": "193c40d4-b4aa-4698-a8be-f0bfb238a5a2", "comment": "Malware payload", "value": "fd2d38f324555dfe56b7454b331348b0ec0a31cb5fcf57378890122f05f668986a4866e6aae2b6162aaa40d6fd514463", "object_relation": "sha3-384", "Tag": [ { "name": "browser-extension", "colour": "#966E56", "exportable": true, "hide_tag": false }, { "name": "deobfuscated", "colour": "#E157C8", "exportable": true, "hide_tag": false }, { "name": "FacebookStealer", "colour": "#8B7032", "exportable": true, "hide_tag": false }, { "name": "FakeGoogleAI", "colour": "#9B9A75", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710684180, "uuid": "3a15156a-405e-4d00-8c0f-8f6559870288", "value": "T1D262949E6208081D4A76F779DB57D00EE26232271EE18549BD8C04E17F765F4A2E2FF1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710684180, "uuid": "01eb6505-3643-47a3-8c9b-657166c4ecd5", "value": "384:+obp/yZhbRWD7l8BFzo54fX3YkbG3HDpE:xGhbRWD7lKzoKvYXDpE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710684180, "uuid": "06688f04-12c4-44e0-90bc-51b46a463b30", "value": 15743, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710684180, "uuid": "34633a6a-66ec-4fed-9ce6-0b0e9dcfa4fc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710684180, "uuid": "f6f31dc5-be36-473a-b03e-4b98a75b6e71", "value": "background.js.deobfus.js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c908cdaa-e444-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710669457, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669457, "uuid": "738d6f2a-2485-4fc0-9537-bda50362e761", "comment": "Malware payload (Mirai)", "value": "caa66f6a7eba58a24a67cc34a72924fa", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669457, "uuid": "7ebef92d-dc71-4961-9449-de8f2a345189", "comment": "Malware payload (Mirai)", "value": "4077e84b9e48ed346b723c1532825e93f8694469e742beb913d1a36bc19e7f16", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669457, "uuid": "7cfab9f8-ce7e-474b-81e0-e3576892127a", "comment": "Malware payload (Mirai)", "value": "4457f6bace59460344abd1958c638122514e5fe0", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669457, "uuid": "178e0fa0-9027-4836-9f1f-dc82781b6f60", "comment": "Malware payload (Mirai)", "value": "52d447cada6eaeafb25631e85f393a726dc52946704edf83e4ef29d5988286b445a5e21cbe2e40e5a99a9898ac2878b3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669457, "uuid": "159e2829-98e7-4ea8-ba71-c945ad68daac", "value": "T1F5535CC6B8119E7DF5CBE6BE84224D0EB821722150931B27BB6FFC837D731648956E06", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669457, "uuid": "468bbc4c-b5f8-4390-b54e-00a55f025603", "value": "1536:AXyRgQFTTbSX5dhLepSGYacFuxYhON2PPB+qG76E8A:N1GjR8EVGOq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710669457, "uuid": "ff39cd0f-87d1-48ce-9611-f254ec1f5750", "value": 66504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710669457, "uuid": "17e00a17-1e04-4264-904c-12bddabddcbe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669457, "uuid": "6d38a708-e2b7-41c4-98cd-41c7a5eb916f", "value": "caa66f6a7eba58a24a67cc34a72924fa", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c931fc7-e415-11ee-a120-42010a9c002e", "comment": "Malware payload (LummaStealer)", "timestamp": 1710649008, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710649008, "uuid": "b4c57642-a2da-4e14-abae-937798f4a8ec", "comment": "Malware payload (LummaStealer)", "value": "4c3b47b75d32218706df654359d4295a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710649008, "uuid": "3cd92a8a-0d3c-4b60-997c-7a4e6614eb40", "comment": "Malware payload (LummaStealer)", "value": "44d4459d62998ff79dcde79ab08cb54e72390bc68f0529f0f047dcb03303b2e3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710649008, "uuid": "bb89d880-93f1-49d4-a2bf-e4dcefb394b1", "comment": "Malware payload (LummaStealer)", "value": "ab4923b178ff51c4e28c36e218c6e7ce57451f78", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710649008, "uuid": "3c5fcbbe-2a37-4f90-ab39-489a59fff8d1", "comment": "Malware payload (LummaStealer)", "value": "393bbcd9914ed8fff9696baa2e04f78b2bc1808df002e6adebe19f5488fd1f5372719d08b7d9bb391de118e909710a5e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "LummaStealer", "colour": "#4E512D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710649008, "uuid": "bd791779-7aea-489a-9ef0-788a59014b22", "value": "T1BE64E01136629C61E5B6CB7156A7FBEC0629FC40DAED458F32943E1F2EB13D0487632A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710649008, "uuid": "23e645e1-ccd9-4677-914d-5315eabb7c5d", "value": "06de3ee8f2bd808cd7150ed6cee11120", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710649008, "uuid": "1f976e17-b2db-444d-95a2-79bb817ffe93", "value": "6144:KsDSiYqYpiLDgk0z4bAhKzTAAeKiLiVS4RZ493kRBeA:KsDSIfLU262TAAHie44RZ4Jkl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710649008, "uuid": "6864c743-a015-4bfe-b336-ceb7d5ab15f6", "value": 332800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710649008, "uuid": "0e58f897-1905-4f56-ad34-364bdea29216", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710649008, "uuid": "96eb8c7b-8497-4594-a8f0-1379f4ecd7f1", "value": "SecuriteInfo.com.Win32.BotX-gen.5399.9296", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d14a8419-e44b-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710672478, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710672478, "uuid": "6faf5feb-d27f-491d-a0fe-8f34632b5517", "comment": "Malware payload", "value": "03602e72d07240bd99bfdaa13a123b67", "object_relation": "md5", "Tag": [ { "name": "planetstherapy.org", "colour": "#E7E34A", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710672478, "uuid": "08a0f9c5-a7e5-457a-9ee8-6dbcbbc62ef4", "comment": "Malware payload", "value": "4735bb2f14fa39b2110c3070246c7204b5950355e6bb4b00da78c3913c9c4081", "object_relation": "sha256", "Tag": [ { "name": "planetstherapy.org", "colour": "#E7E34A", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710672478, "uuid": "085108a6-3924-4cd9-8b80-090d3613afcc", "comment": "Malware payload", "value": "8a241dce785615cbef3adc930b157b0904e4f483", "object_relation": "sha1", "Tag": [ { "name": "planetstherapy.org", "colour": "#E7E34A", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710672478, "uuid": "909c1b42-a526-4879-9d4f-eadc5e16e6a7", "comment": "Malware payload", "value": "d9bc0fe1b06dc2208b511f94588796c5e22ec0baef1ad3008ace37b2ad20e0f713836620fee5c89cd7d6af3a1b24a26e", "object_relation": "sha3-384", "Tag": [ { "name": "planetstherapy.org", "colour": "#E7E34A", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710672478, "uuid": "aaf352f5-c488-445f-bd89-33e9e5bb179e", "value": "T1E40833661608321DF4B532F51F3E69FEF954C611378629F3AC966246CC42CE3D86C8AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710672478, "uuid": "c5947e1e-0c67-4a0d-8b9a-578c7c81465e", "value": "1572864:xf6LBYJ9SYQRZi9AYQxwHxZHBFdNYZvpXm6IKEAK:xGuT2ZcARxMzFC3IKEb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710672478, "uuid": "f319748b-6a74-4975-86bd-0ea72d428791", "value": 82612692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710672478, "uuid": "50cb7b6c-0522-4e1b-852c-941cdbdad66b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710672478, "uuid": "df3a1164-b5af-479d-924e-510d65ef9898", "value": "Planets Therapy Installer.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2879b8b1-e401-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710640412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710640412, "uuid": "a5255536-867b-459a-ad2a-2ff6700851f2", "comment": "Malware payload (RiseProStealer)", "value": "3537abc59e0715d6cba730faaee40a9d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710640412, "uuid": "266182b2-b87d-436f-a950-86c8372db762", "comment": "Malware payload (RiseProStealer)", "value": "476a5e072f6d67eab240e9f87444d8f21379b77c3fb973d1b5a5b18db094be5e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710640412, "uuid": "f66a629d-5fa1-465d-a52d-0e72eefbb15f", "comment": "Malware payload (RiseProStealer)", "value": "f8917cc1ab15c667673e02ffcde2967f08988ca9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710640412, "uuid": "93727682-4e20-46d7-a943-1d1950f241a4", "comment": "Malware payload (RiseProStealer)", "value": "09bb75e1cb9ff3bfd4a1d9b9ab8b1efd1612d068c58d42be4734068d43de884af40c89acf4f9ddda56b296f546c9d598", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710640412, "uuid": "34002b73-16e4-4661-92e5-5dca100c3b0e", "value": "T120E56DD2B809B2CFD49A37789927CDC5696E43BA47244CC7A86CB47A7E63CC111F5C28", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710640412, "uuid": "f089c916-fee7-4edb-b5a6-cc3108771c0d", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710640412, "uuid": "14441445-27a0-484c-b21f-8424bd3bd27f", "value": "49152:285HXSd4eOzbm0dBzq3IfbT12jYwkw16purRIQjL6ZLgVgu5Ub:b5Hled0dBzq4f312j3kw16purI56", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710640412, "uuid": "1f2b88f4-3763-4005-8bc5-387966523b8d", "value": 3187200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710640412, "uuid": "4336d65c-5225-4d0f-9522-c48ddf89263f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710640412, "uuid": "f88a8e39-326c-43ee-9ac0-e1d52250a59b", "value": "3537abc59e0715d6cba730faaee40a9d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2795fd7-e436-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710663433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663433, "uuid": "8fccd72c-e63d-4889-8fa7-a3270a08c94e", "comment": "Malware payload (Mirai)", "value": "62ece49a20e070eb7848b0468d1e7807", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663433, "uuid": "a3be7cca-5ba8-452c-bd31-944b7f31097f", "comment": "Malware payload (Mirai)", "value": "48478c5b1741489f55ece4d04a6c5ce7874797b6fd6899bfe0e92a1de818a209", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663433, "uuid": "2d7562ec-2f06-4254-b989-1a3b421f6da7", "comment": "Malware payload (Mirai)", "value": "52a4e64f5b91f3a3797c94723557a7fd9f8aa636", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663433, "uuid": "de48bf5e-e1fd-42a3-bdd1-3b243f7fd5be", "comment": "Malware payload (Mirai)", "value": "cf0494e0f2bd79d92072f6f9782dcb771d4db467389cfac10b0461f8e8cd38fbbc61567bb26912e0315644a6c674c617", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663433, "uuid": "0aa03993-afc0-4531-bddf-d75e1452024e", "value": "T1CAC2E1A360F5CA17C8B7827B1E3D19A661606434634DEE2D376A5FC433460E0657ACCB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663433, "uuid": "f175bb53-ed87-43b8-b24f-6ae9adc168f2", "value": "384:MRG99WXUx5+bkbRaliVErjrL9VD9jPwrSaf5CwTvDyLTwfflrTHOBFR0j/y5ZCAe:95+Kcrb9VDJee2KTgdTHOBcK5ZCAyU8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710663433, "uuid": "d95bbfed-1dd4-426c-abed-948716ca91d8", "value": 27704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710663433, "uuid": "2e620976-e6f0-4c46-8031-3deb8a69a6e8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663433, "uuid": "0adfe40b-de9b-4b41-8031-00d3d4453def", "value": "62ece49a20e070eb7848b0468d1e7807", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82664f45-e470-11ee-a120-42010a9c002e", "comment": "Malware payload (IRATA)", "timestamp": 1710688237, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710688237, "uuid": "e4714dd8-f8e4-4a4c-9c64-9d2e1b13570b", "comment": "Malware payload (IRATA)", "value": "4dbb47ed77c9ae9d22c0e7ff1661b910", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710688237, "uuid": "4363382b-cb5d-44f1-93f7-677f22701dd7", "comment": "Malware payload (IRATA)", "value": "49f8eb9779b3096ca81339c7a6d3cad6a8fc20b3d91ffe103c19935d330ad0aa", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710688237, "uuid": "02f26b2c-d805-4967-94f5-8fbae7a079c3", "comment": "Malware payload (IRATA)", "value": "b041daf9f96b284f51561d8532e76ba52687a50b", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710688237, "uuid": "0ad20eee-32e2-4932-bf74-70324d5db3a2", "comment": "Malware payload (IRATA)", "value": "f8d81a814385527175ddba37b3e1235d322eaedd9de45d543cc087e2a49926e351b14a2df4b454dad9532e186452a524", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710688237, "uuid": "6b4b4ad9-6efb-42d2-9115-073f03f67a5c", "value": "T1B536586EDF014D2DC9A4CF7140AB05F6621817444E42EA3D1BBBA0A53867DE83771EBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710688237, "uuid": "3afc5c1f-8b84-41be-9401-9d096056d6e3", "value": "98304:ATVUJ7O9MqXehCX5XWkkuGjTf6EE1P61T:ATmJ70tbmiShiP61T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710688237, "uuid": "2c90b167-878e-440a-8eb6-6bd0ae079834", "value": 5096121, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710688237, "uuid": "fa046b10-f77b-4586-9b6a-7542c89d007d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710688237, "uuid": "92ee957c-666c-492d-894a-98de982df664", "value": "Eydaneh.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9caa4461-e405-11ee-a120-42010a9c002e", "comment": "Malware payload (Adware.InstallCore)", "timestamp": 1710642324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710642324, "uuid": "922779cc-18f4-4ddc-be4b-bdb7bb4d4386", "comment": "Malware payload (Adware.InstallCore)", "value": "1daaa7eea77bd71b707b98746309cdee", "object_relation": "md5", "Tag": [ { "name": "Adware.InstallCore", "colour": "#35D5E5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710642324, "uuid": "2833daaf-9f51-4a79-ad5c-27c2fe1ced19", "comment": "Malware payload (Adware.InstallCore)", "value": "4e13c2bdcdf95156a12142fee6d32a594a779d15c3a6bcc2c41a2681321b2124", "object_relation": "sha256", "Tag": [ { "name": "Adware.InstallCore", "colour": "#35D5E5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710642324, "uuid": "86383566-a16f-4fde-b683-095113554477", "comment": "Malware payload (Adware.InstallCore)", "value": "f400f642366f9218da1faaa398aff53a399c5268", "object_relation": "sha1", "Tag": [ { "name": "Adware.InstallCore", "colour": "#35D5E5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710642324, "uuid": "b83734d4-a098-4a20-8186-4485a6f06f99", "comment": "Malware payload (Adware.InstallCore)", "value": "19519ad48d1a23eb570a2b02afb81adfe80b7286e37fc38f0b5be9ed9896490d69e7b0b94af36570ddcee738cb475621", "object_relation": "sha3-384", "Tag": [ { "name": "Adware.InstallCore", "colour": "#35D5E5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710642324, "uuid": "920bd377-c87c-4bf7-bc1c-04611c76a1a8", "value": "T197E63316B3D599AEF08ED1B0097D6139E726AC5E310B44037B8D41CE0F6BE69B78B12D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710642324, "uuid": "a0670efd-3d7a-4610-9ce8-ce36ca72b05c", "value": "2fb819a19fe4dee5c03e8c6a79342f79", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710642324, "uuid": "6bc4dfc2-3ab4-4b27-9012-827f5ec1c02c", "value": "393216:D/jCZEEIjt54RXORIAXngRawI2pWQWP3Mw:D/jCZsYRXORIAXnyJIGWdUw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710642324, "uuid": "200817c8-f9f3-4660-aa54-bafdae853a57", "value": 14780165, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710642324, "uuid": "650c8188-d2fd-4f9c-a527-dc773a7e4bbb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710642324, "uuid": "ba79ed38-88e9-42f6-b3a6-51f2c6e06a80", "value": "SecuriteInfo.com.Riskware.WinVNC_based.514.17121", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32b474c1-e472-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710688962, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710688962, "uuid": "6825e9f9-c57d-422b-b18f-9cf6fabba42d", "comment": "Malware payload (RiseProStealer)", "value": "5abcc2dc51912559915c6034a9096de9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710688962, "uuid": "952e4a0b-5193-4d71-a492-064b6ff5e36f", "comment": "Malware payload (RiseProStealer)", "value": "4f437f42f396b42c28698a98c3b7400b2e48eb0ce5a3d374be42aa8a83096743", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710688962, "uuid": "f739eaa9-5a22-4bb8-a927-8052bdfc2688", "comment": "Malware payload (RiseProStealer)", "value": "74e9f8d54f4a3b7a67cc6c70e3243befcaea198c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710688962, "uuid": "0c6dd6d9-c931-4711-9811-c7276d516acd", "comment": "Malware payload (RiseProStealer)", "value": "907f9d8a4b0315dcfa23658b3aa5cbe1467562045b002f934f33102265e727384f19f0f915831d692a54209ef7a731e2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710688962, "uuid": "d4cda73b-4d1e-47e9-afc6-e180ec4a08b5", "value": "T1D5E57C96B60476CFC49B1B74B627CE82591E02B9472449C3A87EB4BA7F73CC039B5D24", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710688962, "uuid": "d3de09e8-3fff-4166-9864-f3318536c857", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710688962, "uuid": "8de4546c-2008-408f-9a90-dd5b323a88f8", "value": "49152:fXN3u+RkDMYW0tE8inyBx6vIB0Zvho//651YqOgO/UB2XRfB3:vUTVZE8inyBkdZvho/ybYh/oO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710688962, "uuid": "a4a72ee7-52ab-4af1-904d-bcf4a85d804f", "value": 3262976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710688962, "uuid": "bb64b3dc-8131-4f1a-a17f-3f40df4eb87d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710688962, "uuid": "194c7091-6739-4f18-8d20-4d643ee8adc9", "value": "5abcc2dc51912559915c6034a9096de9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e55eff36-e3f3-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710634715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710634715, "uuid": "473faa49-45fb-45ac-83ef-a1751b83c102", "comment": "Malware payload (RiseProStealer)", "value": "a00790934f9954e1b8410bc08aa6f81f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710634715, "uuid": "697989f3-359b-49e2-bf11-1ed262afeb83", "comment": "Malware payload (RiseProStealer)", "value": "52a7848daa2318b44df93b33eaa9acaaf5f3a0ef83478263e40b6418af49d8b9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710634715, "uuid": "6ef2d403-f94a-4568-8989-acab9b14946e", "comment": "Malware payload (RiseProStealer)", "value": "4e3556a745e6fcb5ef7f25a2bd13760021d524cf", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710634715, "uuid": "ee532380-6722-46cf-a27b-617a344434ca", "comment": "Malware payload (RiseProStealer)", "value": "7fee3510957a7806019bd2af072b99d7b0931c80a8fc6dfeb3c354db9dd6a43e08eda57f267f3e7bc2a03f327e7e3594", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710634715, "uuid": "ba91d0ff-57ab-4518-b306-feadf7ec2160", "value": "T168E55DA2B90671EFD49E27789427CE415B5D03BE831448C3996CB9BE7EA3CC115BEC24", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710634715, "uuid": "9986f089-e35b-4bc4-a017-384bb1bdfbf6", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710634715, "uuid": "a7494e2a-c92e-4f10-b040-99bbca063a23", "value": "49152:b85HXSd4eOzbmN22vn4m732HgcI1m7p6XYIyqeT0d20/eidAB/:g5HledN22vnR32HgcNFImrT0d20cp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710634715, "uuid": "d4db79c5-7530-4b0f-8df4-682990b2fd65", "value": 3175424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710634715, "uuid": "bc0ea558-d002-48ec-adf8-440ef0aff7f4", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710634715, "uuid": "394c8ecb-1284-4446-957e-bc0a19a7d928", "value": "a00790934f9954e1b8410bc08aa6f81f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd08d1a0-e444-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710669464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669464, "uuid": "c2b5c88f-286c-4f43-b74b-97a7c1f62747", "comment": "Malware payload (Mirai)", "value": "be592d71f223d6bc59eada1c16b5a76d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669464, "uuid": "a89ad617-e0ae-4d5c-bee3-62a9bd8a8924", "comment": "Malware payload (Mirai)", "value": "53194e8500ae801dd4b1d8a964e5cff9ec9c0d3dccf2b2f498fd69ed0dd704df", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669464, "uuid": "94a2d8c3-ffc7-4549-8692-a256690577f0", "comment": "Malware payload (Mirai)", "value": "059872c9d3f588de5a3e8523b7ce304effe0e46b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669464, "uuid": "69c9ca31-cb63-4ecb-8ed3-17fe4cd8501c", "comment": "Malware payload (Mirai)", "value": "cc1a0abfc3a24d514ab951a5578296f440d2a62cb064be990b324d448d0b6ad100db0149cef3f560e711997bc7cb03a8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669464, "uuid": "e8813be3-fb0a-42a4-adbf-baece7868a73", "value": "T1A8D2E08876D763FA8CCDCABD764E003A306E74A9B6B2A363B305C5530776180E655E8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669464, "uuid": "d8d09017-5d9d-49c7-9177-bae6f0959efe", "value": "768:+lxKd29WcxEns+V6IHE4RlY990MT8jEwyq:zd29tn+9HEw0amiEG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710669464, "uuid": "fcddb125-a198-4135-abd1-fafa1c13a14c", "value": 29464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710669464, "uuid": "401762de-6711-4e28-9f11-faafa10a81bc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669464, "uuid": "14e3e824-0210-4b0b-b9d9-6457b3d99fb6", "value": "be592d71f223d6bc59eada1c16b5a76d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1cbc251-e444-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710669472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669472, "uuid": "b15aa3d0-d4bc-4bd1-add0-6bb197197a8e", "comment": "Malware payload (Mirai)", "value": "a85813c7a95569b7c0751efe925a0053", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669472, "uuid": "d694d941-8ce6-403b-a079-3c76632e791d", "comment": "Malware payload (Mirai)", "value": "53ed32c9d31423f84b088879c2d59c31312576b6ec5d1f3e77071f3a93316a3d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669472, "uuid": "faaaffa3-300b-4a71-a8d0-a89d4228137d", "comment": "Malware payload (Mirai)", "value": "bd7dc875905d9f57f7f2401355120cc356ac495b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669472, "uuid": "4bd5264a-3325-4136-aa64-082fb0a66747", "comment": "Malware payload (Mirai)", "value": "1c21d852e3fac68f1005381e3db65b259f6aa34b803c957ec73bd03a97290400dce9d53e8f7bd43bd84a7fdca39b96de", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669472, "uuid": "0e09b354-8bae-47ed-8073-21c269856c7f", "value": "T14B735D24A9792E26C0D4A17B61FB8361F2E6230E25B0965D7C760F8FFF2464468162B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669472, "uuid": "f161b720-7851-4302-afcc-50d85c1b8a90", "value": "1536:5ms+geQfvznpCR8ee84cNsAUiAvFI7IlNnws8e:YwfdNu4cmZvFqI3w7e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710669472, "uuid": "dba22b2b-fffe-4e38-aa89-0661014bf477", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710669472, "uuid": "b548dbf1-6c14-472d-845e-6bb64054e16e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669472, "uuid": "c10c53d1-c54e-4660-b079-fc213e68cf66", "value": "a85813c7a95569b7c0751efe925a0053", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "494c88b5-e47b-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710692865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710692865, "uuid": "2861bc3f-3896-4f70-a89c-2155b786b205", "comment": "Malware payload (RiseProStealer)", "value": "94182f595b2688db6eff8cd45fc6929d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710692865, "uuid": "b3be1c53-04ec-4cc2-b313-1a96cb98ba66", "comment": "Malware payload (RiseProStealer)", "value": "54457d0453c24e72c1faecce15df7c04f19500bf5c52ba0859a30892f3adab7c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710692865, "uuid": "6cce69e7-c5a0-4036-a076-db0631dbab46", "comment": "Malware payload (RiseProStealer)", "value": "410b1d3d253aa9832d287d9c5247b5567677661c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710692865, "uuid": "b336b399-5b13-43b3-a9b3-fbb8541ec454", "comment": "Malware payload (RiseProStealer)", "value": "084b84dc0d45856a23261dfcb4833c71317615d16616a0d5f2bbdf7795175e3297e0d936063feffc087257db8c7c112e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710692865, "uuid": "17f2da84-cb2d-45f8-9681-5046332cb8bf", "value": "T120E54B63740962CBD8DE27749427CE826D5E47FD472948D3A86C64BA7DA3CC223B5C2C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710692865, "uuid": "46613a51-cf78-4e61-a1da-f48bcfaa84f9", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710692865, "uuid": "65d068ab-aaf6-47c6-849b-3bcb37ec47f3", "value": "49152:EXN3u+RkDMYW0t+otXrK3OAlu9UKpzKTdYxomXbRz:kUTVR+2XrpAlu9UEKTdYZXV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710692865, "uuid": "c6190d77-7097-4272-a0f6-83c0809a9443", "value": 3317248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710692865, "uuid": "daef0f9f-5ef1-44e7-961d-73c7c2ad827d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710692865, "uuid": "a91f44bf-9b3f-46bd-a8a4-42541aa076cd", "value": "SecuriteInfo.com.Win32.TrojanX-gen.28599.990", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93477abe-e437-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710663784, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663784, "uuid": "d9c48477-266c-447a-80ae-2c9da3c085e2", "comment": "Malware payload (Mirai)", "value": "d87e69f195bc6ae984695233b27abbb8", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663784, "uuid": "43ebc632-f7a2-4cc2-8d11-19bad530f1a7", "comment": "Malware payload (Mirai)", "value": "55adcb025d78ccd87356da1842e16f70e66d791596a24846cedb647e7b64d7fd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663784, "uuid": "ef83f725-0d26-41e9-9a12-896bf770651d", "comment": "Malware payload (Mirai)", "value": "5fbee8d99207edde0a991db80e584e43d79c7948", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663784, "uuid": "549d3236-2b66-45e7-9010-72881e6ec6f3", "comment": "Malware payload (Mirai)", "value": "8bfb519632a25e97558115d9ff31298c01ccac8fa14637e072b967527486025d467d87713b099af6c5f003846bcb1c71", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663784, "uuid": "202bd3e1-feca-4bb5-a088-d8aa0e8fcfb4", "value": "T15514981E6E228F7EF668873047B74E24976D23D627E1D644E1ACD1101F6039E681FFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663784, "uuid": "f68319be-79b4-4b18-a62e-98acc04e8cbb", "value": "3072:1XP54s71KXkPd1W19urwKgnkti7uvSX15s9yjp:1XhgXG1XMNkieSF29yp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710663784, "uuid": "7d992117-abd7-470c-a116-9eaaa2e0fd28", "value": 194844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710663784, "uuid": "5334e783-b0dc-4caa-8a8a-e94578e2d7c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663784, "uuid": "dee356b7-6922-48b4-9dbc-2414bdafc2d9", "value": "d87e69f195bc6ae984695233b27abbb8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8530a38e-e439-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664619, "uuid": "8b106408-2ea8-4fb0-8d23-46b9fd01f2e1", "comment": "Malware payload (Mirai)", "value": "b40c3eb5a012d3c569c25434623959da", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664619, "uuid": "496f9ea1-78fb-4917-a1fd-9ca8ffc3db1d", "comment": "Malware payload (Mirai)", "value": "5748c84bfab410e05265b112e053600a66cd621f15a0b728778137eb27744103", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664619, "uuid": "9c95cf34-99e9-4bfa-9a9c-9f237cc485f6", "comment": "Malware payload (Mirai)", "value": "e1fdc9ad95d909a556befb51459b3135dcf09388", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664619, "uuid": "9d52375e-03d4-4aae-b155-4f7c5ea6b487", "comment": "Malware payload (Mirai)", "value": "46377c25a9b6787682f9430e96aac20dcf8040ed8b44684cf4f001589a6553cbdce9e39f6f806e9550bb91f4a0e52ba3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664619, "uuid": "1ba7cc1d-b5e4-4b4c-af0b-c6366f7b2e8c", "value": "T110634B81BD819722C9D2267BFB1E029D372A43A8D2EE7303D6256F2177CA8570F77640", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664619, "uuid": "00764e3f-b26a-4e08-ba81-955ded3fb14e", "value": "1536:S2Cw3BEgwnLp7LMFGbnITRMlF1XyhSb8HuGVIzi:Dd3BRwLpF4RMlqobMvIzi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664619, "uuid": "f8848eed-0396-407a-848e-6cd9de410302", "value": 72732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664619, "uuid": "39412599-9e4e-4adc-9e3d-80c9ba51826e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664619, "uuid": "f31da3eb-9225-4848-a9dc-652a1724bebb", "value": "b40c3eb5a012d3c569c25434623959da", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8415a3c5-e44a-11ee-a120-42010a9c002e", "comment": "Malware payload (CoinMiner)", "timestamp": 1710671918, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671918, "uuid": "13ca50c7-3b18-4fb2-b35f-39922ab97e6f", "comment": "Malware payload (CoinMiner)", "value": "f1f2f4497b72461938d0ae37311ed5ca", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671918, "uuid": "ebe54819-7bd7-4a78-8ce7-b1a49f6bcd4a", "comment": "Malware payload (CoinMiner)", "value": "5d4f792eac0f9f8cd5dff993ed706ea5291fb784666b3531917d0c483cb98291", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671918, "uuid": "920a7633-9202-43ee-81a3-63462dced2d0", "comment": "Malware payload (CoinMiner)", "value": "258d3d3248c644d401262aed9ce62d1a1b620703", "object_relation": "sha1", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671918, "uuid": "63e013e0-7938-43e8-8bb2-1089e9f93b04", "comment": "Malware payload (CoinMiner)", "value": "217e2b62f9aec661c77937df2dfeb55b161f70bdf3134d3769359d8bab42f14f772c1f27b4a882c42a4496c253c7d298", "object_relation": "sha3-384", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671918, "uuid": "231a3ead-62c1-4fb3-9eb0-6769965432d3", "value": "T16BB533DA4BCD0AA6F4C15BF76AD997632D67F1A67DE80D0211D2C20AE43E8DC530F582", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671918, "uuid": "86bab9f0-1e6e-48e0-82fd-d68991726888", "value": "49152:L5IHroOe4YXL7YMbBjPGfl04OS8e7XMC68/X0t3goTyZ:L5IHcXL7Y8xP2z8eN6AXZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710671918, "uuid": "c0fd7d7f-8f32-4e92-8e4c-8384e7a5f70a", "value": 2365664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710671918, "uuid": "fcf72f65-2181-409f-be69-aa71f1f5ef9d", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671918, "uuid": "ab2aa759-aa22-4068-8f2f-12877ad3ad69", "value": "SecuriteInfo.com.Linux.Siggen.4074.276.17824", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d2690b6-e415-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710649009, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710649009, "uuid": "47487253-6f4c-4ebb-a1dd-926ac117f943", "comment": "Malware payload", "value": "dc7059ea713792005e443564f8153520", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710649009, "uuid": "6a00544d-c382-4d2b-b012-bd90d514e7ac", "comment": "Malware payload", "value": "5d95ad92f89417f1f0e01e4ce6e5270b54bcd631378c71c5568989636ae3ecda", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710649009, "uuid": "60470e6a-d261-42a9-abdb-b573990ba4f7", "comment": "Malware payload", "value": "87737584c086ad1f8e9c057fb3d261224351a513", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710649009, "uuid": "7fcf4b1c-fc15-4b05-8792-a6f5f5452284", "comment": "Malware payload", "value": "aa681c5d88348f6381d6eac3a609daaf3eb9bf6ba0cb7d393ffc25a7e5ccc0c37b649a1989fb6ac89a408795fa1ba26b", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710649009, "uuid": "33730bc5-993a-47d0-9780-7b766c7ee705", "value": "T1A0F1FB32F3F48817ECEF4FBE75B64A0163381917A991E7994DC520AA48D338106577EB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710649009, "uuid": "448bb41c-766e-41b0-804d-9c60e846dd11", "value": "dae02f32a21e03ce65412f6e56942daa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710649009, "uuid": "80062c5c-a616-4463-b6af-101609112d8d", "value": "96:AItdf0e9xEpyfXUo3FBrowQJwFyvbQXNeBMEqEmvsj4i2qjwxXzgI:VtvnEoVBroJwFy0eBMEqEGw72OwRb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710649009, "uuid": "da117222-2475-4610-8670-5126c39128ef", "value": 8192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710649009, "uuid": "b16a21ff-8384-40d4-a932-0554a0053538", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710649009, "uuid": "293e47f9-04df-4a6e-8014-977268147327", "value": "SecuriteInfo.com.W32.Trojan2.QCYE.20701.11101", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9518f22-e42e-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710660062, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710660062, "uuid": "a7f1ae36-a392-4c07-9c26-ab3bcd963128", "comment": "Malware payload (RiseProStealer)", "value": "32274faa1ad12d132b09597d3ab3fda9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710660062, "uuid": "134bb789-e995-490a-aef5-b4190e4bb035", "comment": "Malware payload (RiseProStealer)", "value": "5ddaaad889002aa34000c8aba69746df8b5e1c0c2ebc0165bc205ea081ea9698", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710660062, "uuid": "84acf114-6045-4acf-8407-e8055f906d7f", "comment": "Malware payload (RiseProStealer)", "value": "9ee1cd34fc47b0e2f702cc05ad1e6bcd26dccf4b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710660062, "uuid": "407cdaa0-9743-414c-9d04-345ecbced85c", "comment": "Malware payload (RiseProStealer)", "value": "96e7657d6dc43e1124c6d7f4f7efc9184d7843e6b6c423ab0852684f543e53ec493475e32e36cbce2eccec86b80f61c4", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710660062, "uuid": "f0553160-8d28-4776-bc7d-34a4d558dfe6", "value": "T1D4E56CA1B40972CBD48F22B4881BCD82DA5E47F8471549DBA92CB4BBBDF3CC815B5C64", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710660062, "uuid": "767b9a81-f391-46e8-b3f1-b365850aa0a3", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710660062, "uuid": "b51ef883-ccfd-46a9-a969-8fdbcfc4477d", "value": "49152:B85HXSd4eOzbmhzyUiIa7MvASOin1uM5D1VwWUFOl:a5HledhW3Ia7MvASOinwM1VwO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710660062, "uuid": "c62507bd-41c7-49a8-9da4-876906219df6", "value": 3236352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710660062, "uuid": "3dbc79b7-2a34-4703-84e8-7b273652cb99", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710660062, "uuid": "c30b2e25-b857-4395-b34f-719ed78ba54e", "value": "SecuriteInfo.com.Win32.TrojanX-gen.29790.14367", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e7e99eb-e447-11ee-a120-42010a9c002e", "comment": "Malware payload (DCRat)", "timestamp": 1710670513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710670513, "uuid": "37ccace3-ccf7-48aa-9e02-5cc23f75d686", "comment": "Malware payload (DCRat)", "value": "125ef93b1d3162aede8c49768d1c9007", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710670513, "uuid": "cbd8416b-a475-4690-be36-66082aa939f5", "comment": "Malware payload (DCRat)", "value": "5de166439e50ddf65e251538313e9dc29eab58929e6735d70385615f7fcf4f70", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710670513, "uuid": "26a46676-6622-43dd-a90d-7bf2289e510e", "comment": "Malware payload (DCRat)", "value": "9f6fa10e4c480aa1032eadb3d8f3b795f43e0f8d", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710670513, "uuid": "d727b5f3-cfc2-4b3a-98ce-aea8f7a83d80", "comment": "Malware payload (DCRat)", "value": "da65d3db6504d824e55fa780e557b3b3cba41b51d702fdb0f7dbd8691cd4b2558b64fe587d627b647a5900d2c3aebc00", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710670513, "uuid": "76bbd0bd-6ee3-4c37-8628-8d1d37a065d7", "value": "T13105F7027E48CE92F4091277C3EF45484BB0985166A6E32B7DBA377E16163A73C0D9DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710670513, "uuid": "ec936cee-9345-4a5a-885b-152390221dc5", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710670513, "uuid": "544eb6bc-1a0f-4dc5-a22f-2f1f732ee3af", "value": "12288:vsrUaYHLogEUDklbcUG8TlMvZKjFZO1BgeqfUyojUxVd4Rr+7PNB:GgEUAbBQKjrSJq8yojUiRrGNB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710670513, "uuid": "523ec0c3-2221-4567-985a-89df897e32de", "value": 847872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710670513, "uuid": "b1b0b33c-69f3-4f4a-b3c5-9499e9d998bd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710670513, "uuid": "e0509fd3-0bd8-4e22-9677-b002df94aa06", "value": "125ef93b1d3162aede8c49768d1c9007.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7bea8d3-e41b-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710651872, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710651872, "uuid": "58720a3e-8579-425a-a09c-8674a96b2a64", "comment": "Malware payload (RiseProStealer)", "value": "ddc600fe6f54c7fe6d86ecc8b1ac638e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710651872, "uuid": "535ebcca-b235-4f4c-84ef-6d4e9695e6a8", "comment": "Malware payload (RiseProStealer)", "value": "5e71478fc022fc39353206e4b52ad30402b411eb993e0b2467d4ea054f19543d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710651872, "uuid": "82edde13-052a-48db-a351-2e20a3b68980", "comment": "Malware payload (RiseProStealer)", "value": "66373c216bccc2e2a013ce91835e82456e724657", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710651872, "uuid": "0cb40f7a-48fb-4b75-851e-ea7a57a435a0", "comment": "Malware payload (RiseProStealer)", "value": "f03e0a69377f7ec66fc18c4b2e23586a7902b1acfedcd9f8b53d6b2f7b17cfcce5903aa315fdbc51f879da4b9cc0d716", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710651872, "uuid": "a5fb74d7-2dd7-4e76-985d-9abb57adbff4", "value": "T19566222D5D54C005E46AC0BC9DC2F66CB3762F89052D8BD444F83EDA6DF2AA89F75382", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710651872, "uuid": "7748582a-046d-4d14-b6d0-66b40168f711", "value": "e8ef2e8a62509894a290956c31ee7c94", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710651872, "uuid": "dab2cfeb-c6fc-4f6b-b2e6-fc50fb8b3547", "value": "196608:yl09rcTQKFBziQAAaQrHqarrfbbZYxHwiilD:yl0fNLAaQbPrrfbaG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710651872, "uuid": "33798d6f-53f1-43e9-aff4-15fadef181eb", "value": 6669312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710651872, "uuid": "8efb6037-f87d-47a1-a76b-ecfd3cdebb70", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710651872, "uuid": "61acaf0f-a2f3-42a8-a30d-cfd4aa2fb812", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5489514-e463-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710682846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710682846, "uuid": "405121dd-921e-4571-a221-efdeaeb29256", "comment": "Malware payload", "value": "7858b02c228a9d05d40d6edbd5310d1c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710682846, "uuid": "a0adcd9e-0909-4749-aad2-70f5d31d84d5", "comment": "Malware payload", "value": "5ed64f7fbbb61c1c9313b24f9f51f5b74657f1016e8fb6b0d9ddca78d342008e", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710682846, "uuid": "a70041ad-82ac-4ad2-baef-4b10e0be6be4", "comment": "Malware payload", "value": "5748d21ee0f830183442eb80a87864d8513159f9", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710682846, "uuid": "bfd11248-3626-4480-9b7b-035d63ba412c", "comment": "Malware payload", "value": "d44b589781a84bd2c56f608d60a2f4eff51a66ba3e55c8fe5a5864a32ba789c5c0bea17097365cf7281bfb535af1730a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710682846, "uuid": "2b5e9e84-6322-4477-b6d1-cbe717d396ff", "value": "T15F768D107A86C522D6B141B0DD69ABA643797D3C5FF181EBB1801FF964303D33A36B6A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710682846, "uuid": "2b928cc8-7ff2-4121-be09-24e2fa9346f3", "value": "974f36eb2dfc569d215c2409dc339267", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710682846, "uuid": "797ee60c-25d8-4d46-8a4f-28b377975bd2", "value": "98304:zNZlSSsY5xmcSVNOC/TusscXV6VFhG6xjz48Y9iPWno7YPugF4miK5EC5QEh:hZlShq4Sss+sVjTjz4HMWn/D4bK5jKEh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710682846, "uuid": "188fbd03-8207-4eb8-b463-3957e5dfe649", "value": 7578056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710682846, "uuid": "74d4fbcf-ae56-4539-8023-07a675e785f3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710682846, "uuid": "399c9c70-3f96-4070-b564-5cdc75a93ec8", "value": "SecuriteInfo.com.Program.Unwanted.5510.14987.3841", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0314e7ea-e423-11ee-a120-42010a9c002e", "comment": "Malware payload (GuLoader)", "timestamp": 1710654952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710654952, "uuid": "a7a6e65e-9124-44f5-9656-079f9bc2aa04", "comment": "Malware payload (GuLoader)", "value": "b034d297925345ab9e695dc450db6a59", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#DC91BA", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710654952, "uuid": "613f0cde-ae03-405a-98d0-8c64e660340d", "comment": "Malware payload (GuLoader)", "value": "5fd79e8094fb1ac9dbc167219bc3218cf07a5679edc11f7847c5cd0b2e756309", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#DC91BA", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710654952, "uuid": "3bece95b-eeba-44a3-9246-fc684bb0f5a5", "comment": "Malware payload (GuLoader)", "value": "7241eae19c1c1153ffa0433ec20973a22fd0acc9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#DC91BA", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710654952, "uuid": "e4b5e796-de7a-401b-9fde-9a0dafedd8e8", "comment": "Malware payload (GuLoader)", "value": "10aeeae9625840d8e25629c8b6d223edecdc8c07b1c946b05a2874497926a8ec0c1c0ab395b0d113e279e3e875f835cc", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#DC91BA", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710654952, "uuid": "cf5a3312-bf25-477f-a4d4-041ac1db3206", "value": "T16BE4D02629A6EC13E38467745115EF3C8EA1FE9A1971C2735AF1AC9FB10DF327C18252", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710654952, "uuid": "a6fd9e27-10f9-4696-b351-87c6fed1dc80", "value": "1f23f452093b5c1ff091a2f9fb4fa3e9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710654952, "uuid": "97bb844a-6470-4613-a520-1d74e86ba138", "value": "12288:qyT3x2wQNoujr0vuGV5ilwSNU3ZSAugULXwokYm5eE:9x2VNouWuO5OkZnPU7LkYWP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710654952, "uuid": "ea3f63ed-c830-4689-b8ee-c34420eb41b0", "value": 658720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710654952, "uuid": "31a32538-e99d-4b12-9cf2-76162551169d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710654952, "uuid": "ee7d20ae-f7d2-472a-9fdf-2ecc3172caff", "value": "b034d297925345ab9e695dc450db6a59", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98868a66-e41e-11ee-a120-42010a9c002e", "comment": "Malware payload (CrealStealer)", "timestamp": 1710653055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710653055, "uuid": "88d8f229-a76c-43c1-9c18-ff7b20070838", "comment": "Malware payload (CrealStealer)", "value": "7a2a3c4b7bb41d262ac0f284dda4a6b4", "object_relation": "md5", "Tag": [ { "name": "CrealStealer", "colour": "#5A9C16", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710653055, "uuid": "d2642d27-7633-461b-993f-a1d6ab783330", "comment": "Malware payload (CrealStealer)", "value": "61d293de24420410408b8d4d128b9d82150ea3c38c39a6c4ed12957eb0081839", "object_relation": "sha256", "Tag": [ { "name": "CrealStealer", "colour": "#5A9C16", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710653055, "uuid": "197d6466-a373-4b2e-9e17-b20990531887", "comment": "Malware payload (CrealStealer)", "value": "2d3b4a8c86b68e5af995a4fd4227389036302015", "object_relation": "sha1", "Tag": [ { "name": "CrealStealer", "colour": "#5A9C16", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710653055, "uuid": "02cdfc9e-fbe7-47af-b23d-ac59b9f24451", "comment": "Malware payload (CrealStealer)", "value": "dbc791d6243d552d74ac466aba78e907e375eef550f49f1db7fc769500333175f76033a574af962c1ae71fd0347cded3", "object_relation": "sha3-384", "Tag": [ { "name": "CrealStealer", "colour": "#5A9C16", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710653055, "uuid": "377c4405-6dd6-4170-bf7b-7ead81d4bcd4", "value": "T18C07338092A059F5E471B67D1013C52AC272786113A98AAF4BB8D73E9FD33E32E74F50", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710653055, "uuid": "a2c027a5-9423-41a3-ada8-fc47f94fb7c5", "value": "20d446c1cb128febd23deb17efb67cf6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710653055, "uuid": "a9edb6a9-0f41-4bdd-8027-d04dd91b28f0", "value": "393216:LEkZQP64Qszf490ivaCncvnKhsYGpa6AOB7zilFrLqKc:LhQPKszfm0iiCn1hsYJIB7z+NLm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710653055, "uuid": "d417a7d3-18d7-4357-ac88-b7eeddc4c423", "value": 17340857, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710653055, "uuid": "c010a29b-7267-40f1-a877-fbacb569a4b5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710653055, "uuid": "3113c7fa-de06-4e27-9c9e-143bf47a0951", "value": "SecuriteInfo.com.MacOS.ReverseShell-C.28203.22681", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed04d5f1-e42e-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710660069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710660069, "uuid": "60db81f5-8c1e-4063-a29a-e1f6b051d807", "comment": "Malware payload", "value": "d35d5e1909377fa6d956e235a0d445dc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710660069, "uuid": "cbb71523-6061-4b4f-8709-581397d52e08", "comment": "Malware payload", "value": "621f22755c045a2f3eae49ac8e522d102e0ebbf1c7d849d4382d699e16942bde", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710660069, "uuid": "b682b5f1-ba1b-4590-89d8-a2931e8f7243", "comment": "Malware payload", "value": "380ee249f8fef61693cb4c48d8b7e8924c380847", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710660069, "uuid": "7596446c-5560-4068-9aa0-44b17b4d577c", "comment": "Malware payload", "value": "62ffe474f4819b570d5fe284fc5fa43d31f398ab6b19a3197320db50637752d10d20aae2250e0a4ab45267a13c7283c6", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710660069, "uuid": "b175cc76-5360-4c3f-ac93-c52bd2fefb35", "value": "T191A73302B6409035E9B316B6CEBFBA2D926CBD30431550C367D83E6EAB765E3393115B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710660069, "uuid": "39841836-5b53-42c1-9957-b1862888ac81", "value": "46ba8d95cb7a7b12cca554a1886955e4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710660069, "uuid": "7b3a3380-25f2-455c-8e5d-c9e1ecf3b999", "value": "786432:xvL55/uvgTsh6GHeF4sNGBhAQL5sd1oQFQmhJ+mpzO:xzP/0gTso2eFvGjNsDosjhcmpy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710660069, "uuid": "3d99ed88-6a74-41c4-9062-185d0bc52053", "value": 44254744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710660069, "uuid": "893021a9-2400-4082-b162-9d3ae0f12398", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710660069, "uuid": "aa1b8261-a9ec-496b-9f68-869ad847dd13", "value": "SecuriteInfo.com.BScope.Trojan.Zpevdo.11714.7937", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "801349f0-e433-11ee-a120-42010a9c002e", "comment": "Malware payload (CoinMiner)", "timestamp": 1710662033, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710662033, "uuid": "eab4f849-2fe7-43a7-be36-bd6df18b99d8", "comment": "Malware payload (CoinMiner)", "value": "b9a7447bea5d59be1c42eac881139ecc", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710662033, "uuid": "4b69364d-3503-44ac-b231-efb2b589745f", "comment": "Malware payload (CoinMiner)", "value": "63a5dda05d8030c7999cd925b263b4cd47ef7bdd34d97ec133964a23b85ced23", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710662033, "uuid": "296adb74-90e9-4ef3-a69c-146e4fefb632", "comment": "Malware payload (CoinMiner)", "value": "b70ce8b759c31a8aa1836668159ed837d7a07b2e", "object_relation": "sha1", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710662033, "uuid": "91a3ebc9-0df9-48ed-bc90-879aade3f4f3", "comment": "Malware payload (CoinMiner)", "value": "c96d57cca4baf3f04550f55a4136d0a12effffb6fc0bf8291152ee3e68cd88736cafc7a8124904fc7e7fce79054ed496", "object_relation": "sha3-384", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710662033, "uuid": "31aa997f-4ae0-4e4f-a6ec-a18f3d332157", "value": "T16E9633D2AB820625C2BF77701782EF056C403D640F7DED8B9DDC01BB76722D92A6A725", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710662033, "uuid": "d3fb140d-94d4-4cda-81d8-b1a6dec232b9", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710662033, "uuid": "f78fbd75-cb4b-40a2-b010-1a05b39a1c04", "value": "196608:zNA4c0nY/9EYHtcv2x1Y0w6AAQR1LeeQLcMTWcGK4v5:pRcUY/ptq23p2SLcj7Kw5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710662033, "uuid": "a02ccc7c-0fb9-490a-8ff3-15451dbf5462", "value": 9288072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710662033, "uuid": "b98a797a-abec-4758-bb02-7c96cbe3fb10", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710662033, "uuid": "3e288d26-4360-45fd-9377-c8f20f909566", "value": "b9a7447bea5d59be1c42eac881139ecc.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "604b7138-e438-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710664127, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664127, "uuid": "9478c825-b3f1-4065-b93f-35b667b28242", "comment": "Malware payload (RiseProStealer)", "value": "5034869e0b3f53f27e621a80e0a3e653", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664127, "uuid": "b65cf511-7d7f-4d56-a0fe-6d707ccb2ed2", "comment": "Malware payload (RiseProStealer)", "value": "64d21a1a523716fd44ff66ac425f63aba0ee6eb79d18af9d70248043cca624f2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664127, "uuid": "61d1cfc6-45b0-40d1-aebe-76c633d10a34", "comment": "Malware payload (RiseProStealer)", "value": "3f9d8df78e3c0116b364263fd4e21f48a98e2712", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664127, "uuid": "debb3aec-c410-401b-bfbd-1205e914ed54", "comment": "Malware payload (RiseProStealer)", "value": "5c5b2c1b6971a263c1ca6bd28f9d63da6b098e96afba062bb7b2353f7e0122cbe93d4209eb72a95db427eecd72fac3a7", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664127, "uuid": "b97e8930-0b89-4407-9b77-a84fea1ae483", "value": "T174E55BA2A90971CBD48E23785537CE86DDAD03B5572049C3A85C69BE7D63CC523BAC3C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664127, "uuid": "7da876cd-5857-4c06-b372-05093be60b4e", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664127, "uuid": "c854d6c2-8e76-4795-b9bf-4aba420e8187", "value": "98304:n5HledXYH0T4banK/wnlIh+qw+7cnQa4Mt:xlYXOhcjdt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664127, "uuid": "27133929-05ae-40fd-96f8-cdcf9cc626c6", "value": 3224064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664127, "uuid": "34152d12-0d73-4f68-8959-e56170d95d8a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664127, "uuid": "b4727a48-386b-4aee-b651-e7d47ba6e8dc", "value": "SecuriteInfo.com.Win32.TrojanX-gen.28879.6937", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb84fac7-e466-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710684118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684118, "uuid": "ec72a807-0cfa-47af-b120-8558aff23ef3", "comment": "Malware payload", "value": "2f56a4479897688d2558d6f1e325b688", "object_relation": "md5", "Tag": [ { "name": "browser-extension", "colour": "#966E56", "exportable": true, "hide_tag": false }, { "name": "FacebookStealer", "colour": "#8B7032", "exportable": true, "hide_tag": false }, { "name": "FakeGoogleAI", "colour": "#9B9A75", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684118, "uuid": "4f5e5b6a-b0b2-4e44-925b-4100a8273665", "comment": "Malware payload", "value": "651e713465626cf535f34011ded936202822d47a88a3c536edd1c5ee995ba505", "object_relation": "sha256", "Tag": [ { "name": "browser-extension", "colour": "#966E56", "exportable": true, "hide_tag": false }, { "name": "FacebookStealer", "colour": "#8B7032", "exportable": true, "hide_tag": false }, { "name": "FakeGoogleAI", "colour": "#9B9A75", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684118, "uuid": "d7b32acd-455a-47a8-aeb0-adedb2c1a225", "comment": "Malware payload", "value": "ad8fbaa0d8825bdddba85b9ab82d671285c34ac2", "object_relation": "sha1", "Tag": [ { "name": "browser-extension", "colour": "#966E56", "exportable": true, "hide_tag": false }, { "name": "FacebookStealer", "colour": "#8B7032", "exportable": true, "hide_tag": false }, { "name": "FakeGoogleAI", "colour": "#9B9A75", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684118, "uuid": "88bb5ac1-7cef-4131-8cc2-ef9db11f247a", "comment": "Malware payload", "value": "ef2352c1c26a59e4db93d09e6a21ca4567c32c622d846ef64b0f637e867ed1441d30cb00c3a6d77c8e006ff0e68cb20b", "object_relation": "sha3-384", "Tag": [ { "name": "browser-extension", "colour": "#966E56", "exportable": true, "hide_tag": false }, { "name": "FacebookStealer", "colour": "#8B7032", "exportable": true, "hide_tag": false }, { "name": "FakeGoogleAI", "colour": "#9B9A75", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710684118, "uuid": "a768591c-0ccf-40eb-9804-882090d40d0c", "value": "T15BF4CF1176C75632D1BB033136BE67A15B7EEC305EB4860B9394B69C2D712C0A369FA3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710684118, "uuid": "e0fdbe7c-0570-4b89-b3e9-7886b2060f4c", "value": "12288:3+1ZRUFb4H6KJF/pDYkw0gCvoKWg6AZznX4y42tAX/YDq6Eo4ibmw:3+eOxtwYXT42tAXADpD4X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710684118, "uuid": "cda75b75-1e91-4c2a-b1d4-c781d13d84ca", "value": 741888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710684118, "uuid": "fad7487f-2de6-4970-8096-4c442f1fe2c0", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710684118, "uuid": "2aa1020a-3815-405b-9406-6f2d33fd5b0c", "value": "AI.Gemini Ultra For EU V1.0.1 PC.msi", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bf3d4d5-e415-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710649007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710649007, "uuid": "43aed082-db5f-4f95-9d10-eaf5f93f138a", "comment": "Malware payload", "value": "044075b412dafaf143b18c6bc7ffeeed", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710649007, "uuid": "3fc71dd3-9df7-4182-a2fe-eedc4d84e1d6", "comment": "Malware payload", "value": "6528555201920bfb6e1323edc698eec952fd54272efa756dbca534147b33ab44", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710649007, "uuid": "7d21da00-b6c7-40f1-852f-022e27df295d", "comment": "Malware payload", "value": "a202cc8f75ad10e8e16616b2fc35b3de6c0dea38", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710649007, "uuid": "6060b5a5-138f-4561-b639-ab27608a39eb", "comment": "Malware payload", "value": "f8a9d00ed99fa7537786eda4fb90a609ee11cc4348342d57bddcf7354110a1875ed51d73fc53ecbe35ee897cc8158188", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710649007, "uuid": "c6366258-cb96-4e6e-b7d4-ceab51f4760b", "value": "T1E885AF7773E6C0E9DA7B90FAC5114612DE317CA30B288ADB2150762EDF73AD05A3A711", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710649007, "uuid": "f31d4b3e-ef59-4ff4-98cf-8665021f69c5", "value": "3722f0b2a70a73ed422c0ef92102da14", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710649007, "uuid": "7c144dd9-8be5-402a-998b-8bf32c9a0cc4", "value": "24576:WSzyC9r2v9qv/38V0cxPYZE2fg7BfBvCWqkmmPdxsSfo4NaY/:WkNM9A38V0cB7B5aWHtP3fV7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710649007, "uuid": "7cf3a1d3-46e3-4dcc-80f3-7e206ce14092", "value": 1719296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710649007, "uuid": "c8e492ab-c5d0-4100-9c4f-025b865a6577", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710649007, "uuid": "c49b9ae5-f445-4ba1-8fcc-eafecb53136c", "value": "SecuriteInfo.com.FileRepMalware.107.23352", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78c0f165-e439-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664598, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664598, "uuid": "1b513996-1c46-4eae-a201-2b0155fe1183", "comment": "Malware payload (Mirai)", "value": "adb6ec9d489d724f1db98a4064ea3de0", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664598, "uuid": "0797a38e-c849-4749-8b31-0fd2a7284c9c", "comment": "Malware payload (Mirai)", "value": "664656324a1071e5892b87fb8c94d437f1df164b8b09f034e03623bf6821335e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664598, "uuid": "c9e1fcd5-c403-48c8-8ad5-6436c9fa67a4", "comment": "Malware payload (Mirai)", "value": "0e059f35557c60704cbc347f8f0e151c9aee0833", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664598, "uuid": "b9458fe4-b3be-4384-a81c-eeb5b8602936", "comment": "Malware payload (Mirai)", "value": "c15117e81eb22580ffd04afc7f3b98c3e64d9e80cf053b0d4245f7ff9a2ee35cbdeacb3da7d3b0558d4ba2067f2126ba", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664598, "uuid": "dc0a50a9-1a80-4e04-888b-b079186a19f4", "value": "T15B733A81BD419B12C9D2167FFB1E029D372A43A8D2EE3303D7259F21778A9670EB7641", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664598, "uuid": "2318d57b-4986-4340-8b79-649cfe73417f", "value": "1536:Vp3f+DtijgnX3ustfdmmuuAOfKZTG/9Gj/j7v6w:/3f+Dt0gX3VdjsOfqg6b6w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664598, "uuid": "8c66cb54-67f7-4e1d-b23a-2d1bc60aec08", "value": 76212, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664598, "uuid": "e2f4aef1-f547-4658-8366-a0b4ffe91785", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664598, "uuid": "58fa82ed-9bad-4c56-b67c-1ca42d4451b4", "value": "adb6ec9d489d724f1db98a4064ea3de0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59c431da-e442-11ee-a120-42010a9c002e", "comment": "Malware payload (DCRat)", "timestamp": 1710668412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710668412, "uuid": "06f72fb6-0370-4aef-b421-f130fa7c3a9e", "comment": "Malware payload (DCRat)", "value": "0f75836bf858f449d7c367c527e52846", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710668412, "uuid": "3eb7ce16-db9a-4023-a7ff-fe7c380e5cb6", "comment": "Malware payload (DCRat)", "value": "6679397d43cb816bfcddd2e6719235bd7477c5e3090644612e071e4462893c3d", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710668412, "uuid": "0a2882d8-d6ab-4e61-88f5-4e9aa36c2319", "comment": "Malware payload (DCRat)", "value": "8f83eb20b50977351e8c0bc852ea6cb5a8448cb4", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710668412, "uuid": "75a28aa8-173c-4c24-a600-44abad64d174", "comment": "Malware payload (DCRat)", "value": "2db9f3d4918f7c65304e02384936b49fea47691786eab1538522f5821f7a68b7d4de35ff6e4bfc2a64aa5557129ed0fc", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710668412, "uuid": "ce722738-9d50-40e3-8243-4a33c54e505d", "value": "T1AF657B017E40CA12F0191633C2EF450447F4AC516BA6E72B7EBA376D69123A77C4DAEB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710668412, "uuid": "3e2f5c7b-7a7d-4e26-8bf3-97d47b6b5996", "value": "fcf1390e9ce472c7270447fc5c61a0c1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710668412, "uuid": "350812fa-baf2-4645-afb6-659d98fb0e1a", "value": "24576:u2G/nvxW3WieCWAWx0NkAzTOPzl5InufgsA9upcab9EXU22:ubA3jbsgz6PhWu4sBBJCUr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710668412, "uuid": "e7eb6d4f-cd89-48d5-b62e-bd042334dd52", "value": 1488516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710668412, "uuid": "d4562cc5-e5ad-42d1-9522-0e627cdc37a7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710668412, "uuid": "a1e01136-34a5-486b-977d-445d73b75e04", "value": "0f75836bf858f449d7c367c527e52846.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5979b850-e468-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710684732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684732, "uuid": "339894b2-ccc4-4523-a0b7-b31dd58580b5", "comment": "Malware payload", "value": "319dc6da6e8578bd95d5eab612607447", "object_relation": "md5", "Tag": [ { "name": "horabot", "colour": "#7EF179", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684732, "uuid": "18e8c1e7-56b3-4557-9c5b-8c87c43af949", "comment": "Malware payload", "value": "67bb8319e5c9335c925f42015839dce2e47cd688ef4934d61df5bfd5778de9cc", "object_relation": "sha256", "Tag": [ { "name": "horabot", "colour": "#7EF179", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684732, "uuid": "ce0b3ae0-d9dd-47b6-a71c-0c9a9fbbdd70", "comment": "Malware payload", "value": "7bb50ad58283bf6197f4bea0ba8d70271b5c1da0", "object_relation": "sha1", "Tag": [ { "name": "horabot", "colour": "#7EF179", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684732, "uuid": "6b4ef6e1-f211-4002-b36f-7ab292becde6", "comment": "Malware payload", "value": "159fc0b8cc43f0767911163c4fe4139f93afa8e0327ebe10e6a2f5bcef344101bca7a44beca70e61a86fce90418f7a36", "object_relation": "sha3-384", "Tag": [ { "name": "horabot", "colour": "#7EF179", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710684732, "uuid": "901e7ade-05c8-4e94-873f-0161b95910c5", "value": "T1C54733A2CA89B68A7B357E09A87F902001FF1C07DD95C59CD896D79BFC08567CC8960F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710684732, "uuid": "c1ace62a-4622-4b45-adbc-7e8716b63606", "value": "393216:JlUP+q8jx5dU+40WiwImQXn8y7jcLiBDfT1rptYaq30F+QCNoNgXTAP6mWbbnMzi:/yGx5dUAWiwImQXn8yPnBjT11tYP3goZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710684732, "uuid": "0363a2dd-65b3-46a0-89a8-5856a2e0e36a", "value": 24780411, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710684732, "uuid": "8e23dbc1-5005-47cb-9a47-cf6f569d7411", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710684732, "uuid": "358b70c8-7862-4d67-b726-b2370aac5194", "value": "m.zip", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "065d7999-e450-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710674285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710674285, "uuid": "a20a5531-b8f3-4ddc-8a46-efadcc30e27c", "comment": "Malware payload", "value": "5cf0ba4109cdddb834268f81ffe5ad79", "object_relation": "md5", "Tag": [ { "name": "mariyelstherapy.xyz", "colour": "#A6E518", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710674285, "uuid": "e22cf21c-321c-454c-bca3-02ed49d04473", "comment": "Malware payload", "value": "6bba87021b9242e7c9fe17a10ff3748e504baa74dd40428d087ca79f35b81812", "object_relation": "sha256", "Tag": [ { "name": "mariyelstherapy.xyz", "colour": "#A6E518", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710674285, "uuid": "6388039f-3771-432f-acb5-041933afc2f7", "comment": "Malware payload", "value": "fb833df1e5657d90358d3c161254d1677ef5d2bb", "object_relation": "sha1", "Tag": [ { "name": "mariyelstherapy.xyz", "colour": "#A6E518", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710674285, "uuid": "dee1c5ce-d473-4270-8138-6a6a614f1095", "comment": "Malware payload", "value": "d931ba5cf83b9826c8bb75f788a71fa80867018b87e7f69e4d69a83bcf8c2c1fbde73638c583e3fab78327e8f2ca296b", "object_relation": "sha3-384", "Tag": [ { "name": "mariyelstherapy.xyz", "colour": "#A6E518", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710674285, "uuid": "b88e37c4-f45b-4718-bc91-2cff8ead2c59", "value": "T1FC0833A7128A7279F86431F8193D6DEBD644D4A133D134E27C6BDA428C47CC67DA80BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710674285, "uuid": "888cc36b-5c60-47a4-af6f-41ece7e387c2", "value": "1572864:sR6LBYN3hil9YQxwrBZHBFdNYZvpXuyUsAI7:scueRxEzFCHUsAe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710674285, "uuid": "c4126e0c-4ac2-4622-926e-9a5edca56d61", "value": 82886607, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710674285, "uuid": "c7f99b53-e648-46a4-af98-703a26cd2aef", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710674285, "uuid": "8352e747-5a0b-4f98-80e2-aee660aa90fb", "value": "MariyelsTherapy.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8aa6132d-e437-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710663769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663769, "uuid": "da3cab95-226e-4340-8213-1785a3474363", "comment": "Malware payload (Mirai)", "value": "9358989997b82dcc8247dacd5c9896b8", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663769, "uuid": "2ca468a5-ad64-41dd-9e40-acdccca740e0", "comment": "Malware payload (Mirai)", "value": "6c755eb6c4fae088f437fc7bf8cfd47150231841581a3f914bfad5cc15c4322d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663769, "uuid": "8a273b1c-1f7f-47a9-8c9f-0a7a99fd2734", "comment": "Malware payload (Mirai)", "value": "641f86d5b6bbf98da23b369229862c4c990db93b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663769, "uuid": "470a2ea5-29bb-4aa4-9c32-b77c882bc846", "comment": "Malware payload (Mirai)", "value": "4c30c5956a756db95c1a1d205dc5794a0346abd41bcb27106ffeb97c3f550744d292f3ddeebafb166f62255484d461aa", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663769, "uuid": "7798ba2a-446f-40cc-a0da-99147833a302", "value": "T18CF339C7F800DEBAF80AE33B4857090AB130B7D155925B37725B796BEC3A1D90527E86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663769, "uuid": "ac1454c3-1d1c-424f-be3e-cfd6aff490fd", "value": "3072:BUpVImmzFDVzIanKwIrD0VPEpIMiGJrd/AVcjbi2LPTj440yyTx23v:OmjRFUMV8pR9d/vLPTjByTo3v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710663769, "uuid": "94b59050-add9-441b-9957-917f5c0a8d2b", "value": 169344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710663769, "uuid": "5b879d0c-3370-4720-af9d-0ef3c0f78d3a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663769, "uuid": "efb63224-eb15-4906-b627-0f4425208f6b", "value": "9358989997b82dcc8247dacd5c9896b8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fcb808c-e437-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710663805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663805, "uuid": "36e78745-8297-4f73-b350-d2f037bf8601", "comment": "Malware payload", "value": "58aeb9f93ec2fb247d0a60807799b322", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663805, "uuid": "51dec225-b020-49e4-9321-fbe68d0446d9", "comment": "Malware payload", "value": "6cdbbdbe99c652799e221b5b87e4b42face06e9d2011d66255797d9648da06b5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663805, "uuid": "a0745f21-e04c-4dd2-822d-7a085fdf7070", "comment": "Malware payload", "value": "f4ad0459d76c31820b5d5cf2789f2ff91e10e27e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663805, "uuid": "2782938a-b57b-4e2c-9439-8b338d40784e", "comment": "Malware payload", "value": "5a84de757574fe831543b7919b3c9e987b5e61d0010e8e8e42f331d6b44d277a49d514ba78e4101f5aa7f01060c7e4e0", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663805, "uuid": "b0dc85c3-b432-4a54-a5a8-4caa9dba9fb6", "value": "T189639EA7C9692E18D06C85B5F030DE758353A48182971FBB47A7C97A4093FCCF9093B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663805, "uuid": "960a0d16-9a6d-417e-ad13-2b35d97a0a46", "value": "1536:5vJo/ikgcPzoirdK6u2pbQTsC+oz1P+hd:5ho/hoiY63QTsCBWhd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710663805, "uuid": "4549731f-9adb-48bf-86cf-ac8b8c50fc59", "value": 66860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710663805, "uuid": "ee677c20-9a98-4f39-8c79-dfeb8a550c1f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663805, "uuid": "d188dce7-315e-4158-8236-4c4d32097785", "value": "58aeb9f93ec2fb247d0a60807799b322", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b072ad84-e3fa-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710637633, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710637633, "uuid": "8888391a-7c2e-4d13-92e7-33248afd6139", "comment": "Malware payload (RiseProStealer)", "value": "4f5d9721b40d19e730ecb48809dcce19", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710637633, "uuid": "5741c893-6d4c-4f0e-8e95-6b7bed71a23c", "comment": "Malware payload (RiseProStealer)", "value": "6f5b01f9b18effb0b4e7cd86ab5aa7d3650e23e441267c4248aad299da32c52d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710637633, "uuid": "81495c76-155f-4cff-a5eb-952d79377a4b", "comment": "Malware payload (RiseProStealer)", "value": "592ef2a31645b47536d0d206c62a32ee14ba0fbd", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710637633, "uuid": "20f100db-c135-4cea-a666-80fa18482f22", "comment": "Malware payload (RiseProStealer)", "value": "869c5f2871971eac06bb3eda1b215f0b1b746b44e123c7b38f95c2543edd7ef8406078c39a89dec3bef91bffd16062e5", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710637633, "uuid": "21c8b3cd-6e54-45dc-b793-f8bd2c283370", "value": "T18BE55BB2B60876DFD88E2AB4986FCE42695D07F9071008E7EC28747D7D67CC156BAC24", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710637633, "uuid": "3daf1d46-d1e6-4ae6-824e-833b370c82d9", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710637633, "uuid": "e04a9128-46d7-4a27-a7f7-af0e8134ebf8", "value": "49152:185HXSd4eOzbmWAquBlsXNDmJ2yXAqkdznrTS5wxr0k4b/3:+5HledWAquBWXNDWtXAT1nrTSi67", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710637633, "uuid": "f9f7d951-0285-4e22-902d-5977774fa71b", "value": 3231232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710637633, "uuid": "74f42e73-868a-40fb-992c-ee51c3bd1e68", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710637633, "uuid": "59b34bcf-59e8-485e-9787-48d09ba648a4", "value": "4f5d9721b40d19e730ecb48809dcce19", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9af8eaa9-e405-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710642322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710642322, "uuid": "3b970aae-843d-446a-b7fe-79d317d0acf3", "comment": "Malware payload", "value": "bbcc80280ed8dcb536f46a0d6a304f3e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710642322, "uuid": "f1d261fc-dc38-482b-ba06-827971e702bb", "comment": "Malware payload", "value": "70c688a3191bade152078a40d0b25ef318fb593fe313475a94c0b7b431be648c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710642322, "uuid": "a9bf37fa-bcd6-4c6d-8329-0f8c1ef4d058", "comment": "Malware payload", "value": "6d0bd07c9f6f6566e238acb12750c4c637a983e9", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710642322, "uuid": "cbd1555c-08f4-4f09-831c-0b075ee3a6d2", "comment": "Malware payload", "value": "b2118b866552d154130bc89031d68b3fdde23c0bc6e4f2caa51c3f879ed8d46b4749a7ff27a3519d44db2469bc90a995", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710642322, "uuid": "eec5d4e6-90b0-4721-8a59-b40de543d401", "value": "T114263309A6D5C472E4B328398DB4F6F0156AFD311F25847B22A537AEEB502D10E35BCB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710642322, "uuid": "89a11e6e-1923-43d7-aba7-d15cdb9cb0ee", "value": "87269679c0a401c85bb37d7dd224ac4c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710642322, "uuid": "c8f6692f-dc1a-4c3f-9823-82cc55f58f80", "value": "98304:0WVQc10KEOleWzwEllmw+0CjwWrMmG2vT2RZa7BIG1UpKCVwS/ps:d1LFees0CjVrRGuAa7BIrjxW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710642322, "uuid": "f55173e8-ebab-475f-b775-5700ef3904ec", "value": 4478464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710642322, "uuid": "902044d3-3f68-4cdc-993f-e801e6acf23c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710642322, "uuid": "db44b695-18e8-4c27-9ec5-b3d9240061dc", "value": "SecuriteInfo.com.Trojan.Downloader.17552.13981", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31dd0376-e45d-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710679941, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710679941, "uuid": "522c3458-98ef-434d-826e-b663a42e50d7", "comment": "Malware payload", "value": "d95d238cde63f37e8c425c9acb0fdcac", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "golang", "colour": "#7C2D0F", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710679941, "uuid": "5fca6c7d-bfd7-49d5-a3b1-9932c6fba2d0", "comment": "Malware payload", "value": "714ac8c6d8fac09d287ea5c2b93e6b02c3deeaffb1048982433aa67e25566ea7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "golang", "colour": "#7C2D0F", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710679941, "uuid": "9f1831e8-19e9-480e-9ff4-c7ca27d5bb88", "comment": "Malware payload", "value": "62b015f23466e80fa35a1acee34a1505232d1e48", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "golang", "colour": "#7C2D0F", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710679941, "uuid": "e8239903-fa05-494b-b229-470d23ddb54a", "comment": "Malware payload", "value": "437a254e8491078d3deba65305dcd5e55b16feba6b97ed7447c8ad365a19af8628670dc54e0204004f592a2501af836a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "golang", "colour": "#7C2D0F", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710679941, "uuid": "da5a55f4-b7ec-42f7-9b51-3ee62aa57197", "value": "T1A6968C80F99B24F5EE43593004A7927F2330AE094B25DFD7EA547F7AE8736910E32259", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710679941, "uuid": "6b50076f-fddc-48ba-be5d-e6aefe608f9f", "value": "9cbefe68f395e67356e2a5d8d1b285c0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710679941, "uuid": "875d8a4a-341e-4dbc-9732-b8043a8300a8", "value": "98304:n2Yc5yz/oBPRiDdrmwYXp7INlQRMzMV+V49Z5//aLy6/:2Y+grmwAp7BR8MEe5a2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710679941, "uuid": "f69ad1f7-d5df-4e0f-a6b9-072b458a45dc", "value": 8886272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710679941, "uuid": "d7654189-6fbe-4135-a23d-14a4a486bb58", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710679941, "uuid": "f5eb8931-03ae-433d-bec0-cd23a5e22b90", "value": "aa.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67e47d3c-e439-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664570, "uuid": "9b35a3f6-c7e2-4263-8127-cda01baa6fc7", "comment": "Malware payload (Mirai)", "value": "53cf0d6a135222dc186f167172fa98a4", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664570, "uuid": "3a05ae53-0564-4dd5-83ad-a1b1ff1f4862", "comment": "Malware payload (Mirai)", "value": "74e11858acf516b26fe6b248fc97181a439d9b665e01b3b999a103cbde9a6248", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664570, "uuid": "490eebe8-bbdf-4cd4-ae17-d846eb16fc41", "comment": "Malware payload (Mirai)", "value": "af07905f21302fb42eaceb9065b8148ea34af8b4", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664570, "uuid": "2b8226af-eadc-4c9d-a791-905fc2f44f9c", "comment": "Malware payload (Mirai)", "value": "338f48f79e0efdef607ab0a1927d3151701aed5dcfee505c4ce5e08be66b31da1df8f817a31544adeb24bca62d0eb668", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664570, "uuid": "c258eae3-9200-4384-a827-b224d48dd553", "value": "T107031817A66984FCC55EC2340777B53A896276BD023DB2AA7BC4FF27AD86D720E1C404", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664570, "uuid": "120264ad-6b0a-4b06-bee0-7c40a6759392", "value": "768:N4jo3Biz3cAfOjQ9NNla7/dfediSaS5EFE6I9aGIrAo1F:wo3oPOjQ9rlardfeNaSsIEGjEF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664570, "uuid": "ae421633-2c56-45a8-abf1-c78d3548fd62", "value": 37888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664570, "uuid": "4bed4eac-6c8a-45e8-90e0-075f2a9eeed6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664570, "uuid": "38179a1d-0cb1-4ef5-84dc-611465e3928e", "value": "53cf0d6a135222dc186f167172fa98a4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c7c0ef7-e439-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664631, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664631, "uuid": "364b12e6-e187-41c8-b565-16751060e25d", "comment": "Malware payload (Mirai)", "value": "efce0bf03982ef697769e6e5daac60ea", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664631, "uuid": "bdf73568-b27e-47d6-a11c-27ea1b3c8b09", "comment": "Malware payload (Mirai)", "value": "79de9160f9edf7a4414fb79b4f0563e688f656776ab762e3652aeb6b3a58e5f1", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664631, "uuid": "ebba17dc-405a-466c-8c6c-e4192cf4d51f", "comment": "Malware payload (Mirai)", "value": "59f3b3e98e2dc66fc71dcbf00ed37b9d8c621b1b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664631, "uuid": "c7f9af00-bd7a-41a6-be9d-7f54502e54bd", "comment": "Malware payload (Mirai)", "value": "6d0d46e65161454e9a62edf7b679e3df805bf1dc154c989720385e2298386fac2fbfe615829040a5cb03bbdd7c8e851a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664631, "uuid": "f83e737a-d0ad-49e6-93f3-8a31ce4a6be5", "value": "T197E32A02B30D0A47D1672DF43A3F2BD193EFEAC121E4F644255FAA8A9171E325586ECD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664631, "uuid": "e982b2d5-df61-4093-98db-93bee14701e0", "value": "1536:NqaP03hl3+hkVjxpuvT0MdKvDUqwnw6WVpS9zz/6qvAoY2mo9owTt2PYCbpU:HWVjxc7B4f6iSN8oLCbpU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664631, "uuid": "c532597d-0a9f-4dbd-bfba-412c3bf465ac", "value": 150392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664631, "uuid": "4013fc7f-2f5f-45e6-8095-2c5a1bde8a9d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664631, "uuid": "9b968479-2eae-4af2-aba2-bc6095e8d1ff", "value": "efce0bf03982ef697769e6e5daac60ea", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a06947e0-e45e-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710680556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680556, "uuid": "37848cd2-b7a1-4b42-ab2c-904991e0abd0", "comment": "Malware payload (Mirai)", "value": "21355328cb2604438868b473efc61b77", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680556, "uuid": "de05328c-3e26-4bf2-92f7-1c882be6ea41", "comment": "Malware payload (Mirai)", "value": "7ab44fbb2cb9ac2188db0aeda4548ba2e76fed0820d946e131022b9e11382312", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680556, "uuid": "caea7763-7e97-4d13-98b8-92d6d665f917", "comment": "Malware payload (Mirai)", "value": "8b58493039aebd74057b66ba399ef96c8272baee", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680556, "uuid": "a9592e17-c4da-4d57-8046-940b31ea7789", "comment": "Malware payload (Mirai)", "value": "70482a8e4923e05d30d646fa7495765ff4aa2533f46feb071a9b1c2bd66b9834adb48e73e9942549d446fbf5c92d9026", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710680556, "uuid": "a2cb1b4e-e41b-40c8-83a9-2e73382e84e9", "value": "T142E34B46F6418B23C5D217BBFA9F414A3322D79593DB330689285FB43F86A5F0E63A05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710680556, "uuid": "d8833ee9-dc6e-4c34-b7a2-f84d0c79b76d", "value": "3072:O9p/BFHGK+8Qi4U1MEfXe7RYetfaYL20K2GJFXuDiM/9lzFjRi:OP5FHGK+8Qi4U1Kd9tfaYLvKFFXuWM/W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710680556, "uuid": "7ed6898e-2628-4b3b-ab59-639f11da388f", "value": 147012, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710680556, "uuid": "462df509-e4ff-4803-9fea-44693a3655f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710680556, "uuid": "7b927518-240d-4e04-95b2-3837dd97724b", "value": "21355328cb2604438868b473efc61b77", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3fca9b5-e407-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710643303, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710643303, "uuid": "e03a7190-2983-4652-bf00-2011a658f78c", "comment": "Malware payload (Mirai)", "value": "e154663989483fef2450b2e186817b6d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710643303, "uuid": "881c4bfd-57b8-4a2d-a40f-3b7160578769", "comment": "Malware payload (Mirai)", "value": "7c3275ede26ede41cd9b3d342ab63e1044d1fa2abf57784aa98d3218ef68c01b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710643303, "uuid": "a7024303-0885-4b45-bc21-38e5674f7c23", "comment": "Malware payload (Mirai)", "value": "9bed471691a85928d58f7c9ed188a70c3194398b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710643303, "uuid": "50b65fcc-583a-4812-8b60-e10a77393230", "comment": "Malware payload (Mirai)", "value": "235653562bd5a4e3eb2f1ddb61031a04641eae9ce45ec07e1b8830a9cb7cfccb9960d4ad87399a49bad01cb5de4b1c2f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710643303, "uuid": "9a7789bb-7849-4796-89d0-4ae0f7669b1c", "value": "T1EF538D3AD84A5E64C58645B074A49EB46F23F1C483472EBB19B5C3BAA087DDCF504BF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710643303, "uuid": "40ec83ac-c08d-4e57-9f65-f20159b39e70", "value": "1536:matmm/Fk4A84LRmoJ1KdG9weo6p4YC7R5IJWNg:m+mmNk4ABrcdGI6p4YZJkg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710643303, "uuid": "dd7abe9e-cbcb-4645-80fe-e1258df014ac", "value": 63036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710643303, "uuid": "a9c54c5d-f065-4727-9433-480a62d6acc0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710643303, "uuid": "ad83ae52-b4e5-4d03-9183-5784205141ad", "value": "e154663989483fef2450b2e186817b6d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91104d89-e438-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664209, "uuid": "dcdc0c80-522b-4533-83af-4b47ae264c50", "comment": "Malware payload (Mirai)", "value": "8e75cacd152d793049abbcef4947b250", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664209, "uuid": "5024ab90-0625-46f9-8a57-1da55ae7789b", "comment": "Malware payload (Mirai)", "value": "7d7fc6069494418296fefe44ee3525627053cf788f47f72369f22d8ecb687b78", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664209, "uuid": "33e28213-049a-4ec3-a327-ce005c518d40", "comment": "Malware payload (Mirai)", "value": "eae0cf91d8e91a01f1361cf1c67b334a653dda22", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664209, "uuid": "18c417c8-32b2-42ee-9892-cae3b5344e22", "comment": "Malware payload (Mirai)", "value": "12fc771efec78027286bcd9f2a6c6a091b2551d711a67fc08318cf1627cbdb33f879369138a387db57f6339a34526bfd", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664209, "uuid": "d751873c-6a46-4b70-b537-ca6134a6e9f0", "value": "T106D35B73D8296F68CA54D1B0B0748F796B53968181472FBA29BBC2B48083DCDF545BF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664209, "uuid": "a8a7bcf7-6d29-4539-a321-2ab01eeee437", "value": "1536:NaFF9cAGskqM60naDCe2K8dIi7qRrGZuEZmnWoEMIWUwhZgHW6:NkWs06eaD/8JeGZTcnW/MIf8wW6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664209, "uuid": "f2956080-2d6b-4c26-95a5-5b2be11ed931", "value": 133920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664209, "uuid": "920706f4-2b6f-4753-b8ec-4e6a8ba2d1c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664209, "uuid": "d1786eb2-b65c-4c5f-8e19-b81cfdb3220e", "value": "8e75cacd152d793049abbcef4947b250", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f773c332-e490-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710702177, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710702177, "uuid": "7e686608-5f35-4804-b4e9-2ee64409b4e3", "comment": "Malware payload", "value": "2262eff271a2f25f49d21701dffee002", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710702177, "uuid": "c1923f24-e970-4f1e-ac9e-8b5bbf07ce3b", "comment": "Malware payload", "value": "7f289ab3014aab22490d63c197ebd3d5dbbf89a1a18eaa8b52f495fb94623e5e", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710702177, "uuid": "69b821d9-bf6f-47bc-a8b8-bed5e73c87e0", "comment": "Malware payload", "value": "9d065c3ee800926ec4a2c01d17df1b209973758e", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710702177, "uuid": "fc554ff2-3281-4761-be68-5999c74e25d4", "comment": "Malware payload", "value": "6a79d978b8f81276385d29732ce94ffb0fe02cb5a6b50ababaacc786af6c4419ad2ac1b6ccdae7eadd62df93a9685e81", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710702177, "uuid": "7a4d1bab-3dbf-44c1-b5ef-5f2a2aeacab4", "value": "T1D7B60187F76C5A2EC4775071CC6A5232E66E4F118A8397876848372C38B75E84F79BC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710702177, "uuid": "c463305d-d87a-499f-be3b-609202a2d2bb", "value": "196608:NSd04VIDggAoQDtwkkc3EgOthZYC84OMjL/BrvA+CBzLLoZvkbDjCE:Ma4GDggtQ5VZ3EgOjZ/pOM2+CBzwYL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710702177, "uuid": "210a069a-f688-4621-b224-bd326a6503ad", "value": 10593823, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710702177, "uuid": "19351311-eec1-4eca-a32a-04bf237322d7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710702177, "uuid": "c7cfb611-37dd-4880-bd71-204b9f424f87", "value": "app-release.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "639f2b8f-e477-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710691191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710691191, "uuid": "899b07ae-1a99-4d52-9f00-30c95be5c375", "comment": "Malware payload", "value": "986fd049e083c322cf19d5f052783444", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710691191, "uuid": "0db095b7-3199-4876-b7c1-27f048a2960f", "comment": "Malware payload", "value": "809454d9ab95dee77ed910d1f36b1bfe99d1459f84a3ff07540e7465b939a99d", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710691191, "uuid": "bce8e198-b09a-4bd1-b9c5-3535d130c6a3", "comment": "Malware payload", "value": "7cae48cc7af989aa4f51532f6bd665ddc493a61b", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710691191, "uuid": "d9bc1ab0-9054-4804-bc50-6543c16b5efc", "comment": "Malware payload", "value": "b005bf0372cfb37939876fe82feb203da1ffc0de15ac1f4a186233d4a68f24f0c1e3edfdbfa17dd91fafbc1378e1691c", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710691191, "uuid": "aa9735cd-8b7f-4c65-8890-6795a10028ae", "value": "T1A6B60187F75C5A2EC87741B2CC5A5232D66E4F118A8397876848372D38735E88F79BC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710691191, "uuid": "88d84d45-dcdb-4693-8f4b-ae45ab6491b6", "value": "196608:WKiJKBGEWhy0lxmwD2jzS5sdqr7orQMtLjze3XlwGCaa0MjL/BrvAYOYz+Dc1ars:AJDE3IxmwDYzSGIorQMtjelBy0M2YOYl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710691191, "uuid": "3cced26f-b3cd-479a-afa9-439f672d7206", "value": 10620134, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710691191, "uuid": "b31b82cd-e7e4-43d5-9816-b5302caf21fa", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710691191, "uuid": "89fe4c50-0a5a-4eb4-899d-bde0ba9074b8", "value": "app-release.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b725bc7-e439-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664576, "uuid": "5e554e7f-920c-4993-bc85-872866447eaa", "comment": "Malware payload (Mirai)", "value": "8199e2f8df6c507eab1c989da778b7be", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664576, "uuid": "2f434289-fb69-483f-b039-24981d3c16a5", "comment": "Malware payload (Mirai)", "value": "80dced0a4b4e03d4dd08fc231a1506e20618819e2137fbaa9a178a4832c8cf5d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664576, "uuid": "e8cdc518-fbca-40e2-b171-4b9e65614752", "comment": "Malware payload (Mirai)", "value": "f29057a4d2fc305d2795977b2c8385862685481b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664576, "uuid": "18da97ec-bfb7-43e7-90a8-405d3bed6979", "comment": "Malware payload (Mirai)", "value": "7267821159f6592b3da0227e1ab64bf97905d44cc48021c9a468585ef519af8ffbd020eeac6b5a966dcb294c746e4847", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664576, "uuid": "ae82fb4a-4e3f-4ba1-978a-47636ea7fd46", "value": "T183534B99F4028E3DF88FE9B984160E05B93023D212931B276BAEFDE37D331659D12D46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664576, "uuid": "66dede2a-2658-4bf4-b95e-71f1f3c79752", "value": "768:Ge4gpsM204GEkRbj3eX1VnQiiQthc3gFHu1eu48B8vB6J7EzNfXuuJpoz4K3v:Go3EkRbrOSiPDFu1X48B2SEzNfeuJwf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664576, "uuid": "655bd3b1-fcb2-41d1-88e6-70ed9be01ac2", "value": 65100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664576, "uuid": "78119483-ad9e-4221-9906-4aaa2e7baf19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664576, "uuid": "ae59b108-4287-4891-9b5d-b5e319a72ff1", "value": "8199e2f8df6c507eab1c989da778b7be", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26699fa1-e3fe-11ee-a120-42010a9c002e", "comment": "Malware payload (Stealc)", "timestamp": 1710639120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710639120, "uuid": "67e2d42f-8098-42e8-8926-f795c9817651", "comment": "Malware payload (Stealc)", "value": "acbc25eea9ca672493f170df3a5c3226", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710639120, "uuid": "d0164aa3-c1a9-4761-8352-94bbdf007830", "comment": "Malware payload (Stealc)", "value": "81e2a48aed2eb0f524947c8c002f753c1c66583602cf505c7f3adac1aeff1df5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710639120, "uuid": "8d0e72c4-78c5-451b-9b53-f9ca25e1bf34", "comment": "Malware payload (Stealc)", "value": "1965f36c094c8b0e73b549ad300d9dea4c55da04", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710639120, "uuid": "b598a8bd-ec68-49df-a2f9-0682419bd66b", "comment": "Malware payload (Stealc)", "value": "e02371c156ff1182570ae58b07bd48bcdf590f51e923e90065869133dbe34e10127665b2717f24780fb7c23fd05681b7", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710639120, "uuid": "93b103b5-2c03-43b8-aac5-986ea326d13f", "value": "T16B24AF0132A19861E3A1E7314966F9E8463DBC90DEF7155FF2843A1F29B33D089F2766", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710639120, "uuid": "e4d1d808-805a-402f-bfb7-31a3b35eee8f", "value": "139fb810012bd1f8fb1fed972825a3ee", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710639120, "uuid": "e750b6fa-bd32-499f-9ba9-90c17d5963fd", "value": "3072:Z/+TvPLqni9+PLWKMDwd5fS/R27RPneWgX9w1RBeg8+/yG5V:l+TbajiKMDefteWgXkRBeA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710639120, "uuid": "28cf634f-6b2e-486a-82c7-d1e818036316", "value": 213504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710639120, "uuid": "576822f6-a1e1-4e0a-aab8-e88f1ce35cff", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710639120, "uuid": "cea7e81c-8932-49ea-8d8b-95e5bf9779bf", "value": "SecuriteInfo.com.Win32.BotX-gen.3892.8628", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3c876112-e473-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710689408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710689408, "uuid": "de0167bc-1a78-4614-9eed-d59e335e2571", "comment": "Malware payload", "value": "e4963f89c6b81f2bf0dd2532fb11f335", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710689408, "uuid": "7ee502a8-38e8-4b43-bb39-2a908f91b211", "comment": "Malware payload", "value": "82905850e26ef68d34a68d1cdc0e1cf3e339deba1ef76a6695c4b2ae84da6756", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710689408, "uuid": "2b7d577f-1c84-47bd-9ff0-2b26fa362ede", "comment": "Malware payload", "value": "6fd5e2529974a209b991f94716fd31b7471e84b8", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710689408, "uuid": "ac695e38-d4b1-4f8f-a537-81c5a8bcc8a1", "comment": "Malware payload", "value": "d7e376e56b4a25a13ea14f1fb92523925f84ac1f8a1ab4de43a1031ae4e591af9634b8336be54a2acb2c9146a090ce0b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710689408, "uuid": "a40abd22-b9e3-449e-9fe5-ba6d11a79804", "value": "T16876E111D701C43AF5A30171887D976BBA24BB31136454D3E3C86DAE66FAAE37932B07", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710689408, "uuid": "0eca73a8-15bd-4b4b-b959-31b37d964b80", "value": "8705f42ed6fd9757d22072d592be458c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710689408, "uuid": "a8ba922e-de39-438b-ad8b-af8a7bb7aa87", "value": "196608:EIJDzZwAO0wsR+uXkJs0nHAkS3/N123pd:EamuaxSb2Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710689408, "uuid": "6c640264-f6eb-4c0a-9927-3de70f2ebdc3", "value": 7194112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710689408, "uuid": "caeafda9-252c-4d04-9540-018e29c1cbcc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710689408, "uuid": "96d2dcd6-7141-40c3-9db0-214816358a3b", "value": "SecuriteInfo.com.Variant.Jaik.219238.10087.32326", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9bae0c17-e45e-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710680548, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680548, "uuid": "95b3a8f8-21a5-4c16-83c1-e81ac77262a6", "comment": "Malware payload (Mirai)", "value": "19103bceec218c78b6fdae06e60a4ac8", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680548, "uuid": "37cd6d26-0a08-42d0-b06f-2461f79d3c7d", "comment": "Malware payload (Mirai)", "value": "833bc6b2b6511c3ab8d1643085ba26eb4b7adf2342ecac32b3eaca9085d4a115", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680548, "uuid": "a4ea829e-a9c8-49d0-840d-7baa012c54e2", "comment": "Malware payload (Mirai)", "value": "c1c235649222677345123592e4ed06bca6bc66ec", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680548, "uuid": "1feb78d6-4270-471f-a384-f1c1d3bdff2b", "comment": "Malware payload (Mirai)", "value": "23cfe4e45edf29ce1d6db7ad9cab26aa62b6d6e91f7b1c4b20948b6179bfb307cfad4fe02c22e189b2460c32a5cef90c", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710680548, "uuid": "a8de46d4-bf8a-42bb-8e9e-ff97600ba35c", "value": "T1A3633B02B2180A1BE8D31AB0253F5FE187BEE9D021E1B649696FD7558A31E331586FCC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710680548, "uuid": "83ba9d19-7ba8-4ab2-8eb3-9ee303ff3ba8", "value": "768:lEUzW9scCWpQDShRf1y0SuW5yt9+8PfY/qjd73yb9Kzjryxl2+1oYDYbEIzdVbwu:Z8CWpOI2b55yt94gCbQQmYYEIBKu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710680548, "uuid": "99ea8cee-d796-4550-a427-9318d48008d8", "value": 67336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710680548, "uuid": "afb60ffd-eb39-4350-9e21-5ac499180bb8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710680548, "uuid": "3dd32a3d-ac35-4f26-acb6-001f615846b6", "value": "19103bceec218c78b6fdae06e60a4ac8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4675833-e444-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710669449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669449, "uuid": "bbde9bc8-e239-4e17-89c0-595816159dd3", "comment": "Malware payload (Mirai)", "value": "eb9484b502a49d43f659b7ffee6dcc93", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669449, "uuid": "a0cc33af-78a3-460c-858e-19f4868209ef", "comment": "Malware payload (Mirai)", "value": "85b96e543e7cad863ac75a6483e0f0f491772bf3cae31fd30bf93683bdeb8df7", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669449, "uuid": "e684ec45-0ecc-42e7-b820-8e552c8bc431", "comment": "Malware payload (Mirai)", "value": "6e5b25556e1ff819677e87b129b225ff7f06622a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669449, "uuid": "51a9ae67-0caf-4327-b1d6-400917fc4965", "comment": "Malware payload (Mirai)", "value": "b2a084b7e3fe770f4eb68869aea7a360d837f9731424aa757381119a9b3e7096d334cc869507e93623efa333015963be", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669449, "uuid": "8549961a-3eca-43ca-b490-02741b8fddae", "value": "T1A1D2E12CD94DB909CAAD3EBD60DE96B5294CB0C0535DF6CE1726841CB617A8BEC071B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669449, "uuid": "937ec53e-1748-442a-aade-25ccbf334a9a", "value": "768:k1uUtLrVDsAp6tLkF4FuetwEub4sU/M9g36KNGgnoA9JbUWUO:kbDs06t4BEub4sU/MbUGg7YO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710669449, "uuid": "b014adfe-da20-4fb2-b209-0c5205906707", "value": 30324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710669449, "uuid": "06f1c5b3-7f2f-4055-accb-61da11a5e9fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669449, "uuid": "eaebb52b-a0bd-4e4e-a095-ec44888e2ac2", "value": "eb9484b502a49d43f659b7ffee6dcc93", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3bdbce0-e444-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710669421, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669421, "uuid": "882df68c-7bec-4d9b-8bcd-c5579db57976", "comment": "Malware payload (Mirai)", "value": "dc26e16168775935f3b2f2b9bf7a12eb", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669421, "uuid": "a9a26582-5d32-46da-82af-63f9651d3e00", "comment": "Malware payload (Mirai)", "value": "8a546f363f44786602910093ca4e86bc0bc05d46bcd8e92e4189f44df00c6bc2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669421, "uuid": "12fcfb36-52ba-4d0d-b7e0-8ade1c0fb0d2", "comment": "Malware payload (Mirai)", "value": "87be7718bd565ee24f4b766525cf860994cc71d0", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669421, "uuid": "586fb1b3-0236-4aa3-b3fd-270e6b8408a0", "comment": "Malware payload (Mirai)", "value": "590e8e520142d3cc66d7cba106786966aa1da9565d786ccbdabfbc681d5393a0a7c6dbb0503232a1a39e972dab36168f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669421, "uuid": "c9ff045a-b472-4841-85d7-24a0dae4121b", "value": "T119C2F1BF76A65A67FA1C233AE031811B03A4F01CD7ADA78B57404432EA5E41D7932CC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669421, "uuid": "b64db6f0-ea47-4dd4-b64e-f8341173a7b0", "value": "384:Mg1DMwk8JPyGnT8WyopNEutTneSe3oECHjYlQ2NnE4+0o8tm3HWBKENAZHkV5JPP:RMwxdyoEUnDz+Y8tqHWXmEZc0N1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710669421, "uuid": "9078e0f2-98fe-42a8-bc43-55a6bceb0397", "value": 28048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710669421, "uuid": "68415898-8042-412f-be32-f94fe542a95e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669421, "uuid": "25ae6a55-b378-4b1e-9404-569397dca99a", "value": "dc26e16168775935f3b2f2b9bf7a12eb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b91d89f7-e436-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710663418, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663418, "uuid": "488a0cc3-bde8-4a6c-b5d7-2b3624302842", "comment": "Malware payload (Mirai)", "value": "ef033953b43230ef979ee79d86beb8fd", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663418, "uuid": "4468d5ba-77df-41ec-9b4e-b315a9556ce4", "comment": "Malware payload (Mirai)", "value": "8af27db367eba8bee495f6fe78e5d0e22e584c9ccec8cadff87c6d6e5c321380", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663418, "uuid": "d5d90412-ceec-47bd-a19d-6ca4cd546ba7", "comment": "Malware payload (Mirai)", "value": "f092b3a49f663989b91ad7a1d50e4cfbd633d462", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663418, "uuid": "226e2fe8-39e5-4af3-a326-b9cd8e25ab2e", "comment": "Malware payload (Mirai)", "value": "ce8654728ac33f65b9d02856ea92b4d07ecbae9d8451f54d6cdc78edde102d403ef67bfde6250e05e94caebb2576506e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663418, "uuid": "6a6a1784-e60d-47ed-a4a9-65967ea50e1f", "value": "T106F20740F94B81F8D81749307063F23FDF31E96A40B8966EEF59AF31EA67501921729D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663418, "uuid": "6bdf9321-0c27-41c0-8d47-59137bc921a4", "value": "768:k045cgW2+ajQNI6MG2jyTXyMgJveSZgN8osZlz/16U3:f8cD2+ajQZMGAyTXyMg2N8vZ768", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710663418, "uuid": "81d474e1-948d-45e7-b0f1-11b542f0c7fc", "value": 37568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710663418, "uuid": "f2e21da6-e8ed-4b77-a8ed-ce7732edc570", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663418, "uuid": "374cc25e-91ad-4804-8aea-3ad15796dec7", "value": "ef033953b43230ef979ee79d86beb8fd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64359561-e439-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664564, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664564, "uuid": "9669d297-f511-4cc4-a70f-9021d0ab7906", "comment": "Malware payload (Mirai)", "value": "10ff6aa4b654642d67c2abaf74acb929", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664564, "uuid": "0f883d51-2cc9-4137-91ff-5c495bc67139", "comment": "Malware payload (Mirai)", "value": "8e45a29008f41f84f001429c96cb17bd19345fd77cbacc77e17ebec8a05767b8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664564, "uuid": "bfee2083-2e53-4581-b311-cf937df85f1e", "comment": "Malware payload (Mirai)", "value": "1027bbf369261c73b1955c6b4190f25c8a362a89", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664564, "uuid": "4a9391d5-1638-4490-8e1d-46ce6b8c79ea", "comment": "Malware payload (Mirai)", "value": "a4e1dce73ad6ed7b6d718f57e8c6b0f40d59b8d007d949acec09bf1cf3ec79d7278a99b95edbe259f2f911ea02f304aa", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664564, "uuid": "05ab5064-f43e-47e8-ae1f-75a4976b09d0", "value": "T19E733AC7F811D9BEF40ED77F4457150AB270E3660A4217762317B9ABFC362A424A2F86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664564, "uuid": "22e37e71-6903-472c-8b96-7e1edb6d728d", "value": "1536:rWBC5Bog5AV/gHydQ0dBKgGY8eSl2tqI9QZFOdUgQbzVsDehOCgXYetJ:6BcogypgHyy0AgGArFQ3OqUehOpYetJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664564, "uuid": "53d965fb-d027-4ba2-b0a8-8fbf655ea4b3", "value": 80060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664564, "uuid": "39439ddb-f44c-457a-8c85-2569b121998c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664564, "uuid": "16f18437-3fa0-42a5-803d-e82031760071", "value": "10ff6aa4b654642d67c2abaf74acb929", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "884e094b-e439-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664624, "uuid": "c9a7a5df-b601-4e3b-ba99-3f241f5d5214", "comment": "Malware payload (Mirai)", "value": "64501ff4188411fbe65ecd6696645cf9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664624, "uuid": "5f627b44-e8c6-40fd-adb6-14930d6e584e", "comment": "Malware payload (Mirai)", "value": "8eed44c2d5254cf58dc27f24c873fc3535202c0f35e2a95dbac7cf70f30f4b7b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664624, "uuid": "97209406-f3ea-449e-b24f-3f1ca9870644", "comment": "Malware payload (Mirai)", "value": "f984f640600e70f9f6450683bd6e12f840f6961a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664624, "uuid": "fc8d754d-93fb-40d6-88bc-edd3887b7566", "comment": "Malware payload (Mirai)", "value": "34ef31fa697701a47b61fd4be09b01f606e50c6de3d0483a0e9b11cf503cb965096c421cabb5954f5f25e74bf718c30a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664624, "uuid": "b27b6d42-473d-49cd-a801-7da1f5d0291b", "value": "T1F9D36B87B71A8C96C9910BF54BCB4B8D6B73A1014F57CBD73D0D6A384E61ACD6D0A381", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664624, "uuid": "d7f01cf5-3ed9-40fd-ab86-b036abf6e925", "value": "1536:JhGBaq1UNmIbbZ9c8/tYoqXXAOvVQzkgY/LWBYvrDcT/ohDEmj1lm:JuEbPLlKAOvVQzkgYqirosZEmj1l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664624, "uuid": "d46a3452-3a4f-424e-8b21-fa423af9f809", "value": 132780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664624, "uuid": "c416af94-39e5-44a0-95dc-3f3a0c86667f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664624, "uuid": "888cd251-683f-4f68-a297-c004210b0240", "value": "64501ff4188411fbe65ecd6696645cf9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9333cd7-e471-11ee-a120-42010a9c002e", "comment": "Malware payload (Stealc)", "timestamp": 1710688812, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710688812, "uuid": "d6782d0d-9e7c-42d6-8573-87e36c1fb626", "comment": "Malware payload (Stealc)", "value": "2fb3b14fbb7eaedba8f25f1e08a6c44c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710688812, "uuid": "62b17b7c-a9bc-41ab-a333-140a0dd5c2da", "comment": "Malware payload (Stealc)", "value": "8fd511ad703779415123c010febedf6ce0da601adc46e3d082a1d34055e2d69c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710688812, "uuid": "d06889d4-405a-440e-868e-8ad2aae685c3", "comment": "Malware payload (Stealc)", "value": "81c5bb68f396df32783ccb934cf8af38507306a1", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710688812, "uuid": "20d76ff3-e04c-4209-8f84-fc717ed04ed2", "comment": "Malware payload (Stealc)", "value": "035749ae43250e2da820ad37586cf5a9cace0dc930411c56ad10b5776fb028ad3a4b4b7a58306b813c0664dd4a875122", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#D401CC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710688812, "uuid": "f0fa4788-efb8-4454-8a09-95bb95e09b2b", "value": "T11BE57CA1B80472CFF88E1779D627CE82595E03B9471148C3A96CB4BE7E6BCC131B6D64", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710688812, "uuid": "42ee1b88-a286-4fcc-a59f-502176d8d98a", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710688812, "uuid": "27f83fdd-6f09-43ff-a705-59f91bbfb16e", "value": "49152:2GdgEMY4lQ481pTQokIpXePcl6cNPKdVMyZGBEeqgzz+:2ygEMe48fTQqpuPcl6cNPKdVMyZP+zC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710688812, "uuid": "b2416801-7984-4b10-b7cc-f292d2103507", "value": 3265024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710688812, "uuid": "1cee960f-a177-4b53-8d4f-29d2cf567eed", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710688812, "uuid": "3bbfc79f-b703-4986-b9a5-1c04d0146bda", "value": "2fb3b14fbb7eaedba8f25f1e08a6c44c.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89e2fe53-e44a-11ee-a120-42010a9c002e", "comment": "Malware payload (XorDDoS)", "timestamp": 1710671928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671928, "uuid": "3bedf4ce-d23f-4e3a-9acf-ad782d919111", "comment": "Malware payload (XorDDoS)", "value": "1dac7b986e8d8c05f9050f68877ce5f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "XorDDoS", "colour": "#98AE48", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671928, "uuid": "15f9c296-7eee-41fd-9789-1443c7d5478e", "comment": "Malware payload (XorDDoS)", "value": "8fdd27d533f73a22be6eb8afcaa0417019a132cdb1ff212802c7619c96f88119", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "XorDDoS", "colour": "#98AE48", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671928, "uuid": "86d7f705-bb30-4ba8-b0aa-df3eaacff051", "comment": "Malware payload (XorDDoS)", "value": "79052bacf827d2b8bc01d9eaced33ba0ce33a9f9", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "XorDDoS", "colour": "#98AE48", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671928, "uuid": "e7bf1f20-91a6-4c68-99a9-0f3093c4ffe0", "comment": "Malware payload (XorDDoS)", "value": "2cfb30d9b3532feed5cd16fd3e8fe3e8ac678adfb5ac38c76735168e1a859a35c8be6bd520b6cb0e9b4219194de5956c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "XorDDoS", "colour": "#98AE48", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671928, "uuid": "6257a86e-58e9-4745-8f8d-3cc220d80b34", "value": "T150968E43F85195A8C1EDD2308666D293BB707C884B3123D33B60FBB92A76BD46E79354", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671928, "uuid": "8845dfda-d531-488b-beab-a7b44b60d91d", "value": "98304:6P/wha2a4mjJxEUhiXJUHwwH/SUbmeVZaIRN5sYlGO:6+a2ziSUqJ6wwfSUbmeVEIJso", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710671928, "uuid": "eb409685-c3a5-4dce-acb5-073064e4af6e", "value": 9110134, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710671928, "uuid": "6b9b83b8-3dbb-4fcd-a52b-fbd9ba26943c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671928, "uuid": "a33b932f-1252-4a49-affb-5751fe56b744", "value": "SecuriteInfo.com.ELF.IPRoyal-A.4500.12519", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2f862718-e499-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710705707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710705707, "uuid": "a01d9e16-d92f-4324-9f16-065df58ca700", "comment": "Malware payload", "value": "285e3fe042f687b463de137779ecb33d", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710705707, "uuid": "e956f5e3-8c46-4613-8088-6d635fb406a1", "comment": "Malware payload", "value": "9117d5485e8365053ebc055eec3a439df927985113bf15f4607daf7bc04c5b7b", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710705707, "uuid": "6bc90d15-7199-4ff7-b520-463f6f9e7640", "comment": "Malware payload", "value": "8b3aa13104920abc0eef34d720058f9ac120a680", "object_relation": "sha1", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710705707, "uuid": "0060b3b9-2127-4bd1-a6d1-6b4448287e71", "comment": "Malware payload", "value": "a474afe7decf9a00dd87669ff7ae20ec7c977ee6c124cd84d052ccc9f1fef2a8a39c2ae511f069de0a8c959630171568", "object_relation": "sha3-384", "Tag": [ { "name": "lnk", "colour": "#358D31", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710705707, "uuid": "9e5aee61-7b86-42dd-be48-c85aca0ab746", "value": "T1904133111BE60735F3F38E7708766711AB32F80AED239F0E41E542480852600E475F7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710705707, "uuid": "b855a63f-ac4b-43b5-86c5-612678583bb4", "value": "24:8WYaNBmYhZHcvm4pyAcPkr+/4Z+nQ6gIdd79dshavt3r3KrlcKOdm:8WYazmSZHomuZ1QdJ9FvpbolMd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710705707, "uuid": "a03a6892-00a0-4896-a135-c7869f808362", "value": 1964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710705707, "uuid": "70a7211b-5a9a-484e-948d-e81941218087", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710705707, "uuid": "fd5936f5-4eba-4e77-8543-2217fb0d6ddf", "value": "qqeng.pdf.lnk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e567781a-e48f-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710701717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710701717, "uuid": "66634443-2561-48bb-a320-6f7ac8d897cf", "comment": "Malware payload (RiseProStealer)", "value": "0e65f517898765b8d73728a92639314c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710701717, "uuid": "aee606a1-0b9d-4daa-8b1b-0d33ea892121", "comment": "Malware payload (RiseProStealer)", "value": "915811e75f25609c33498feb7ff38cce49405c5268e63904c21c0ece8af89ad7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710701717, "uuid": "7fd97d9f-ed0f-4a33-a09f-c55db4b3e60e", "comment": "Malware payload (RiseProStealer)", "value": "fc78e72b7d1711728dce64829cbf7163d8860d19", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710701717, "uuid": "21791b54-c4b1-42d1-81eb-87612d3aef7e", "comment": "Malware payload (RiseProStealer)", "value": "d9b317c5663184a2e3db31eaaf3ed1cbbe516cc68a7794bc411f3a7b2a43f34afda473b5ec9a679898a48cbb8eca5da9", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710701717, "uuid": "6dd6b7f9-0b02-446f-9748-27862e439ec8", "value": "T1ADE56C93B40575CFE68E27749127CEE2596D43B9072449C3AC29B4BEBEA3CC116B5C38", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710701717, "uuid": "a660fdbe-81ac-4504-baf7-896ac8acad80", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710701717, "uuid": "ed2c5657-a84b-4217-b634-af2c38ea9388", "value": "49152:SH34eJwUShCENVm33bUkMMaFBPSD54k/sLQhCUii1BJM1d:SgCGm3r1MvBPSDek/ETUikU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710701717, "uuid": "9428f884-4527-485c-aada-9a49aa728b1d", "value": 3202048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710701717, "uuid": "c5308dee-ef54-4829-8a05-92d07d317af1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710701717, "uuid": "14d7ad2f-b4e3-4e08-834b-775c5b6de26e", "value": "0e65f517898765b8d73728a92639314c.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "834ac155-e44a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710671917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671917, "uuid": "484711a2-cb72-4478-a2e0-f2192b749c06", "comment": "Malware payload (Mirai)", "value": "2f2776ed70f6427eb8e74fc534fa6a61", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671917, "uuid": "12ea113c-087b-43ff-ab6c-6e6ba0c23dc5", "comment": "Malware payload (Mirai)", "value": "92b45e5f3cca4c1a2919f7ea2d25d0d807270de555342f36c2e881d90bcf526c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671917, "uuid": "2639235e-9e98-43e9-a637-8b1964346492", "comment": "Malware payload (Mirai)", "value": "3cfa5c35968fc9bbfe3b3eec746f3ea0aad215fb", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671917, "uuid": "fe1bbbd3-5d4d-479a-b25c-010190d982cb", "comment": "Malware payload (Mirai)", "value": "1a1043cf35462e42337f8d465aacc250142925ca3fdfd3c3eb3b4514b75ccf07e536a98725d92d26a887f9ae9407c7ce", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671917, "uuid": "5e36b9d0-44e0-4944-bf77-7160c56a5c3f", "value": "T14E832956B9819B15C9C516BEFE1E128E33130B7CE3DE731289245F307B8A96B0E7B605", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671917, "uuid": "26bd45b2-1b0d-4736-812d-c74d77f82f54", "value": "1536:Nan+HHEAyBMjrsqsN2i7UCYYZSDITmzaOwAQIMHibpQgfUsbWtiL7hD5xYxtN:LEAvj4qg6hzaEpQgf5bWtiLFD/UP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710671917, "uuid": "018fe5f4-2ed6-4cbb-81b7-2872cca7cc29", "value": 84740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710671917, "uuid": "c8c0b644-2946-4362-b525-530b5d6c9bc1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671917, "uuid": "15188007-93cf-477b-8632-4a0b90fa8236", "value": "SecuriteInfo.com.Trojan.Linux.Mirai.22366.4327", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3993604-e44b-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710672508, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710672508, "uuid": "a2ba68a4-0fc8-4e06-bc0a-9c91a65de4ae", "comment": "Malware payload", "value": "dd4880ddd9b71c97359613e1d54cee28", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710672508, "uuid": "ba4b7bed-e4ef-4f0f-acdc-719bd021da85", "comment": "Malware payload", "value": "93af7cf7217d32f1c42ee4417908bc27d6a669b975d1e374d25116f8ca3470b8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710672508, "uuid": "b1cba656-d0d9-447b-908b-f6951976150f", "comment": "Malware payload", "value": "8e27505c7942ca441b4ee473b9e81192627bdb46", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710672508, "uuid": "c9e965c5-d00c-4fad-817c-57151a945138", "comment": "Malware payload", "value": "2d618b34d8fd64a357068d0811a75442988de648438b173671b46bb24c946fc50c8459e068e501caba593cf5c4d44d97", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710672508, "uuid": "422453d4-18a1-4a90-a374-3448b5d2064c", "value": "T1F80833661608321DF4B532F51F3E69FEF954C611378629F3AC966246CC42CE3D86C8AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710672508, "uuid": "2730d2b9-0488-46bf-8b6a-5ef2998d7f61", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710672508, "uuid": "89003a26-99f9-44b3-9576-dcfe72270465", "value": "1572864:6f6LBYJ9SYQRZi9AYQxwHxZHBFdNYZvpXm6IKEA:6GuT2ZcARxMzFC3IKE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710672508, "uuid": "587eeca2-7454-49e7-954f-9c074026ead7", "value": 82612500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710672508, "uuid": "2080f41f-45d8-4563-9a50-3ce0ce267b59", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710672508, "uuid": "c04346eb-424b-49c3-ac0d-4687dfa88e7e", "value": "Planets Therapy Installer.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "377342cf-e404-11ee-a120-42010a9c002e", "comment": "Malware payload (PureLogStealer)", "timestamp": 1710641725, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641725, "uuid": "c7e8b05a-8ef9-4c48-b365-0c534b25ea66", "comment": "Malware payload (PureLogStealer)", "value": "ab881b9244472c18951b1ffc267a8a92", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#B7C2AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641725, "uuid": "17a27167-92f4-45ea-8998-9783362c4ce4", "comment": "Malware payload (PureLogStealer)", "value": "94e31d208cd89ff78bffbd2737d2b629710a46dde9288549e6027008debf7461", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#B7C2AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641725, "uuid": "12732a1f-6ed1-449f-8870-7537482391f8", "comment": "Malware payload (PureLogStealer)", "value": "031ed40f34fbabb1d4b487ed4c9e9a150194b7d8", "object_relation": "sha1", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#B7C2AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641725, "uuid": "0218481e-374c-4089-8128-144312c01613", "comment": "Malware payload (PureLogStealer)", "value": "a30ed274facdb2d00bbca430a30008a9578ba197264de18936326efa53776fa858e1335bff6161bdcf40a4135580dce3", "object_relation": "sha3-384", "Tag": [ { "name": "AgentTesla", "colour": "#405C97", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false }, { "name": "zgRAT", "colour": "#B7C2AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641725, "uuid": "bbce5f64-cc30-4b1c-9cdc-bbd708afdc61", "value": "T13D44E9013189ACD6E4536DB248BFD5301168BEAE9135C60E3693FB2B56F3352306BB5E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641725, "uuid": "c13979d6-a066-48fc-aeed-040b62ba5aac", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641725, "uuid": "32e47261-5ecd-4091-ac7e-9203320f809a", "value": "6144:y0V09QgKtAepuupdUZ0tc6uwrhmWQcrF9noAgvV:y2XBtAMUZMBrhm0rF9noRd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710641725, "uuid": "35c447df-5bad-4136-af62-67512bbf85c1", "value": 263544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710641725, "uuid": "d9c39c61-7e87-4526-b0cf-f4f549eea7d8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641725, "uuid": "8f26f65b-f372-4a13-844e-638b6b901538", "value": "5609012330.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c005846c-e444-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710669442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669442, "uuid": "645619e2-acc4-422d-8e0f-06c0fdd62391", "comment": "Malware payload (Mirai)", "value": "4b71440572c1d90fa55b3eb53d329e07", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669442, "uuid": "e0b5484f-8d2b-4512-8dff-ec366e346616", "comment": "Malware payload (Mirai)", "value": "956d5ed2118e80bb104ffda0fe580e151f3e94b6adfe89472a733c839eeeb8ea", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669442, "uuid": "03c04cca-22bd-40bc-93b1-dd32779b6704", "comment": "Malware payload (Mirai)", "value": "a0beea2c84618af0b0edc4efffa98140d3c1010f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669442, "uuid": "a5ff0b37-57d8-4c1c-9e18-83b03714fdb7", "comment": "Malware payload (Mirai)", "value": "274b659656e450ac5587dcd0d8f19bc98ddf41703cefc8d6cbe688136da13b57aadca4ab73c1528cf99c8411f8971ac6", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669442, "uuid": "22bcf0a5-96cb-4bfe-a520-94b69e5bf29d", "value": "T160E2F1979372A452DE7877F2F56A81CB6BBD4BACC23B70B2151643282D960535E3C883", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669442, "uuid": "00dce369-88d0-4c44-9db7-2c078ac86a0c", "value": "768:1oiWiO031vpAPbrVWZK3XVGxm9XMNk9q3UEL5It:1orm1vpALgUJ2NLS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710669442, "uuid": "210507b4-e498-42f4-99e2-f45a3b4be8e7", "value": 33028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710669442, "uuid": "a3e18acc-0977-47c6-9aaf-f00e0aa1bb5e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669442, "uuid": "4eee4e55-5820-4dab-a011-38a64fc65dbd", "value": "4b71440572c1d90fa55b3eb53d329e07", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d18412e-e4ae-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710714910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710714910, "uuid": "42e44594-1031-44eb-b5ba-39c2f7af3118", "comment": "Malware payload (RiseProStealer)", "value": "b32d9b842ec7ad0c9792a5239005da08", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710714910, "uuid": "7e7a1be1-16e2-4217-8a0f-bcf377f5d467", "comment": "Malware payload (RiseProStealer)", "value": "95ff9dec6c87258f513d8c23ccc5a4c66b6233d43434a8f789fefd44e39f4d40", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710714910, "uuid": "a42e2b23-171b-4160-ab83-04757fc52de6", "comment": "Malware payload (RiseProStealer)", "value": "a277de3490d1ead1bf6b283b8a025f609dba1022", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710714910, "uuid": "fb9fc644-694d-4e6b-9687-bb58c16430c9", "comment": "Malware payload (RiseProStealer)", "value": "e8bcf965300b71d6eaaaf809e777ea94e8fa0dbcc3e493b0e4796160f7a4c8b0bcd5bba29a7f24653c0c1dc098e3555b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710714910, "uuid": "8fd415ae-53d8-4fcf-b78c-09302df23a6d", "value": "T1AFE54B62E50975CFD4DA2778D427CEA1595E07B947220CC3AC6CA8BA7EB3CC212F5C25", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710714910, "uuid": "4c121119-fad9-4db9-a878-5b0b7414e335", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710714910, "uuid": "5aaee157-0ae9-4372-9de3-8232d2b90cce", "value": "49152:ilKJ+cXeyYHmMtKPUKH59gR4BPKl0gbSVtNpNKnNktowIlhC:ilRDXtKsKZ9gR4BPKljbY3HsktT4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710714910, "uuid": "cc7a8e92-2e7f-4ee9-8d79-e317472f4617", "value": 3202560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710714910, "uuid": "b8a9b87d-3e81-4ede-b075-f8e27ef2cb68", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710714910, "uuid": "657b22a2-58eb-48ba-86ea-d39dbc958dc1", "value": "b32d9b842ec7ad0c9792a5239005da08.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5be0436-e437-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710663815, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663815, "uuid": "3fde3344-3047-4d5f-b7ed-4a8e3280d46d", "comment": "Malware payload (Mirai)", "value": "c40a084f416335115bcb005f515df3f3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663815, "uuid": "e32c76ea-e5e2-4da2-9a69-b6b9de4ccf44", "comment": "Malware payload (Mirai)", "value": "96e3c1f93a5cd6f4b47c48ece7c03705e5ad377f4a4eee8f04839a52735ff0a5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663815, "uuid": "de58b918-d779-4f5a-b509-d4b814ad4182", "comment": "Malware payload (Mirai)", "value": "db424662f1af82142695bacf8b89230ee527f04f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663815, "uuid": "8eb4647b-aa1a-449d-86c1-b5fc8e1120c0", "comment": "Malware payload (Mirai)", "value": "35001d7e56c8dbc1aeac2f4e7d4e51a472af591b4c5d186938110f2b514f4a1cacde7347981d5e5ae83d2cd427cc9356", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663815, "uuid": "a64e1d7a-e622-41a9-8dd8-7a20fc230911", "value": "T1D1031981B8819A13C9D4137BFA5E018E372573A8E2DF3306ED226F557B89C2F0D6B645", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663815, "uuid": "7c5d0f03-11ae-4752-be14-bd018295fd03", "value": "768:QTcNuWlVm00yu5pNgtDO/w4HVSi9nZNONqZRL:FNzlV103NgQ/w4HVSQJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710663815, "uuid": "50c84ce2-d591-4069-aed3-3eab44f17071", "value": 38304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710663815, "uuid": "5a4a766e-5d2c-4b6e-bfcf-8f0a6118b5c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663815, "uuid": "43906ef9-a3cd-4a3a-ab8b-e8324eec54db", "value": "c40a084f416335115bcb005f515df3f3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98b2f005-e437-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710663793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663793, "uuid": "37e00379-afc1-4f07-ad3b-8cd7bd562bac", "comment": "Malware payload (Mirai)", "value": "7c7587fa5afe3c78f72da8742f6b35a2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663793, "uuid": "7cb46fc6-5b68-45af-966d-b9fb47a6921f", "comment": "Malware payload (Mirai)", "value": "971de55b7124ddec60bfaa2d1e8f6ce307ca62464d23745a33beb7fa5501b80c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663793, "uuid": "e1e821c7-2e2e-45e4-aa6f-976fc68a963e", "comment": "Malware payload (Mirai)", "value": "56aa52285e9dd17ca8390b8969e236783eb2ba7c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663793, "uuid": "d8f08b86-b1ff-4b0c-81c2-770303b7a458", "comment": "Malware payload (Mirai)", "value": "6c1cfa0fb393a28ec7856ab5e0656980c9c640f4f7302762c0fb1790af5858b5fb33614c6f3ba542e50bae37c0872197", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663793, "uuid": "7a08ef3f-a274-43fb-a685-995b34cd10c5", "value": "T1FBD31A56E7408B13C0D61779B6EF42453323ABA4A3DB73069528AFF43F8279B0E63905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663793, "uuid": "50f2eb7b-a04b-4c3c-a628-4ca366ca50e7", "value": "3072:9S6VGvP5uazAFEsHY8jNCB4wxGnxE+SQkM/9w4H:9S6VcuazAFEs46NugnxE+SDM/9nH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710663793, "uuid": "db81f522-e393-4e5d-831c-64e036a47a92", "value": 140758, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710663793, "uuid": "424de539-e7b6-4b79-a58d-a72ff2a9efbe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663793, "uuid": "95deb232-0243-47cd-8a07-9e8c5f9cf5fa", "value": "7c7587fa5afe3c78f72da8742f6b35a2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a19cd5ad-e4ab-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710713629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710713629, "uuid": "bd2d5322-59ae-45b0-a774-b2bc2b572978", "comment": "Malware payload", "value": "0febe8ee7b773de2d5445d8fabd030e8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710713629, "uuid": "ee6caf99-b173-456a-ace2-5084ee0e8773", "comment": "Malware payload", "value": "9904fa9cfebbd4dd4e8a3d4e9c3e82c73c154c2f40c874997b6d14b97ad555b0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710713629, "uuid": "0a5e226c-e6b9-4c35-8006-27984a6d337c", "comment": "Malware payload", "value": "f5974ab394f8860ad8654ab20594ccd96032b056", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710713629, "uuid": "6e63c5d8-fcc1-4c16-8026-772b3629913a", "comment": "Malware payload", "value": "0641e200ccdee2ac2bee6c3fc37ad7da2f97fb9bd0c890cadc6ff5f3f6d682b6ac63fe9a0f405fd34f02165fb19b1576", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710713629, "uuid": "ca08c814-3f4b-4084-8b25-bd3cc8b734fd", "value": "T1BFE55BA2B90972CFE88E2774C537CD856D5D42FA07214DC3A86CB4BABE63CC115B9C64", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710713629, "uuid": "7ecc0a49-2a5b-4a55-8e7d-01729f7ba2b8", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710713629, "uuid": "2fd8d93f-0bec-4bce-94c8-901a28825806", "value": "49152:9XN3u+RkDMYW0GnrvsednZ7vb4H+bxn77e7DYRdfHUWjZI:JUTVKnrvsedZ7vb4HA77eARdf0aZI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710713629, "uuid": "b1abeead-b22e-4a60-8f1a-d996806b7c52", "value": 3255296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710713629, "uuid": "fb5310dd-d2b0-4178-8899-db411a20d705", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710713629, "uuid": "425a314b-bb2e-4bfa-8b80-86c00cbe4492", "value": "SecuriteInfo.com.Win32.TrojanX-gen.12275.28900", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "93cdb89d-e403-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710641451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641451, "uuid": "22df050b-8d9b-4bb3-aa4e-fea094c73125", "comment": "Malware payload (Mirai)", "value": "372152ecc87d00e192ac00160b4145b2", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641451, "uuid": "0e9cc5cd-cf58-4c2c-8949-cc770b7cfc3a", "comment": "Malware payload (Mirai)", "value": "9ab3c796addbb1388d08321bffd7d11b5f9ed8d27bab60113ced7387fe59ccf0", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641451, "uuid": "6e4bc51e-a87f-46b0-9443-c13294d3163e", "comment": "Malware payload (Mirai)", "value": "b4e356abfafe613b51d7ae5e522d2de97e9a744b", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641451, "uuid": "d067dc19-5da9-4280-8720-d6563e028b6f", "comment": "Malware payload (Mirai)", "value": "368e306239387280f48e813f747e77495f0529fff66903877061d987523e6c28c98b220d76eb3d632d7a1452b1320670", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641451, "uuid": "0649cda9-0fda-4690-977d-97079e4af653", "value": "T142E32956FA804B13C0D61779B6EF424533239BA493DB73069928BFB43F8679B4E23905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641451, "uuid": "41ca6922-48a9-4809-91d9-e8b7a407bd12", "value": "3072:+q853fk3TgIrHaGnG6o4nnvlNyp43AKu2v+vtM/9Ck+:+q858DjTaGnG6o4nvlLQr2v+lM/90", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710641451, "uuid": "96948dfa-0592-465e-a635-3239e9f0b78e", "value": 153008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710641451, "uuid": "2918af21-2b31-4d4c-a671-6a0a6e432997", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641451, "uuid": "086ee453-9fa4-45e3-8f79-b42ba4c8bb65", "value": "arm7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b18544b-e47a-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710692412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710692412, "uuid": "2f03aa99-6b50-483d-8741-aed332359ae7", "comment": "Malware payload (RiseProStealer)", "value": "01e18fdcb556e95f607ea5697c64a6de", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710692412, "uuid": "268f2c66-b1d6-48ff-a608-cafba5eaccff", "comment": "Malware payload (RiseProStealer)", "value": "9b01ad3f691e9313168e5794c28e4420721a17e3057c1aaef8aff7a39f4748ee", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710692412, "uuid": "f22e2b81-69c4-49a6-8f85-319c4e10ac6c", "comment": "Malware payload (RiseProStealer)", "value": "dcba0b449d63eb6f2448e09afb0a91987b5e38df", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710692412, "uuid": "4dba5625-b961-47cb-8c56-3e7f21542e10", "comment": "Malware payload (RiseProStealer)", "value": "7b975f967a0b37af5c6803c017094ce200841a2b87acc7a2eb84071beafa90ce84c4e3b553df47b192568901dbf8917e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710692412, "uuid": "0a0096fb-a292-49ae-8de8-566006271522", "value": "T113E55C627506F1CFE84E27785767CE42695D4BB943210CC7ECA874BA7EA3CC116B6C28", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710692412, "uuid": "30e863e7-7b13-41a8-b75e-6e196acea9c1", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710692412, "uuid": "ebb3bdf7-9882-4380-846b-f10903ecc21e", "value": "98304:5FlLrfdiGog0F/dCgzTJRO/fFzfOCd0or6Qu:ZqTgf0Cd4D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710692412, "uuid": "f9c74353-0834-4091-b00a-36015c0db636", "value": 3192320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710692412, "uuid": "65eb7182-ad7b-404a-94d7-6e83d328b281", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710692412, "uuid": "c340efd4-4656-4596-9a9a-cc897213a7d1", "value": "01e18fdcb556e95f607ea5697c64a6de.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c1f78d0-e46d-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710686884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710686884, "uuid": "f87a0577-acec-4326-b9e0-ac275879b862", "comment": "Malware payload", "value": "d9046352c3e553372f5254761b24be7a", "object_relation": "md5", "Tag": [ { "name": "pw-Ch@atMen3!!111", "colour": "#88FAEF", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710686884, "uuid": "cffab8dc-8640-4e7c-8251-43cbc0d80dd5", "comment": "Malware payload", "value": "9fdd4addae7af7648824ede864a8174a1cb84b2c6a029fd2654a7d371ee8db93", "object_relation": "sha256", "Tag": [ { "name": "pw-Ch@atMen3!!111", "colour": "#88FAEF", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710686884, "uuid": "7e58c20a-465a-4944-be1f-cfc1d2981fc2", "comment": "Malware payload", "value": "548fd028fbd433fd96078a9e229a2d3845a18412", "object_relation": "sha1", "Tag": [ { "name": "pw-Ch@atMen3!!111", "colour": "#88FAEF", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710686884, "uuid": "822387a2-2e40-4bb4-8b6e-074d27efa771", "comment": "Malware payload", "value": "21799493d09f52056e9b7f84fd49449cb288df36185a236a9fb9551364775659c486fc89f920eb22a4c90756caa30b73", "object_relation": "sha3-384", "Tag": [ { "name": "pw-Ch@atMen3!!111", "colour": "#88FAEF", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710686884, "uuid": "e585750f-40c2-4ae3-b78c-7a99bc66f322", "value": "T19A7633900F16FCA1F52C9DA959D332B0D947D59A8C12C3E6C89A7789D1E207EBF113A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710686884, "uuid": "11318998-f66b-442e-96ee-1845f879d512", "value": "196608:O4+utf4jEmee21yDAWAroczioXKtH3gvfijetut:O4Vd4jEmefsSzrX8H3cfijB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710686884, "uuid": "25a9d49f-6119-4fe2-8baa-abae54841bc1", "value": 7529886, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710686884, "uuid": "d399f1a4-a875-4378-a9f3-e52420528ffb", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710686884, "uuid": "2a3942e2-6a0a-43b9-a7fc-facff23e826f", "value": "Application65f700f5c1464.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fa5a3b7-e48f-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710701546, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710701546, "uuid": "28663b15-4654-48b8-8824-25898e27e247", "comment": "Malware payload", "value": "06418baf95a77cc0a7cd9af1e411eccb", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710701546, "uuid": "5059a6af-eb77-49c4-9ca3-c5977212552a", "comment": "Malware payload", "value": "a0b7fec1ec02335995e8b9460e434c9f7ed2d2430ceff1c3d029979acd9f352d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710701546, "uuid": "a8cc5d2b-dd8e-4e27-ac27-1cee91d6f52b", "comment": "Malware payload", "value": "ffc6916511613a7ccfab26a3330578ede6965900", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710701546, "uuid": "b4bd2d83-4c9a-40e9-81ac-030ce3abb772", "comment": "Malware payload", "value": "32acede5a09c0a992f10d78029e20d883cef113bb13efc3b5c06c2f8c9a425f0ad3b02e8c840c730eb3bfa433e16cc45", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710701546, "uuid": "febc2227-0527-4d42-836b-094b5e6ffb0a", "value": "T1E4F538B16B2C9559F0A37736E853071238A8F3EC92A83240BDD19191AD58AFCD32D75F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710701546, "uuid": "8209b676-0440-4e7e-840e-8424e8ce189d", "value": "fc10cdb9bf4fe613753f253298755164", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710701546, "uuid": "bffe36e4-0f30-4adf-b1a1-f8adc9694e43", "value": "49152:GEh2qWE9q5Is//DJQuzIhzzCas3d2gTFqBG9Hn2MEiBxR1bfYVUQsyfqgE6VBI0S:usyhz1Lh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710701546, "uuid": "72c17b77-6392-447b-834e-8f8913c3ba8c", "value": 3474552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710701546, "uuid": "72ab573b-86c1-4e2c-aa0e-2600da43c18d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710701546, "uuid": "ca52f452-fdf2-4e5a-8657-07c9600619fe", "value": "06418baf95a77cc0a7cd9af1e411eccb.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bbd3178a-e444-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710669435, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669435, "uuid": "8fbc7924-9d43-4806-aee4-a92aec440206", "comment": "Malware payload (Mirai)", "value": "f23beb02a9ef5f69d3a92974eb3130c2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669435, "uuid": "b9d3fc7f-9347-4db8-80c5-9e1f9883aae3", "comment": "Malware payload (Mirai)", "value": "a3e816d540b5f21564138f332f70ea4f725d70ccdbfb52e395a4ab3bc9e02bf4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669435, "uuid": "5740d932-5954-4d01-90ae-fef3b748c2e9", "comment": "Malware payload (Mirai)", "value": "812bace7b164f4ef31040e463e9eb070a17be6ed", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669435, "uuid": "42843dab-518c-43f1-8581-28c5efa3cad6", "comment": "Malware payload (Mirai)", "value": "7432c3a5bd16697a7d97116f88c619ace3405c965337294c08fa1c81088bb6633943a35afdc37fa0a9cfc59379a750a7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669435, "uuid": "d29b7642-d0b0-47e8-ba61-c32d1145485e", "value": "T1AE330262676D29E292B08777FC33AC1A66DC16F95CA730DA2CF0561977C58024FF1386", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669435, "uuid": "40c25a8b-c283-4398-85ce-d34673004daf", "value": "1536:69O/ZMAXIxNUk0ALcPqF1aBexo4opKZbc:69O/ZNKycLGqFUF9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710669435, "uuid": "45e09b7b-f93c-4200-aaf5-211e03748665", "value": 52520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710669435, "uuid": "c7f6d8ea-c317-4a6b-a644-90da79ed69a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669435, "uuid": "032b1fc7-ba99-4a5c-9ac3-518ab11a2b14", "value": "f23beb02a9ef5f69d3a92974eb3130c2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ebceaf3-e453-11ee-a120-42010a9c002e", "comment": "Malware payload (CoinMiner)", "timestamp": 1710675829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710675829, "uuid": "89918215-34b7-4e59-a7de-0aba198e34cc", "comment": "Malware payload (CoinMiner)", "value": "12ffe402a6d5b35160009cfd140ceed6", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710675829, "uuid": "35471d27-9f84-4f7b-9817-3d7f3af39702", "comment": "Malware payload (CoinMiner)", "value": "a40f89f498d651c969f038327cfac9eac4254eed47ff819e3e5d954c896856be", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710675829, "uuid": "da38eb92-6226-46f5-9c84-293f74e1a840", "comment": "Malware payload (CoinMiner)", "value": "7f21f863f00c9bff182c3044ea225574b02107cf", "object_relation": "sha1", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710675829, "uuid": "1fbeec8a-8526-4864-9621-a9a5fd39df63", "comment": "Malware payload (CoinMiner)", "value": "f33f39934826ef59c155183d3d8f67a34be51e8623885a4116068f8febe472247379f117cef268f194391d35308ea199", "object_relation": "sha3-384", "Tag": [ { "name": "CoinMiner", "colour": "#B30460", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710675829, "uuid": "2d02ad13-0299-4712-a909-f5302d3ce403", "value": "T139A533A3FC10EE6391A4657DCB8B8106E483B0275E9D76420D77B8E3E27161A8E7351F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710675829, "uuid": "460441f4-56be-444a-b021-35f59420a5d3", "value": "49152:Tvdem3S7FxEqg0Y4NIY4cxFrUqIR296CbO:lS5xEqgCGYxxFHe29c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710675829, "uuid": "81301379-0d1b-434d-ab3c-06c92c758f81", "value": 2063952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710675829, "uuid": "270be65b-f678-434a-9006-511db70a0122", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710675829, "uuid": "d1a694c9-70fd-45f0-ae67-60f1271b3da0", "value": "SecuriteInfo.com.PUA.Tool.Linux.BtcMine.9999.15883.11803", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "831df0e1-e437-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710663756, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663756, "uuid": "bc62f956-7f54-404f-85b1-2b35b7ae4e23", "comment": "Malware payload (Mirai)", "value": "caef84c9572ef5749efac671654e16bc", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663756, "uuid": "fc75f20b-a21f-4e2d-bb48-cc5d68a75917", "comment": "Malware payload (Mirai)", "value": "a5bf5bdf1202c394bd3573cce60b21ac7e13c057f9e021ba49e3ba40d44da566", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663756, "uuid": "ff6ea66b-4923-432c-9e79-c5923bc337cd", "comment": "Malware payload (Mirai)", "value": "80dcf8c5449ef387c9ad107078afe4a0aa524219", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663756, "uuid": "b0d98ab2-395b-49ed-9560-714497e3229f", "comment": "Malware payload (Mirai)", "value": "ffecf845f0ab1e44261100ab3d880d88063cc51090a7ce54d39b6a19b35490f59c7da13d719bd008cf0c1bd12b362db2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663756, "uuid": "1940e2a8-1eb8-48b0-a56e-50ab160112ff", "value": "T1E6B2D07462E9A0F0CD306038F97EC987A7DA41FD91FD3622266610F81F5688E16B85D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663756, "uuid": "d844b0c4-cc23-4445-98c6-cd711e058d60", "value": "384:o2oBE5aNSS75BOI+ypZ5vTlYIwcvsdTf5MF1iAUgefoeDYbZXGcH15sHFhymdGU2:oyaNSq5sOHpTqncvsdDePiAUgefoeDe5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710663756, "uuid": "73f0cd9b-6583-480c-a25b-fe562a8d3e71", "value": 23736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710663756, "uuid": "b7a39613-a248-4ac7-9010-497ac3c5ddce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663756, "uuid": "e702697b-24ea-499e-8327-1b95ef99ef2a", "value": "caef84c9572ef5749efac671654e16bc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8db2b7b4-e45e-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710680525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680525, "uuid": "eedda7f1-4882-4cf0-a9fc-855735d42f3a", "comment": "Malware payload (Mirai)", "value": "12999a4a5b4cff019b11fceaf727319b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680525, "uuid": "e01dd9fd-063a-4d20-afcc-fe783cf1d095", "comment": "Malware payload (Mirai)", "value": "a892176b92c240d7c0acba95bca8dfc3c52199a1626e43b34678f1be6a7e40b6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680525, "uuid": "fe584982-42a3-46a7-8446-5c78057f3e8e", "comment": "Malware payload (Mirai)", "value": "9d7a27f3581f302a61ba38e3b997f813cfedcdac", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680525, "uuid": "992b01be-025c-4b03-89a5-40374bbe88b9", "comment": "Malware payload (Mirai)", "value": "4d995a04a5a5b0d5d4cc98723edc93575e8f0e3d6a21c910733a1c6714eef0babca02ae50c1d2293d68643c0d8ce5403", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710680525, "uuid": "93314f90-c78f-4246-a694-e8ddb6523136", "value": "T160539E75E55ADE68C006057478688F78AB53E0C493633EF7DAA082A59483DEDF908FF4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710680525, "uuid": "ab8d4638-4d30-4e2e-aeb7-27a95e815c87", "value": "1536:qaTdcs79M2Dt25afs3C3QCRvAWTxCcB7:qw79rPf+CgwvAWTxr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710680525, "uuid": "1f98860c-df54-4c0b-ab6b-69fb5664f7bd", "value": 66632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710680525, "uuid": "cc602bfd-1638-4266-8bd1-860b40dac283", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710680525, "uuid": "58fe8319-899c-4fe7-a8cf-7e2259066a7e", "value": "12999a4a5b4cff019b11fceaf727319b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "87d9e8dd-e44a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710671925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671925, "uuid": "a9de8aa6-3d2c-4b62-b390-c709aa902c3f", "comment": "Malware payload (Mirai)", "value": "fb1597151fcd30a6a810dd597d1a840b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671925, "uuid": "ed67813f-b4b3-4f04-a91b-c46ec490edac", "comment": "Malware payload (Mirai)", "value": "a8c2791b9933faa823fe12082362c661b7b2d64deba065ef7640429ea9bcf83e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671925, "uuid": "e24b53d9-e695-45fb-817a-d6d0bd2e5ff7", "comment": "Malware payload (Mirai)", "value": "d0a52da153e2b7a5e4a2feaf416060e63ed863a2", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671925, "uuid": "4b6bac04-1b2a-48d5-8625-0706a64d6adb", "comment": "Malware payload (Mirai)", "value": "e823935146b9362b9b954696a56a9366085da071cf8dc46ca98e4596ac8c9077f24a7aaddbf1f4fc7ffe46d54a5b46ce", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671925, "uuid": "12f92ec4-0808-41cd-9ef2-139dad66e409", "value": "T10993F91A6E219FADF36C83304BB74A21A7A937C623E0D745E1ACD6105F7038D545FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671925, "uuid": "90112ca5-9dd2-4a9c-8e93-150e2d8fb09a", "value": "1536:FGbjTxkG5OSwQeub4hASX2MWqfSyOQexNiGsVTfi1w:cz8Np2M7fSyO6GaTfi1w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710671925, "uuid": "4dfac869-7d8d-4594-9244-4d49e914ac9d", "value": 93956, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710671925, "uuid": "7112472b-73c4-4e66-a7bd-255e2bbd6aac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671925, "uuid": "053b7b08-e212-4d88-a572-fb1109131c41", "value": "SecuriteInfo.com.ELF.Mirai-AJJ.24920.14799", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "889bdfc4-e44a-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710671926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671926, "uuid": "8e1f7b41-ce8c-4def-af07-e0fcc331d9af", "comment": "Malware payload", "value": "ec6163d9d650ca12644f5cbf62e8bf2c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671926, "uuid": "7fc33cbd-7d48-4015-8b5b-c36eaaf7ed24", "comment": "Malware payload", "value": "aafe94be78cbce80648487b2060e0a3458d7de0aec52b7e023351dcda4af90c3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671926, "uuid": "65815c93-e13b-49c7-8c3c-bdebba032b46", "comment": "Malware payload", "value": "6ee00385eb4ac0316559123609bf2521f6163297", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671926, "uuid": "51e1ecc9-8fff-495c-8966-e06430ea136a", "comment": "Malware payload", "value": "59b33f177613a04c96c551df6a36ee4731034ca229d89d34dc880329e6ad32fa9370c391e18cc670f755369acbca9aca", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671926, "uuid": "60bd22f8-230e-44d5-8a21-4ed3fb2b0ea5", "value": "T1DEA5F17A45D4CA6AD215307D62CCA49338782ECDBBC092C59DB4BCAED9FEF530225712", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671926, "uuid": "81068109-b516-48c2-9d0f-add66a21731f", "value": "d879a65e465b1c412670e44fbe2d8e6f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671926, "uuid": "d6f5f5f9-6250-4d43-98e7-a2d8d4f66c61", "value": "49152:xbrmcFtcE6qfzLQ71Ysrp9zcpgl80Ne6N3ythzHPAHmymiEJBlwb6:x/m0t7Df3Q71fgp08n6BghLKfm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710671926, "uuid": "1284453a-e694-4060-9ac8-efc6775b710b", "value": 2112264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710671926, "uuid": "fe39fe8f-052f-43fc-9d1c-f06d450826de", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671926, "uuid": "dcf14bcb-b8cb-423b-894f-db1007cf0b4f", "value": "SecuriteInfo.com.Trojan.Siggen22.10132.8163.23723", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2b41e9b-e407-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710643274, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710643274, "uuid": "6a04c579-1b3c-4e77-a6ec-551960f07af3", "comment": "Malware payload (Mirai)", "value": "bdff626c52fb44c1beb266f140ae65cd", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710643274, "uuid": "aa4cda17-888f-4df6-be9f-374156da4947", "comment": "Malware payload (Mirai)", "value": "ab98ed0962904671af642cb4237550ff10c5da2caba3ed801c21c29d63ec1aff", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710643274, "uuid": "ac10ffed-4938-4b3d-b4bd-d0dd3633a5ae", "comment": "Malware payload (Mirai)", "value": "f154a223bae1efec25150085fe5c768fba808942", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710643274, "uuid": "7a8f0f36-4ff3-425c-8fac-1fb1a20bbeee", "comment": "Malware payload (Mirai)", "value": "4a90a972ee03abf45705ba8242aa7ce03f20c937a6123f70b630e19f08762d1cdcc4d171026568db8859a08e54cd55c7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710643274, "uuid": "d1356bfb-3f8a-4887-afa0-87d0d609197c", "value": "T1F5734BDAF801DD7DF84BD77B4453090ABA31A3D107831B36639BBDA7BC721991822E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710643274, "uuid": "3536b4a3-714c-4c63-828b-303688ba73b9", "value": "1536:seq844GBBxXIA9oQwlya7A8uRVc/Lc6hS0/TiNOIkfQE7E:seT44G7xXf9dwlyaTLxhjSkf97E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710643274, "uuid": "e851b404-ea61-4d64-99a2-41ee42e1e4a4", "value": 75004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710643274, "uuid": "6bf51c94-5598-4b3e-a755-827a69683ac8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710643274, "uuid": "cab33ea4-d55f-405a-a3ca-4174f77c03b5", "value": "bdff626c52fb44c1beb266f140ae65cd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81acad12-e439-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664613, "uuid": "d9511915-999c-4a7b-9869-992a4ace722b", "comment": "Malware payload (Mirai)", "value": "6a46d948288ffb679e86f3af4ecfe2d9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664613, "uuid": "74a734b4-07d8-4256-97ef-f65c5ccd1bf4", "comment": "Malware payload (Mirai)", "value": "aba44dd8ecacf75957bbb5cdbde51953dd45f8d5407f629e6fd3e1abe2e66d8e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664613, "uuid": "d81f92d3-dfe3-44c7-95ab-773b0412a7b2", "comment": "Malware payload (Mirai)", "value": "8004c7ba82f9ef9997834373c2ce7bd226395421", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664613, "uuid": "b264655b-7d3c-4694-8b7a-cc66778d8ae8", "comment": "Malware payload (Mirai)", "value": "bded796ecc65cfabbe2363e6ca8965b9c219d31fb61c91de31820120318f0d17b573d8eac0360f0eda9340ad6fa8d5e7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664613, "uuid": "b002995b-2395-4605-a2ae-8579c1ad678a", "value": "T173732A26B97A2E26C0D4B57E60FB8B11F5E1278E26B4C50A7D720E5EEF147006502AF7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664613, "uuid": "12870bd0-f7ec-4527-8104-be73fc75cdb3", "value": "1536:hD/B6f6UD5hAS7mo0DCCAXpSKV6v3G78nN9W8:927jqCt8v3GI/f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664613, "uuid": "ecb9f288-c649-479d-b65c-1e7c70b0a8f1", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664613, "uuid": "fb960bba-95a2-49b3-970f-25b6c30752f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664613, "uuid": "4a2ab713-cc1e-419e-9f42-20c0e0801b8e", "value": "6a46d948288ffb679e86f3af4ecfe2d9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95bab670-e438-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710664217, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664217, "uuid": "73ff4236-97d2-473e-acb2-f5945e99c9a0", "comment": "Malware payload", "value": "5cd5ed48f7cb8813fee03c4c6b4da379", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664217, "uuid": "9a8b7d64-7275-46f6-8693-8dbf888ed5ea", "comment": "Malware payload", "value": "acbb599642c9d2a9b2d0d3d254dbeb943d7461c554cae3fc6bbf93705dbb7c96", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664217, "uuid": "9fa81875-f437-4999-adbf-5555cb4398f2", "comment": "Malware payload", "value": "1778f987c9bdf6e1e2a924a9620b1ee538d98dbd", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664217, "uuid": "31d36973-819a-40ba-86fe-1f0b46ce682a", "comment": "Malware payload", "value": "22a1281eb9c270288d06fde2e18c21670347d4e5831a1b4db4c82a38a4d1f66ebc30f87a9be341a8f056d6f2fa424d8b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664217, "uuid": "d018ede3-d136-4354-a86b-13c3e71a45b2", "value": "T179256B09EB83CCF6F1B291F1118AD3725535A83D5163F5E3EF8B2A20B475251AF29329", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664217, "uuid": "091b568e-6cea-454a-9ff1-641333fb0cbe", "value": "24576:fmpW5TgwV/MJOeFwvM1ItlYzZAsk+KC0W0/BfZjMO5ArTpdmMgCe1T:aWJgwxgOeFzzG/VZjMagTpdmMa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664217, "uuid": "d3bddf68-2857-491e-a7a0-3fd61501df21", "value": 1034032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664217, "uuid": "33d78381-8678-4975-bac9-9e3e4351a260", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664217, "uuid": "941401f7-659e-457d-b344-7b7c8b231e6e", "value": "5cd5ed48f7cb8813fee03c4c6b4da379", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5de65a8-e433-11ee-a120-42010a9c002e", "comment": "Malware payload (PureLogStealer)", "timestamp": 1710662097, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710662097, "uuid": "3aa04c37-8b5b-4243-840a-d2fa28d6ffe8", "comment": "Malware payload (PureLogStealer)", "value": "7b9611d8a0144297915006d6c4a8439f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710662097, "uuid": "35a61785-698c-4c55-84ec-720161183df4", "comment": "Malware payload (PureLogStealer)", "value": "ade2ca16b57840a5554d4a77276993da64fe1598bcfea44953d8ed8780da9dea", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710662097, "uuid": "1dcb9765-6638-4331-9ea5-99c87dd16412", "comment": "Malware payload (PureLogStealer)", "value": "398ece03bc82a284caf4aa001f8f335e9c0605cd", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710662097, "uuid": "407b6e76-409e-46ea-8fef-3e26b166ae5c", "comment": "Malware payload (PureLogStealer)", "value": "45b82b354fcb529d80ee532bbc313cef08f28a23af67feb3f40b1d0dbe5846d85028a625598fc1546dfdd92dd6214038", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710662097, "uuid": "8d17aa0f-92ef-422a-9a6f-df5cf11833af", "value": "T181E501E156C0C25EC80A573A702D1C19D7B2AE657A7DE3A8DD8EB2A7FB33381444125F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710662097, "uuid": "8d7db6d8-1ecd-4572-aba7-aa5434bd90f3", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710662097, "uuid": "7fe6b725-8984-458e-8dcd-fccb6d6af340", "value": "49152:0EgcjqZnisX/Xy+VHW/inPevcTyJzUqTuDbsL81lriFLTUXSKs6nmAL:dgAYisX/9V2/inPkEyRclr4wSKAAL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710662097, "uuid": "fabd39bb-a815-42fb-b51a-3f8cb80ff9a5", "value": 3046912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710662097, "uuid": "a6882045-a36b-42f0-a28b-6d8901b71404", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710662097, "uuid": "ffbd8b0e-e2c4-48eb-81ed-3c6972ee5b7b", "value": "7b9611d8a0144297915006d6c4a8439f.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f3acd62-e499-11ee-a120-42010a9c002e", "comment": "Malware payload (Amadey)", "timestamp": 1710705733, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710705733, "uuid": "7a4b75f4-b07a-4a0b-a362-51c54f7a19a7", "comment": "Malware payload (Amadey)", "value": "631b5e58e33fbc4070a8fd8f7667d9a9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710705733, "uuid": "0b485b35-bafe-487f-b72e-bad05526dad4", "comment": "Malware payload (Amadey)", "value": "afe45e40da95a97781a374d8eaa6f59415457b8980140aaff8d125327ae6d7cd", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710705733, "uuid": "3e8bd210-e573-44a8-b035-06fc6c4250a8", "comment": "Malware payload (Amadey)", "value": "669d102faef43081596fa4c2a030032b67919520", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710705733, "uuid": "3b888242-cded-4fb0-8a0b-1df9a6ec74ef", "comment": "Malware payload (Amadey)", "value": "ff3e8743681dfd8febf549b72fb74728593e6bd543a895c79cee8ba0f9a71f6c74762c5d5a5a4f9e5b5f56ad3bc3b144", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710705733, "uuid": "b0632850-8bbe-4392-8028-0275350dc6e4", "value": "T172E3660EAE6E5A92D81260B02ED55B094A176EF5FE4F0EB6611FF486C030CD60DD9BCD", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710705733, "uuid": "b14e3a02-c76a-4144-9e72-2b0bdac1d657", "value": "ba072a972fe6c47c8cf7a0347bb0af7a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710705733, "uuid": "af92e127-5889-4a43-90b4-e3ea5a3025c4", "value": "768:p+/unhi1zOzZ+/unhi1zOzDKe+3/xBcbK8ahR6/s6921uC9hPiqobwTqghycHAha:pti5OzZti5OzOti5OzPti5Oz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710705733, "uuid": "7692529a-8038-40c7-9a19-e63683661976", "value": 143308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710705733, "uuid": "ef0e7487-c358-466e-ba0d-2a5cba76d5e9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710705733, "uuid": "9dc456d6-3a6f-40b8-960c-440dd623f746", "value": "qqeng", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2aca3b8-e427-11ee-a120-42010a9c002e", "comment": "Malware payload (Vidar)", "timestamp": 1710656964, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710656964, "uuid": "d1010978-36c8-4a6b-92c6-617e43c668be", "comment": "Malware payload (Vidar)", "value": "cbfda4474b40e106c8711ef209a611b3", "object_relation": "md5", "Tag": [ { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710656964, "uuid": "cb137bcc-7d99-4dfb-a866-2ff51118e998", "comment": "Malware payload (Vidar)", "value": "b2277fed3911a21ae0701e015e712d8c7e25fa150248be1b7b135a30c76bd50a", "object_relation": "sha256", "Tag": [ { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710656964, "uuid": "f0ebfaa6-ec3f-4132-a532-480d99040187", "comment": "Malware payload (Vidar)", "value": "04e4b0b6c75a814b45a7a6a7fd53f6f98ec1c4e4", "object_relation": "sha1", "Tag": [ { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710656964, "uuid": "e7a3db31-e748-4d0b-80ba-bdcc5a43346b", "comment": "Malware payload (Vidar)", "value": "8f4595af887335f196f11be60afac6c6f59d5bb42990d464f9e688a7a6b21c0d8ba57d55eab134fabd6e8d62251d9e4a", "object_relation": "sha3-384", "Tag": [ { "name": "rar", "colour": "#504BCA", "exportable": true, "hide_tag": false }, { "name": "vidar", "colour": "#BA40B3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710656964, "uuid": "c59524a8-76ee-46cc-bdff-8ce0b96e0827", "value": "T143173332F1E9CFA4F2512349B19D55708BE950574A25E1CD8E8EE922737AC7230E2737", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710656964, "uuid": "c274fab3-614a-4926-8910-7adb0e2c3cc3", "value": "393216:PcVV444SqDMmUQybNfG8mYoBN/H/2TLqTcw5UTw3R4GYdzToY8:PcVTADDA4YoreTuxow3RTYY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710656964, "uuid": "b50adc7d-dbbd-4a4a-afbf-e2e57bd94a4b", "value": 19046693, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710656964, "uuid": "233f5156-d95e-41d1-a1a2-f9c85bc10941", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710656964, "uuid": "27047561-d8d0-4713-86ef-8b37536c2556", "value": "Setup-Free_Installer.rar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8de361bb-e49e-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710708013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710708013, "uuid": "56b5e32d-18b6-44fe-9340-e60c1f676822", "comment": "Malware payload (RiseProStealer)", "value": "d9e560e25c8f8b286dc4f3756858f139", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710708013, "uuid": "83acc4ef-ae80-4227-b546-6600942f93cc", "comment": "Malware payload (RiseProStealer)", "value": "b40f52860e22e6e6ac92b5a3fbb1ee7eb7966a706640e69c66f4a01f5dd4291f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710708013, "uuid": "8a9f2d33-9293-4880-b8fb-c73378d16d56", "comment": "Malware payload (RiseProStealer)", "value": "bb10fe346a484e0259ebf788a7c4b97f13e6604b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710708013, "uuid": "e7fdcb1f-73aa-40aa-8650-28bebee82297", "comment": "Malware payload (RiseProStealer)", "value": "0b369756f39f10b21e1490f943ad1cda1cbb6bc8f1ac33e04c4b3842311f55afc7c0c4efeb8aae33e4c1bbbe75f0cf31", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710708013, "uuid": "40ea9cdc-bcae-4f4c-8fb0-4b514cfb06fe", "value": "T186E54B92B50975CBD4CE17BA8427CD829D5D43B89F1609C3D8ADA4BE7E73CC025B6C28", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710708013, "uuid": "00976330-cae0-46a6-8b3a-78ba045beba8", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710708013, "uuid": "8f66268c-61e9-4de9-af71-a71e289c1d89", "value": "98304:cYmoI9xG4wJrmKrqrYaW1ALonkA6A93h:cYmogimAD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710708013, "uuid": "f5ff6277-e028-42be-b39b-15fb80527d41", "value": 3235840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710708013, "uuid": "9d62d5e4-3c08-4c4c-924f-13933f87df0b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710708013, "uuid": "8cbf66ba-9e59-45b1-a54b-36bde26fe366", "value": "d9e560e25c8f8b286dc4f3756858f139.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a176af55-e432-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710661660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710661660, "uuid": "46b05e67-2e2e-4f11-a9d5-37b38786cec3", "comment": "Malware payload (RiseProStealer)", "value": "e68682e221fce716cecb39e5d7362df9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710661660, "uuid": "cc856138-04f7-4940-8b54-d6b354e53b84", "comment": "Malware payload (RiseProStealer)", "value": "b97c17457668e8f5bb8eeae6eaaffecbc11ae96c055044351dad8ad63cd400e5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710661660, "uuid": "06362058-d097-4d49-b1a1-82bcde87ca91", "comment": "Malware payload (RiseProStealer)", "value": "7b89ad6392c8d78c39f68ae985a616b91578c91c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710661660, "uuid": "a687445b-9482-44ba-a0a7-da5eecc92473", "comment": "Malware payload (RiseProStealer)", "value": "f041d63e25b15d398148966eb94f72ee2972b6b45c82b9b39909690c6b2e7356823c485e2a50f9005fdf57570809794a", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710661660, "uuid": "48910290-5700-4bad-b4e9-caee3548c629", "value": "T11F66222C4990D445E07AC0BCEEC5F26CB7762F89161C8BE550F83ED65CF69A4AE70782", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710661660, "uuid": "98c32b79-120d-4ace-b59e-2bc11977bec6", "value": "e8ef2e8a62509894a290956c31ee7c94", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710661660, "uuid": "b26c60e0-6617-442b-a254-c21ef00fa4dd", "value": "196608:OMoxhyhCVL/j9Km+q64z7VgBHObxiWMQ2hwWPVZ/c:ZeysVn9Km+qtGNr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710661660, "uuid": "fb299b5f-85b8-4a31-a008-0028096812ba", "value": 6670336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710661660, "uuid": "f90b0ad3-0db6-4c74-a048-b1f046e966ce", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710661660, "uuid": "28b256ed-507e-4541-9614-17a223a64534", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8df2b0fd-e403-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710641441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641441, "uuid": "97421797-5052-4c90-b7a4-4bab3e60d2ac", "comment": "Malware payload (Mirai)", "value": "e3d9969022fffa61e199a1edb7b6499d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641441, "uuid": "6135e745-8f67-4135-b5ab-3f64ec147273", "comment": "Malware payload (Mirai)", "value": "b9dfa3c05ff098d64b28537806bf0df51bc7a8a9f45a61a0fc17bb28f62abe75", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641441, "uuid": "6620b1ff-1bcf-41df-82f7-75c569b3241f", "comment": "Malware payload (Mirai)", "value": "9985182393f4ff788626ebf289601a9857e78703", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641441, "uuid": "e03ba446-a29d-41f0-a895-72b943ce4061", "comment": "Malware payload (Mirai)", "value": "fa9368c8339ca6315c3ec9525f7a2890510cfacf8663bc0ce6e6d518eca0af3cc747ed8cae59d7053342f6aeabbe9e81", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641441, "uuid": "0ada7f4c-afec-4057-9c59-636e18545f7e", "value": "T1F993E516BB510FFBDC6BCD374AE90B0134CD594A22A97B363634D828F64B24B59E3C64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641441, "uuid": "9c0b1dfd-cda2-4c95-a495-9e66e398189c", "value": "1536:Pz3yEj8flIqGu2blm71E1orB8t22RiR/Z0wgnrIBZH22bbYcDBoWNQ9KN:P2Ejwmx4EqlW22RiRR0wgnEBwiGkQk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710641441, "uuid": "4a5051d3-ca69-4a81-a492-baee8a0cce7c", "value": 89668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710641441, "uuid": "0e9fc8ce-3ce7-4adc-8ea7-67ca58b5908f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641441, "uuid": "9c62d3a1-2c7c-4cfd-af0d-df035da95065", "value": "mpsl", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e4fa73d-e405-11ee-a120-42010a9c002e", "comment": "Malware payload (Adware.InstallCore)", "timestamp": 1710642327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710642327, "uuid": "523e76f5-07cd-4f90-a851-81fd9b0152c7", "comment": "Malware payload (Adware.InstallCore)", "value": "b4de26c76d1f5fc9b28913ee6dfc9359", "object_relation": "md5", "Tag": [ { "name": "Adware.InstallCore", "colour": "#35D5E5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710642327, "uuid": "e4b74fd5-a76c-43b8-b702-95df6b2ee432", "comment": "Malware payload (Adware.InstallCore)", "value": "baf22873900d8816dfb27bb91acc6c2ca8e5890458e23b022b691f2214004322", "object_relation": "sha256", "Tag": [ { "name": "Adware.InstallCore", "colour": "#35D5E5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710642327, "uuid": "93b68cba-ba4d-4435-9eba-7ca10612b73f", "comment": "Malware payload (Adware.InstallCore)", "value": "7a120a2f8ea5ae6f475ef77b1d7e03c7e5b54a0d", "object_relation": "sha1", "Tag": [ { "name": "Adware.InstallCore", "colour": "#35D5E5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710642327, "uuid": "a2d36a08-1cdb-495f-8674-59290d04c525", "comment": "Malware payload (Adware.InstallCore)", "value": "79844dd1f22d68998dec2f186915eac58b36a56facaad9c70c66c96c4ea21a5cca120c474ca3a5c1f2728af933385fbd", "object_relation": "sha3-384", "Tag": [ { "name": "Adware.InstallCore", "colour": "#35D5E5", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710642327, "uuid": "fb4fdeba-6654-4780-a967-5ce1e5960f09", "value": "T12EE6331AB6E6A47EF49EE27008AD613DA365FC1E310B9407738ED4CD0F6A89C5B4B15C", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710642327, "uuid": "72d09d41-97f0-4306-bcd0-c4d42be8ffb0", "value": "2fb819a19fe4dee5c03e8c6a79342f79", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710642327, "uuid": "daeda5e3-1519-40b0-8007-8ead68fb9c01", "value": "196608:+DeDluhEE4lIA4KNDH1L4JuzlORSwA1AkRzUKjBVrO9k8DCRawfQ2JvWQt79yPQY:IeQEEIjt5KRXORIAXjRawI2pWQWP3My", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710642327, "uuid": "72a27cb5-e6da-4b79-a180-bc5980f38397", "value": 14782799, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710642327, "uuid": "1ab75d8b-6e2e-446b-a1cf-e1851986fe19", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710642327, "uuid": "8a19dd6b-77ee-488b-af88-c07db52c5f0b", "value": "SecuriteInfo.com.Riskware.WinVNC_based.22307.10590", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84e9f90f-e438-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664189, "uuid": "72c5a2f6-6f7f-4601-84be-c173b2921acc", "comment": "Malware payload (Mirai)", "value": "50d5d2cabbb81f67f13b419dd0589be2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664189, "uuid": "fc6ad1c9-3c70-4c97-a3f0-a50da0f4cc92", "comment": "Malware payload (Mirai)", "value": "bbb7390dbc8aa7ccca7b58f2a6ae8f9f598749b3e247120677d5df775a8e97f2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664189, "uuid": "bd7fa6db-89cc-418f-922e-8780cbcde1d3", "comment": "Malware payload (Mirai)", "value": "52aba3358b6cd9f6adf496eec85c26ebb8086021", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664189, "uuid": "2659f917-4e33-4635-a321-5ba75c875290", "comment": "Malware payload (Mirai)", "value": "be5977e78071578d65da07b4b9aeb778129599a0bc660eb3477bf11ec953130b886d22619e918ec9deb93e636c6b3758", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664189, "uuid": "67b0580d-025a-431e-a58b-dad0ca8e74a0", "value": "T19C3302237654FDA3DE752D3962FD8C9B3144422EE0ECAC2239C4A861A2D2157FBD15E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664189, "uuid": "124cd280-f393-466d-b736-b959247c773b", "value": "768:JfZYvZxNZ/SPjiUv0w0zyIvfgJy2LHRfbMAgI9q3UEL2qEK5J6OAsNTGjf2tl8X6:KPtQjiZVcykHRDMAgxL15J6RN2tA6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664189, "uuid": "70604318-760d-422c-a306-8f1f411b5f20", "value": 51432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664189, "uuid": "9e278f92-0aa7-43db-a8d4-80292ad78b47", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664189, "uuid": "d15c417a-f5b0-457e-beb9-151dd9f1e0c7", "value": "50d5d2cabbb81f67f13b419dd0589be2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "070ee3d0-e47d-11ee-a120-42010a9c002e", "comment": "Malware payload (STRRAT)", "timestamp": 1710693613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710693613, "uuid": "60e484cd-6c06-46e1-b189-6213e75eb0d1", "comment": "Malware payload (STRRAT)", "value": "14473a3e9a3505898b41615d44dfa8f9", "object_relation": "md5", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "STRRAT", "colour": "#DA76AC", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710693613, "uuid": "6e11dcdc-4c0c-43a1-b92c-45b1c11d82b4", "comment": "Malware payload (STRRAT)", "value": "bbf6df284ec8dde835dbf3c6ea982e26f021c14dea6541070cccb5fa977c2bca", "object_relation": "sha256", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "STRRAT", "colour": "#DA76AC", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710693613, "uuid": "da183888-2606-4af1-8ad1-43bbb6a0cfb9", "comment": "Malware payload (STRRAT)", "value": "300aaf652645be064ea359917014f91ac2a0bfc7", "object_relation": "sha1", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "STRRAT", "colour": "#DA76AC", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710693613, "uuid": "70e41f4a-5b72-4407-9bbd-62975f66e078", "comment": "Malware payload (STRRAT)", "value": "eca63fdab3e8f06015c115c437aa3d3838685a039d41f6e65bffc9a8e6d7c0b1dea3efa53b13344e770d1728e30390da", "object_relation": "sha3-384", "Tag": [ { "name": "jar", "colour": "#3CA094", "exportable": true, "hide_tag": false }, { "name": "STRRAT", "colour": "#DA76AC", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710693613, "uuid": "f1de52bc-332e-4f44-af9a-557fa220b1e0", "value": "T1E274125F7BDED0FAD013627222120271EB2C46E5D244542FA6ED3A498E37D88C756ECB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710693613, "uuid": "b7c703f8-784f-4cea-b014-a0223b458209", "value": "6144:MDQWvTDFnK7X2UpQ9yO2eaQnsxLslRqfnZQy0bIEZduj5:kQWbDFgiRn+afIEZMj5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710693613, "uuid": "8cd42506-7ff3-4823-9919-18bafcaef8b3", "value": 344525, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710693613, "uuid": "ff0d6efb-9174-4661-843f-c6dbc09fe34e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710693613, "uuid": "5700123d-db51-4069-ad42-048646654929", "value": "swift copy of payment.jar", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9599d601-e403-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710641454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641454, "uuid": "e5777d36-77a8-4bdd-9431-57d3e6c24322", "comment": "Malware payload (Mirai)", "value": "3a7c8ed58b1a183ef81cffa7011bfe47", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641454, "uuid": "aae3acaf-5f42-435e-a7c8-713a4c3ce137", "comment": "Malware payload (Mirai)", "value": "be39f165df2b1236a4696556214a21a981190fe79e8d1db7a573fc1cf3017f80", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641454, "uuid": "4fbca54e-add7-49c6-ba05-7d9ddd900faa", "comment": "Malware payload (Mirai)", "value": "5dc370dfd42f228fc69a9c38ee00c82bf9f5395b", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641454, "uuid": "9edd2bc6-67a0-433b-b805-d4151ce1cb79", "comment": "Malware payload (Mirai)", "value": "6e61e53941a1b50b7dbee620dc3b4c10464489c58602c3eda660bc44485e10ec56500503235a5a33958ad3fd582448d5", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641454, "uuid": "4ac18aef-7e0a-4e0f-932f-d8364e319b26", "value": "T150730856F8814B22C5D612BAF91E128E332317F8E3DEB2129D206F2477C696B0E37D55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641454, "uuid": "7d16981f-42cc-4dae-b004-5aae1b1d4b7f", "value": "1536:AsnJHvvJGgGqmOTtdX0BodyUWA3SIae0r6uI4iy8maaji5WYIWLR:xvxGJ2b0BNA3SIaeS8maajikRKR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710641454, "uuid": "1d008211-a7d6-4733-98b8-fe459fa36bb1", "value": 79360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710641454, "uuid": "4ddd6154-bddf-4c82-b022-9f8668cf32cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641454, "uuid": "fb7dbcc6-87f9-4af0-83e3-238b0097259b", "value": "arm6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9a0f69c-e457-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710677592, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677592, "uuid": "1b9dcd33-2e1c-4883-bd00-a0e66a6201ea", "comment": "Malware payload (Mirai)", "value": "e1d2463f570f2d7c50ec264589bf1cb7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677592, "uuid": "5b6ed5f1-e96f-41dc-9ef4-b352b5d086f3", "comment": "Malware payload (Mirai)", "value": "be5c2ed36208ad804a763d29c04bc8506dcb78002ecbe82dda980b1de6587ff8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677592, "uuid": "599a77a5-23cc-47f8-a80d-6c084997ef71", "comment": "Malware payload (Mirai)", "value": "13c14354cd1feff83c2af1361c41253300938c54", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677592, "uuid": "5e091be6-8fc5-4b64-b6d7-385f1914010c", "comment": "Malware payload (Mirai)", "value": "99e7b74fe3f6662b7180d56d5de574270a977bbbe0729be5bc66c5d7591cd34d815e9b5a49a31d7c216cc4306871862e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677592, "uuid": "5b95e62e-53f5-4184-bd9d-38755dc997c2", "value": "T13B332ADAF8028D3CF94BE67E54174A08FA3163D51283172627BBFDA36C731992913E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677592, "uuid": "efcc3c31-c9f0-44c9-84ed-fd389e2e1a25", "value": "768:GFeN8oOR+OfzRX1nR3Fcb8+PX5OCerv6yVjR1kj7TLXe84CdGD:EyaJfzH2PXYCeeyVjRC7Pu84bD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710677592, "uuid": "27e48d03-6ec6-4377-8110-a2f3f64ef4b2", "value": 50172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710677592, "uuid": "df3eb667-1a2e-4d04-9ca9-df4a27ae19ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677592, "uuid": "2778e4ee-bc4a-425c-81c5-e5dcee7acca4", "value": "e1d2463f570f2d7c50ec264589bf1cb7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "373d1d11-e481-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710695412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710695412, "uuid": "8dbd6dcb-d3ad-4d40-903a-935511f81553", "comment": "Malware payload (RiseProStealer)", "value": "ff9e637c32fe8adf2ea4111e2ca90ae7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710695412, "uuid": "7260eee2-4c6c-4fdf-987e-068f7bd04028", "comment": "Malware payload (RiseProStealer)", "value": "be65a0b0c6c457eefa3746d05f00a8d96c61b4d6d3a3ceddd5dcb10f3fe1f151", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710695412, "uuid": "5af4c00a-16bd-41ac-ac72-991d0aa66a1e", "comment": "Malware payload (RiseProStealer)", "value": "7f458ea730456e73f4356d1867cba635dcdf57d3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710695412, "uuid": "a45492fb-8571-4308-bb20-05b4547c2a24", "comment": "Malware payload (RiseProStealer)", "value": "28b9b0ffffeef8eeb5e85f320e1d9c58a73db36b72b2dcb360c6688406578de285bcb550be7a899fc26b7bb22f43d521", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710695412, "uuid": "b3e3975a-bae7-413c-a166-66f91f5abfbf", "value": "T189E55CA1B50676CFD48E27F5941FCD82A92D06FD0F120AC39C59E4BABE63CC165B5C28", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710695412, "uuid": "4da79b6e-2e4c-42ba-b5c9-81b80c0a9964", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710695412, "uuid": "4ccfba67-941a-4f4d-9d7c-67c09ed59090", "value": "49152:mxxAQNEvHlewpAxotsxlnYqphk7LnotqvL2NwbOEMx:YSGeHlewpA2tsxlnYqphKLnkqj2GbO5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710695412, "uuid": "7e8a453d-2a6e-438a-b694-0cdfca200982", "value": 3232768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710695412, "uuid": "683071bb-8e4c-412a-a437-55a9ecbed738", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710695412, "uuid": "50340b12-f2fa-4e16-97dd-daec52942d73", "value": "ff9e637c32fe8adf2ea4111e2ca90ae7.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99caf8d5-e459-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710678397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710678397, "uuid": "ba50f988-e3e4-4b3f-81f6-588ceb7eb2c7", "comment": "Malware payload", "value": "3a6dbde286fd3cc44cdc78dc1f057b2e", "object_relation": "md5", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "Jocker", "colour": "#EDE6BE", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710678397, "uuid": "117cf48b-c588-437d-bae3-8c999fc6faf2", "comment": "Malware payload", "value": "bee5eb7217a5d23388f09593fcad39dfd86e1d3e95ca076028264aaa977067ce", "object_relation": "sha256", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "Jocker", "colour": "#EDE6BE", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710678397, "uuid": "8ab382f0-3a92-4034-a402-3a7b5939bc86", "comment": "Malware payload", "value": "654a7446d71e69fcde777d648e8fb4a4ca832723", "object_relation": "sha1", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "Jocker", "colour": "#EDE6BE", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710678397, "uuid": "d4df7a73-826f-4375-9152-c73055325494", "comment": "Malware payload", "value": "43384ffb32df61c559d43262d858b950f7df2ea58c43bc8a65f3a77b5bc779fe9900177bdec98bf4829e61045a3fdfd0", "object_relation": "sha3-384", "Tag": [ { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "Jocker", "colour": "#EDE6BE", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710678397, "uuid": "c79194d3-fe1e-4e15-8233-f1b1e10c85ae", "value": "T1B0272323F339E45DC9B795769E3A117340660E219647F7AB2C64B23869F7D808B48FE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710678397, "uuid": "a43b3e53-b2eb-43d4-921a-02b350756255", "value": "393216:ms9Pfoq9r36Nf5J6lsrW+QDIrDwfkTLj+dOqo424mN1B9ywq39LczJzJFHI7:ms5wqp6UmrWpqE+Bq92n9ywqtLsJzvI7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710678397, "uuid": "8ec25cd0-332f-4028-987f-8f243963422e", "value": 22042190, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710678397, "uuid": "1fd48226-003a-49ea-a9ce-8bad8333dbca", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710678397, "uuid": "a218574a-4f64-4ade-9418-11a7ee2e68b0", "value": "com.ga_gi_pu_r_beu_ti_full.pl_a_ces.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb1a2273-e457-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710677621, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677621, "uuid": "a6f2ae08-793f-4c15-8515-0775a47b8687", "comment": "Malware payload (Mirai)", "value": "91fb74a70535b46a424a5e7c7fc31c93", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677621, "uuid": "2ffd4eb2-660b-41a5-9799-42d45d2b5e64", "comment": "Malware payload (Mirai)", "value": "bfb42dc80c8a6c04b3cab35ef11e2cc94f35ce0565d8480c53c813b687fd65db", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677621, "uuid": "e0b39681-0213-4563-a954-cf2263977e17", "comment": "Malware payload (Mirai)", "value": "9aec2597f44c49e4aff0d8cc93d43b806c10c912", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677621, "uuid": "90d5c1e5-b354-4721-ac71-0e16e1f711e0", "comment": "Malware payload (Mirai)", "value": "40a2ca69a5031490aafb1d49baa0dee04adccc272f7be0c15773de4e92be2e2dfd03b5932820369891bf912cb92b6cdc", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677621, "uuid": "9c673c3c-909d-4fff-b1cb-8b422961aa07", "value": "T10893B81E7E218F7DF79D863847B78E26665833CA37E1D5C1D1ACDA012D6024E241BFA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677621, "uuid": "4e1abfe7-367a-4a3c-9488-31281dd14e49", "value": "1536:k1B0OLtdH6xy0G7Bncz0vFeNA4OTy92ot6hkG7u:kT0K4acz0tiA692ot6mG7u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710677621, "uuid": "98255f2a-79d0-4990-8466-6f637ba5f6f9", "value": 89540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710677621, "uuid": "50d51f72-e061-421a-911b-37e9eedec5d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677621, "uuid": "3582f1b2-3ed2-4a6c-8893-2ca534263747", "value": "91fb74a70535b46a424a5e7c7fc31c93", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9c6e634-e4b9-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710719710, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710719710, "uuid": "81b319f6-1f6f-4e9f-93f6-7a43e6b65892", "comment": "Malware payload (RiseProStealer)", "value": "881f0f979320434771f6c14eb01f65cf", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710719710, "uuid": "1f53b892-30f0-4045-8aa0-2aa99a823bf0", "comment": "Malware payload (RiseProStealer)", "value": "c3c6e8e71d9ec5f67d5e970da65c64a191b3379bddf1eccae4b4ea46ae8c1830", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710719710, "uuid": "415d38c3-c254-4564-91e1-72d070a07140", "comment": "Malware payload (RiseProStealer)", "value": "589f5e737ca40a8b5cdf566cd380ff7f9b191946", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710719710, "uuid": "53ab3c62-78ec-4e51-935c-87302d48d6d8", "comment": "Malware payload (RiseProStealer)", "value": "9e9e168c01e81212c075a773ea04e7b42d834fb56ecabf650037a4292743a2046d58c89d3af0f552d5a86b5c083c1c10", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710719710, "uuid": "e16de3f4-b1b9-474c-8bb5-a9919553ac93", "value": "T1B3E55BA2B805B6CFD48E27785427CD85B9BD42BD071009D3A86EF4BE7E67CC019B5C29", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710719710, "uuid": "3d654063-b8f0-45ef-a822-061a86286aa5", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710719710, "uuid": "06abd3ee-cc50-4d7f-a55c-b55c806b9869", "value": "49152:ZEVPA9dRUDqu9/0jErAi+U68RXrHKNOGHemjy3z+K7:ybmy/0jErZ+U6YXrqEjmjyl7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710719710, "uuid": "6115072a-b333-4ec4-ab29-b14cd58bc237", "value": 3272704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710719710, "uuid": "7845dda8-c037-4a5b-987a-e72f4623b58e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710719710, "uuid": "ed47c3cd-5f70-44a9-bb8c-98e893ab6e6a", "value": "881f0f979320434771f6c14eb01f65cf.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bca30892-e457-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710677597, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677597, "uuid": "f25fd0e4-8135-483e-828b-87614fdac35f", "comment": "Malware payload (Mirai)", "value": "8af13ff17d9b91c5cc53a0bf458dafd9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677597, "uuid": "625d6777-45bc-443c-a2ec-4e700daa9db9", "comment": "Malware payload (Mirai)", "value": "c41c001d43a0948f0a8b8c50e3baf75240ca8b2815e85949a4b94a456eea51af", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677597, "uuid": "20980941-a612-4ca6-bfc4-94de8b58e17b", "comment": "Malware payload (Mirai)", "value": "e293991f6418acc104499f17f7e30d0be252fa82", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677597, "uuid": "e0ec221a-4e1d-46db-9d5d-de6d8663e151", "comment": "Malware payload (Mirai)", "value": "630dfeec8569a006da0caa1221da94c6be9de85005474997cd3e5982438aa5408a6eef5b764301c04003fc25d77a1d6a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677597, "uuid": "65567657-8861-408b-b29c-a51eff73b9ef", "value": "T124332951B8815623C6D0137BF66E46CD3B2523E8E2DFB2139E221F60379682F0D67E85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677597, "uuid": "0a482de2-b4d2-497c-9a3e-52e3043bad92", "value": "768:yWBF5r8FMVHrn6mLaEQczj9cas7fkZM/IPxbLLYQGqbnRFopVJrvzJMw:FF+FAr6JWNcag6BP1LLjBR69H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710677597, "uuid": "335bf121-3f44-426d-86cf-d3fcafcc57d6", "value": 50272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710677597, "uuid": "fb043fe3-5edf-4c1b-a1a9-d4603a4b3b8b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677597, "uuid": "b7308482-12f6-46a0-b24f-31d6531f75bf", "value": "8af13ff17d9b91c5cc53a0bf458dafd9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c20f2e28-e457-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710677606, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677606, "uuid": "e7dba42f-c16f-4dac-baad-1a3df564cc22", "comment": "Malware payload (Mirai)", "value": "d46bc53623f4ba7a14c99fd5e822c713", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677606, "uuid": "e878f985-4839-4623-9a43-d4b8ef946113", "comment": "Malware payload (Mirai)", "value": "c4ec7f47116138acf0104cba931524fbfd3504af3df3995bd436cb3aa623df93", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677606, "uuid": "16af10d5-626f-4392-9cb9-1f31e4f5ab8a", "comment": "Malware payload (Mirai)", "value": "3e8b02d9452e806f026f3894e0a2addb7a2dce33", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710677606, "uuid": "67b49306-f0e1-40d5-aa1b-d09b9f878035", "comment": "Malware payload (Mirai)", "value": "3caaddd3726091aa90d61f6910a6c6eab02e7d2bb995db4df84e53674b35ab0cfc2ea4dbdaeb994f67fccf3074119f54", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677606, "uuid": "586a2b41-1c1b-48cb-b87b-9ace8925c0a0", "value": "T181233B02B21C0B1BC4A31674253F5BD187FEBAD122E4F289765E9B9A8935E331481FCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677606, "uuid": "f22f4e2a-8c23-4976-87d7-8ecd1a1fc7e6", "value": "768:+3p/RXYR0lNy+WHRjRqBDcoGHS5FpZXWI74fbwk:Qp/usWVRqpwEp5WI88k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710677606, "uuid": "55d3216c-65a9-4072-966d-de7c068c9b2f", "value": 46528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710677606, "uuid": "922e3977-07d5-4242-8c04-91e6ed510a36", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710677606, "uuid": "b2168120-1aba-4b81-ba04-3298874d9204", "value": "d46bc53623f4ba7a14c99fd5e822c713", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7f2d139-e43c-11ee-a120-42010a9c002e", "comment": "Malware payload (Smoke Loader)", "timestamp": 1710666019, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710666019, "uuid": "eff0543c-a26d-4eaf-a156-541c52981f7b", "comment": "Malware payload (Smoke Loader)", "value": "1355fb43dfd7723b915bcffed805a456", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710666019, "uuid": "5a3f4818-1172-41cc-ab94-fcc7aa831c90", "comment": "Malware payload (Smoke Loader)", "value": "c66ef4f4bed4a422bf7bcbc54628ae0d34f8bcb8385f49abde1c230f9dbc30ee", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710666019, "uuid": "97bcf37a-45a2-4a26-9c36-600c5dee89f6", "comment": "Malware payload (Smoke Loader)", "value": "1fb37db9f02259a73c7cd630c3f2fb2f6b6ad139", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710666019, "uuid": "f7771e1d-d683-4cae-819a-e1cc55e9d00c", "comment": "Malware payload (Smoke Loader)", "value": "5635cc0f57323c3a196bd61a7ee2e823afafc28a84345cbb1fc805808c15a05e2d3279d57abdaee44825b7c57de88209", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710666019, "uuid": "8f6d8fe8-128c-4bf1-95d9-87b2275fd511", "value": "T10B248DC17691F833E17255304F79CAF8163EB8939E65525B2F447ADF6AB01D08A23F22", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710666019, "uuid": "e29bb82c-18b1-4d9b-98d8-123b6ee92048", "value": "0eded250ca2d732ffa46d6329487d53e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710666019, "uuid": "e24a9651-507e-40ee-b535-72ef03c3f094", "value": "3072:Umnchpc/KlKa9B/xccOlVNPZY2EkGBdpR8YNa:UqchpkKlp9B/xccszZDhGP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710666019, "uuid": "2f4ecb1e-d200-424f-b261-2536a5d8ca8a", "value": 227840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710666019, "uuid": "d5da3e1a-7e7f-4d89-882f-927ba0869675", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710666019, "uuid": "138d2652-d444-4928-b470-736379e9d9ac", "value": "1355fb43dfd7723b915bcffed805a456", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8dae45c-e494-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710703817, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710703817, "uuid": "9a738495-f347-47b3-b578-7a218796c9a2", "comment": "Malware payload", "value": "6702e5b0a5467dba5b5bf68511516f98", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710703817, "uuid": "c06ebb2f-fd98-4bec-ba58-fcb663997869", "comment": "Malware payload", "value": "c73a29220f3b1eca3dbad47ebaaf38489188e1edfed2185fa2f8050770c0692f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710703817, "uuid": "e01e2a9e-e790-498a-8b9f-cf17f142fc0d", "comment": "Malware payload", "value": "5e2606b655f2d42dc60762e7ee37fb99657c0658", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710703817, "uuid": "c85686be-d4b3-4c67-ba9f-f06201ca2735", "comment": "Malware payload", "value": "be0389a4a80cc348b596feba079cb9795b8ce3ccedf41b6c164c13b247c517e10514885db8f34e6a1bcf105a683f5996", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710703817, "uuid": "604dbee9-371e-4232-887d-12a48bde7fab", "value": "T122E56B92A54A75CFD44E1BB49527CD82589F42FA0F224AC3EC1D74BA7E63CC412F6C29", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710703817, "uuid": "b0a88643-064e-4782-b177-de7717907e18", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710703817, "uuid": "8df23d6b-2c2f-427a-9bd8-9334e795981b", "value": "49152:GXN3u+RkDMYW0WWgun4ZwPI6dDNnKM2TeSJbOPv2fo1Ke:yUTVS/W4CPbdDNnG3Sv2fo1Ke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710703817, "uuid": "3e6390bb-4601-4dd1-8d27-a91d1fcb3c68", "value": 3294208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710703817, "uuid": "cf8059ad-6a57-4538-b854-23abdeb20731", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710703817, "uuid": "dcc27908-992c-4383-bc1d-372a2a86ea30", "value": "SecuriteInfo.com.Win32.TrojanX-gen.31030.12130", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0900a091-e436-11ee-a120-42010a9c002e", "comment": "Malware payload (PureLogStealer)", "timestamp": 1710663122, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663122, "uuid": "b4c80af1-0aa3-4204-981f-7d8a19d1f437", "comment": "Malware payload (PureLogStealer)", "value": "002f6f310a1ea664bfe07e5dd7045676", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663122, "uuid": "3c93a825-d494-43b4-98e2-780d9331ffd2", "comment": "Malware payload (PureLogStealer)", "value": "c875d48e9242fff77283972803a88ca27a9045381a42c57c94f105cee7e0549c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663122, "uuid": "6f76ae0b-eb8c-42bd-8b1c-9ba3691a6098", "comment": "Malware payload (PureLogStealer)", "value": "104e60ea49811a2b33442c5192b0d5f539fd235e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663122, "uuid": "21308200-057a-4faa-8aec-4f9af4a84d97", "comment": "Malware payload (PureLogStealer)", "value": "6ab7dda607b3940bd4bbf04ce2aa76fe314f568653b2acd84e19ce6c764010fe974349f67995e8f47b00d1bec2290d2f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "PureLogStealer", "colour": "#622CF5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663122, "uuid": "8ac73e61-2db7-4812-99d2-acff8583dc33", "value": "T1D04622E546D0C25ED80D573A707C2E18EAB2EE246A79E35DDD8EB497FA73392440021F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663122, "uuid": "077fe45f-5d02-4ae0-a70e-78c5d027bdef", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663122, "uuid": "7da0e4c6-f292-4337-b3e4-a158e75d05ab", "value": "98304:V2wSiJSTjLc3oYusZhfoFH/Ydc4ajxG/zSDZyqBJEJaO6JrRe7kEcEAL:gw1gT84Y1ha/YdAftyziJrRnE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710663122, "uuid": "415ed2bc-8fa9-4f9f-9a27-7013a3e75c12", "value": 5862400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710663122, "uuid": "979c7ec9-07f8-4b14-9904-718632796564", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663122, "uuid": "c8635344-1939-4156-af7d-a9c8e00f92b9", "value": "002f6f310a1ea664bfe07e5dd7045676.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8dde77f5-e438-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664204, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664204, "uuid": "08068ec7-1cc6-4cef-a72c-22b46acbd5b7", "comment": "Malware payload (Mirai)", "value": "1079b436a76e4b7ad5f860a6ab12de1f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664204, "uuid": "4c61897d-f0a6-4393-87d1-670405fa1d79", "comment": "Malware payload (Mirai)", "value": "c8b658c7ee8f1f1e73e6516fd40a0c8810e3e66ec791e27be998df01c6a7807f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664204, "uuid": "cafc5738-3c96-4897-a525-880e98b3e20a", "comment": "Malware payload (Mirai)", "value": "85376aa987b5fcd8e10bbc961b27a7805ec60a25", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664204, "uuid": "11ca6741-1085-4552-ab99-1cf36f0bcd5f", "comment": "Malware payload (Mirai)", "value": "d3e8bb8489cabba845bdbaad54103ee56ccff35678bc9f10d338129ea294f3b37278b54e87d73a286293662bc4765b7a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664204, "uuid": "78da1ba0-94a1-49a0-aec1-185136c40b7b", "value": "T1DDC2E170F9C17DB6DEBEED74485189D03BE61E0937E18DDA204DED115222D378AA8990", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664204, "uuid": "07eafb90-ae97-4be6-9a7e-c21ffc75b039", "value": "768:uKnqLiChP7gI5gBZw+LajRb4uVcqgw094:uKqL1h4Zwa6p4u+qgw094", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664204, "uuid": "850e0583-b856-4bdb-a44b-ac718499ba5e", "value": 26224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664204, "uuid": "14553cf1-85e6-427c-9315-d2efb2be2039", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664204, "uuid": "beab6dc8-65d9-4586-9395-ff8d40100b31", "value": "1079b436a76e4b7ad5f860a6ab12de1f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f61c83f4-e463-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710682847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710682847, "uuid": "f4d2eb70-5b9a-467e-ae74-02983d7d32db", "comment": "Malware payload", "value": "61715d713b7173cf85315e3ae3b7b018", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710682847, "uuid": "04bff61d-3b05-4947-a127-17d0e99ade65", "comment": "Malware payload", "value": "ca2c9bb5e8bfcf10b71d815076af0eb537dbb3a9c817627d851bd9455226d0e4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710682847, "uuid": "63f89cfe-614d-440d-af04-70cfb3cc699b", "comment": "Malware payload", "value": "58058f94803af434c7db89c91d2f0a72369b9b3d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710682847, "uuid": "31521940-884c-48ad-88d1-d907a1aaeba8", "comment": "Malware payload", "value": "9ef2df5f6a553a63daeadb1ea803f343dd52577cdac07b72472d03492c66707c8ec062b39d9f9774f1ddc212de5d616b", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710682847, "uuid": "7792db28-3f50-4564-9995-3568bdbe3a39", "value": "T182D533E7C22564C9C5ED023C6FAD37146C3EB950A664039F1F4BA6CD5543F2BA878A0E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710682847, "uuid": "ebb0da4b-e91f-4753-950b-99cef8bf34ff", "value": "fda008a3a960b69a543f012b10072e00", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710682847, "uuid": "faff294c-ae59-4caf-810f-90e2b2672740", "value": "49152:oYc4LXTn59nUDNrXsbh4B98WIPRyes/L3nuL7pX6j0BWoY3lr4:3TLbnUDpsNu98WIPRye+3n27Z6fVr4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710682847, "uuid": "ee5345dd-ab9a-41d2-82a7-6c13628f033d", "value": 2875904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710682847, "uuid": "a7c94d00-1c6b-4ee3-b786-0f12bebda39f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710682847, "uuid": "e352c4b6-e540-49bf-8125-57695c26b0be", "value": "SecuriteInfo.com.Win32.AdwareX-gen.20903.16690", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9967fc8-e436-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710663445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663445, "uuid": "afd21e83-ae04-4a23-afee-2d2fbbf4d57b", "comment": "Malware payload (Mirai)", "value": "aadc4d8c1cf93933a34293c4d1458551", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663445, "uuid": "3d55f01e-a219-4072-82bf-33dc0a59b051", "comment": "Malware payload (Mirai)", "value": "cdfd26ec3256d29ce3bf38625fb51470d3147a821359068a0562a2cc23aab707", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663445, "uuid": "6a51ab01-6eab-4f97-8247-6fef7b595660", "comment": "Malware payload (Mirai)", "value": "1d1ae877988e7a4a12da055b7e5550264b3e1c6e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663445, "uuid": "c298e416-7a06-4ab3-ad0b-5534490284d2", "comment": "Malware payload (Mirai)", "value": "9ffc2ee4e7494faef6f08e62b0b4866f0444b128912382d802c590577c09c7a6804c77c2eae7cf2c7b59cde36cbd8c8c", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663445, "uuid": "18e6b2ba-7396-473a-b13e-b2db70889b54", "value": "T176E2E1D155B69479CEB11D7AFC230A4E252AC6FCC6FB10226BF4372823F1DA64AB0452", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663445, "uuid": "9aa15752-3c98-4868-b5d3-a8552e446690", "value": "768:S8Lm6COq1fewdHy62pud4yNOYSOyB8LrJ89q3UELdK:bLJCmjpkcMKUFFLw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710663445, "uuid": "a747be09-9b86-4f27-b78c-924f3cfd4ef4", "value": 31872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710663445, "uuid": "09821f71-95c6-4149-a707-e4267e65156e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663445, "uuid": "815dfd57-a600-40dd-b975-16c35b86c425", "value": "aadc4d8c1cf93933a34293c4d1458551", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5212428-e4b2-11ee-a120-42010a9c002e", "comment": "Malware payload (IRATA)", "timestamp": 1710716749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710716749, "uuid": "75d10a13-a17f-4d12-ac7b-ed2eb277f4f6", "comment": "Malware payload (IRATA)", "value": "8522dcb54072b9072fbdb5831969468e", "object_relation": "md5", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710716749, "uuid": "b3816fad-da39-4477-94d5-807343a8274c", "comment": "Malware payload (IRATA)", "value": "ced34d0e01d14ff89b0fe1392ec7880046f39d3998a4266f075208d67cf043d3", "object_relation": "sha256", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710716749, "uuid": "190d54d7-4344-4c0d-a8d9-88d74fad3ef4", "comment": "Malware payload (IRATA)", "value": "a76fe16d5d208f68039e472fccd69481bc6a3a05", "object_relation": "sha1", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710716749, "uuid": "15e74954-1b78-481c-96fa-fb02e4bae79a", "comment": "Malware payload (IRATA)", "value": "bb4c86ab5353008c94f5683695ca9f97a344508ce060570adf5b61badbdfa65800c9a98cdbcb34b659fbeb3dc376e1fb", "object_relation": "sha3-384", "Tag": [ { "name": "android", "colour": "#E876A5", "exportable": true, "hide_tag": false }, { "name": "apk", "colour": "#344CAB", "exportable": true, "hide_tag": false }, { "name": "IRATA", "colour": "#874CA1", "exportable": true, "hide_tag": false }, { "name": "signed", "colour": "#FECC99", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710716749, "uuid": "1ff99e30-384b-4fd3-aaf9-8576a3bfa260", "value": "T14AE52353F6A6AD27C9F2C3752461263A117B0E65CB43BB4A255877FE28BBDD84F402C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710716749, "uuid": "3b5b2f4d-d520-4e81-833f-6ded0378fa1e", "value": "98304:j7J+xkkmXcxu6ZdRDRTLOJ+6mGpAVv/A/Kgng:j7J+xaMw6ZdRDRTizmKc/Azng", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710716749, "uuid": "9c8fdc0f-ceac-4ad7-a282-6a1ea030e88a", "value": 3248541, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710716749, "uuid": "22c11822-8f7e-4e1f-892a-67d7bb96cce9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710716749, "uuid": "4b093410-e6a1-4c8f-8778-7e165cad2d5d", "value": "Application.apk", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97626378-e45e-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710680541, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680541, "uuid": "26082bf1-baf3-4466-b390-744fec207ce0", "comment": "Malware payload (Mirai)", "value": "b1ebbc73c6dc49a85ec82ba52e4c1600", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680541, "uuid": "02a31c3f-f5bf-4a02-b58b-78baee14269f", "comment": "Malware payload (Mirai)", "value": "cf25fe71a199d6dc0f7633ebc1afb06ca3ca902c8386579eb3e42197900ac23a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680541, "uuid": "b90f4e1f-66aa-426a-9bd6-97829b939a9c", "comment": "Malware payload (Mirai)", "value": "4ad7de27a46b1c781c8e3ee2e3cd00c8f0d34336", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710680541, "uuid": "8d25579f-e899-47dc-ac28-37e71ee2b2b9", "comment": "Malware payload (Mirai)", "value": "f450a3b3ebf4ce274ee4879a0eb1509eab6097f49395433eb49aa5183cc436f8b51789f642ba85e967f66ab77ea065ba", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710680541, "uuid": "15a81710-3490-4ac1-8b84-3d90f54a4c1f", "value": "T15153F881B881663AC3D153BBEAAF558E3325A7E891DB3313C82407A07BC655F0D5BF85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710680541, "uuid": "80c76348-cf6b-4c50-8b25-9f677c3a7ec7", "value": "1536:LMeVGcJUnZeHWb1bc/XtDhseDwOBvhW95vCj:LMe3saPDwOHo56j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710680541, "uuid": "c0514ba1-e4d1-4e58-93dd-dddd1ef3d93a", "value": 63408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710680541, "uuid": "0f529eee-c99d-478d-bc75-234a732fe6c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710680541, "uuid": "327dc681-88b4-4b46-b3a3-fd4bedb4d088", "value": "b1ebbc73c6dc49a85ec82ba52e4c1600", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cca88520-e3fb-11ee-a120-42010a9c002e", "comment": "Malware payload (DCRat)", "timestamp": 1710638110, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710638110, "uuid": "c818806b-4ead-42f5-a0aa-36505dc476dd", "comment": "Malware payload (DCRat)", "value": "3a790fce13b949659c1fef350ed5a865", "object_relation": "md5", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710638110, "uuid": "50a5cd8c-3f71-4956-b386-dd5b8ba621c9", "comment": "Malware payload (DCRat)", "value": "d21d9ef91d1b4670508e2f0a7fe92ff37f313ffac33af7c41ee2757cb1c1cde2", "object_relation": "sha256", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710638110, "uuid": "3166b2eb-6f76-4253-8f6d-73439c4a5cda", "comment": "Malware payload (DCRat)", "value": "24ec1237a150ea182de3e4a132c9c9db107adc18", "object_relation": "sha1", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710638110, "uuid": "d41a7527-bcdf-4afc-93ac-01b26b13d6d2", "comment": "Malware payload (DCRat)", "value": "7f322cf5bc583e845af58d2ffb968a5c38f0cfdf6126f6614a8b800ff39c7707e22b21b55b3dbc7321a410e19fe32003", "object_relation": "sha3-384", "Tag": [ { "name": "DCRat", "colour": "#0366C2", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710638110, "uuid": "02fbe647-542d-4638-8dc4-b0342f16d720", "value": "T12A06F10695E54F33D2A97F358AC7401D52B4C7727E13EFAB391F2099B8453B09B1A2A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710638110, "uuid": "30a11aaf-8d2c-4074-a4c7-6d2fdcd6e384", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710638110, "uuid": "eb218f7d-ef66-442c-abcd-eb02dd26a759", "value": "98304:cx7SRuoGHpgyYX9JmqrNBXDp2gwLF87eGpt:c0IoGHpgyu94kdDp2gGF4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710638110, "uuid": "7aa095c0-26c3-4ed6-8460-0a71c15e1678", "value": 3672064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710638110, "uuid": "5efa11e3-e994-4874-afe0-d989b74830e1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710638110, "uuid": "7fa7acfd-22be-410c-8678-8569e30b67c9", "value": "3A790FCE13B949659C1FEF350ED5A865.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ca6d538b-e494-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710703819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710703819, "uuid": "cc844fd0-48c6-46e9-af50-5d6ad06a8e99", "comment": "Malware payload", "value": "e514a3dcdacfa7f4dda1f14cbb41ba94", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710703819, "uuid": "6b604384-6374-49f4-839e-bd645ad87f7b", "comment": "Malware payload", "value": "d30b5b0e8c5a0e5dd3c4191e05aacf42c4e46781872097f7acb2f148539e174b", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710703819, "uuid": "a1825ac0-0206-4628-a221-0da70d238440", "comment": "Malware payload", "value": "c06fb61489bf5acb19c44b475cc5a3f29c4de9a0", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710703819, "uuid": "922ad5b6-28c7-401c-924b-d58bc445f19f", "comment": "Malware payload", "value": "61245a70ce298dfd57c34e3f5ffa4c39e71421e9a5d7f25927a68208f87209b7c3fac05ddf182cb5f04720f87f87e9d8", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710703819, "uuid": "65d74e93-bab4-42a2-92b6-0c12644640b9", "value": "T14F9533377989AD8EC39890F5861F0AEF82F6422999C159E50D4B4C64FFC160532CBB9F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710703819, "uuid": "7b34fd14-3744-4c7f-b5d3-641c090d70fc", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710703819, "uuid": "acd1f44d-adac-4620-8854-02a0f5698787", "value": "24576:wlWl1Spr9I/VMXD9WUCVs2WbYxwMFEVcG07o6MMSAQIBWVDAnXVglwd3OKPtpPj:BSpsMkVsvbEnFpVMMSAwqSU3OK7Pj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710703819, "uuid": "e7554073-dffb-49e6-b517-6895a0d26627", "value": 1902080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710703819, "uuid": "88c0d5a2-9be9-4eb7-846d-2898bc5d7346", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710703819, "uuid": "b07c646b-ac60-4b54-ac37-710f0081e8e7", "value": "SecuriteInfo.com.Win32.DropperX-gen.6293.27369", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99623304-e41e-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710653056, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710653056, "uuid": "413ad0d5-0eeb-461c-a413-8146c83a0603", "comment": "Malware payload (RiseProStealer)", "value": "931d72f4b4500bfee78b2257a55cd1a2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710653056, "uuid": "f46cc7cd-639e-480f-8aa5-6abb0ea6d5b5", "comment": "Malware payload (RiseProStealer)", "value": "d4a1d22007d02d48bbe4c943527101fd14a4e279492f4b8ad81ca164e02d3073", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710653056, "uuid": "72784847-0bf7-4e7b-aa3f-fb4860a1f7b8", "comment": "Malware payload (RiseProStealer)", "value": "e59432badc19e22a51a1593695a76fcd7fccd37d", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710653056, "uuid": "b6a16557-4a6d-4349-bdb3-a3abef6a0aaf", "comment": "Malware payload (RiseProStealer)", "value": "c6b1c38a5540318c87373f648bbb8484a26708bb782128736f2b80f020573f45645b8ca81bf0522d8192bc561f78f6d0", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710653056, "uuid": "1f8f1a97-297c-4bb0-9fa9-16eba4120713", "value": "T129E55C91BD0972CFD58B2B7C992BCD82685E03F9472489C3A878B57ABD63CC117B6C14", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710653056, "uuid": "1185aad0-68a2-4a9c-86c9-77e90d8b51e2", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710653056, "uuid": "1c8c8a56-79a2-48d1-ba8e-6b3584460ba7", "value": "49152:I85HXSd4eOzbmWm3fYu/YtoL3Xclt2i8T4ihS89v6:J5HledWm3fYu/YWLXA8T4yS89C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710653056, "uuid": "f990daa0-cedb-4a40-bad9-6437ff34ba94", "value": 3252736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710653056, "uuid": "311386fa-c3ad-4ea1-950e-071ca64e76c6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710653056, "uuid": "72356489-c497-4dea-b9d6-eee58895783c", "value": "SecuriteInfo.com.Win32.TrojanX-gen.5850.25826", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fb40fe99-e466-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710684144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684144, "uuid": "e29d7240-2d6c-4d62-affc-d46c36e2ddec", "comment": "Malware payload", "value": "e1eb4898afbbbc83b858db30ad7b6088", "object_relation": "md5", "Tag": [ { "name": "browser-extension", "colour": "#966E56", "exportable": true, "hide_tag": false }, { "name": "FacebookStealer", "colour": "#8B7032", "exportable": true, "hide_tag": false }, { "name": "FakeGoogleAI", "colour": "#9B9A75", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false }, { "name": "obfuscated", "colour": "#0E3395", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684144, "uuid": "3ab4989c-bf5a-4503-aedc-4afd22d54b58", "comment": "Malware payload", "value": "d64da04bf1f2a3d9fcee07e8d75bb01038a8b7cd83d59fe4d43849214132bd5e", "object_relation": "sha256", "Tag": [ { "name": "browser-extension", "colour": "#966E56", "exportable": true, "hide_tag": false }, { "name": "FacebookStealer", "colour": "#8B7032", "exportable": true, "hide_tag": false }, { "name": "FakeGoogleAI", "colour": "#9B9A75", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false }, { "name": "obfuscated", "colour": "#0E3395", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684144, "uuid": "90eca77a-6599-4133-a89d-aac7184dc352", "comment": "Malware payload", "value": "5e39a07b8a03c79d08d79b28054894ba2374b20a", "object_relation": "sha1", "Tag": [ { "name": "browser-extension", "colour": "#966E56", "exportable": true, "hide_tag": false }, { "name": "FacebookStealer", "colour": "#8B7032", "exportable": true, "hide_tag": false }, { "name": "FakeGoogleAI", "colour": "#9B9A75", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false }, { "name": "obfuscated", "colour": "#0E3395", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710684144, "uuid": "31f10b36-339a-4f18-876e-5b209bb7b990", "comment": "Malware payload", "value": "acfccba8f21a48707760a16922d6db917bf1d40852932a66d7bc87b53d343b354a64727c5bb19555d25c461102e7c0e5", "object_relation": "sha3-384", "Tag": [ { "name": "browser-extension", "colour": "#966E56", "exportable": true, "hide_tag": false }, { "name": "FacebookStealer", "colour": "#8B7032", "exportable": true, "hide_tag": false }, { "name": "FakeGoogleAI", "colour": "#9B9A75", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#F7D241", "exportable": true, "hide_tag": false }, { "name": "obfuscated", "colour": "#0E3395", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710684144, "uuid": "b18753dd-b32c-4e6e-a64b-564121751d94", "value": "T11C72EFED6389D88F7ECD5943AE1C9D9A6062E33B43C931C38B59F9BC11AC1D2F148991", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710684144, "uuid": "d60a9751-4ed6-486b-9c57-444fd5c50c99", "value": "384:MnGhPrx26QdQTXzRtpdKmtvLz5qSysRCXcnkOZ9By:MnGL2vdQTdPdKm18wRkIy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710684144, "uuid": "8613829b-f31f-4513-a833-fd89eb7160df", "value": 17210, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710684144, "uuid": "4f729240-4abc-4bba-b38e-358e85762ce2", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710684144, "uuid": "6b74f431-50ef-4f67-b81e-62a2a73f3c59", "value": "background.js", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8733bae9-e44a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710671924, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671924, "uuid": "1ff2ca16-f80e-4307-8699-af9b2e39b787", "comment": "Malware payload (Mirai)", "value": "2b86cda9c1608d8e0319288602ebd848", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671924, "uuid": "7f44247c-f3cc-4871-88f5-9a90f4c22d84", "comment": "Malware payload (Mirai)", "value": "d88385eabfe059d3e34a30f21bd0290ecfe6c0d5a93f3a9a0edbc06dbc329cb6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671924, "uuid": "8de399a6-7d49-4557-9212-096eccfdd7d6", "comment": "Malware payload (Mirai)", "value": "42ed62a772a58e85052ccbdbb310d29199efba03", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671924, "uuid": "1d3e1d98-511d-4728-8476-773db8d46bb0", "comment": "Malware payload (Mirai)", "value": "b524e5b8171f137c5a19dd2f9ab313a4024a3a9b038d0a357dff85b2d7a6769970cbc1293e85fa5b6960c3499cd5fa4c", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671924, "uuid": "e8d35d8f-8dd4-435e-82dd-0afccaa744dc", "value": "T147735B367D721D3BC0D4A97961F71236F2BB839621AC891A7E620E5CBF356103253BE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671924, "uuid": "f59f1efe-3408-4784-a0b1-b8fdf633bbd0", "value": "1536:q7I3wvk59f0Nyp+ks55q7YPt6tMKc28co:r3wvknfMkc5cBc28l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710671924, "uuid": "90582518-722d-4958-ab1b-20f141b3c6a6", "value": 79344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710671924, "uuid": "4667761e-22cd-4ff7-ac35-5daca09ff65d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671924, "uuid": "f78b1e39-b24b-4042-a3bd-b738ffc904e4", "value": "SecuriteInfo.com.Trojan.Linux.Gafgyt.31116.24097", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "50f8252c-e499-11ee-a120-42010a9c002e", "comment": "Malware payload (Amadey)", "timestamp": 1710705763, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710705763, "uuid": "e3cb452d-cc9d-4224-88b5-bf1579046f75", "comment": "Malware payload (Amadey)", "value": "3be93b7272a95d1e804c84c4db9cdacf", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710705763, "uuid": "179c7717-2bd2-4c3b-8109-dca63f0e02c4", "comment": "Malware payload (Amadey)", "value": "d88da24c018b0d0b71a2b29ab1e5684785726396666599e7c5335507237577fc", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710705763, "uuid": "11de6703-1fc2-466a-89a1-7c98d37a632b", "comment": "Malware payload (Amadey)", "value": "ad9ca3405deb693c1ba9855c2fe9ebb4958c8499", "object_relation": "sha1", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710705763, "uuid": "37523702-fa44-4347-a9cd-963f3c185baa", "comment": "Malware payload (Amadey)", "value": "054a30b46586de8aa29caad6791cb39504bab9b30ad40359fb81cba1255f85be7798f7c34a721a7b3bdf443bde230ba2", "object_relation": "sha3-384", "Tag": [ { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710705763, "uuid": "5f032b01-2bf6-481d-a88e-98def8583a29", "value": "T12B84F10036A29875E1A1C731CDA6FAE8573EBC809AF8656F72543F5F5DB13C089B1326", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710705763, "uuid": "1e948e44-6591-416c-afb4-3b1552f7f0a1", "value": "06de3ee8f2bd808cd7150ed6cee11120", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710705763, "uuid": "28b07540-be51-43fa-87d1-0c2a2470cf3c", "value": "6144:f/975cCVZUHkXJ7tgWDXn+ZvzvdodaWFvkZogoT7MEH8kRBeA:f/97XU87+A+Zv3akZoD3Hckl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710705763, "uuid": "cb3f5fc0-9490-46e5-a6fd-41cf26c71ded", "value": 398848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710705763, "uuid": "95986615-93f4-4547-99c3-df0d170eb62e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710705763, "uuid": "de54b52e-2eae-4085-ba59-8608133e3da3", "value": "update.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7caf96e-e444-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710669428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669428, "uuid": "c09a627e-b4f1-4ecd-b7fc-662728fc90ca", "comment": "Malware payload (Mirai)", "value": "064da2e470badbdeb24125c40ed7f639", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669428, "uuid": "70c6b59b-838b-43cb-a223-e5ce71b394f5", "comment": "Malware payload (Mirai)", "value": "d8dfe3062e531a9dfbf99bf6ee53a86d479ab5d419d0737c77a07045211d9bcd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669428, "uuid": "879514c4-80e4-4824-b027-24830681c6df", "comment": "Malware payload (Mirai)", "value": "4657b9f5013daea1346a634d754242e8b16a4501", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669428, "uuid": "1fa8d5b7-276a-40c7-81f7-035b1e66cd4a", "comment": "Malware payload (Mirai)", "value": "5ce35b3735295bcdab5766810952c3fab4193378b76ac84f2e62f37a11564af3bcc324a2e366b223ea7e085a43bdcee8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669428, "uuid": "93d1bdfd-ab9f-43d9-a728-c3fcac29aab2", "value": "T18FC2D13096AA1CF1C6500532F7B86AC9BE434FBDEAFE7890110057FA3981D0569E99C7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669428, "uuid": "b5663986-e0e1-4009-91db-e1d31a598205", "value": "384:ARt/koxisa34beDtZwuaCBsk+G9lLSsLYSTFs9u8OtqlrNE6LyhymdGUop5hrg:A7soTAZ3alkXLvFh8nNE6Lys3Uoz9g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710669428, "uuid": "63ff0c37-accb-44cb-baf1-9d7575ec729d", "value": 28176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710669428, "uuid": "3b2e70e1-91be-400f-899f-49ac238a76ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669428, "uuid": "6c6df4fa-d539-49eb-ac6f-3011b28787b4", "value": "064da2e470badbdeb24125c40ed7f639", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67fcbb65-e450-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710674448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710674448, "uuid": "ffb7f09e-61b1-4bb5-9104-cef0ad04c743", "comment": "Malware payload", "value": "9ffa301318c5e6472beb0812bb8e4255", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710674448, "uuid": "ab27102a-27f6-4930-8400-b4b5a5f27a67", "comment": "Malware payload", "value": "d9914ccda2ff614324eea7712113f88949df11ddf0e309d91cc853a18b9ee83c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710674448, "uuid": "d17c2bab-fae3-4b18-b985-d3a5a02474e0", "comment": "Malware payload", "value": "52ff3d03f227df2101355c9d43b2533ec413a528", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710674448, "uuid": "99edd596-326b-4011-b014-8568cc990c7e", "comment": "Malware payload", "value": "d978c61fdda98465c0402561a332d5950ec8595f59ad179dee94ec5a998b1c001e77cbeb695b8016f336a3dcd0a0b448", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "SrryStealer", "colour": "#1DBC10", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710674448, "uuid": "3b3e3589-28ac-4bf0-8e9e-da4d1227fdd0", "value": "T16D0833A7128A7279F86431F8193D6DEBD644D4A133D134E27C6BDA428C47CC67DA80BE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710674448, "uuid": "7ba5aa22-aeb1-43b7-82c8-ecd9db0c77a0", "value": "b34f154ec913d2d2c435cbd644e91687", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710674448, "uuid": "398ea66c-bb62-4d2f-beda-053e8007e460", "value": "1572864:RR6LBYN3hil9YQxwrBZHBFdNYZvpXuyUsAI:RcueRxEzFCHUsA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710674448, "uuid": "1cdf20a6-3708-4e77-a968-64d14b8dbae3", "value": 82886423, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710674448, "uuid": "e532c2e2-bcf4-477c-9a2b-31b9916295b0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710674448, "uuid": "abd471ef-f3ca-42c7-8b1a-b5cee90eaf85", "value": "MariyelsTherapy.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69aa6f40-e49a-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710706234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710706234, "uuid": "da37a187-6ac8-4b45-9ec5-ae0f739551a7", "comment": "Malware payload", "value": "db475b482bbda5e8595e0c67731d1bee", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710706234, "uuid": "6cf9840e-d48b-4566-aeff-7c2966273c46", "comment": "Malware payload", "value": "d9ef17886cb5f65bb32bf7038f9e345dce52428553ce7ce4bfa8740d48b3bca2", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710706234, "uuid": "6018be28-5bba-48c5-b2bb-9f2f827ad11a", "comment": "Malware payload", "value": "82af883c9aa2bcf860cfc531e49acfd22898167f", "object_relation": "sha1", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710706234, "uuid": "3900bc5c-4b34-4d8c-b9e8-94f65472d969", "comment": "Malware payload", "value": "8987013b5e3c5cf8a2379def027d5b9a5dd0dec0f3bb21bba271e699a0ed5e41b84c6b745635425918020576f19d0ca3", "object_relation": "sha3-384", "Tag": [ { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710706234, "uuid": "22db2b03-6043-4906-b30e-18c3bb06f452", "value": "T183B6337606004C7A8A2AE8CDFD4E65991A00EAB46C2544CC715D778F8F6AD363CA3DDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710706234, "uuid": "ebc41522-12e4-42a6-87d1-44a3106f5dad", "value": "196608:Kmznovs1pjzoAizFoT+7tBEcH7dY6LPI24n1d+aC78RvtQuejlDCp9CoS0t:Kmzovs10RoTatB3H7lPT4n1ds78RuuEg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710706234, "uuid": "1a3d90ef-11bb-4d80-9594-f46ab08e3137", "value": 11162957, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710706234, "uuid": "e4f232d8-dff9-4014-b1f7-e220b7de6d0e", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710706234, "uuid": "5b347aac-b0d1-4694-8f9b-70ebe85d499e", "value": "db475b482bbda5e8595e0c67731d1bee", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8848ae95-e438-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664195, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664195, "uuid": "725e2cdb-0415-40ce-a3b6-3e9432b8125f", "comment": "Malware payload (Mirai)", "value": "4bee7c8535bf84541649d920f747cdef", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664195, "uuid": "75e6bdd3-71bd-4fee-9c27-15789e4691db", "comment": "Malware payload (Mirai)", "value": "db49b95c6ac055e4d7116cee636600666f744b6123483fb1c8bdd97930dc9fdb", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664195, "uuid": "da3af47f-ed12-4e0b-8f2e-ee47932e6705", "comment": "Malware payload (Mirai)", "value": "94961697d623d190061ac46fbe2142b01c2aecf6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664195, "uuid": "53761ad5-9259-495e-a8d4-806bc1936b93", "comment": "Malware payload (Mirai)", "value": "caba553911fecfc98ee026aad7086dd21e920ba4e99d01605d1810abf518192773a6ec038480e27679981aab9140218d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664195, "uuid": "2f0bd7ea-3b13-41f8-860c-294c37605897", "value": "T19FD2D06EE4B542C5ED8E5C7D80CC3BA14E45E580231BDB9677228C8D5B32C9BF16A4B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664195, "uuid": "51c50322-b6b1-4f1e-a7fa-ab42ec1b2d0d", "value": "384:t8pVWtmRsLYEpB6V8S628FuRUuNJG9whQ3Cfbo6w+K95orjcJbZ6GRWGVCz0NvO:KMYHb62x4ahQ3CfdwLjBlJWP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664195, "uuid": "d36d4ac6-d0ac-4201-97a8-e23b641ebc12", "value": 29944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664195, "uuid": "c1348c02-face-4ec1-8255-0eb60479dad2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664195, "uuid": "a45ff819-092f-43f9-ab16-0a27c56c1052", "value": "4bee7c8535bf84541649d920f747cdef", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60b82a87-e439-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664558, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664558, "uuid": "38f4e9e2-e1cd-4b8d-9b05-3905990388d4", "comment": "Malware payload (Mirai)", "value": "1f71aa570741f12f611d2a224b5d32e1", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664558, "uuid": "fe1c640e-0293-4c30-9475-d65d8ef001bc", "comment": "Malware payload (Mirai)", "value": "dd53403a0a55971733d8d5954ac73fbc5fb365f9042753b6066af863ec1c2b1b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664558, "uuid": "ef204556-d6bf-4b6d-8b9f-75bc1155861f", "comment": "Malware payload (Mirai)", "value": "eb7c055e04cfce21b532a1353246dcd4aaf34cfa", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664558, "uuid": "298dea18-b220-4776-9b02-cfdb06a80818", "comment": "Malware payload (Mirai)", "value": "7134501f45b593c8b7fe5002e63bf0708ec29ac49492ccbbabde2f705751f2d267ab4835f639f1409749bd7a9a704c4a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664558, "uuid": "d82ff83c-5f2a-4eec-9612-0416b383eb67", "value": "T14B142A46E6418B13C0D627B9FADF42453333A79493EB73069528AFB43F8679E4E23506", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664558, "uuid": "f83dbc1c-c104-499f-88ca-3c2c4e3b5c95", "value": "6144:ATdLLwlyYa+1/u0TLxYOpR57reX4M/R3gd6k:ATdIlyYa+1/u0Tt9leXt/lA6k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664558, "uuid": "66e3b0f7-38f4-40a2-be08-a1cf11c6cc01", "value": 201326, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664558, "uuid": "479135c3-3fa5-4ec8-8077-be9845f2f791", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664558, "uuid": "fc1f3795-58e6-4a89-b0fa-dfaff264b32a", "value": "1f71aa570741f12f611d2a224b5d32e1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "995064ce-e405-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710642319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710642319, "uuid": "9c164c2e-81bb-49db-842b-26e80428c1ff", "comment": "Malware payload", "value": "c4abafd684f60841f121f0a91aa321e1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710642319, "uuid": "084622a2-c4f9-4a3f-ac77-a248472e0d0e", "comment": "Malware payload", "value": "e028980153f97d15ae798271ad421a98fb35039cd0b2f72f74cbe85ef9ac11cf", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710642319, "uuid": "b05cee34-49c5-4dd7-94bf-d11299f32ab1", "comment": "Malware payload", "value": "887e713e4e9e47c26d1b9e52a621c6a20c69852b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710642319, "uuid": "e79284c6-37fc-456f-94f4-2a0450c8ab52", "comment": "Malware payload", "value": "249f5b382885faba9fb742f90aaeddac26a07f45f44aa482dae7af81be1871e81ebd0a972391e111747718ae26a27e46", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710642319, "uuid": "9421b3d8-28d7-498a-af3f-1278be4a18d5", "value": "T136D5CF2336C2C03EE6A251718C6F8E6846A1BC238B3145D7B594FE2D2FF45D2B527E16", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710642319, "uuid": "dedaaac7-e86e-4062-9c82-be6a2348117c", "value": "b950d8063774a26bdd19d96b6b3280f3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710642319, "uuid": "44854887-a02f-4ea5-a6fd-da6bb54e09bf", "value": "49152:GkIxpjIFc3A+mJYOVTdCxZkPvZmrb4E3FJFmcNRqtdCqcqr:Gk1Fc3AxJWZmh4vbk+qtdHr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710642319, "uuid": "e9533c0b-dfe7-4f91-ab88-f6449ce9cd8e", "value": 2810163, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710642319, "uuid": "71dbcd4a-6589-40bc-b5d9-7ae75bf42bcc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710642319, "uuid": "0d529741-df84-4b8f-8208-02775afced32", "value": "SecuriteInfo.com.Trojan.Win32.Extgen.dg.19735.25638", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "37acb48a-e4b5-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710717746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710717746, "uuid": "6560db23-9445-4fbd-952b-e70b079b0a11", "comment": "Malware payload", "value": "e503abfaf59b3f7f91db7f06aaaf8f7f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710717746, "uuid": "f3111c94-fe4c-492f-ae85-e75ab196f9c8", "comment": "Malware payload", "value": "e439486ff55b8e3daf4753427bf83e6c1af097ef21a74dd6f158b0cf724c73c0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710717746, "uuid": "662c92fd-f758-4f43-b58d-73d822660d62", "comment": "Malware payload", "value": "ac0271613ba195d85177b9c1d246619f001b90b2", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710717746, "uuid": "ba3eab44-8586-4c76-9faf-f898e3e21d64", "comment": "Malware payload", "value": "5b5bbe80c378c76317be2039bff6187749611ea55247acbfa20b4bd34b7d98758f419d894175a075b3438d315697f415", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710717746, "uuid": "51030f9d-8eae-43b1-8cdd-832f8bee897b", "value": "T1AFF55B91B94679CBD49E2AB89827CD82797D07BD872048C3985C7C7E7E63CC252B5C38", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710717746, "uuid": "cf78e532-fb8f-4f69-b3bf-5444949d99ac", "value": "2eabe9054cad5152567f0699947a2c5b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710717746, "uuid": "a338d512-fcd1-409e-b4d6-afffc6f8c8aa", "value": "49152:cXN3u+RkDMYW0itCZRtsK72z9lJR3dpH+1mwyU3SdR:8UTV2tCZRtsK72z9lJpe1mwnIR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710717746, "uuid": "e3573052-d313-438e-a4b9-523b30474721", "value": 3323392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710717746, "uuid": "32ff326f-5988-4fe1-b4ba-8ffc55ae8b1a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710717746, "uuid": "0721de48-dd60-4e40-985b-9643813919ce", "value": "SecuriteInfo.com.Win32.TrojanX-gen.18456.7536", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aef89033-e444-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710669413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669413, "uuid": "235358c5-ef3f-4f41-acfc-b96347761d39", "comment": "Malware payload (Mirai)", "value": "a5f291889e3d4e0015243b7fbae36dcb", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669413, "uuid": "963a503b-4b77-411c-9cd0-dffba2569571", "comment": "Malware payload (Mirai)", "value": "e520c2314adf6040ce973ffbb07291b957a1ddebd0bcb1d06743bf7b2c68c63e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669413, "uuid": "3c109c46-e348-4294-8735-7914559eda88", "comment": "Malware payload (Mirai)", "value": "357d52be3214b47d481bc47ad06e0e0d2dcf76d6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710669413, "uuid": "129cd112-7248-4f85-9ed0-eb51ffef4443", "comment": "Malware payload (Mirai)", "value": "82b0bc17f031a28ec0094870d4ec4260af91291ebacc1ded52e2a73a37e816c8dea35526bc74ca60efe4f39f33d082f3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669413, "uuid": "be617f12-8a30-4cbb-b6bf-a6506c504b5e", "value": "T177B2D1A08BA15706C2B0B4799378CF925B3B05E4C2F63926362053BCDA5645633FCBC7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669413, "uuid": "25ad1452-9b81-4edc-9dca-1138cf8335fb", "value": "384:4GHKXlJIDFUS0Mggks3aIrokYVDoDDRRKj55N7LB9U+BtD/qhymdGUop5hu7m:4GHKQFH0rs3zWoDDRsjt7LB9U+BtD/qU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710669413, "uuid": "a15fad68-5f40-4897-a772-be00b12f3da3", "value": 24536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710669413, "uuid": "acded183-21ae-40fe-90b7-96e94ec43f8f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710669413, "uuid": "cf90744c-2a15-4920-b990-9c80b19b610c", "value": "a5f291889e3d4e0015243b7fbae36dcb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be6f7339-e436-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710663426, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663426, "uuid": "133f9235-5932-4a12-a69b-59dbc4975375", "comment": "Malware payload (Mirai)", "value": "2e2af2f2401635a8467b8d573277c43a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663426, "uuid": "6d95d76a-4617-446d-8ccc-cdffbe38e9c1", "comment": "Malware payload (Mirai)", "value": "e89923d0f31b06496edc92d7e5dad723b528bea64961b5b27a08452df632c6b9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663426, "uuid": "2fbc4292-50df-4a17-975a-f0015d52ea6a", "comment": "Malware payload (Mirai)", "value": "b432a55286450240713430c54b8ac60b37951deb", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710663426, "uuid": "c693576a-2220-41ac-80f7-92144009b4ea", "comment": "Malware payload (Mirai)", "value": "b95e8dd0137a30bf0e3bb733852bfe2fe0545dc867daab421e33e5e51dabd841367a5049d6ab7191b7173b773d33e910", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663426, "uuid": "6b144892-73b5-4894-84ab-d5f41b40d8b9", "value": "T123538D75D11DAEA8C0414AB4A9198E704F13E4C046733EF7EA9587A68443DBCF858FF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663426, "uuid": "4ac80fb3-c1a6-47d6-87ae-8542ad1fa4fd", "value": "1536:ragXV1f1Fl/wtknCPQauiufs3Ii3O/qyD6EZeCc:r57f1b/0QHf+Iey6EZe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710663426, "uuid": "3dc640a2-b842-42c0-9818-882737e9b79a", "value": 63480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710663426, "uuid": "c2f89fda-20aa-499b-9dc4-9632a9bb9f06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710663426, "uuid": "1e316d10-ed5d-4d31-8172-8025304e9383", "value": "2e2af2f2401635a8467b8d573277c43a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "722088cc-e439-11ee-a120-42010a9c002e", "comment": "Malware payload (MooBot)", "timestamp": 1710664587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664587, "uuid": "d5a785fa-cfa7-4375-8304-bb65c82c30cf", "comment": "Malware payload (MooBot)", "value": "17d487464d6338be9c867bf489b0bc46", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664587, "uuid": "08b8ff97-1f5f-4fdb-80c7-16347b5d4cc7", "comment": "Malware payload (MooBot)", "value": "e9554f1587e6c4f49f8c3fe13c8e202c180261a2b1adec1c20d00c4655397a3f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664587, "uuid": "2dd2099c-d6f5-470c-a825-e912bd70944f", "comment": "Malware payload (MooBot)", "value": "4bb50d927f94da32b090c143de092a20afb48808", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664587, "uuid": "3dfe7d08-8288-417b-bd62-db597ab4403e", "comment": "Malware payload (MooBot)", "value": "8add8f8dba14e471b795014acada04f272b730a4d969b2ec17905f4218dcca4e80e54e82c73693d22283ef5058571d10", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664587, "uuid": "920daaa7-09ae-40d5-be5f-a690ae1c5c3b", "value": "T1CEB32A46EB418B03C4D51776BAEF42453323E75593DB33069A18AFB43F867AE4E23906", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664587, "uuid": "5a35bc6d-7b2f-48ff-9316-4f7f0f8113a8", "value": "1536:hFnOT5bIxq6w6vNkE063rj/zsCJKmYdlTTidAsRhCH3ter6nzw/9aQHiU48f:0bmq6bVkZ63rj/zsCJOoAs3CHArqM/9N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664587, "uuid": "16ed7fe3-3f83-4dad-8e17-522dda567e4e", "value": 108845, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664587, "uuid": "be7cfa0f-99f0-4810-a09f-9ee171e1b323", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664587, "uuid": "62e86883-21cd-4956-98e2-af9ebb08ec09", "value": "17d487464d6338be9c867bf489b0bc46", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b6e1fde-e439-11ee-a120-42010a9c002e", "comment": "Malware payload (MooBot)", "timestamp": 1710664603, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664603, "uuid": "2160e552-3d5b-4b45-8c44-155a016c1101", "comment": "Malware payload (MooBot)", "value": "a4de3e382a38572ac47bf5ddc48169c5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664603, "uuid": "02026bb5-f409-40ab-abf5-c01491e90996", "comment": "Malware payload (MooBot)", "value": "eb81b7c6dd9db0df2ea8680726c4a38a8302840f98e7e69f11db009388ef29ee", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664603, "uuid": "84162d0d-bea2-4fcf-b465-2f03694163fa", "comment": "Malware payload (MooBot)", "value": "fc2d022cd1455d35999b14b6a3b409256dc05ad4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664603, "uuid": "1fd86f4c-28cc-4506-b1f7-c14a171ca154", "comment": "Malware payload (MooBot)", "value": "0dcb6f8e9cccb16f6e4ea73bd0afe0cc6a5af1b125a855415e2368aa4b5eba4d55ca1ff3862889f03247b9954c35bdea", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664603, "uuid": "430a1911-80c6-4c50-9186-73ec5e46178b", "value": "T113E28EB3C01AAD48D598C67866616FB42763F005C3671FFA5A6A82A6C007DFCF5093F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664603, "uuid": "cff3ee0f-7f5b-4fc2-87b2-aba28d26c6be", "value": "384:bAflUMkNhj3U6+bhgAeWWjhrF/YwI2OMTylJCMDtLBFrXEr3KSNpog/sqB0zaCvY:bAfhkNhjA0LdYwPylJCe2poYsTuCyD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664603, "uuid": "9e6da4e0-de5d-4a9a-a705-48a603cfb5c6", "value": 33612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664603, "uuid": "045117ae-e31f-46d8-b37d-35d0a30df7d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664603, "uuid": "e7f5dd68-c628-4e70-9c32-84d860d73c76", "value": "a4de3e382a38572ac47bf5ddc48169c5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e5c19dc-e439-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710664607, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664607, "uuid": "abc0582d-4f8f-424f-ab4d-4ab1ddc567ff", "comment": "Malware payload (Mirai)", "value": "329d399a24f0cac47575edffeefe790a", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664607, "uuid": "10e419dd-64a6-4b0f-8dc3-e536e77039a1", "comment": "Malware payload (Mirai)", "value": "ebcae03cafd77694f34f4a37d731d9e59464d73a65e46977d2b1b3ff0ae4ddee", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664607, "uuid": "bb50c3f0-75c7-4129-b514-35d109cb3fb8", "comment": "Malware payload (Mirai)", "value": "6062351be89bc547c0de095def0fc643bbffe8e9", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664607, "uuid": "4bced703-d355-44a8-9fb3-86e8c1130be9", "comment": "Malware payload (Mirai)", "value": "a536e9ea80bc6ba7f701a6a555706e9cd4363387e9cbec9b77d1d3aefaaa363440f0557184f390b303421598230b14ee", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664607, "uuid": "fce027b9-b651-4388-ad94-f44e45997aa6", "value": "T182E35B0BB5C184FDC8DAC1744BAEB536ED32F49C1238B25B37D4AA266E5DE211F5DA00", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664607, "uuid": "f8acd04d-f1a1-487f-8d61-0b1d6c3192bd", "value": "3072:iVy/QHH/ttSLCO2hibaBcwkRe1w0/Sn2JnF+buKOPkYWKMzt4:iVy/QHftkCOxCsIbPkYcz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664607, "uuid": "15ad8a7b-93b1-45b9-9d68-567a510bf612", "value": 155944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664607, "uuid": "1b6aaec8-1bc9-4f3c-a4c6-c2b87b97318a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664607, "uuid": "a62febe0-a8a0-4ee5-8e4f-5e736867a05a", "value": "329d399a24f0cac47575edffeefe790a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3e3a05e-e46e-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710687434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710687434, "uuid": "4eb61966-022e-47b4-9425-55c6a034296f", "comment": "Malware payload", "value": "a5d75a5706b8117b2b010933881dc38d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710687434, "uuid": "98d00cb8-7d08-4640-af7f-30ffb34481c0", "comment": "Malware payload", "value": "ed8eface3112d79595628fc5ac448914f27ee2ca300cb8da1aa5a3d5ece3cfda", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710687434, "uuid": "a00e8d93-65a5-452e-a7fb-f8da0450bf0e", "comment": "Malware payload", "value": "c37c4f47430cacc8275d34ea1e711ddc27a3c211", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710687434, "uuid": "48a733f8-3275-4b10-afce-6d8b2e9fe51c", "comment": "Malware payload", "value": "d2a1f5a97accaf0bb6bf7a1c4275274361b828f3f3392fa72e50a0ef60026bbf256edeca4a3de54848547f069ef7c285", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710687434, "uuid": "bc986254-a981-4c13-ab3d-fcd04281b137", "value": "T162A4CFE052B7CE66DBDC43FC60626A01A77D0A89EBD3F708585504FA8C16792D2139FB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710687434, "uuid": "9dea9620-28ea-4a3e-b699-763107e72e28", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710687434, "uuid": "4cb358e5-6303-4d49-89a0-ee67759cc709", "value": "12288:WSegfVhaNb9VTf0ZRGPFVZmaZm20Bjwnv:WSegA9hiRGPF3Zm20Bqv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710687434, "uuid": "64a44cf6-cbbe-42ba-8d00-7b36827409e0", "value": 487936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710687434, "uuid": "85c0f44e-9940-4ebc-8b79-0c0f181f08db", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710687434, "uuid": "e30a2e72-760e-42e5-83e7-8f3ce2e2d6f5", "value": "file", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "869505f4-e44a-11ee-a120-42010a9c002e", "comment": "Malware payload", "timestamp": 1710671923, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671923, "uuid": "a50204f8-dae6-4e6f-acec-391a4e7ea138", "comment": "Malware payload", "value": "c52b498244e9eeaea60f1e45d479e027", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671923, "uuid": "7fc80d1d-fdce-47dd-bdeb-c82f1baf89de", "comment": "Malware payload", "value": "ef2fc14734cd8069ed4a3ab3cf19cde415476cd7baa67c516375548ab5711910", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671923, "uuid": "5bb06757-8c28-4070-b926-3208e14ea214", "comment": "Malware payload", "value": "38e9c39ac36f29909ba4022636607223e4ebd37a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671923, "uuid": "1a84d572-0bea-414a-9988-91f1d406301a", "comment": "Malware payload", "value": "62c1059a9a6dd067a209e4c45b292cb07a7a16584c9fb338401e95320cfb388fb3ea5a0c26311c5b1e84607bfc767c37", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671923, "uuid": "12a8b14c-5731-43e5-bd6f-b4a9eb94a609", "value": "T160C33A87AB208FA1C276D63005F74397ABBA16D617E39545E36DDA103B6034C682FFE4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671923, "uuid": "51807435-9597-463a-a634-7d66691b5824", "value": "1536:VnyC0/FxCaAVhUXLLRcLvBcKkn88R1/vjxnrp4iFHVVzU8prLtE:VnaYnkLLWvk51jxt4GLvG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710671923, "uuid": "d57c3b79-7619-44ce-8e1d-d51b332bacff", "value": 123736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710671923, "uuid": "77104e0b-6112-4ebb-887f-e91c963b2b1a", "value": "application/x-sharedlib", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671923, "uuid": "8efc31e2-cd4f-47b3-b5c4-f5f5c024d0a7", "value": "SecuriteInfo.com.ELF.Downloader-AN.21709.32313", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "877ff093-e403-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710641430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641430, "uuid": "5cbd1ef6-d88f-4a32-88d2-5da1f71ff800", "comment": "Malware payload (Mirai)", "value": "6dd28634d614535eeb7dccf60914b2b8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641430, "uuid": "634a6262-88c2-423f-9265-d75406451a9b", "comment": "Malware payload (Mirai)", "value": "f016b19d5f53876ae280f3f03d0e8401a38723d4c1ec77322816b0fdcb7e97fd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641430, "uuid": "0658e73e-9dcf-4bf9-9b77-64bd0a49b4b4", "comment": "Malware payload (Mirai)", "value": "a62fb3239ad9db3dc032d3ebb1b340fd7a8c8ca4", "object_relation": "sha1", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641430, "uuid": "00a5c302-3bf6-4434-959e-a687c7800c84", "comment": "Malware payload (Mirai)", "value": "08259abf3cc657923dfe7d687c8b329392042f81d77ef05732d26163da09ab9222d91709c610909c98384978ada73dc5", "object_relation": "sha3-384", "Tag": [ { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641430, "uuid": "dfa99bd0-4759-4cb8-95fc-f13367ad8632", "value": "T14A435AC5F643D8F5DC930570103BFB265A36F0F51218E743D3A99B76AC92702EA16A9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641430, "uuid": "1f95f540-3105-4024-8ddf-3674bc0e6d54", "value": "1536:1rqcMLOJpN50g6xK4GjgLesSwNo+rWHIrqMc:1rqcMLOJtjl4CGesnNNChL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710641430, "uuid": "1251463b-3286-4041-9b5f-8e8b03a4cb60", "value": 59088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710641430, "uuid": "ff413110-d467-41a5-9755-c021dd8d7b09", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641430, "uuid": "08c318c8-d698-45bd-9e63-a44a133595e0", "value": "x86", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f205c52-e439-11ee-a120-42010a9c002e", "comment": "Malware payload (MooBot)", "timestamp": 1710664636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664636, "uuid": "6c674e06-d3a1-45b8-9fe4-ab9e9e374cb6", "comment": "Malware payload (MooBot)", "value": "8fd8c49b9ddeb087c4784ebe51dbb6c8", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664636, "uuid": "9e19d71a-8109-4955-9f37-5ad39c8a6db1", "comment": "Malware payload (MooBot)", "value": "f088a5bc41e8f21a39f282b76084f818d60ecdc1b6561fc80474beabe6158b2b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664636, "uuid": "4a07e9b1-eed0-4bf0-9db1-9e243dd70dca", "comment": "Malware payload (MooBot)", "value": "1aa108a11b204dce0257bef52a09f34d9ee5f088", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710664636, "uuid": "fb2cd4a5-1ea8-4a44-9707-f0447e292c84", "comment": "Malware payload (MooBot)", "value": "ae9ebbed6df543acbcf803a10b968793be5fb86a34c4623dc705a5e450dcce08c1bdd7fe536d1494cc8233a780327c5d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "Moobot", "colour": "#FCD400", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664636, "uuid": "5d781e0e-56c5-4381-9e9b-f1dc5632b573", "value": "T14A23B74D2E269FECFB9C863587B74E20925833D226E1D645E15CDA001EB034E785FFA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664636, "uuid": "94f8313f-71b0-441a-bbe9-5977346afd4f", "value": "768:z2CtEIgG6661xL1NTAL7ZL7yAL7tMuRcgmV4NotVOVfmkDv5RafW8qxJeUUrKT:taGM1xL1NsL7ZL7yAL7tMuRPgSfmcZfR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710664636, "uuid": "0931beff-a692-4540-ac5d-d86fe19d33be", "value": 48576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710664636, "uuid": "fc861d52-17b9-4a2a-be63-5556670029e4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710664636, "uuid": "84613798-0d20-41f5-8487-1d485b9a98bc", "value": "8fd8c49b9ddeb087c4784ebe51dbb6c8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "977b8e25-e490-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710702016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710702016, "uuid": "7b7196de-6e2c-44fc-8a03-6c2bad53264e", "comment": "Malware payload (RiseProStealer)", "value": "d593fd698e116e7fd8ec90b903c9e8fa", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710702016, "uuid": "3ee82cec-620c-415b-a701-3538ecb88572", "comment": "Malware payload (RiseProStealer)", "value": "f0b88c425c7d2b7cbc3b352399dfa3785cd336545a232078f7d8842fe03579d5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710702016, "uuid": "f8fee085-0954-4249-b3f4-11cf03bd9132", "comment": "Malware payload (RiseProStealer)", "value": "a0e19f426ae51141edefb314a2697915bf18b2c1", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710702016, "uuid": "9b5866fb-7b17-4442-bda7-9739840c6a00", "comment": "Malware payload (RiseProStealer)", "value": "de618ede675695b4be877b9d1f2010af2390b4cefc93491ff76305035347bf04e5f54afee65f13ccf12795641dcb1576", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710702016, "uuid": "8b4a0588-227b-48e0-bfbf-a54f32837c8c", "value": "T146E56C92A60A72CFD48E277C9427CD96695D43B90F1048C3DD6CB4BE7EA7CC522B5C28", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710702016, "uuid": "9e3cdc17-7ecd-4745-8fdc-d64ee73a021c", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710702016, "uuid": "3d5bf2f0-26f9-4a6f-9dda-3de7ea0e8599", "value": "49152:DzCIHLXwiqorZAjkJJD7D/vbz+AyfFuwoiWsI7Tuv9aKjGj:nCIr+gujkJJXDX+AWUwonl6MK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710702016, "uuid": "1e100f7a-cc23-4ddf-b823-954a66790f1e", "value": 3220480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710702016, "uuid": "8aaba52b-fc02-469f-a7b8-5612a2e6b9c9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710702016, "uuid": "fa965a68-7458-4200-999b-8f7122bb5887", "value": "d593fd698e116e7fd8ec90b903c9e8fa.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d58e5c59-e407-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710643279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710643279, "uuid": "3eb74151-8ade-44bf-ab2e-cdc5f4f48089", "comment": "Malware payload (Mirai)", "value": "c18cbeefc9ddca95553511b7fe42ac31", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710643279, "uuid": "0f1823fd-56c1-4235-b5dd-45b544e85335", "comment": "Malware payload (Mirai)", "value": "f0c477a69418ed0128339b1cd8a3fd5b60ed93b877a36e15bcd2e0577261d487", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710643279, "uuid": "3f50fe01-0e61-47c2-815c-abb7ebedf90f", "comment": "Malware payload (Mirai)", "value": "84e7395752684c6d5353ecff9b0045cfc14e30f3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710643279, "uuid": "7da56e45-7f32-41f9-82fc-3b599ec259b6", "comment": "Malware payload (Mirai)", "value": "86eb946a2b9288be040f8f6f83bc40dd6a58ced1210717d819554e0d66ec14fe62293f28664faaf658b6cd8980dfd314", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710643279, "uuid": "abe847ea-c5c2-4e12-bdf7-55c5d59e6d0d", "value": "T194633B21BA761E2BC4C1947621E74B69F2F147CA26ECCA0B3DB10D9EEF616407143AF5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710643279, "uuid": "0be6a3b3-909a-4657-b9d1-e4795f8591ed", "value": "1536:uePh9W1a6ln7g+9z/n2vXZQcAVjt5nfEYk5jTtmtrNUb:u0h/W2pAFPnsYUgpNM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710643279, "uuid": "e501c043-a155-43e9-a260-414b7c3d2910", "value": 72752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710643279, "uuid": "3a17ef08-b185-438d-b31c-ba2fce50e772", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710643279, "uuid": "1d8a578e-6028-4cc9-a425-3a46c6b64268", "value": "c18cbeefc9ddca95553511b7fe42ac31", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05fce47d-e4a9-11ee-a120-42010a9c002e", "comment": "Malware payload (RiseProStealer)", "timestamp": 1710712509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710712509, "uuid": "3fb04331-5400-427b-ae9c-094d3b41def1", "comment": "Malware payload (RiseProStealer)", "value": "58165c0cc19ab2961c11de16fd8e96bc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710712509, "uuid": "0daacdba-0bc4-4dd3-a8d6-70c40f9325a8", "comment": "Malware payload (RiseProStealer)", "value": "f275d746812bf2f91c0d9c220f72bcd20352f51347e6b46882c11ddd4e5373bb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710712509, "uuid": "a58641ad-5a49-4dbe-abf4-8409a090c2d6", "comment": "Malware payload (RiseProStealer)", "value": "e28c64dd12c4623c09bcca4b6487edd9080562bc", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710712509, "uuid": "75a0add8-0870-4045-841a-76be24bab097", "comment": "Malware payload (RiseProStealer)", "value": "3729429474caef0a1d9405a8218f0aa27c128d9ab56c8675b7f0ef19cb9e6ff661ba618d248b5a1458d8214414ba10ea", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RiseProStealer", "colour": "#2C729B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710712509, "uuid": "8fc6513a-2133-48a7-bc9c-f633eba88f5d", "value": "T19EE56B62A58575CFD88E17788727DE81695C02FD0B210AC3ADAAB4BE7D63CC115BEC34", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710712509, "uuid": "1d88d190-2d35-4faa-aff4-75a5bf20710e", "value": "baa93d47220682c04d92f7797d9224ce", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710712509, "uuid": "592cbd1a-2d0a-4727-b19e-5e1cf98dd2b6", "value": "49152:RB1DID5ac+Eyzb0/HqPt9AGocLHW6RArqxeRw:KQc+Eyzb0/HqPt9npeGUw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710712509, "uuid": "9d2595a8-a2cb-4559-a4fd-916031337429", "value": 3217408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710712509, "uuid": "143275a2-3bf1-49c9-ab49-c4c5cf24c5a6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710712509, "uuid": "32114da2-f847-4e41-92d1-11921bbab730", "value": "58165c0cc19ab2961c11de16fd8e96bc.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dae8ecb6-e407-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710643288, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710643288, "uuid": "bf68411d-6c23-4a03-9276-6c495e5f693b", "comment": "Malware payload (Mirai)", "value": "246914ac695f88599670d75f2befa5c9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710643288, "uuid": "633863b8-8dac-4fcc-9555-fd5e59ef19a8", "comment": "Malware payload (Mirai)", "value": "f6498d6fd1514e11d1610408c19cd0e8d8093ef1afdd107916da6190bd2d1318", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710643288, "uuid": "2ec60dab-b99d-40d1-953c-33a842c63477", "comment": "Malware payload (Mirai)", "value": "5089b2070235e3f4c7e3ef3ad9dd2c8f356f326c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710643288, "uuid": "71488c34-cadc-41e4-afca-dd1d01cf65d4", "comment": "Malware payload (Mirai)", "value": "b0b01d361832a22c95b92b7c9c2ec659d9cfa70d900019f90519dd84d17798e06da29934cbf4eb9782ef0e6eb20e32a0", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710643288, "uuid": "ba5ce9da-0d3f-4c38-91ae-49c71fb3965c", "value": "T19F635C02B71C0A03C1A31DB0363F6BD197BEAAD022F4F684795E97999675E371182ECD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710643288, "uuid": "fc3292c0-a5f6-44b4-9871-a943a3f7271d", "value": "768:Xs28gRCTZrRwyRCVaS1YpyjWi+8Oze+0ozHXRw9cM9QtmZti46xAuJgIG8AF+Qtc:cfXqYp/znh9w9BQAq4IAPIzPQWVNWN/U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710643288, "uuid": "eb09233c-32c9-4051-b340-d8fb332dfb1d", "value": 67684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710643288, "uuid": "ea4c4591-1e36-41af-af2b-602b58a5bc19", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710643288, "uuid": "40fbb678-6270-4510-b6de-648d7d41ac3e", "value": "246914ac695f88599670d75f2befa5c9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "971ac885-e41b-11ee-a120-42010a9c002e", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1710651764, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710651764, "uuid": "44fae425-0b1d-436c-b510-d23ce2e10470", "comment": "Malware payload (Socks5Systemz)", "value": "f9140a3cd6dd1b525a5935e019cc4231", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710651764, "uuid": "b7d755c2-549e-47e9-a6f0-0abe5947c06a", "comment": "Malware payload (Socks5Systemz)", "value": "f6df711bd275c98abde917437b5624867e464e4bc055538cb3f4b2022e7cae42", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710651764, "uuid": "7c960bf7-42f2-4333-b5ab-ba6344439aca", "comment": "Malware payload (Socks5Systemz)", "value": "1e85728f2950e8b3bf0bc5ece1d207714ec1d665", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710651764, "uuid": "4607ce12-903f-471d-839d-cb40170c4dec", "comment": "Malware payload (Socks5Systemz)", "value": "fdf7f0a139d41fc52817f7bbdbacfd2cb0257c594f5f9daf10026ce7bc602caf73b7eb269aafeccb9991da6b1754f317", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Socks5Systemz", "colour": "#D268CA", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710651764, "uuid": "a9ec9e3b-3a83-480b-82d6-10b9a2ab12c0", "value": "T1F5249F4D76ADD831D271CB304A75F6E8092DBC919EF9119F32A03A5F2AB13D08972727", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1710651764, "uuid": "9630e2a0-6d76-48b3-9a64-e8d776580bae", "value": "0eded250ca2d732ffa46d6329487d53e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710651764, "uuid": "dae79b83-1ba8-490f-826d-22d1e291c56a", "value": "3072:/Xch+8wqFkQ+HN2JqnFPbMDAsCpy+cJAwd9w1RBeg8+/yG5V:/ch+8wqFk9oJqnZEhkRBeA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710651764, "uuid": "cd9fc94b-617a-496e-bb2b-e96032c148f8", "value": 229376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710651764, "uuid": "73c09e29-3e7c-4141-a07c-3a4837413772", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710651764, "uuid": "5503e643-e792-4bfd-877f-109e3f426994", "value": "f9140a3cd6dd1b525a5935e019cc4231", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b44c463d-e4ad-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1710714520, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710714520, "uuid": "7397ec07-9ed8-4cb6-8e08-802a830f57bc", "comment": "Malware payload (Gafgyt)", "value": "14b9781b6685fb7af4d61f281c210ea5", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710714520, "uuid": "ec1bb0bc-2151-4052-9d9f-b5b313d0f260", "comment": "Malware payload (Gafgyt)", "value": "f70ac100dccb9b81f079219f0501b8130f938ca2029457cbd9a75c298fbde2f4", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710714520, "uuid": "1ec188b9-0ff4-4260-bba5-13cb0b5e322e", "comment": "Malware payload (Gafgyt)", "value": "e6505c80af43b3f371835f340187820a97c99549", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710714520, "uuid": "d5be6ad8-7008-4468-b67b-097f106a3109", "comment": "Malware payload (Gafgyt)", "value": "3b551e3878bd6b9c61be51d3be8f2e705fe1c97977466c35ace5c53e1fc865a892c6485428768ee5a246a99458338a2f", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710714520, "uuid": "227657d1-d280-4109-b2d6-8dd27ad6ff7c", "value": "T1AEF30933F2D18CFAC04342B027FF9AB2DE21F1FB1776311727602D605E5A9865E59A46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710714520, "uuid": "8c3c4781-c936-41e0-b133-c38749c544e1", "value": "3072:xUL2FlZkJoC2gQXalWvRbfPphahpCn38nuVAlZl3nmBT38dAY4:xDvhPphabkBwXmBT38dAY4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710714520, "uuid": "8103e2f2-861c-45d8-8738-6a13d91aa9bf", "value": 159108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710714520, "uuid": "8dcb6778-ab35-4ef9-a83d-091898420366", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710714520, "uuid": "03d41d23-6459-4269-9ef9-c33855e1c520", "value": "14b9781b6685fb7af4d61f281c210ea5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84b7f920-e44a-11ee-a120-42010a9c002e", "comment": "Malware payload (Mirai)", "timestamp": 1710671920, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671920, "uuid": "ff58c39e-1215-41f6-b2df-70361a432743", "comment": "Malware payload (Mirai)", "value": "4ace146ebe27cb8b041526f6ce6510bb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671920, "uuid": "71ab3b49-54b8-4d99-ac14-be9f030e4e5a", "comment": "Malware payload (Mirai)", "value": "f86a2116c09e2ee91f5a7875429a012e22d7f962c50da4ee467df42dd734d74c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671920, "uuid": "778037d2-3036-4327-870d-e8d134ca8ba6", "comment": "Malware payload (Mirai)", "value": "b42be70a609c36d7409762b784e93b5e72058c4a", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710671920, "uuid": "fcd4c935-659c-4f70-ade0-9296fda0f15b", "comment": "Malware payload (Mirai)", "value": "7a892bc298289350a229355b434fa0fdb026e1e82795317a91f013dd182e1859e021603349395d0cf663799a92860e94", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671920, "uuid": "9927b0fc-6575-4a6d-82aa-97937b18e202", "value": "T19E733D41B32C0A87D1676EB03A3F27D593BFE95011E4E688761EA64AD271F324187ECD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671920, "uuid": "09f1b38c-06a9-42c3-a8a5-fce2fde369aa", "value": "1536:WAiDoTVwudZUB9p5uB9p5gMB9p5fCH2VUfk8pInQnLdbcu4w+EoUGF:HYoZBdZUB9p5uB9p5gMB9p5fq8+pIQnQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710671920, "uuid": "637c61c3-f635-4f66-a596-66bb77af7aad", "value": 73584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710671920, "uuid": "1d15ab68-fba1-4206-96a0-328a94819987", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710671920, "uuid": "1dc651b5-b79f-49a6-8bee-4eecc2ccfc2e", "value": "SecuriteInfo.com.ELF.Mirai-QP.20098.17603", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90690b33-e403-11ee-a120-42010a9c002e", "comment": "Malware payload (Gafgyt)", "timestamp": 1710641445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641445, "uuid": "16f65886-1341-46a7-9808-2a2c812c1a37", "comment": "Malware payload (Gafgyt)", "value": "31d52f1dbc3be13483dc8e32d6a7b461", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641445, "uuid": "48ce1b5d-aba5-4610-824f-68d05ddc8d32", "comment": "Malware payload (Gafgyt)", "value": "fab7974744678a49f99a10d9843f345647e01573277e0ce5dbd07784c31cd399", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641445, "uuid": "bb672146-ef03-4c92-97dd-67fc06f5f6c4", "comment": "Malware payload (Gafgyt)", "value": "56fc0771dfcc36e0faba20cf12645734ed590e45", "object_relation": "sha1", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1710641445, "uuid": "f3d9f08b-9ab9-478c-9877-86597282772a", "comment": "Malware payload (Gafgyt)", "value": "6cc8e3e1f45913f14ec9976cf735ff1fe2ad9a960ed0ba80938a59a762cd881888e33f4edff93ac8c3838d08ed9b4708", "object_relation": "sha3-384", "Tag": [ { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641445, "uuid": "0ea06d03-c545-43e7-a821-d3e803621a6b", "value": "T1B6533A17B54181FDC09AC1B44B5BFA3AD93371FD0268F1AA67E0FB222DA9D215E2DD40", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641445, "uuid": "ddab893c-0164-411c-b8ee-ab72556f5846", "value": "1536:xwjMr7Ugn59ewLxBxPdCdph3G011P31vcFYcrhvmM1U:9rggn59ltBddCbh201/vfcrh+uU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1710641445, "uuid": "fde5a9b3-1401-4522-b3a5-37c37497265a", "value": 66432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1710641445, "uuid": "5e737f00-a541-4689-b450-445ca4f47857", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1710641445, "uuid": "b2255ca4-53ca-4b00-8347-ba54652fc9e6", "value": "x86_64", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ] } }