{ "Event": { "published": true, "date": "2021-06-27", "threat_level_id": 2, "info": "MalwareBazaar malware samples for 2021-06-27", "timestamp": 1624838582, "analysis": 1, "event_creator_email": "bazaar@abuse.ch", "distribution": 3, "uuid": "f989180b-9525-439f-ba0f-a6c8340325c0", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "66946173-d6e3-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624755773, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624755773, "uuid": "8be749d8-3323-469e-9c14-b2768dca7368", "comment": "Malware payload (Mirai)", "value": "c8c91b242fab38ed1f7df60f05629b33", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624755773, "uuid": "283eba79-f71c-4e63-bf83-1f2b69926f0d", "comment": "Malware payload (Mirai)", "value": "01d8ccf88da75ded734fa6f644bd476107b99d634303eabd5b802c82dc6870c9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624755773, "uuid": "50708232-47c0-4246-8ebc-715214e357ef", "comment": "Malware payload (Mirai)", "value": "c7b4021e651d495e697098e09d3cf37b1ae98378", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624755773, "uuid": "5bba3de0-40cd-40a9-8f17-9c407ed7f07a", "comment": "Malware payload (Mirai)", "value": "e185cc3d10e8dcc7b9da181c9b9a9f206287b1feaef7639081b5134206b11d9641d9c91f6e96ba068895cf1490bdb412", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624755773, "uuid": "c2537c21-7020-4559-8726-45032f8b7ecf", "value": "AF831841BA419B23C2C21BB7FB9F42553B21AB5887D73342A92C7FF42F43A9D1E19215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624755773, "uuid": "51586429-ed9c-48b4-9869-c797b8bc647e", "value": "1536:6SnWVGpPy5oJpd/HM5EimisY7uv6fYDjnv+YNHftN+j3VSToLYss:FH4obd/HMOXzoYDDSTQoLVs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624755773, "uuid": "53c211b0-e74e-4dd2-ae54-119dca2172a0", "value": 84716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624755773, "uuid": "569dcb64-a826-4aec-ab7a-68a78c41bc20", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624755773, "uuid": "1b4aa480-d4a2-4e24-95cb-f4f8259dc32e", "value": "c8c91b242fab38ed1f7df60f05629b33", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7df9de55-d72f-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624788454, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788454, "uuid": "2a5ae864-8f21-4b38-8167-7a7b01e0888b", "comment": "Malware payload (Mirai)", "value": "bf414f1e8ef6239cdc85e9adfd59ff19", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788454, "uuid": "d87a6d75-76bf-4bdd-9665-870fa8b3a577", "comment": "Malware payload (Mirai)", "value": "06d0339db4e87e84c2d0d1a238252526483c338916c1e5644f914dabedebf84a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788454, "uuid": "b896020c-20db-4bd6-b4eb-64b50f53a373", "comment": "Malware payload (Mirai)", "value": "772c8af1542bc3787e1ecf19656c0858925f0f5f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788454, "uuid": "1f1637b0-969d-4936-82c6-ad30bf26a7a4", "comment": "Malware payload (Mirai)", "value": "27af92623a9d7c467a226c34eef1c713370e46771fc35dfb4e6667ba684f1adb7462c3bf5a0f58540b2b6cb1e72d9a13", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788454, "uuid": "249617ac-e19b-4381-b6b4-2ff90494e66f", "value": "42D2D052EC064C65ECFA4DB0085DE3E97FA11D8B72E686A291D0CF1382135197E18CF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788454, "uuid": "654ae508-4100-436c-9280-463839fc58ca", "value": "768:STg8OxaNX0TxCLPjOrjwmTwixRJEjf3Rr+/4uVcqgw09e:SROINlLPv2JEj/Rro4u+qgw09e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624788454, "uuid": "a183fa0a-e54b-4398-b49a-7cf00ff9ba7b", "value": 28724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624788454, "uuid": "f92ff212-9903-4b2a-a3db-8834747a5fd9", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788454, "uuid": "ad42010e-91d4-4a7f-b648-dda3b8f15ada", "value": "bf414f1e8ef6239cdc85e9adfd59ff19", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf374ce4-d78c-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624828533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624828533, "uuid": "5c3b0f48-44f7-4094-a3ae-3690d48ae318", "comment": "Malware payload (Mirai)", "value": "cbc3a672ca38c0712c8ff359ac906426", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624828533, "uuid": "bc12ae20-688f-44b1-ad23-6cb9061b47d0", "comment": "Malware payload (Mirai)", "value": "074e3f5cf296416d8e2148341fe16117a1225d2823e327833244b4401b06e6fd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624828533, "uuid": "215d9e08-5b96-43ea-aa09-2f5589a5e600", "comment": "Malware payload (Mirai)", "value": "0ab570f23c3be355248c4affc17f02c0932491c0", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624828533, "uuid": "a8cd640a-6313-419e-a5a2-40ec6e89f0c9", "comment": "Malware payload (Mirai)", "value": "929343412b92638cc4a8f43de278174908fece31ebb5b23e85a917c2af149f3a096eca3e4359af949463fe00168f2f2f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624828533, "uuid": "5f7308b2-80df-44ef-86b9-0f78adae8cda", "value": "5E430852BC818A16C6E0527AF92F858E3B2123E8E2DF73079D211F5176CB81F0D67D96", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624828533, "uuid": "284d0fce-3962-457b-bddd-8570672d1248", "value": "1536:M64i2pYza21rFmTPMnHcEe7T1suV27c+hM0HY:M6uCDdk1b27lh5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624828533, "uuid": "b8e030b6-8d2d-4fec-b0ad-4cf0cb32aeeb", "value": 60440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624828533, "uuid": "f01a5a9b-c5bb-4fd1-8bc3-bf11913020dc", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624828533, "uuid": "485c6242-813a-43b9-b7c9-66044745bd52", "value": "cbc3a672ca38c0712c8ff359ac906426", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4768871-d74b-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624800544, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800544, "uuid": "855306a5-9556-45a0-acb4-e28a7ce1ea6d", "comment": "Malware payload (Mirai)", "value": "63cfe27984b892363e176940eb1801e6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800544, "uuid": "f72ed419-2dca-4b3a-8a11-258a0f4960a4", "comment": "Malware payload (Mirai)", "value": "07c23e32b7fe43462c221095f01980af570f0a04f41fe02fb776fb79966488eb", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800544, "uuid": "af6d7ddc-7e65-4b9c-a527-b30a75e5a19a", "comment": "Malware payload (Mirai)", "value": "6253cf655fb3b8968806e5fdf6473307d3f0ff82", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800544, "uuid": "50350c56-a9e9-414b-814a-ab8e4e8ee8ae", "comment": "Malware payload (Mirai)", "value": "e609ed2045a8906fb9ed9f03b33ebbc1e5409f0c01a0c1568ef02ca483f9705b47e054d794bec8f3e32ff0c1924db46a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800544, "uuid": "d4b25f25-803b-4f95-b76b-6890d2df35a2", "value": "40D34B46EA808F03C4D61776BA9F42493323A755E3DB73068D18AFB43F86B9E4E63505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800544, "uuid": "ea10e9fd-791d-490b-88a6-bdbf66791e88", "value": "3072:nVvuCGSEEcl8hD6ZJsN2qvm2Y7Q2aSWdr8M/9iunF6Aw:nVvuCGSEEcCV6PsN2qvmhQCWdwM/9iwW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624800544, "uuid": "29764f75-b2a8-4899-aa50-30acec6e3bd5", "value": 134432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624800544, "uuid": "e556614f-f539-4d23-aca4-97062ec00dee", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800544, "uuid": "08a22148-3393-47ec-8a0c-13db926e7577", "value": "63cfe27984b892363e176940eb1801e6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4564de0b-d76f-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624815847, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815847, "uuid": "e5504924-9260-40f6-ae92-5f6099689c8d", "comment": "Malware payload (Mirai)", "value": "9a89e0a5cec30213b98ab6dde4dd99ea", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815847, "uuid": "62a69963-332d-484a-a3da-82ccb52d17c8", "comment": "Malware payload (Mirai)", "value": "09f404ca2eca0198c7e644766f684b151f09fdfcdf17b0038c27792915622131", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815847, "uuid": "4a04daf9-de05-4396-8d29-c5dfeb6092a3", "comment": "Malware payload (Mirai)", "value": "4f54b001ad847116d8d6943aefbdd8abd5878640", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815847, "uuid": "e5ab61a0-4ab0-4ea0-b535-35278f17cf03", "comment": "Malware payload (Mirai)", "value": "fd58007420c76b7f5f7028649df85a49d86e0db8212c0253c95d9ab962e79f280a689458a00aad46e9d7af0c1226eb6d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815847, "uuid": "371f5611-a142-455b-985b-8707da10587f", "value": "7B835C34A97D2F26C1C4B13E22FB8351B2E1260E26B4965D7DB60F4FFF2464068476B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815847, "uuid": "0a066a68-89d4-4fff-9d5b-d9bb55c4bc81", "value": "1536:jA0CGS0VIpYhFQPFKIFRcuBfefcwSNwKAmy6vnxXchmPBgk+kF85:MvXW+jWfcBA+vnJchmS5h5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624815847, "uuid": "fd826b09-fb7e-4f3b-9eed-b04d749bf9c2", "value": 84780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624815847, "uuid": "085b6aff-0cde-4e8d-96f6-81371af60a3f", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815847, "uuid": "ffa789f6-5ca5-4391-b7dc-deb80b534952", "value": "9a89e0a5cec30213b98ab6dde4dd99ea", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9837ae1b-d75a-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624806966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806966, "uuid": "c375d68d-9a04-4885-8c5e-7f939146b258", "comment": "Malware payload (Mirai)", "value": "b2cda31e586fc1bbe2147b2333c3e256", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806966, "uuid": "c1cfa3fd-c365-4dfd-bb49-30a4e15e193c", "comment": "Malware payload (Mirai)", "value": "0a8b2d48d8442b2e5da782023ff0c595cf644623a676b2f610a46c17fc4dfd6c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806966, "uuid": "7a0b79a5-9262-40b9-a074-f794f9c9ca52", "comment": "Malware payload (Mirai)", "value": "8e656e830d20b113b70a2fa04e0d6b7f001a1af6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806966, "uuid": "76b518e2-1b6d-4ccd-9ee3-1d819cd6333e", "comment": "Malware payload (Mirai)", "value": "b93808648580cb4eb0a709f1406d21be600505aacdb5c78d497827808dae384632e6f750b8bd030ed3a8697d49d06a4a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806966, "uuid": "a5d00a7f-5ba2-47a0-8257-5cdc19d83ad1", "value": "9C338CB5C579EDE8D1144A78BE248E749723E000C6932EFADA44C6A99083EFCF5583F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806966, "uuid": "347b488f-6fa3-4249-a1d4-4e7d3e023215", "value": "768:jaixFwtLSYAagMo0ebH4/ZvQX3hyWfs3INgCJUU/qMCqKomQRCvA:jaQFwtOGBvQXxfs3kgCJt/qMF/RCvA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624806966, "uuid": "6458820a-ca93-4ca4-8fbe-e0fc04555b34", "value": 51584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624806966, "uuid": "594ed86d-a25d-4cc9-8578-21d75e2efe29", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806966, "uuid": "2ebe7f3e-4f83-4158-adc5-297eb40a841b", "value": "b2cda31e586fc1bbe2147b2333c3e256", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2deb373-d75d-11eb-875b-42010a9c0053", "comment": "Malware payload (CobaltStrike)", "timestamp": 1624808272, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624808272, "uuid": "6979b161-3b96-462c-a6db-1e8ced01b7c6", "comment": "Malware payload (CobaltStrike)", "value": "d1dd5ffa647734fdcf784dfbc9ffc90d", "object_relation": "md5", "Tag": [ { "name": "CobaltStrike", "colour": "#8E4D73", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624808272, "uuid": "937ede52-b12b-4b25-9894-b598738e02e1", "comment": "Malware payload (CobaltStrike)", "value": "0c9d0a13c4e91cdb0f8dd1f2b2907febaf80e12b8357db5eb2a7ed889e80a3f3", "object_relation": "sha256", "Tag": [ { "name": "CobaltStrike", "colour": "#8E4D73", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624808272, "uuid": "290ba7d2-8c8e-4c65-95fe-eaef2b8eb9c3", "comment": "Malware payload (CobaltStrike)", "value": "dba5a62139b439e23deaf854a0fea9973bebb33e", "object_relation": "sha1", "Tag": [ { "name": "CobaltStrike", "colour": "#8E4D73", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624808272, "uuid": "215e0866-8ced-41e2-84e9-028331afc6fe", "comment": "Malware payload (CobaltStrike)", "value": "276ba01087398f90a156b6e5522470fd7df24413f89037755cfecd5df479bf2c3634c84d163d5055c71f8763559e58d0", "object_relation": "sha3-384", "Tag": [ { "name": "CobaltStrike", "colour": "#8E4D73", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624808272, "uuid": "37f9713a-03f4-4e9d-b40a-188b5a2ee1ca", "value": "E434F152A7D1C03BF1B22B7019F292472B34BCE56CB9E75E5705958D1C72B88AA3133B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624808272, "uuid": "9738af63-d702-44ba-b82b-951da0c4306f", "value": "1494de9b53e05fc1f40cb92afbdd6ce4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624808272, "uuid": "dc1fb26a-677d-4d4a-91eb-efacb1f62150", "value": "6144:KWcrdBroMfMxYE2AKFUQIxSZSJqPtkmaZx4PXZZCT:ABfMxIDFUbKSvm8x4PXiT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624808272, "uuid": "2c45d3f1-f7dd-480f-8316-08e73d1f3be1", "value": 251816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624808272, "uuid": "eed4cd1d-749d-4e01-9efb-3b2da130ac16", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624808272, "uuid": "ce94473a-9a7b-4486-b227-abb570d32c89", "value": "d1dd5ffa647734fdcf784dfbc9ffc90d.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b86ef884-d722-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624782968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782968, "uuid": "1498c029-5af7-4feb-8de7-d8f8f21c1b05", "comment": "Malware payload (Mirai)", "value": "4ab70275dfb41acc8a5141fae8911749", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782968, "uuid": "63d5c660-88a1-4a3f-b285-116599497bae", "comment": "Malware payload (Mirai)", "value": "0e2a3a740d5d34cf954acabac0fd1c62cd553ac53e510f0d7be8b8e34be06a3a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782968, "uuid": "ca4f65c3-76b8-47eb-b933-47db24d0c79c", "comment": "Malware payload (Mirai)", "value": "03de46ce5af51fe4b75bd528b81099e11c4d382e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782968, "uuid": "1b832c8d-b985-4954-bded-91a399a67e37", "comment": "Malware payload (Mirai)", "value": "8c48ea78afa4ff07aa39844698eaa4117680bddd3008a5b360b86c06da7945ada526f2a9cae529080fec2035fac7102f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782968, "uuid": "da616b9e-51ce-4dd8-a964-6bb8575ec195", "value": "39538DA3CC646E28D85A65B0B075CF3847B7F491808B6FAD8466C3B94043EDDF645BB8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782968, "uuid": "fda82ae0-f0f0-4bed-a2c3-5bbb331a6877", "value": "1536:zUVmBNKqVKFoqFxL6D7f14CnA9x8wWpHP:zUVm3Kq8Fz6D7f14GnpHP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624782968, "uuid": "16f36e4d-94f1-46d0-b035-cb19da9f2b2e", "value": 64584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624782968, "uuid": "5d1e7af3-ea8d-45b5-9140-2e472399b168", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782968, "uuid": "7ce0d500-1f1d-4bb1-83e4-bcc7c8f3bc4b", "value": "4ab70275dfb41acc8a5141fae8911749", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e29ee99-d75f-11eb-875b-42010a9c0053", "comment": "Malware payload (ArkeiStealer)", "timestamp": 1624809016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809016, "uuid": "5cac1c9b-57b5-4e9e-b0e9-da214ae122ff", "comment": "Malware payload (ArkeiStealer)", "value": "02eb25497f1f6e8a95c3eebd022311d4", "object_relation": "md5", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809016, "uuid": "034d61be-3415-46cb-8555-26e9de911e65", "comment": "Malware payload (ArkeiStealer)", "value": "0f48b95257e34ab07069a73b1eeb49d2c495cc37f4f1477e0a112f1424b25ebf", "object_relation": "sha256", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809016, "uuid": "8378dfb3-59cc-4c91-88ee-e5644bc2e523", "comment": "Malware payload (ArkeiStealer)", "value": "aebb6f31e5b64fc27ec69dc725a2fa04dd4450ac", "object_relation": "sha1", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809016, "uuid": "9c8aeecc-6b5a-4434-8b81-bf0d17c0810b", "comment": "Malware payload (ArkeiStealer)", "value": "8f1743ef4242d421f5e91ae6d375675c250875e66ca90012176e2667b0d1ebbdaa46eb476fa8e34663880d5ac677418d", "object_relation": "sha3-384", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809016, "uuid": "cc7fdaa0-a1b6-45d3-984c-dee9bf3f3959", "value": "CFE4E010B792C034E5F721F8597A93AD643EBEB16B2815CB63D92BEE57741E0AC31207", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809016, "uuid": "246cf563-6987-4411-a9dd-268ade6be83e", "value": "c55a6c5b8dc5009c74a01bc124b7b217", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809016, "uuid": "c6b4b659-8dbd-404f-940a-f0a3721ee5a2", "value": "12288:ZVClhKJgpYJIAdh8QXjz3TDxR1BD9Z1KjGfg4C2yQHD3Wtf:L7JUYHD8Qv3TDxrBDXuGf9ybf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809016, "uuid": "b83fb192-85d3-4cdf-941b-2c61201f77ce", "value": 694784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809016, "uuid": "64a5b895-0a01-43da-8864-2af319f9ef9a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809016, "uuid": "3c53ae9e-1a52-41e3-9adf-416991ad82b7", "value": "02eb25497f1f6e8a95c3eebd022311d4.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c41ca92-d6f9-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624765070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765070, "uuid": "af26aa03-e169-4966-a423-c54b1c3a0df6", "comment": "Malware payload (Mirai)", "value": "8820d3de43e4d363b46c6494e0e4ea82", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765070, "uuid": "7306999b-4325-4c04-bae1-834e02c4f14f", "comment": "Malware payload (Mirai)", "value": "117334a803d1aa9d1a07d35b5f4bc76c90b5e3a61e5f33fc1dbe5478c2292ae9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765070, "uuid": "d4be016d-d01f-4a2a-9e8e-e2aa66d086bb", "comment": "Malware payload (Mirai)", "value": "5dd09114be6c88ebb838a95fafba3f934fb3c934", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765070, "uuid": "43fd3e6b-3b09-4a12-8989-c90f8ef377eb", "comment": "Malware payload (Mirai)", "value": "51fc4c5991940d9e7630c942d81fcb4d0b69a244be9d73aa480d86b8a06ecca69ff7178f52cc3a75b285af9cfe413027", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765070, "uuid": "f10b6c4c-0c44-457b-967d-73d03bc2ed7b", "value": "56F2B416EF644FA7DC6FDE7389A80B4630CD954B22A437363670C538F66A14B49D3CA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765070, "uuid": "4d0775e0-446b-45c8-8216-4a351589d4b7", "value": "768:+khD/LGRhleujjQBHfxESeR1drec0e4ejQZTXgoXik+nQOk3rSDiv:TDt5cR1dh0De0ZTQW+QOXDiv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624765070, "uuid": "05251ae8-0283-45c7-9e04-9f1d37e527e3", "value": 34660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624765070, "uuid": "92bdc7d6-0113-4968-a4ff-8e36c394fd93", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765070, "uuid": "08e95d90-d880-4a52-a458-ad8f6e1331a6", "value": "8820d3de43e4d363b46c6494e0e4ea82", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5b2e2bad-d78d-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624828768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624828768, "uuid": "4a83ad09-d5be-47cc-af1d-9e4295f3f853", "comment": "Malware payload (Mirai)", "value": "db9cd60ea87559e95205f70e912d8ebc", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624828768, "uuid": "179556ae-9e31-4881-a4fa-be855b38410e", "comment": "Malware payload (Mirai)", "value": "1428a50a82d7c9f9ecb2b2e04a7f1d740ba1640460b6febe11ffa8f4a23a944d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624828768, "uuid": "fb2afb26-af8c-4c06-9fb6-a560c307114f", "comment": "Malware payload (Mirai)", "value": "ff4e4c2e3f80ebece6a4b584cb41045487a39aa7", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624828768, "uuid": "217cf83a-f05a-42d6-9b03-e9e42a78e318", "comment": "Malware payload (Mirai)", "value": "304ed5b6dff521cb898b3464e1fabd20c4304cb8cbecdd0caab40107b705824d0df00516e4976dcbeaeff4e5a4dad561", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624828768, "uuid": "e6b05c20-6f71-45e2-9932-f4c76d0d34a2", "value": "21D34C46FB418F13C4D617BAFAAF424933229B94E3EB730649185FB43F8669E0E53905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624828768, "uuid": "837918cc-ede6-4618-9fce-1d38a2ee049a", "value": "3072:3ADTiTpnSnrDqtVlQ+KRxN8FUv/O1nioS2mKM/9Vjrr:3ADTiTpnSnrDelaxN8FUvm1rS2vM/9Zv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624828768, "uuid": "8822eec8-53ad-45de-9a9d-fa133c7ac5b4", "value": 134791, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624828768, "uuid": "c9444ac2-7aa9-4f97-b71c-ddc611f9d146", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624828768, "uuid": "7b8ae321-78e1-4b33-9689-765cc4b950db", "value": "db9cd60ea87559e95205f70e912d8ebc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2abe33f-d6e3-11eb-875b-42010a9c0053", "comment": "Malware payload (RedLineStealer)", "timestamp": 1624755927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624755927, "uuid": "10045c92-7b25-4ddb-90dc-55752a3bf56e", "comment": "Malware payload (RedLineStealer)", "value": "76dcefd33b7c7216847c711bbadc77db", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624755927, "uuid": "9198a0f3-be62-4aa6-baf4-8a1e721ac9c9", "comment": "Malware payload (RedLineStealer)", "value": "161127df64e41b5ccce3553ec1f4ca9fcf1cfe5b0faf8a8d38043e53f2b4c4dc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624755927, "uuid": "581c44cb-33f5-4084-931e-47042541820e", "comment": "Malware payload (RedLineStealer)", "value": "c40ab445aad3818811aea6f468dd6bcc73eacc0e", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624755927, "uuid": "dea56b5a-76a5-46c2-b14e-37d80adb67f4", "comment": "Malware payload (RedLineStealer)", "value": "9b853bc0b0cb1425a907cb500ba7728b06a1d4c47289fbe44204b20aa3ef64a34ae5a39f7e52531411806d2ac3791690", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624755927, "uuid": "a54bcb60-3772-4490-97b0-b050322ea4e2", "value": "340633B42A144DF6C26D8273F836194E2F30E317E42EC60B7BB13558E95E5B2E129E58", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624755927, "uuid": "d636b5c6-4f81-49de-82f6-87a8a55aa412", "value": "c05041e01f84e1ccca9c4451f3b6a383", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624755927, "uuid": "54421015-519a-4994-a5a3-5386188fda77", "value": "98304:JItT+TQWrJoPfRRJdOX/A0HUVnafTE5St2v:J+T+UWuPfRTAAGana45Zv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624755927, "uuid": "b1629fd5-e2cb-44df-9037-ca5eddd9acab", "value": 3742514, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624755927, "uuid": "bd6a571e-f850-4ed1-89cd-aff93bcc2d0f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624755927, "uuid": "c1bae9c5-93f3-40df-a40d-1f1d73f211f5", "value": "76DCEFD33B7C7216847C711BBADC77DB.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7462f0c0-d76f-11eb-875b-42010a9c0053", "comment": "Malware payload (CryptBot)", "timestamp": 1624815925, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815925, "uuid": "4b5c0ee9-3618-4302-a7dc-5269f0c5cd1c", "comment": "Malware payload (CryptBot)", "value": "3001f981b3bdca1f2c49844596d153fa", "object_relation": "md5", "Tag": [ { "name": "CryptBot", "colour": "#EB0B67", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815925, "uuid": "3d238937-079b-42a4-82af-927ea95f5e7c", "comment": "Malware payload (CryptBot)", "value": "16a9f456fe7c58b1f5b40f8bdda1f383e6cd9a633c2e44a386bee0a4b6c10d87", "object_relation": "sha256", "Tag": [ { "name": "CryptBot", "colour": "#EB0B67", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815925, "uuid": "9ca5e3eb-b451-4c3d-a586-6b04747f3056", "comment": "Malware payload (CryptBot)", "value": "08c9bbda02bcddedcdc0c02ba83562f77b3618e1", "object_relation": "sha1", "Tag": [ { "name": "CryptBot", "colour": "#EB0B67", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815925, "uuid": "22e76107-2d2e-4905-b441-8ae533c76939", "comment": "Malware payload (CryptBot)", "value": "da0621868a3c66fba3e24ed09a58e12e20034e74a74fa1c470ce8b3c698fc803fa9e37da0d50b557e8e3794a519bd6ab", "object_relation": "sha3-384", "Tag": [ { "name": "CryptBot", "colour": "#EB0B67", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815925, "uuid": "ea2775e1-8600-4434-a39c-d4fd218ebda2", "value": "49F4F100B652C035E5F252F9497A936DA43D7EF0672441CB62D53BEE97B86E0EC31A0B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815925, "uuid": "8ad8033b-f6e4-4521-bf83-2c2d01fa8283", "value": "aabee944a31d5c36a4875ecb94648dcd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815925, "uuid": "8a6ae09f-7b99-427e-923c-fe2e2020459e", "value": "12288:tWcEMarJccomSHVtIXgcb0H5ptqTOpQgRWxYuBATN0mSQD5339ra1+xfaFVt:zEjcJmtXg7ptqTOWgpuBAN1Z9ruIe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624815925, "uuid": "b1997f74-a1d9-46ac-8d38-5fe94d457f28", "value": 792576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624815925, "uuid": "98e564ec-0d40-45bc-8ad9-c501d0869e8a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815925, "uuid": "82f4fbed-4d13-4087-b42f-c6418e1d0f75", "value": "16a9f456fe7c58b1f5b40f8bdda1f383e6cd9a633c2e4.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59a07c77-d74a-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624799989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799989, "uuid": "34686e94-5745-4297-88da-70f0e392585a", "comment": "Malware payload (Mirai)", "value": "efbcc759266f128c0d9fbf4f3c51b2ba", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799989, "uuid": "59e41877-c06f-48e1-9337-e7c3afca73ea", "comment": "Malware payload (Mirai)", "value": "1714cf6fffaddb2ebfba3ed0c0921abe17402aa3cc49bfad06128b2683919414", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799989, "uuid": "b973c3fb-ead2-4e26-b050-fa4723dc0f71", "comment": "Malware payload (Mirai)", "value": "44f6872aa4094959ae3eab90b8bc253b86648af9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799989, "uuid": "9de40093-014a-4091-b8f2-11eaa349013a", "comment": "Malware payload (Mirai)", "value": "297b0265b1363282d16c2f4dd4769f1002d53234db7e1fd24f5943fd274fbab65693fabc855d1d5f636486b6d5d89334", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799989, "uuid": "fff84793-e335-4cfa-b5ee-d25bc340cde9", "value": "F8738109AFA10FF7E8AFCC3749E82B4524CD651A21A93B75B934E418F34B64B15E3874", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799989, "uuid": "c2d5e19d-325e-40a5-a88d-6a0f72b0bcda", "value": "1536:eMNhoxQQPwe3XRlmpH3jHLb8fSZsPAx9:pNho6QIkBoifS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624799989, "uuid": "7c349b99-0abb-4188-88bf-a3e0e0cff463", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624799989, "uuid": "91f5b3c3-2ef2-4b8b-be41-1b1525cb2178", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799989, "uuid": "175e07b7-44d7-4735-a2c5-37ba2d50bb83", "value": "efbcc759266f128c0d9fbf4f3c51b2ba", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94cde6ea-d75f-11eb-875b-42010a9c0053", "comment": "Malware payload (AveMariaRAT)", "timestamp": 1624809108, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809108, "uuid": "96af5c1d-6257-4376-8486-7e57ffcb0ab7", "comment": "Malware payload (AveMariaRAT)", "value": "2a5d21b25886cc49e6a9973e9b2e0d98", "object_relation": "md5", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809108, "uuid": "d8412681-6a14-4de2-977d-c53032f7549e", "comment": "Malware payload (AveMariaRAT)", "value": "178a2aa6ceb0dd6818c1c3ce6aa3f693f63afc47a7860b32eb6a9f870d99b18b", "object_relation": "sha256", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809108, "uuid": "371147c7-c53e-4ed3-bb03-178af9a89c7c", "comment": "Malware payload (AveMariaRAT)", "value": "d7f01b8bcaa769946b2eb12c22f5e2e0c429605a", "object_relation": "sha1", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809108, "uuid": "627afb25-668d-463c-a053-c8549db108bc", "comment": "Malware payload (AveMariaRAT)", "value": "0a62b2ca33e50fd1edca191f1804b7c9cc927b9de881aedcd213b92e67f9a2ce23285985e743405c1fd41bd5378cea74", "object_relation": "sha3-384", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809108, "uuid": "663a5095-a8dd-49de-b28b-eb1598199b50", "value": "D0B39E13F7E54835F3B201B01ABD7E7ACBADF9701628C49FA394854B2D31846EA25397", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809108, "uuid": "375481f1-8a53-4285-a6a2-b4cde9290dc7", "value": "51a1d638436da72d7fa5fb524e02d427", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809108, "uuid": "fbf73b48-4608-406e-98d5-06673949bedd", "value": "1536:h0jP7/L1B5rVmN8sxHv2M28ix8EUaJxWZoB4u0OVE01L:K1VmhaH8EFvW+0OVE0h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809108, "uuid": "d400c78b-887b-4132-8ea6-530a3b6aae7a", "value": 111490, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809108, "uuid": "071bdb93-04b5-497c-a6e2-683255877af6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809108, "uuid": "2a6bb722-0523-4ec0-b773-b7ccc78f4972", "value": "2a5d21b25886cc49e6a9973e9b2e0d98.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "518fa757-d74c-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624800835, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800835, "uuid": "40850f93-5400-4881-93bc-d789fee4e354", "comment": "Malware payload (Mirai)", "value": "7062c51f42ff02c40307e47c4157f7d0", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800835, "uuid": "6fed1956-8442-4062-b875-29a80e633e56", "comment": "Malware payload (Mirai)", "value": "184d303e2d08e2adf991acf6f7b8d8b8660c5ec9530b1be89463a066d6caece8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800835, "uuid": "010c16b1-94a2-4d45-af26-4bd5f8696ded", "comment": "Malware payload (Mirai)", "value": "0f099bbc48c1175c77e3084c1cabb4dec1f4ae85", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800835, "uuid": "b3b096b5-daff-428f-923c-e50e49173306", "comment": "Malware payload (Mirai)", "value": "a6b8c41cafed79290a4bb1ee7b5f73f404922f0a52bbf863255b22280f57e184730bac92472ebba9c5527a7c778705c1", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800835, "uuid": "2ee8b1cd-efac-45b9-8849-f26f2ca61293", "value": "4073744D7E319F7CFFAD963447B74E209649339A26E1C584D1ACE9011E7034A342FBAA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800835, "uuid": "3ed0e6de-01ac-4b4e-8187-f2f886d7491d", "value": "1536:KmCQSxDODnNkr+pq1C59DsXhcga1hqDYSPpGrvsFVrCnP05l7cfz:ZCVDYkaJ7sm2GrvsFVrCnPkBkz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624800835, "uuid": "c82e568f-b041-47f9-9eba-bef2e9d81981", "value": 80184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624800835, "uuid": "fe508d1a-b123-4d18-be44-cc92fcbfea00", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800835, "uuid": "4de66b4f-2ef3-4797-8ae0-f6812fa1a371", "value": "7062c51f42ff02c40307e47c4157f7d0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07729173-d79c-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624835070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624835070, "uuid": "6bb06648-5567-412a-a9c0-a0aff1067b34", "comment": "Malware payload", "value": "c2289425da237052379812fb77fddfea", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624835070, "uuid": "08d538fa-a838-4443-b86f-c9d06f49efd3", "comment": "Malware payload", "value": "1893a0c61967b33999fc9891795147a1358d1be0f91edf101f8566c003f5c650", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624835070, "uuid": "a74a2e69-c9eb-4b8d-948a-73a1fec9e665", "comment": "Malware payload", "value": "e112aa887cb432d2a5f067a9d0baff8abb4a4616", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624835070, "uuid": "f1c82e29-de12-4e7f-b23e-2272874fa72d", "comment": "Malware payload", "value": "269617655e62768a802326f8a6ec066f7f3babe288938a54d9260487ecd809c556b66cddf129d6688d5613eedb58e832", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624835070, "uuid": "3a8907a7-c68c-4706-a8d9-68a803439c4f", "value": "31045FAA77719EB7E80EDE7305DA151210CCD68642D97FAFB2A4C518E78B80F05E3D48", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624835070, "uuid": "99cae1a8-c5b0-4cc8-9651-e8d0538a4be7", "value": "3072:8n/JH3ghkNpSNhQHlWEU5h7NIk1HLzABxRxu6qb1cWgdh8:8n/JH3ghkCh8wEU5h7NfUxRxu6qb1cWF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624835070, "uuid": "701c5d0a-8c8e-4560-bfd2-f83f860f16f3", "value": 187481, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624835070, "uuid": "1aa50c24-e697-4aec-9099-b281f01ca3ec", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624835070, "uuid": "4c1b868c-c367-459b-8e01-316e671359a8", "value": "c2289425da237052379812fb77fddfea", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d53bc67-d767-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624812504, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812504, "uuid": "1a6975e2-215d-4c16-ba78-95a3e444e91b", "comment": "Malware payload", "value": "e0f83065ad9acae89a05e4e6a2aaa88d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812504, "uuid": "1a565fe2-98fb-45b0-9248-6463ab82bd2a", "comment": "Malware payload", "value": "196de41048232f60a7d93e73e7dd03bd524a79217c3408b98e69b855c7f83504", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812504, "uuid": "b3c0b1d9-6aa7-4b6b-b09d-e1f62639fa0b", "comment": "Malware payload", "value": "990c652d0f62b6ec7165fbab6548563d7c375cf2", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812504, "uuid": "735ed62d-d882-4c48-b468-9b4062358ee0", "comment": "Malware payload", "value": "f137eb44aa9d644e2c8ee975b4bda399764893950ca882b3050b25e7cdea2fa57ea06be3ea6fa603552e98086828a86a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812504, "uuid": "f265094e-ce50-4fe6-9b3c-84d94f0055f2", "value": "D07623A38025009DD9F5FBBAC13A5DF032F23A66C7C2BC3947A978DA31290D79517A17", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812504, "uuid": "cef84089-2895-42ee-965c-d680f6f4352f", "value": "a81e103087cff4aa8dee1a460ddd9fb2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812504, "uuid": "68848abd-38f8-4884-a0f7-d12184c22f7f", "value": "196608:5JUGyVz6w8VizAWGixCYtP4q7srzQT09mtkEZ:5Aww8ayiUwQo08T0iJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624812504, "uuid": "b329f3e6-0828-4e0b-840e-00007fe71da7", "value": 7206448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624812504, "uuid": "dd7736e3-45f0-4cbb-9584-ee9465631211", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812504, "uuid": "fc702e4b-5a85-4d76-845c-cad7ebf945bc", "value": "e0f83065ad9acae89a05e4e6a2aaa88d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86263a0c-d72f-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624788467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788467, "uuid": "c9f7c228-5ce8-4302-b429-5fb914b85cc0", "comment": "Malware payload (Mirai)", "value": "cf073f1fcd04ac4c85c10d633713de56", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788467, "uuid": "8660cea0-6e2b-4eab-9d46-73e218b6b4e6", "comment": "Malware payload (Mirai)", "value": "19b0a9e843455837b9dc9bfa50c59866010bcf7127a50ff0f58c720b51fdbba9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788467, "uuid": "598e13a8-996b-4cd7-82f7-e62fb6e08a1d", "comment": "Malware payload (Mirai)", "value": "56ef0906286c697d24ac8ce0d4cc9cc1f390cb58", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788467, "uuid": "cc2d8284-90e6-4c8b-a362-d107a3a6609c", "comment": "Malware payload (Mirai)", "value": "ec8998162d08a6ecc5383f759dfb1c77402434cb598e5a6e71b19977aa77770a13b3954e5631a8c198051e130525594b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788467, "uuid": "e7e2f1c7-0838-4bf8-8927-89f0c0cc2509", "value": "E3D2E1321ABA6E1DD81E4479DCDBB90A08C0E44BE181C854FAC56842B9EBF792E4C577", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788467, "uuid": "06322987-b9bb-40d5-885b-af78676f3af0", "value": "768:t02rM0smtnkeQMjiX0S+TLUzlB2l7aIndGptIgoZwnbcuyD7URQRj9J:t02DswjiX0BPGB2l7K3oZwnouy8RyRJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624788467, "uuid": "a90b17e0-08f9-46c1-b743-95be0429a0c0", "value": 30756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624788467, "uuid": "a3719ff6-2023-4eac-a98f-fb968c0c57c1", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788467, "uuid": "50b2d5bf-34a6-4e68-a682-835262c02603", "value": "cf073f1fcd04ac4c85c10d633713de56", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6a1517c-d76c-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624814829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624814829, "uuid": "266a408c-8cb4-4b6a-9d67-3c0e50f016c4", "comment": "Malware payload (Mirai)", "value": "ad9238ca7dc8279b9e553bfccf4674b5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624814829, "uuid": "1638f29c-b3f4-47d7-9019-71b0f7b605d8", "comment": "Malware payload (Mirai)", "value": "1a922ed83f6e290d3bf213701313cae7efca6fb5322b6c2df3e61f18a2ecb77a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624814829, "uuid": "54224dc0-e207-494c-97ff-dcf7df6a60a4", "comment": "Malware payload (Mirai)", "value": "01da9d0122956525ef091540b3a236b426b9b3d5", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624814829, "uuid": "15b8788f-7a7f-4c39-ae8c-a70228ca398a", "comment": "Malware payload (Mirai)", "value": "19a800df9508aaf16ad4315144a8423ab540e86d43f729c64aaaab3c7217d50cf048125872b268b76259f1271a1beb1d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624814829, "uuid": "18e6fec5-e442-48d4-a6d0-78c398be7b41", "value": "59531B8D64021E2CEAD798FD50B54F09CD551311A0A30B1FA6EBFDC33DB3269EE26649", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624814829, "uuid": "9027fc2b-1a5e-4594-b581-49b77aa38f13", "value": "1536:XdcfQoxeGKRvLem46psuW97hoHg1pFcBnyH:XdB46mxoqpFcBa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624814829, "uuid": "236801b2-eb23-4440-a02c-bb52ff1d4628", "value": 63112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624814829, "uuid": "aaa04a74-2da7-4282-96ed-e4944b1e0756", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624814829, "uuid": "c6610bc5-08a0-48ef-81c8-66ff8eeb1b65", "value": "ad9238ca7dc8279b9e553bfccf4674b5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8118d52f-d6fa-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624765696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765696, "uuid": "194f3d07-da44-4f32-80f4-534fa8a17716", "comment": "Malware payload (Mirai)", "value": "27081eeeb9c191269693f0b5c146f3df", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765696, "uuid": "3f5adf4b-9269-4782-a04b-f81bffe6b31e", "comment": "Malware payload (Mirai)", "value": "1afd200a2351e1dafc718d5bb100590f187d0b6f5725ffaf02149a131ade9837", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765696, "uuid": "9235969e-80ce-4fb2-bd13-c18d0f211efd", "comment": "Malware payload (Mirai)", "value": "9817b13ed1666637f42017ffd1dcf58cf8b0cf24", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765696, "uuid": "62d866e3-ca01-4787-b159-3e6c083704ce", "comment": "Malware payload (Mirai)", "value": "5c0252aeda745c8390602a3dff0cfc5ffc611a1e31d7144a2c307c93f12d892efd6eade4b68cc0d36e4c49bbd18e670d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765696, "uuid": "3632d646-a44f-492d-acc6-b4fe359ef9fd", "value": "8AB25DA38A792F18E258C5B4A011CF385753E516E94B2FFE2436C3665043EDEB15A3F8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765696, "uuid": "a0e95f43-cbdc-435e-8e7c-2bb8b4bb3c7a", "value": "384:f3A4kyyPD21mC/5gGoIfDGHVjrP7RfMT35oJ/NqBAbC5/oVSe:f3qpiVmG7bqVyo5NQZoVSe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624765696, "uuid": "f1e47f82-140a-4707-af16-355a160a4935", "value": 24208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624765696, "uuid": "a738308c-b52a-45a4-bbb6-9606f80d4b45", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765696, "uuid": "00e72255-0eef-458e-9a0c-ba09c71ed0fe", "value": "27081eeeb9c191269693f0b5c146f3df", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "551d6c96-d766-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624812007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812007, "uuid": "b7d7947c-bf5e-454e-88cd-72651e46d5e2", "comment": "Malware payload (Mirai)", "value": "74763d5339996e11106fde0cc6d8dab6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812007, "uuid": "7b4c11a0-987f-425f-9d5e-8d5611cb7cd2", "comment": "Malware payload (Mirai)", "value": "1b9584e3c32ae7534b477a54e81519c74433f0b5523d90f4af99fd23bafca670", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812007, "uuid": "39bddcdb-eaa1-46b3-a083-863546b72903", "comment": "Malware payload (Mirai)", "value": "536accc4a86341483be0d14ed4ddf3d16ddc80ca", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812007, "uuid": "6b6f0b54-96db-49a6-977a-72252d71823c", "comment": "Malware payload (Mirai)", "value": "adbe970a5f22528591164183bd9bbd8653e8970d133f3c88afbc2e12480bf19d87a303c0d5f28777392570995a0ada10", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812007, "uuid": "4ddc8070-55e2-40ad-80db-69e212645976", "value": "9AC34C46EB408A13C4D51775BADF424A3323E755E3DB33068918AFB43F86BAE0E67506", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812007, "uuid": "351f5bcb-8603-4127-aa9f-afcc74bca118", "value": "3072:+KhtPUfCBPv49iuFcpQe8ZVu6W+amQxVTGyz:+KgfqPvSiuFcpQTVa+amQxVVz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624812007, "uuid": "bc4fedd1-1905-4b2d-8ab3-f55d995859b6", "value": 125754, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624812007, "uuid": "d53f8ef4-62cf-4f2c-9d56-20b2779fb83f", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812007, "uuid": "21444147-ae02-4811-93d3-599e9a911465", "value": "74763d5339996e11106fde0cc6d8dab6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07d16ada-d75a-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624806724, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806724, "uuid": "73621d14-9390-47eb-b699-acb849cd1882", "comment": "Malware payload (Mirai)", "value": "1a999cf5513c7424fabc69306945c9cc", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806724, "uuid": "63f8744f-cc10-49d4-95e7-a73633f7f8f7", "comment": "Malware payload (Mirai)", "value": "1bc8a93da0e44707750b1786df0523e7aece5ae8c5e7d2cf2a74d73f860c4491", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806724, "uuid": "e8a95f46-00ab-45ab-9f4c-9a36872d3586", "comment": "Malware payload (Mirai)", "value": "c931ba31571dd01a6641632ea3af5ae4e64a4ce9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806724, "uuid": "feb505b8-bb47-4808-af6e-6bc12dda11ed", "comment": "Malware payload (Mirai)", "value": "ea6e70f4424d842962fa6067b5b6c9026779fd35c14745c177fcaf8e38a7720e6fc2be96f15ed66fbe0c9394046960ca", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806724, "uuid": "fe49b28b-f1e9-4f8e-b242-f4f344696a2b", "value": "93C2E0DFB48A78C5CC1C5CBC21CD9AD115A862C3234A8F0837603DC9A57A55FB89C8B8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806724, "uuid": "8d333904-f4e9-4c96-aed2-db777dfd0716", "value": "768:MuCUFskb2JgIs/E2+OocrfJiHNjfmQ2q7IoqdB9WI:5CrJgHiOJrfwmQrctH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624806724, "uuid": "52d8f70b-1ffd-43c8-8d61-45a68f7c2605", "value": 27244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624806724, "uuid": "cb3a8cb8-8922-48c6-b076-17f9805cde90", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806724, "uuid": "226352b5-fa7e-41cc-a270-798547ba3e09", "value": "1a999cf5513c7424fabc69306945c9cc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "76678264-d74a-11eb-875b-42010a9c0053", "comment": "Malware payload (RaccoonStealer)", "timestamp": 1624800037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800037, "uuid": "6d856c43-fd10-4de6-bf0b-37a0f3aeac89", "comment": "Malware payload (RaccoonStealer)", "value": "8be2a28d5063f4053e1f78ebd401fb77", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800037, "uuid": "dac75de2-176d-438e-9c8b-ace6a82ec9ae", "comment": "Malware payload (RaccoonStealer)", "value": "1c1e85ff09ebbcbf9ed57aac37a053aae5e58cd778dc91f2a1eb9c1119b2843a", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800037, "uuid": "9a1e5279-6830-44da-8cfc-604107165056", "comment": "Malware payload (RaccoonStealer)", "value": "bc8c0f93ff0fc75448275d539216bbe3bf5ca2e6", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800037, "uuid": "c6354e41-a942-4486-a047-eab25ebeb8e5", "comment": "Malware payload (RaccoonStealer)", "value": "3b4918112829e8963e7ef9bffacd10ac50924fbaa6b6b01ce7da48a40076b061e7350ce1417ec97d27f09ad49f036a69", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800037, "uuid": "c10c2d6d-bb0e-4a84-9e83-2cd701c8195c", "value": "55D4D000BB81C039E9F636F459BA9368A53EBDB15B2450CB63D12BEE46741F0BD31627", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800037, "uuid": "b9a86e07-1154-423d-b4b7-5c1fd34092be", "value": "7a958e1aed1cf6e81fa8d2a601d98d8a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800037, "uuid": "d0fc9768-88c9-4d00-8503-fb240f9fb9da", "value": "12288:YOenRqa+BXr6b/C57koViCJBuAtbAICCZZXEHbeA+TeF:LZaeXjkoTAGAI5ZXE7CS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624800037, "uuid": "11e25105-45d6-4948-a64d-4bd12ff6c081", "value": 610816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624800037, "uuid": "bcc78d82-66f9-4889-8c3b-e33826fc839c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800037, "uuid": "ce32b4fa-b836-439f-9ac0-5f68f02dfc3d", "value": "8be2a28d5063f4053e1f78ebd401fb77.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7758174d-d76d-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624815071, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815071, "uuid": "a20a3a30-c9a6-4a3e-858a-ef6fe08e93df", "comment": "Malware payload (Mirai)", "value": "def9e70a67000a146a37150fd0443b25", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815071, "uuid": "40826aba-a5c5-4ab2-a68f-abcbf8028cb3", "comment": "Malware payload (Mirai)", "value": "1ee5d7300badc18790121fabaa5c433c2b39755528bacccaf2649af7c1b958c6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815071, "uuid": "2898d786-f612-43c0-9ccf-01803f886722", "comment": "Malware payload (Mirai)", "value": "25a55bebe27b1900852240c092da8b3ba5e6c513", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815071, "uuid": "2336fc4f-35fe-4d23-90ba-50fbb408989e", "comment": "Malware payload (Mirai)", "value": "f691361edc93fc1aab6066ca499968067b3dcbfe182bc23bdd1d54ce441bf4f4943f871ee9e3d0d1b9d55b5f2e092953", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815071, "uuid": "52a8ac14-e077-450e-b339-ed5935f09db0", "value": "D5E2E11EC51458A5CCC5BD3C75CD97B16AD0B0E2368ACFBC5F950846AA6E61FF48D038", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815071, "uuid": "8df3a802-5fed-4420-8408-416df23495c2", "value": "768:8Ojf8ZlAOHXN5+ei47EQHpBVUgRSSfksoR5vDoU88a3g+7Wi:Z8vAgd7l1ISssoRxj8j3LH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624815071, "uuid": "d8a86fbb-e627-4610-b88c-5ba03e829090", "value": 32516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624815071, "uuid": "10580215-9fba-4cff-8444-77396a2ed6be", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815071, "uuid": "39eec7a4-24f8-435b-92c9-984d3e07a093", "value": "def9e70a67000a146a37150fd0443b25", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d3d1722-d75f-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624809095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809095, "uuid": "ee5464cf-5b30-4ee0-b702-82283a7af6b9", "comment": "Malware payload", "value": "a77c346dbe2ca6c16c106a9f1bd63c24", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809095, "uuid": "3e41dc5b-d789-4039-8e31-4c1ef458c4c2", "comment": "Malware payload", "value": "1ee7cca136cddd78f9fef1ce6cdeff4a50112e3158672c76aeadd7e6d0ef8e73", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809095, "uuid": "b21ad8d1-7693-4ce4-a054-f03a61b2b673", "comment": "Malware payload", "value": "e03f7538293c6c9a7e291f10393ff1c854a0a931", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809095, "uuid": "eed792dc-019d-4f8b-942e-093cf74715fc", "comment": "Malware payload", "value": "1f389000f6f9f260146c2a9db25e4dd23bf7f85fe5d46a0d217d7ae223f982ce2fecf2687a8181413fe7133ce0a728bc", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809095, "uuid": "f1ed76fe-d507-47bf-9540-230d290ea9dd", "value": "0935051C2B5EFF88F6B205D274454A68872E9798F30928509E5F318C87FC9A23759ED3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809095, "uuid": "727b5a4d-2019-47c7-ab57-6657078c1305", "value": "6144:PNoP3eJAtq+tL3BwV7erhE2g9PBJk5p0YyZVr0DkZmb+WtRGMRfrhoZqKwwY0NxZ:9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809095, "uuid": "d07cbafb-5356-477e-9b9e-69e1a3c2b8fa", "value": 1075624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809095, "uuid": "1825245f-fe21-4544-9995-7ce0324bb4b4", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809095, "uuid": "fef43f79-49d3-4e03-8383-d8f1a130639d", "value": "a77c346dbe2ca6c16c106a9f1bd63c24.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4184afa8-d6ec-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624759576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759576, "uuid": "10bdfb1b-c5ae-44fc-8ab1-c6671c2fbb58", "comment": "Malware payload (Mirai)", "value": "af4135bb741c21f82950ca8138cb25b6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759576, "uuid": "29042cbd-5ed7-4a59-a493-cd2926a10017", "comment": "Malware payload (Mirai)", "value": "2057cf06f644c49a1332e51e7d190efa3a5520d20cf0b10ad7c6c21b5f38ecbd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759576, "uuid": "dda8b8c9-2d29-4fe0-9e03-471a7b573bd7", "comment": "Malware payload (Mirai)", "value": "21e477b5d02f82ca0de0b1533ee763c5bbfe84c3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759576, "uuid": "010631f6-8c35-4f33-91fb-041b50698a77", "comment": "Malware payload (Mirai)", "value": "10e5761da76318c5627ddeaa172e2266f821c863aae0503ad5b8dadf5a975997f22fc6ba17fb48d937ddf91cfbaef01e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759576, "uuid": "0a542d93-4260-41ad-8f8d-75b560cf6040", "value": "C5E24CA97D808B16C5D1627BFA2E428D37151398E2DF3303DE136F61768B81F0E6BA45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759576, "uuid": "28042eb5-5528-4144-bcba-bd10decbb7b6", "value": "768:3/h5f9YxAZGDTrOS4wkDyPyU2KXKGgaEzMLBrA90tSe2P1:7f9bSTrOS1k+Z2axrBqaSn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759576, "uuid": "ae712983-4052-4530-9e7c-90a24d2b9cd8", "value": 33940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759576, "uuid": "728bd8cb-9ff4-4972-b7fc-77d80433193d", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759576, "uuid": "5732c3e7-56bb-41aa-8e62-0e5e9e5a5da8", "value": "af4135bb741c21f82950ca8138cb25b6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c91a7b45-d774-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624818215, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624818215, "uuid": "81536a81-ff56-426e-ba98-31b2e083e018", "comment": "Malware payload", "value": "5445fae4a11089f07bc1362a48623cd9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624818215, "uuid": "302a5dc1-0b16-48d8-96f7-70167b7cf4a0", "comment": "Malware payload", "value": "21a58de4fc0e1f1eae034d9f6fae3c405c8658fb949d8b8676ed38550c4702c4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624818215, "uuid": "5a2058f8-8610-499e-8973-967bee3debcc", "comment": "Malware payload", "value": "b7bb3a18e5dce74a353bc4ed5c6729a65a4a5522", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624818215, "uuid": "806ae215-d945-4038-94f5-d2d9a802e521", "comment": "Malware payload", "value": "ce99590f3299e7d0847c1ae0d7954e1ace6ba48bf8bfee819ffe28cc8bacbbdaea733d56ac534c3d55218a19dbcbe5dd", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624818215, "uuid": "b33a8c39-3897-4fdb-ab03-4316dcbf73ff", "value": "1046333A63418777D2A02979580BB2BBB52F77890F3922CF17C94D7A1C2271927F4369", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624818215, "uuid": "e11a1d4d-45a5-400e-94ce-3d963bbfd0bd", "value": "c9adc83b45e363b21cd6b11b5da0501f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624818215, "uuid": "a86417b6-0f0c-4890-8f57-47dbf9b69673", "value": "98304:pAI+sp+goreqMswPavGIM45Uz8hyraVTe5fh8ndc3sTUgAGQ8VjuqvqD4rtI1aK:itsp+gyhio5UzQbMBZgAGQ8sqvgD1N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624818215, "uuid": "06c373d1-10eb-4951-9ade-03035b4b3bba", "value": 5769669, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624818215, "uuid": "2afb463c-5f49-4977-83e7-3a072f9e8488", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624818215, "uuid": "f00065a1-6c2c-492b-8167-796197afc53c", "value": "5445fae4a11089f07bc1362a48623cd9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48071483-d6ec-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624759587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759587, "uuid": "5874724b-a853-45a8-a86f-fa8a7a26d552", "comment": "Malware payload (Mirai)", "value": "295b4e00f4425ab33ad84b56cd830bcd", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759587, "uuid": "d0b79e07-55b1-41e8-9c18-6f970044189f", "comment": "Malware payload (Mirai)", "value": "22a04109aa9138c08018974060d3456390d9bbc4e12d39ca338678e31cb16ff8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759587, "uuid": "d81925c7-0bac-4497-961c-c57337f4f755", "comment": "Malware payload (Mirai)", "value": "17d2897c257e84c5dee06b04628596fa64252f36", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759587, "uuid": "0b56cc43-a605-4916-a045-61c852b64a15", "comment": "Malware payload (Mirai)", "value": "50419a2322907e317de73b5f71e620074d633095f3d75330265f4e7b2ee7fb26c0d28725fa8f8f2c68cdea4164246857", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759587, "uuid": "fef02d8e-8e22-4516-b52c-729358ce8340", "value": "61033A21BA621E17C4D4A47A52FB0329B2F1135F25B8D72E7C720E89FF4494076A36F6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759587, "uuid": "3ae839c0-51dc-4bfe-b5c6-38c3210f1666", "value": "768:5BOoatfvtPf453G9H5NCE50zP1yO+OSg+mLiSGPn:DOftfV45W9Z7E+I8n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759587, "uuid": "fb5a79b9-1a6e-4565-966b-eeea84940166", "value": 39736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759587, "uuid": "98ca959e-b668-4fc7-9600-0d7bac87dd52", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759587, "uuid": "5afeeb3f-5e75-48c2-8654-a43eb2bbb9dc", "value": "295b4e00f4425ab33ad84b56cd830bcd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83e137ba-d72f-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624788464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788464, "uuid": "cd22f980-d71c-4168-ba4e-c1cbe84e0613", "comment": "Malware payload (Mirai)", "value": "a67e2995547ecc35f2428636c6ca38dc", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788464, "uuid": "dbd91acc-7182-4c30-9de5-7aa5d5d7dd21", "comment": "Malware payload (Mirai)", "value": "24d9bd2679fa40ae899c0f1883fa45c973195d104304469f25a933602f1c7312", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788464, "uuid": "66e77640-bee8-4cdd-9e64-f777a70b9def", "comment": "Malware payload (Mirai)", "value": "d553f536a228b2ffe89722c493a52d522aa53b59", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788464, "uuid": "4c1e309c-11be-432d-a81e-7f3000bad877", "comment": "Malware payload (Mirai)", "value": "5b755390bf92cf38f5afe86ce68b50b7907e6550b5da447e935b3b43b29dfbdeddd8498a3500829a910fd26658afedb0", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788464, "uuid": "d30fae84-6adf-4564-a52e-dea49f5c958f", "value": "6533E1768327EC50C5358731B72F04867CEB97F4A2927A876E5C12282ED37CE26DE581", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788464, "uuid": "fe539773-8af5-411c-9e6f-3a0994cfc599", "value": "1536:e2vVvR5oqgaR11O6YjLBBTYGw2HBVL5ldyEHUjww:Fbotw11CBS2VLTV0d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624788464, "uuid": "7165867a-30d1-4588-ad9a-8988e6135f75", "value": 54248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624788464, "uuid": "90043d45-60ad-4bdc-b4f3-e4a6cdddebb2", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788464, "uuid": "9b81ec28-65a7-4740-b4da-6dea0774f098", "value": "a67e2995547ecc35f2428636c6ca38dc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ceb3fe8-d76e-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624815322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815322, "uuid": "66b33e6c-03c7-42fc-9465-4c0e64b17808", "comment": "Malware payload (Mirai)", "value": "dcba844bfc2f9c2c852fbcbd83f495e9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815322, "uuid": "7e7bc618-2d2c-4c49-a8e8-173cf208fa49", "comment": "Malware payload (Mirai)", "value": "2d80d9489c7e05a380d39b812b35377050d6e25a4d29c3a47e7da15f061bc65b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815322, "uuid": "51430e6a-360c-4939-8af2-bf84190fcb58", "comment": "Malware payload (Mirai)", "value": "4d575e08b9a18a59b56f511ba803f4fd0349e8b2", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815322, "uuid": "4861939b-53fe-4ab4-87f7-bf52a720c33e", "comment": "Malware payload (Mirai)", "value": "7851533d3eeb0730d0de8699efff76b538313699bdeefea39287ce2532d70324dd4c546c110c8a9924da529359dcc8ab", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815322, "uuid": "02ca9848-3164-48d4-a4de-be1a0a03cbf5", "value": "3073AF75C56CEDE8C6258638F15199399B13A00DA5A33EFADAC2C656504BBFCF0087F2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815322, "uuid": "5c582d9d-305a-41dd-b4f3-a330391e0318", "value": "1536:nau/qMmbMJ/wtcD9VGpt9FJ4rsSayiaHBfs3YCQTD5N6CEKr:nrCMN5Z9VGptnJ6ayiaf+585N6S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624815322, "uuid": "babf6a1a-2734-448d-875f-ec0ef337e8f2", "value": 74832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624815322, "uuid": "88bd169b-c42b-4858-9810-9f3250bd95d9", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815322, "uuid": "497345a1-7b4f-4dcb-abd7-679122b7ff2c", "value": "dcba844bfc2f9c2c852fbcbd83f495e9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b03d32b5-d6ed-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624760191, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760191, "uuid": "c84633fe-b56c-4d40-9900-663afdff7b37", "comment": "Malware payload (Mirai)", "value": "f417963aa41011e2bffb952b8419b878", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760191, "uuid": "5db0bb60-17cb-4794-94b4-d4a19b1d0f74", "comment": "Malware payload (Mirai)", "value": "2d9211339ee9d268891c4286d79463f49e10db92d6c3c8cf660615306fdd4eb2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760191, "uuid": "56498622-96c9-4af1-8e90-16cffd1eec7e", "comment": "Malware payload (Mirai)", "value": "255b3c0d83526945da69cde9554bec68b925a0de", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760191, "uuid": "9ce53d03-12ae-492c-8f54-7f3a7d77f8aa", "comment": "Malware payload (Mirai)", "value": "1789451e1733f5c5cd2d383ca5284a54e1b2a5384e1db3c7f2da8a412c2db5deb1cdcf64c9ce8c4e23c289af923e529c", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624760191, "uuid": "18033ca0-9acc-4af9-9c82-4ecf315ef8a9", "value": "61E25BA2C4796F98E30A42F464748E3C5713F615E7AB5EFA0615835AC003EDCBA193F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624760191, "uuid": "2667cbb2-924a-46d4-b6e4-7f012be5ca38", "value": "768:tMaXTZlqDoOY8GUNwGZg/1Cjou7QbkxZ4Jh1:tMaXXqY8Gmwz/1zuekxZ4J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624760191, "uuid": "7f5e118d-0fec-4db4-a514-66865ace9261", "value": 32004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624760191, "uuid": "517746bf-abb7-48bd-a628-6ceb383466ad", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624760191, "uuid": "f7326441-621c-4fc9-95e1-15120fdb47d3", "value": "f417963aa41011e2bffb952b8419b878", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f2ffda1-d76e-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624815568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815568, "uuid": "58db15f5-f5d4-443c-b2e4-22af2a261a49", "comment": "Malware payload (Mirai)", "value": "5ac143ce6b761691c9b666c890b4113c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815568, "uuid": "099d903c-c90b-4174-bb36-d7479291b2c5", "comment": "Malware payload (Mirai)", "value": "302e71424008694995f1e82395ee46b6f006c4f4c92a7a4524170b6dfd139120", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815568, "uuid": "968c9f4c-8d85-4c78-996d-243d6763dd2c", "comment": "Malware payload (Mirai)", "value": "76f9f2c9a65f44331de7a6b679d447032bf36599", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815568, "uuid": "9374774f-01a7-46e1-a6a6-dd0e016a619c", "comment": "Malware payload (Mirai)", "value": "fd317db29e6ae96789fc7948279dca0e23085cb9ad9df6fae04868a680955e4651b0585a76c559f1b0e42a9becc6b1be", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815568, "uuid": "24136dbb-f0e4-469d-afac-99f18b2e9a09", "value": "3ED2D17386F6C323835DE03A74B0755D144CD86E346CA4609DC8B65A6D06FD92F1C7E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815568, "uuid": "e7b63344-9096-4620-9857-bc01bad57e5d", "value": "768:TQENQFi4+hZG56dZ2pfaJDE+smafBGNN6V78nbcuyD7UGQRj98:TQ0MiXha6qpfaJ4+smaoNNfnouy8GyR8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624815568, "uuid": "f200e682-b338-4c73-90df-145c39e316b2", "value": 30740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624815568, "uuid": "373994f7-53ef-454d-8dbf-98312ccf1b2a", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815568, "uuid": "0bac0c53-b920-41ba-a800-d6662365d186", "value": "5ac143ce6b761691c9b666c890b4113c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ecabeac1-d72f-11eb-875b-42010a9c0053", "comment": "Malware payload (FickerStealer)", "timestamp": 1624788639, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788639, "uuid": "3c4959e7-81eb-4e75-aad8-1a395c6c54ab", "comment": "Malware payload (FickerStealer)", "value": "c7e806535377c30c0c568f607f024b22", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FickerStealer", "colour": "#3E5652", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788639, "uuid": "d59f8364-d3a3-49b9-9ae4-19d21fb6a9ea", "comment": "Malware payload (FickerStealer)", "value": "34cfa360c2efd052e71a29f2091723206cf2a74dc87c64b1d617e822f69b7180", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FickerStealer", "colour": "#3E5652", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788639, "uuid": "a8bd7370-777e-487d-bb0b-8537ca3da929", "comment": "Malware payload (FickerStealer)", "value": "668855ffa4e7fe4fcb205066a3047749cdeb834b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FickerStealer", "colour": "#3E5652", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788639, "uuid": "4147b572-b383-4709-9abd-28e1d16f0f0e", "comment": "Malware payload (FickerStealer)", "value": "bdba8c5344471fa56989ad0a1d97a9ba3000b5bb6ee1af2ab28214c9855ff7d491e6746ca6aba06e2301955970496279", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FickerStealer", "colour": "#3E5652", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788639, "uuid": "8b092c91-3fd6-431a-b774-f09555551c72", "value": "F294AE10A6A0C035F5F716F89A7993BC953E3AA06B2090CB52D5F6DE1A347E1EC3171B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788639, "uuid": "5a5928c6-b56c-4f1e-be8d-e45a01058075", "value": "87903d189e9bdffe189d97a93bbbb434", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788639, "uuid": "409c5a35-d8ca-4861-90f0-0d9c90f78f4c", "value": "6144:coKQBYxbH9z9Rh/BSkb9nzqzYXFHWKd1FxzqTZw0gWtNLWkyjvyrFuWFU:sQBQbH9z9Rh/B39nzS+1FxzJ3ONLGje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624788639, "uuid": "2e15f5f2-2857-49d4-b8f4-be80355e2ca8", "value": 410624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624788639, "uuid": "c3713a90-b644-45a9-985f-bb402ebc6e92", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788639, "uuid": "858e146b-97c9-4e7b-96bb-ddbe9e40ccc8", "value": "C7E806535377C30C0C568F607F024B22.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00d1b8cd-d6ed-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624759897, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759897, "uuid": "2213f75b-e733-49c2-bb89-acabc9201674", "comment": "Malware payload (Mirai)", "value": "04baea5b1328b26e06270fe7d45febf5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759897, "uuid": "e8b49961-5e98-4a86-8f90-d51b12a60502", "comment": "Malware payload (Mirai)", "value": "362c8192d2047264a6d63ff722214d1ca799843f250893547299c2dbcba66892", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759897, "uuid": "edb38319-7ee2-48f0-9e81-dec3a8c59a18", "comment": "Malware payload (Mirai)", "value": "c2b9c7b75ce6df4bc04ef91578fb0b4e9d4cd926", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759897, "uuid": "224aaff1-4aee-47c3-bf3b-eb76636689bc", "comment": "Malware payload (Mirai)", "value": "25a80b98e7cd4f69a7ad3fd5b07ebeb8b2b4409c80adb4692b78e9a4c5c6669899e8d8de00af4049468e4d2585d3bca8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759897, "uuid": "ba77cfa6-fc1e-4fc8-a3ee-6a5cabc4f40c", "value": "19D24A85A5D3E9F7FC5149F230A3EB72CB32F139605AEBB3E35895369C02205A20725D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759897, "uuid": "cb5a68c3-c821-4448-962a-c923e4d626d2", "value": "768:CVHSeAhyQbH70VIj8CRgXlwJ1H0c4PvgFl:CVyeAwyMIRkloHaPvgFl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759897, "uuid": "89df8d07-f5df-4807-b771-004b02fc740a", "value": 30832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759897, "uuid": "a50ea37d-5c93-4c23-ab45-32f0a9d6caef", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759897, "uuid": "47a44e2c-6caa-4d8a-ab2b-73e369d054f5", "value": "04baea5b1328b26e06270fe7d45febf5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "06c7fb34-d74b-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624800280, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800280, "uuid": "e9eee2e7-7bbb-4b39-a56b-6657456ff2d3", "comment": "Malware payload (Mirai)", "value": "3085b6eb0dae073474dc27252916c28c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800280, "uuid": "f977bd1a-e1c4-4d31-a846-18155842349d", "comment": "Malware payload (Mirai)", "value": "373c304f1f478633e63cc1f8b4513aa7e7fec71df8714a539a44b81c54ede66b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800280, "uuid": "32ce0943-fba6-43fd-9313-5ccaa369ff30", "comment": "Malware payload (Mirai)", "value": "3b88dd6f52a6dec91f4c35e9065f8ede51708538", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800280, "uuid": "e79dfd04-f864-4945-b222-07e2cde747de", "comment": "Malware payload (Mirai)", "value": "244e9974a146b30cb0a727f6ab2af87795c3f8d663d4c944eefe0716485715d2819bdaa3ba17bfecb909c52a481eed21", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800280, "uuid": "91d3c55f-156b-4b86-a4ad-01c8d0b7a8c5", "value": "9B334BC5998BE8F9DC1105753076AF73A6B6EA7F2028EA93C39DA833DE01642D10735D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800280, "uuid": "c0e3a8bc-6d2d-4f58-985a-b21ea63e2d73", "value": "768:WQCsyW9k3KvMZuVMfKPYlqUaKqzPPDsPRht/Nzyquh6NwPIDoPgXG/cp:WQCmk3KvMZtfKCqUs4vZuoerPgAcp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624800280, "uuid": "b4cf7199-ff51-429f-8dea-86519fe5e29c", "value": 54396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624800280, "uuid": "6bed95b3-7c5d-4ac0-95b6-8fcd914cffbb", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800280, "uuid": "f861aafc-c856-4131-a07a-24f51ec7282b", "value": "3085b6eb0dae073474dc27252916c28c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b32b9f1c-d70e-11eb-875b-42010a9c0053", "comment": "Malware payload (Formbook)", "timestamp": 1624774370, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624774370, "uuid": "8fcbc50c-b687-4034-bb2a-0338c51050a0", "comment": "Malware payload (Formbook)", "value": "9cbf057f121158e9b6e139bdc3800af6", "object_relation": "md5", "Tag": [ { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false }, { "name": "r00", "colour": "#8408D8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624774370, "uuid": "8904bf48-2c87-4049-a570-26bc99b3fd91", "comment": "Malware payload (Formbook)", "value": "3a3f38c28d123d92fdbace9930e68467807d524b1680b58690134c778bf7441d", "object_relation": "sha256", "Tag": [ { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false }, { "name": "r00", "colour": "#8408D8", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624774370, "uuid": "cca47d48-de5d-4a68-949b-487807d190c3", "comment": "Malware payload (Formbook)", "value": "a66a023ec3914daae17724ffad33960a46010d62", "object_relation": "sha1", "Tag": [ { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false }, { "name": "r00", "colour": "#8408D8", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624774370, "uuid": "fdaf148c-db54-46d2-960f-7de161a57c22", "comment": "Malware payload (Formbook)", "value": "1770376ca8e22dfd406a35ffdd90b5700441aea51cb7d4c20aee4233a7366453b23ece5bc93b6a1dbe5bdd9a359eade5", "object_relation": "sha3-384", "Tag": [ { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false }, { "name": "r00", "colour": "#8408D8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624774370, "uuid": "ea37d0ed-a2de-43f1-aca2-2333eae46cbc", "value": "36E4331B582408CC7718D4B6CCDB0AAE4978FEE9047C3CD6A556FFE408A7339946F9A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624774370, "uuid": "8a589d48-0088-43ad-b6f8-84a2ff28eaaa", "value": "12288:/XM0NLRQruooyyvwH7Dfb3Z94OOXLtOu51cX49Deib7fYatzV++E3rCFnYB3S:f5OioZbrbp94OYL8EHeKbYalVA3rMneS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624774370, "uuid": "1d6af4a5-b708-4cc0-b2ab-71f470a76b1e", "value": 714203, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624774370, "uuid": "0c38e92d-f67c-4546-8308-3ab02cbf7ead", "value": "application/x-rar", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624774370, "uuid": "2c31c2b2-e8b3-49b9-aba3-081c5477e892", "value": "Confirma PI#4042021 INVOICE.r00", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7b079ce-d749-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624799744, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799744, "uuid": "2cbf25f2-b805-4b32-9b46-7f709f039ff3", "comment": "Malware payload (Mirai)", "value": "38b0233c5602ab5de87405b7509cc34f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799744, "uuid": "177de4dd-ed2f-4aeb-af2b-048bfee8e66d", "comment": "Malware payload (Mirai)", "value": "3af0529d7acba8a09b5e32455023cc489f466468200f1b0055fc56699fd82f33", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799744, "uuid": "9b124d6f-ee7c-44a2-8fe4-d9826bc9ace0", "comment": "Malware payload (Mirai)", "value": "86b9e10eb140846629d46663ccdfe0ece170d1de", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799744, "uuid": "87770618-54fd-4085-b613-172fe2e78475", "comment": "Malware payload (Mirai)", "value": "888ac9b15e8fa4775d975cf0604cbc922f922acc98fde7e63063917b6c8a3f178398ab40b57693437c304e99f1de80e8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799744, "uuid": "b3f8e557-7ac1-4a2e-a7bd-be765d018937", "value": "87A2CFA10180E451EE58383E88EEE4D12D1E0ABDF2FA33663C4135B8759D70E36B5293", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799744, "uuid": "68da051a-5765-4b8f-84b3-d516b5e5de36", "value": "384:SkzZKN+SRvuvDUkF/J2ydkY5bpC1aj0SWA5Ba+6ANbgWhymdGUop5h5:VAZWDUK/mY5XVNaG8Ws3UozX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624799744, "uuid": "c253bdd3-9a33-4690-85b0-7415416e84ac", "value": 22476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624799744, "uuid": "b62d930f-e15d-4591-b816-e063e5c77d48", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799744, "uuid": "67636ae1-07ae-4f18-8da5-8d45b8de91f6", "value": "38b0233c5602ab5de87405b7509cc34f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3e5ca1d3-d6ec-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624759571, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759571, "uuid": "cec3f5db-ee1b-46bd-95e3-609f8cfbacb5", "comment": "Malware payload (Mirai)", "value": "b8a1d959740a4d90c9b1b9eedd7d95bf", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759571, "uuid": "e3e5d997-5e9e-45da-8afd-58614bce70f8", "comment": "Malware payload (Mirai)", "value": "3cc3d7d32e8c85e0c594ca5cb2ecfbfba66ebbc1853bcb02c2a39fce9f238dbc", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759571, "uuid": "76244552-76ab-4732-90b8-f1d095bda9c9", "comment": "Malware payload (Mirai)", "value": "cc711c0a59dddc4e14f633d17e3ff1dc575f2ec5", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759571, "uuid": "a58caf2a-89b0-424b-bd58-c6987c686cec", "comment": "Malware payload (Mirai)", "value": "ed9f9fceb8b0f36b428e42b5468d71058385fa126ebe71c9ab1f5ebea16bb478e04228e069910f9df40ca4f4308eb966", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759571, "uuid": "062f9ef4-f6b1-4827-b7da-e88e3c2d2dfd", "value": "54F2E1B3837FABBCE82A427276BC1140FD16BC17A70AABA755D1537B9AFB0464530910", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759571, "uuid": "a5cf12ea-968d-4306-b2cb-0c52f3aadaf0", "value": "768:icqj3sL7tcp5gredhARKKX4A+g5t5+h3Ilr/Vsv9sPl:w3sfk5YCAUKouk+lr/KFul", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759571, "uuid": "4afae85e-46fa-4d1b-a540-3e5d7b84888e", "value": 36336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759571, "uuid": "846faa05-5245-48ef-9061-527737544817", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759571, "uuid": "d9b9de0d-e868-4ff9-885d-8c365ddfd78a", "value": "b8a1d959740a4d90c9b1b9eedd7d95bf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "071ea32d-d78a-11eb-875b-42010a9c0053", "comment": "Malware payload (OrcusRAT)", "timestamp": 1624827338, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827338, "uuid": "d46b72a5-9d38-4164-87db-743b051b77f5", "comment": "Malware payload (OrcusRAT)", "value": "1827c3deb2f17ab048cbfd62e3bbd861", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "OrcusRAT", "colour": "#FEFE05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827338, "uuid": "1494dbae-81b2-4601-9c5f-4a65796ee56f", "comment": "Malware payload (OrcusRAT)", "value": "3e40414d3d75b88373027c33bbe22e90a6ef7fdf7c98b8b6e8a8e51b4b781a56", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "OrcusRAT", "colour": "#FEFE05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827338, "uuid": "2d8785ad-e88b-490a-a3b4-a7afb135f9ed", "comment": "Malware payload (OrcusRAT)", "value": "89f978070089ef8b477dfa653724150f2e7f7417", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "OrcusRAT", "colour": "#FEFE05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827338, "uuid": "be79040f-0df5-470a-adae-3d1a46fd7cea", "comment": "Malware payload (OrcusRAT)", "value": "023526f048d2b56e246de66712a297857fb12b3ab9feeff223f550df59910040336b123c1f446835f8a455065bf85651", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "OrcusRAT", "colour": "#FEFE05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827338, "uuid": "b9eabbbf-435e-4fff-9a66-faf52554c9a8", "value": "77A5BF113FADBD17C1BE3679B3731AD907B8E80A6052FB4E086851AD1C9B701BD163A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827338, "uuid": "d4a79410-2ded-43b6-8213-b57df6b940c4", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827338, "uuid": "28b8e0bb-74e5-4ab1-8b1e-4ec75a01bbe7", "value": "24576:Kd74MROxnFt3PrrrcI0AilFEvxHPO7oob:KaMijDrrcI0AilFEvxHPO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624827338, "uuid": "60f74c97-27b4-4062-97e9-b4bd8c95557f", "value": 2097151, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624827338, "uuid": "9151889f-7ef4-4575-9252-a7a4276d2542", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827338, "uuid": "7dd54eb0-2dc3-406f-b0d4-008cc7af8be0", "value": "3E40414D3D75B88373027C33BBE22E90A6EF7FDF7C98B.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6aaa5819-d77e-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624822352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624822352, "uuid": "e3d766f7-0d0b-4dd1-8cd6-0944dc6df57e", "comment": "Malware payload", "value": "7bd36bd38e2d59e7cd840ebb5d753ed7", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624822352, "uuid": "41d90931-23b8-42e4-8e1c-85511529a176", "comment": "Malware payload", "value": "3e841431aaa53eb3cfa6f167b3a46bca0eb16d22e6fd1d06944414b78cc512d8", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624822352, "uuid": "fe89ea4e-739b-4b78-b87f-0cf2c0f87565", "comment": "Malware payload", "value": "c625e4a67c8ed11da8d2f39151d80ece4a6c1c70", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624822352, "uuid": "374a3b8a-d535-4713-b6ed-567dc2ab657b", "comment": "Malware payload", "value": "97d4fdc21fafdb55dc41d7c68877b7afed4ef7470ff3e85721be47069d04e7689861a1f0a8ada113c78a2a30bcbb1ed7", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624822352, "uuid": "b3068196-65d5-4d5a-b754-44031516f73b", "value": "2E562332A179B029D0502FB297A1DEC446946F8C16B7F6CFF761721D3A3638EA718634", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624822352, "uuid": "03399ee0-1b28-4c10-98f0-d9d9e8ebf52d", "value": "2b914b6fd04316572d777593dc737715", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624822352, "uuid": "e7397934-5dc7-4516-8d92-9994a79f2649", "value": "98304:/UR502Ro5DziQ8VOzPRN5v8j2e52g9s8LMUgYsqblvISrZ37bMZ2NqyszUk:/UR51GDp8ANcf2gJE+blvjrZPsQk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624822352, "uuid": "2c49936b-244b-405c-adde-4be544b88163", "value": 6030448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624822352, "uuid": "ce5305b5-49e2-44ce-a4b3-451abcfb6760", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624822352, "uuid": "5957c960-14ce-4e56-bd4e-1bafe8d6ec6d", "value": "SecuriteInfo.com.W32.AIDetect.malware1.29246.21787", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f558eeee-d6ec-11eb-875b-42010a9c0053", "comment": "Malware payload (Gafgyt)", "timestamp": 1624759878, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759878, "uuid": "730d079a-7d95-41a6-97bf-de4d88843be1", "comment": "Malware payload (Gafgyt)", "value": "8b725627b0903f48a7d98d63a160fa27", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759878, "uuid": "db003f79-2a6c-4cf6-ba74-c640438d8f36", "comment": "Malware payload (Gafgyt)", "value": "3e8c93e9845e61b4fa82a466cb3a45a1d94ea9f364d1805bb2ecc5d156e39e3e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759878, "uuid": "2ca60592-be13-44aa-b888-9026c2e7d452", "comment": "Malware payload (Gafgyt)", "value": "adb4f862371bf9fb9af31c5aefadae9dc07af0b6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759878, "uuid": "e7d19424-7c47-465f-9465-fc81911379b2", "comment": "Malware payload (Gafgyt)", "value": "825ee08206a8aa8dc668005d5c4110ac57fd71e13a8a9311812540c79941489d14344973ae1e9063a5faac7b8a0f7504", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759878, "uuid": "1617c002-a48f-4dee-b35e-c21d0a30ac48", "value": "4692BE3292097E7DD7B0683AC375D9423BDB8771EBFA22572620046C6C8145AF2BD34B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759878, "uuid": "401c41bd-9a75-4354-b5b0-24524e7d3f1d", "value": "384:DODAvt1QgYw0OXU5gXsLVyRIBhri57ynUScHghymdGUop5hO:CDQt1Q+S4spy+BhrkRAs3UozQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759878, "uuid": "8d6a9ced-805a-4e6c-aeb2-125462a8f4a4", "value": 19636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759878, "uuid": "f23199ad-c08d-4d10-b984-90b9ec80ab52", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759878, "uuid": "7f570f8b-b826-470b-a472-aae068429ca4", "value": "8b725627b0903f48a7d98d63a160fa27", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08e6fc1e-d74b-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624800283, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800283, "uuid": "7c73d079-46e3-481f-9eb9-a3855a2f68f2", "comment": "Malware payload (Mirai)", "value": "b669971b29ae1f01b573c878181d90cf", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800283, "uuid": "d17d3b5b-a713-40b0-ad30-f3b1fec43952", "comment": "Malware payload (Mirai)", "value": "3fffd7b26e833c984897e2461e59049cca3b0b2b6be6e68c472ccd959151f5aa", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800283, "uuid": "263b8de0-016e-45ec-82bc-db58adbd09e4", "comment": "Malware payload (Mirai)", "value": "f28e2d8b9a0919e3ddaa0b88fe3aec1ed8931fe0", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800283, "uuid": "79e3987f-053b-438b-b92e-0135d60512d7", "comment": "Malware payload (Mirai)", "value": "b22818c7f7014e2d5c27d515adb361248bf2ffc07d23bc64467cd1697b360239956ce861221055209180ba906331d712", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800283, "uuid": "7a42d925-71d6-4655-947c-cbb24d79d237", "value": "7CA2C171C27C6ED0FEBF6E612DD8C3A22B91039A53B24ADF11846F7131538A7E6648C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800283, "uuid": "e3636ec3-e54a-4222-bc43-f5cd080e2a48", "value": "384:FQswwhn+Nore50szoQYwa6Ol6jrnwbaIp49rwGvEm8M4uVcqgw05LxJ9nB:FQOtreCZVLJ48VukGvRj4uVcqgw0z1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624800283, "uuid": "5a3406c3-a586-4660-a9cc-55c46ef755a4", "value": 22272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624800283, "uuid": "5d4588fd-3f3b-4a46-adfd-bb77e17d41da", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800283, "uuid": "ed9524b0-8d97-4fca-b7ff-ef8857bc88a2", "value": "b669971b29ae1f01b573c878181d90cf", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5236c60b-d73f-11eb-875b-42010a9c0053", "comment": "Malware payload (NanoCore)", "timestamp": 1624795252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624795252, "uuid": "aa18602f-174c-4b51-a818-a676369215fd", "comment": "Malware payload (NanoCore)", "value": "deae26f13b0928e5382acd511d5ee38a", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624795252, "uuid": "c61d64ee-69f1-4e6e-b5d0-0df4c9359100", "comment": "Malware payload (NanoCore)", "value": "418542b67565f6a5f53b5c1eb09e3b38b6743cb3d2f30dcf5f7147d1beace77f", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624795252, "uuid": "4036f543-709b-4a70-acf0-cc9432595a3e", "comment": "Malware payload (NanoCore)", "value": "410f6517c14826725268957d5c5a7ae8b6f428ef", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624795252, "uuid": "a6d3fd44-5d6e-4fee-a162-83489c66f30b", "comment": "Malware payload (NanoCore)", "value": "60d19b1d48006565ac378e8dfac389894328d5197cdab561fb75d8b0e085f426a7b6ac3cf55e301d0254b11cd33b2e2f", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#49BC60", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624795252, "uuid": "600f1cb7-c88d-46b6-b83e-228f46a0d8a5", "value": "5235F2203ADA9129F077BF755AD035D69AAFBF737B03D80E2851234A4733A41DE9053A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624795252, "uuid": "f3c5370e-0ca2-4dda-90c3-41c4a2b3cf64", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624795252, "uuid": "8ace95ab-2830-4749-bfba-93fa072c1346", "value": "24576:eC6jN+bAaMd3REebAaMd3HkfRpV3S3F8ev4SV9l:z6kAaMVRE2AaMVHkZir4Sf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624795252, "uuid": "14f4c057-1536-4836-8d3d-8a1eeac93ac9", "value": 1078784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624795252, "uuid": "b56b0474-f539-415d-a0cf-8179eb619e9c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624795252, "uuid": "20966b2b-89ec-488a-a12c-59ff4fc16f5d", "value": "DEAE26F13B0928E5382ACD511D5EE38A.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4fa7c38-d78d-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624828999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624828999, "uuid": "1ebc3094-12b3-4e33-a8ce-27595e44687b", "comment": "Malware payload", "value": "1b037ed5202e5dc13fbdadd75080235c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624828999, "uuid": "63f0de52-c87c-4fb4-98e6-86f678ac91c1", "comment": "Malware payload", "value": "42e4233468438e37df608db8eb2590e59bb53f496e3315eddd912adeebccbc51", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624828999, "uuid": "3affc061-365c-4bff-ac38-319e4b937963", "comment": "Malware payload", "value": "b16f75b4d6da318d8f442c620ba13b00a87f1bb4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624828999, "uuid": "befe20e0-276b-4016-8f99-a539e4753277", "comment": "Malware payload", "value": "8ad9bcb2800da74fb6607970c4ea6b342e0d055295e28af3f94faaef8cd9e242de0e1aef16115c9fbf3b18810e5b7fa9", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624828999, "uuid": "fc4c2224-d584-4950-b7f0-2ce30fa7b2c5", "value": "F485224579369113D840AF301D05C7391B34BCAB2E21CA2DEAC67EAB97F319E3B41676", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624828999, "uuid": "bef35159-777c-45d8-917c-60b601d5307b", "value": "4328f7206db519cd4e82283211d98e83", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624828999, "uuid": "5accc4f3-b9ff-45b4-b4b8-75eddebb70c0", "value": "49152:+AjoV0m4JbJabpisWn++DrLsrANllyS6k62c/KuUhP:+LOmUG8JDcrIlySVdc/KuYP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624828999, "uuid": "12d26ba1-0b0b-45be-bd99-3d4255410975", "value": 1862424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624828999, "uuid": "41263b4e-21d4-4804-976f-5a9bbe667ee3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624828999, "uuid": "692a6eff-fbb8-458f-bf48-96a41ac1f869", "value": "1b037ed5202e5dc13fbdadd75080235c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53b2fa8a-d6e2-11eb-875b-42010a9c0053", "comment": "Malware payload (RaccoonStealer)", "timestamp": 1624755312, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624755312, "uuid": "3af1cf07-70f8-41e0-8b7d-004090cebd32", "comment": "Malware payload (RaccoonStealer)", "value": "74c39d585a90ac9e802b51b6ea9abdae", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624755312, "uuid": "940b1595-379a-4eb4-9512-93fea6c06745", "comment": "Malware payload (RaccoonStealer)", "value": "436efb99c49c7cebeaf2e8810691428a3d105290d8f95d96222c5274b786ae72", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624755312, "uuid": "52836087-62fc-49b2-9e2d-debe4320a5eb", "comment": "Malware payload (RaccoonStealer)", "value": "5b15e7970e35c21973de09399be58853692f3b38", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624755312, "uuid": "ef3d7fa5-1c7f-4fb5-bed5-b708d8fae45b", "comment": "Malware payload (RaccoonStealer)", "value": "828f62cadbc3a9116c646f05dab15f75ac8288bdcc5bea994ca048b59ad90987715473699176a40b7cc6526eb617dd63", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624755312, "uuid": "90ee0ed6-130a-4994-9e61-64018201ddc3", "value": "F8D4D00076A0C035F1F736F4997A926CA52E7EA15B2050CF22A5E6EE46347F1EC3172B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624755312, "uuid": "ee8dbf04-2147-48d6-ac15-76417de816f6", "value": "239d0543c3c8f22bd3bf2a0ca25ae8f0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624755312, "uuid": "3f89cf7a-00e1-4bd3-9bd8-2f88bceb90b8", "value": "12288:6guP8zHY88CzleLJOMWpUkyus+CF3rdJtcVicfrF56aeU:6R8zHYmzgJOMQUkydr6xfxbeU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624755312, "uuid": "48bc06ad-390b-4880-9a23-e9b0cad4ef79", "value": 629248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624755312, "uuid": "b191b830-901b-4f65-a187-21844dfaa227", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624755312, "uuid": "8eff971a-195a-4a53-8a22-be6ac6c8ba33", "value": "74C39D585A90AC9E802B51B6EA9ABDAE.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89b45003-d6fa-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624765710, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765710, "uuid": "355e8179-590e-46a3-b2fa-84815e529429", "comment": "Malware payload (Mirai)", "value": "407458ed9dfe100f3738acc44b155952", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765710, "uuid": "46af13fd-faf1-4c96-86df-a8c41ecc6bf5", "comment": "Malware payload (Mirai)", "value": "448886e836abda00177c5b07d8377fa798d574e29b2e9dfc9be9db8b528fe37f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765710, "uuid": "d1496440-03a9-4099-ac29-ed914bf34a9d", "comment": "Malware payload (Mirai)", "value": "8ebbe969e6ad6a866c305fb9d4a41cea8e88bc5b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765710, "uuid": "69b36da8-b47d-4d52-a179-a6d0497e609a", "comment": "Malware payload (Mirai)", "value": "5cf4363ac41d95cd7babfe2697de038dbe9749cb106c462b8cb1361ddb031808b3b9945bc1bc94445628af6cf0a08de1", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765710, "uuid": "042a72fe-f588-4adc-ba09-04d6fb225890", "value": "51B20901B20D0947E1672EF1393F1FD0D76EEE9121E5E584395FEE898172E328282E4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765710, "uuid": "0c5b898c-95c4-43e7-ad26-c97dc4a1ef28", "value": "384:DSDVA8LD539uBkLyYIRiZEqoTWJJGxvsSpq5AvFP/hChVTcZ9QtUhK+6RfZ8c06K:Y1kWLAiSqDg0SgMDZ+OhK9q1qSXpau", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624765710, "uuid": "386c2e85-4d23-4546-a71d-29ae5d83ea41", "value": 25676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624765710, "uuid": "d4b49915-32c1-4808-8b55-a44647c51e08", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765710, "uuid": "3f2aa3e8-fbee-4f00-a22e-113aeed82874", "value": "407458ed9dfe100f3738acc44b155952", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3626132d-d749-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624799500, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799500, "uuid": "b1d264ce-f950-42d4-86b3-fdf65738c0b7", "comment": "Malware payload (Mirai)", "value": "3f9f66ec79786bcf84ac4cc6981a96d9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799500, "uuid": "6258827d-845f-48ec-ae5d-4ceaeb08f87f", "comment": "Malware payload (Mirai)", "value": "4526ea59299009765f3e45acd2b5a198a0b2bfef8a995ad582938bbe22fd4e58", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799500, "uuid": "8cfb6e65-cdaf-47f2-ba91-dcd919dd4e8a", "comment": "Malware payload (Mirai)", "value": "4183e070b8df6233ad7aa141537a10fa1404b564", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799500, "uuid": "93bf9c37-a86e-45c1-852d-9894f424e2db", "comment": "Malware payload (Mirai)", "value": "33b1a3e8a612820d7e656cd74727829cbc9c32ce910d448d638dcef55d221919c8e554ec7d2a32ae4b76ceb5f1fab89b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799500, "uuid": "aad8d900-a77a-4a64-9283-eca449c01159", "value": "84238E77C8A91ED4D7958574A12CCA3A1733D408A29B2EFA1A47C579A00BFECF1093F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799500, "uuid": "ac809ed1-be5c-4a4c-8d33-8bb92a59fef5", "value": "768:Sa6Z21e8mofzVh/9VPHLLCWuWo3BOlzMCYAu6P/:Sa6ghXzVh/9VHop38wCYB6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624799500, "uuid": "db1b2469-7751-4ab6-987c-575e61fd7dbe", "value": 46116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624799500, "uuid": "5a9e27a8-d724-4ef9-933c-5625805280d5", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799500, "uuid": "95b5e59a-b680-4f77-b6f5-1d5992be7487", "value": "3f9f66ec79786bcf84ac4cc6981a96d9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c17caf9-d75b-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624807214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624807214, "uuid": "b3f0f970-a743-43e0-9f9c-b5170c43f854", "comment": "Malware payload (Mirai)", "value": "bd801b0b8bc21a68533a5021c0dcede4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624807214, "uuid": "db82d5e3-1be5-4b5e-8ceb-ec3b44077d96", "comment": "Malware payload (Mirai)", "value": "48d143581dee9869cc70ce2eaa9673c52f5a10d93bdd427054393a9c5f878903", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624807214, "uuid": "235fb9bc-876b-4f88-979f-e315198379a5", "comment": "Malware payload (Mirai)", "value": "5e24b62b1615b1f0bd529da15e4321da474131b7", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624807214, "uuid": "53859bc8-a3ee-4099-a12d-94daf360759f", "comment": "Malware payload (Mirai)", "value": "6b52373ea8d98f5918244fc6e6da4ac30db15440e3d3cfd68b77d2cc4273505e701828a8443153825d0adcceda355cfe", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624807214, "uuid": "42181c19-57b8-4b4a-8533-6a3333ae1bdd", "value": "43432925AD792E26C0D8B57E11F7C724F2E2620E25B8C65E3C721E4EEF04740A5537BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624807214, "uuid": "0245c300-8bd4-4b43-89c4-a4e50f9c2a73", "value": "768:eLobAxU6q9Hfymp0xginuYvCkLB6WsTwIC1DQdszoDaS0O+DCDu:eL0AxvSHfymp0xgunvCkV6vTMDauF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624807214, "uuid": "430324a8-35ac-454d-a28d-96648371a8c3", "value": 60412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624807214, "uuid": "cb4b2124-d6b1-4c6d-82fd-9d74df91e062", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624807214, "uuid": "2058e3a3-451d-4e89-95be-321e919f9ee2", "value": "bd801b0b8bc21a68533a5021c0dcede4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8305540-d766-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624812254, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812254, "uuid": "840c6faa-1c8d-4ad0-80a9-44d54d18819c", "comment": "Malware payload (Mirai)", "value": "d33e08297224d62ac004d5078a91c8f4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812254, "uuid": "2e6dd457-dc9f-46a8-9ced-8c922c88aa5c", "comment": "Malware payload (Mirai)", "value": "48f6237a4d5554386d53e67d10dc1ca864ecbb6faa41f82ccb3a90721770a452", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812254, "uuid": "ffb0ded8-09c6-4026-95d9-f0babd7629a1", "comment": "Malware payload (Mirai)", "value": "3d431fdb97750d2cad18c93de8d92f051d9c764c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812254, "uuid": "e598e69f-07e7-401f-aee7-fe41dc4d0cdc", "comment": "Malware payload (Mirai)", "value": "509171a915545f323f6adb2fcb3a6e071f566d1dd1fbb2bf00fdb29e3527111c7f23fbf8d98037337bd5cc3f6f094aa7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812254, "uuid": "5c20d204-1531-4efd-8324-0bbf04c73c01", "value": "A96371197F650FF7ECAFDD374AA9174620CC641A21A87B397A34D818B20B64B05E3879", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812254, "uuid": "0289e3a5-0de8-4ce6-970b-c97e3795af41", "value": "1536:EJ7dZCypJ9KoNPROWJpLSeAwdsWWj4MLZLd6s:4ZZCypJ9BROsc4u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624812254, "uuid": "bc5e0d08-9aac-487c-8a42-726b715bc8bb", "value": 69116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624812254, "uuid": "83a13363-79bc-4cd7-a20a-c3f254ad7257", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812254, "uuid": "6d0c28b9-1f8e-4e00-94bc-2a3ea82a51a3", "value": "d33e08297224d62ac004d5078a91c8f4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb2b0d5e-d766-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624812259, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812259, "uuid": "d30347b0-ccd2-408d-a199-ca3835bcdf76", "comment": "Malware payload (Mirai)", "value": "dfea3cd79fa873584d9b6b70b34d3dc0", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812259, "uuid": "62920538-c531-41d4-8f08-b1af67a9dbd3", "comment": "Malware payload (Mirai)", "value": "49426faff7f2ef877cd6c829a1bb3f4c68d9c02a88b98ab7361dc565ec2113f5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812259, "uuid": "4fae85c5-5536-4bea-9de3-775fb93f8199", "comment": "Malware payload (Mirai)", "value": "14047da808facc5f91d3bdbda250592c84c20f42", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812259, "uuid": "5cb18f4e-da5a-4990-8194-a7b368e7fd1c", "comment": "Malware payload (Mirai)", "value": "f4737ba8e5d7f9abcda6ef0223b6c8908c87f109288e58aca4e094609534d0fbe401e31e70a27e491e8c3d6db76e1ae8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812259, "uuid": "329b2e20-82ce-41e6-bf98-24a7b31a3d08", "value": "58332981BC919A12C9C423B7FA2E01CD372563A9E2DF7207DE216F1177CA82F0E67556", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812259, "uuid": "82aacd90-f657-4145-af63-69bee5b2b4f9", "value": "768:aw8hF5yjQQsLC3TfWvHbXFspnpeyrNSwrfqUoOPbmBNOS9iVjySfR2Md:GhF5yjQ7LC3TWvHbXCGYSkfqp91", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624812259, "uuid": "4b3f7dfd-e487-4801-97c7-b5870f8c270b", "value": 54268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624812259, "uuid": "397d3e7c-408c-46ef-afde-ef01881adcb1", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812259, "uuid": "e760243e-385c-4816-8484-c8984a9caa6a", "value": "dfea3cd79fa873584d9b6b70b34d3dc0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2f18034-d755-11eb-875b-42010a9c0053", "comment": "Malware payload (Locky)", "timestamp": 1624804917, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624804917, "uuid": "4ca7cb4e-42a3-46ad-b1f4-0f41bee8925c", "comment": "Malware payload (Locky)", "value": "b66eb4bcb2860ef48afbc1378e1ae545", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Locky", "colour": "#AF187B", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624804917, "uuid": "7af62d8b-4ea9-4a01-8eb0-ac4faf7fb553", "comment": "Malware payload (Locky)", "value": "49a48d4ff1b7973e55d5838f20107620ed808851231256bb94c85f6c80b8ebfc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Locky", "colour": "#AF187B", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624804917, "uuid": "3ef12dc6-a569-415c-a2fa-71336c07e0dc", "comment": "Malware payload (Locky)", "value": "a2fcbf6e175afcee58344e6ee0f551fc2fff8d27", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Locky", "colour": "#AF187B", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624804917, "uuid": "0111ac68-0cc6-4dde-bc8d-01d5552c7a3f", "comment": "Malware payload (Locky)", "value": "47db0241ed7f09c81739e26fa034523ca92741014a36febc0581893dbff9a9b6c864b23d232decc403885dbfba6564f0", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Locky", "colour": "#AF187B", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624804917, "uuid": "66053535-c137-4604-a54a-6c4a827f2428", "value": "91F35B03BF592E92D02E0E3100B90F5AA355E9153B164FAB2519BA79EDFF2C22F113D5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624804917, "uuid": "d02622c0-70a9-4e04-83cd-6d9d2f4317f2", "value": "14f0cd9612d8e8836a786e6c13265809", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624804917, "uuid": "a1165b80-fc13-41c2-b0f7-74785647e61d", "value": "3072:j9UJ3gySjKLkEfwoZaNEP3N2QdW4BVa7NnnFRdqDGowa9:j61NSjVmaN63NiL4Di", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624804917, "uuid": "b8521721-9e93-4728-a7af-4e4f89ba292c", "value": 162816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624804917, "uuid": "fab3f1fb-f560-4e92-84d7-5534b74bd7c6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624804917, "uuid": "d07183af-2483-4099-a3cd-3733b268e2b3", "value": "49a48d4ff1b7973e55d5838f20107620ed808851231256bb94c85f6c80b8ebfc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d3e3f1f-d789-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624827053, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827053, "uuid": "d56dcf1c-6fc6-4158-9681-bbffbb14ee43", "comment": "Malware payload", "value": "916634d5e13b8077e86dda3fdb700b70", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827053, "uuid": "a27407ba-01c5-459d-a7d7-8beaf61c842f", "comment": "Malware payload", "value": "4ab2e48882e1fe3c891da3b523ff84923852de4c0b0e93715ee0d228b75e949c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827053, "uuid": "d161bca0-2a8e-49b3-a06e-fcd98a6ccfb7", "comment": "Malware payload", "value": "05705b9106987e72e94f1670c79deeadd52db3b6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827053, "uuid": "1a277969-16d2-439a-9414-5dbf4c035b4a", "comment": "Malware payload", "value": "731dcd21d2c6be2e40fafd630035cdee041fa24f16a8fc1c51e1ad69529ed749793401c595d4ccbb88e3878bf50dc247", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827053, "uuid": "39e9ab05-319a-4018-813e-51cc360acdb6", "value": "C1B3C517AB618FB7C85FCE3306AA850120CDA55612E97B2FB2B4D92CE74B94F08D3D54", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827053, "uuid": "484f0121-c447-488e-84be-6c095b4df17a", "value": "1536:ZLeTukthhSMOCMQS+ZjN4pjuIxreg2O6tWklwUmkiSFxfC7xbXe:ZRHC3S+dUreftnwUmkiSFxfKxbXe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624827053, "uuid": "9c038100-b741-485f-b189-92df2612951f", "value": 113268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624827053, "uuid": "b31bb807-43d4-41eb-b7b7-8485a1beb68e", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827053, "uuid": "570e269b-8e78-4b81-a073-7b3edbcc5b35", "value": "916634d5e13b8077e86dda3fdb700b70", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b3434f9-d760-11eb-875b-42010a9c0053", "comment": "Malware payload (GuLoader)", "timestamp": 1624809333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809333, "uuid": "066a1389-1eb4-42ea-a220-7840b68e74fa", "comment": "Malware payload (GuLoader)", "value": "37918801785947e0b92c90cca204c488", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#DC91BA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809333, "uuid": "95a2cc75-00c5-46a6-845b-a6de48bbd529", "comment": "Malware payload (GuLoader)", "value": "4c0b313250c7bcd61e17d42dd6e21d29f3da86453e40b5be900aebbd440aefe4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#DC91BA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809333, "uuid": "00bd60bc-b833-4030-b5a5-bcc0979253c6", "comment": "Malware payload (GuLoader)", "value": "737ee575faa21e72d7de4e8a1758c9eec7346e1a", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#DC91BA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809333, "uuid": "df9e6cba-e4c1-4cb4-858e-b809f5302379", "comment": "Malware payload (GuLoader)", "value": "48ca351bb6addace474488936c1dae7eaabf609728cef2c17a602fd0baf79bf939d140ca5792b72b515b33311d4c386c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#DC91BA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809333, "uuid": "34d36865-666d-41b9-bbac-0eb6ac21bf7f", "value": "6202A653ADD8AEB6CAC8D7341040D95835A548704A738F43EE5D4DFD38341523ED4A0E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809333, "uuid": "0f28b53e-9483-48bf-ad73-d89a0378ea1a", "value": "48:6XnuNnt82XlopnCJn81JyQ/fSBTts96xBx4ULu7S6Ff2VLz2Y:yet8TJw81JyfVzx4UGSpP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809333, "uuid": "5aeaa8b2-fc92-468d-a200-bcf6735b56a9", "value": 8358, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809333, "uuid": "ee87bbf1-25c9-4af4-9829-a06b10b52fb9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809333, "uuid": "f03668ee-a4f8-4de0-9b03-c38a6331b4ea", "value": "37918801785947e0b92c90cca204c488.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29671d0c-d7a3-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624838133, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838133, "uuid": "6606c10a-0099-484f-83fc-d71eb12131ef", "comment": "Malware payload (Mirai)", "value": "711f64498deb0018a1a3f05e016681fb", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838133, "uuid": "8998e187-ced2-4785-904e-f2e62f1b8a5e", "comment": "Malware payload (Mirai)", "value": "4ca4f19a34264b99302614d935e610b10bfc59525e6a710d8de9f814bce877e3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838133, "uuid": "f2fd3757-c5ad-4af3-a55d-0a5510a4d508", "comment": "Malware payload (Mirai)", "value": "4493149484a23219ccd6b0158c9dda2c50a94eb1", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838133, "uuid": "df84ade1-acd6-4987-b740-ee2d630b4d8e", "comment": "Malware payload (Mirai)", "value": "d0bbfc0fc9917d5d0e5de6a19549ce6a1620e7a460e029be86ada98688b65ae1ed69206a6b6c851c31a37b0a0ea64b98", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624838133, "uuid": "14749c12-bc72-4449-b750-bb9059a52e25", "value": "D46318817C80AA26C7D0177BFA9F108E3314ABD8E1DB73478C141F95769A81F0D6BB5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624838133, "uuid": "d0101d1f-a87d-488d-a859-e6e94b3d0d41", "value": "1536:GbtexU5L9XouIRhb96pUQzXtwavaJ3V8OHxouJeZWDFI8MM:GbtexU0r8QCKw2FbV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624838133, "uuid": "7eb3a9f0-286a-45b9-8d89-1593a71d371e", "value": 71864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624838133, "uuid": "0ee1e694-e52e-4ee9-97cc-28665589f803", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624838133, "uuid": "1b33636f-b10b-4dd5-bbf4-bb078c92fcb4", "value": "711f64498deb0018a1a3f05e016681fb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "58c82057-d766-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624812014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812014, "uuid": "53acf7e2-70dc-44d2-9719-ae74a0d90558", "comment": "Malware payload (Mirai)", "value": "7e88b190ec755c1f4b9f586aed8fab5f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812014, "uuid": "7acd9745-1bf2-42c2-8645-5164809bf0d5", "comment": "Malware payload (Mirai)", "value": "4d62432a33e8fde07348903ed04ed645d1f5b53d2c8cf588d2d5ceb390dc8aad", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812014, "uuid": "de92fb0f-f2c1-4a08-9800-74088c7fca8f", "comment": "Malware payload (Mirai)", "value": "86f9dd81e56f67ac0a77752f2bbe77c23c842b8c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812014, "uuid": "015d7c07-9175-4df3-9d66-322762dff209", "comment": "Malware payload (Mirai)", "value": "948e339e82a8419bc182baa47b064309ca3a07c6ec0d848c384eeefac4085772f0f9850e61d5985292e2aa5f7fefebce", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812014, "uuid": "276b6682-6bce-4f11-8e1d-78e47e526054", "value": "B6C33C46EB808A13C4D51775BADF424A3323E755D3DB330689189FB43F86BAE0E67506", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812014, "uuid": "2ec95aa6-ded9-475c-98e7-1393b3b00e02", "value": "3072:+KhtPUfCBPv49iuFcpQe8ZVu6W+WLwM/9TGyz:+KgfqPvSiuFcpQTVa+WkM/9Vz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624812014, "uuid": "89ee9e0f-a2b7-4363-aedf-a5acf46a9dcc", "value": 125754, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624812014, "uuid": "30a41de7-da7b-41f1-871a-1752da28bf7e", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812014, "uuid": "168f86fc-f51a-4120-964a-ff9e7a47293a", "value": "7e88b190ec755c1f4b9f586aed8fab5f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd7604e4-d721-11eb-875b-42010a9c0053", "comment": "Malware payload (AsyncRAT)", "timestamp": 1624782655, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782655, "uuid": "0480621d-fb86-4434-adc5-10b8788d7a8b", "comment": "Malware payload (AsyncRAT)", "value": "ab982a0867574bee916bb38ae7f4b488", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782655, "uuid": "ec49831e-8b56-4271-a645-cb865ad26360", "comment": "Malware payload (AsyncRAT)", "value": "51a9ec00920e2f5b63dd9b86f7ed6930e75e6e33dad3079645da55e81306b58c", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782655, "uuid": "5d9fb296-2bd8-4e56-9a44-d868c870bfd9", "comment": "Malware payload (AsyncRAT)", "value": "dea7db50a883ccdebebf372456b0e542c8b5f670", "object_relation": "sha1", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782655, "uuid": "791b9710-e062-4a44-b6cb-a3f559581637", "comment": "Malware payload (AsyncRAT)", "value": "7c3d0630dcaeb8e36c16aa98fedbdfb46d4fa8d73777fa42fb3741156a87dbb7cf5fedb87c53e82ac8ab830d7c48cde5", "object_relation": "sha3-384", "Tag": [ { "name": "AsyncRAT", "colour": "#64C37F", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782655, "uuid": "a5fea617-ca83-409f-a7f8-14bd658322a5", "value": "7C044B25B6D39E81C79D2A71C1DB12041375DB861773CF0E7A8E23E64D023A6ED86E8D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782655, "uuid": "35d104e1-f36e-4b53-80d0-5f5ac4cce629", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782655, "uuid": "0c9978b5-5bd3-4462-866f-26189aef86d9", "value": "3072:Xt0gROMGUkLR7Ky5WmMS5qoPepqEHhS3KNP1DQY2fmmQox:Xt04kLRkm6oPehS3I1DQtV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624782655, "uuid": "613ae849-d93c-4819-9d6c-6bf27e8f85ae", "value": 179200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624782655, "uuid": "4591114d-1207-4bcc-a77d-3276d3058d5e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782655, "uuid": "bcd1b238-2e24-4f40-a8ad-a8f6812ab80f", "value": "ab982a0867574bee916bb38ae7f4b488.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19eb2c3b-d724-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624783561, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624783561, "uuid": "f017e22f-93cb-4a80-89e8-97ff6b5b091a", "comment": "Malware payload (Mirai)", "value": "bb302f9ab96039120482805f0788c47c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624783561, "uuid": "cb235c35-349e-4305-9c33-edb2d48f648a", "comment": "Malware payload (Mirai)", "value": "53a4f52825eec802e3865de51668e0d3bac441e9d5e13d39578e7fdcf3436065", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624783561, "uuid": "920a5290-a30e-4c46-b343-84b97abf95e7", "comment": "Malware payload (Mirai)", "value": "3632550b35005e1ac0ebbc44a50e3aa349566833", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624783561, "uuid": "b7f84307-4c81-4905-a867-75e4f1eb0263", "comment": "Malware payload (Mirai)", "value": "7e54482e4411c975ca6fe6252f505e96140faebed0e78e6bf89bffe85b4881729d23fbab6541a2637aa8d8f60b00d57f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624783561, "uuid": "49433c49-03b9-47e8-9248-7b72d4472b37", "value": "33832A22F972093BC4D5A53A61E74639F2F6478A20FC8A1E3D610E8CBF655403757BE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624783561, "uuid": "38b03f79-b88c-4b52-a7fe-27e4591d0bbe", "value": "768:ngMtHp6RPO5933s6heGn9khOQSV3v3iKM5omMeTKxcO+s5/9bC9tzNY+5tzO0VOn:g4IOxn9k0JK51X5s5/MtTtzDEJXD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624783561, "uuid": "3c69905a-1119-4ac9-8d51-36f539d9cef5", "value": 81124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624783561, "uuid": "a206c5d8-04dc-46cd-bc92-f332d311a597", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624783561, "uuid": "de8517c6-7e57-455b-b62c-1e2e916944c4", "value": "bb302f9ab96039120482805f0788c47c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89caab6c-d75f-11eb-875b-42010a9c0053", "comment": "Malware payload (AveMariaRAT)", "timestamp": 1624809089, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809089, "uuid": "9d82b334-c409-4f7a-abc7-a2d520ca51e1", "comment": "Malware payload (AveMariaRAT)", "value": "b6bd7e3441e81b784e91079392abd5ec", "object_relation": "md5", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809089, "uuid": "1b484d66-a55b-4329-afec-ae70cc9f967d", "comment": "Malware payload (AveMariaRAT)", "value": "555a20d3756ad65f74f4ea768098c703a14bdb667772223abb8ea6e1c084ee7c", "object_relation": "sha256", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809089, "uuid": "14fa9b28-fd14-4ce9-b2c3-3624cdb53b13", "comment": "Malware payload (AveMariaRAT)", "value": "18845b925092aade6be7013cd169e110c1ec80fc", "object_relation": "sha1", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809089, "uuid": "e0686c1b-a0ca-4122-b3aa-3cb17f12ef30", "comment": "Malware payload (AveMariaRAT)", "value": "608fd91fb3797cab5903975f10dfd9f136463f34118731e4c2c01c19d2c4b55ca084bf33dffccfff085d3532529a2435", "object_relation": "sha3-384", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809089, "uuid": "d6ecc8f7-f1b8-4e58-9a7b-c49c5da4e617", "value": "AAE4BE352EE8423AF1FA9F7D85A4244197BDF6236F03D96D78B912C90363942C9F113A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809089, "uuid": "d36249e1-7b80-43a8-a75b-6867676a319e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809089, "uuid": "7383ae0d-35f1-4b39-a951-ad3f76981a70", "value": "12288:LXk+7jaIWwuo3gl7mM94VBfzI175k9UcEKML8yz9ldtDReK+98VAd:LXb7jrqJ947fzUCXxg9lQf2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809089, "uuid": "b5844a94-0638-4298-bc70-bca3ec98f92c", "value": 696320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809089, "uuid": "fc2159fa-98e7-4ea9-b856-6c4d5f0b7827", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809089, "uuid": "5716afad-00da-440a-9e89-f9929a3cefbb", "value": "b6bd7e3441e81b784e91079392abd5ec.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db9a12e1-d779-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624820394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624820394, "uuid": "ce9b03a9-4a6e-47e2-80e2-3aa2a060b0c4", "comment": "Malware payload", "value": "32537a738e28be4492a76bd1fb6942cc", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624820394, "uuid": "5053c33f-4738-4a15-8cd5-da5437e14336", "comment": "Malware payload", "value": "58199bddad762ec10114f06c6ed838b288558e61378d9caf74af1ba861e7e495", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624820394, "uuid": "2f2ad6e1-4a43-44d9-ba4b-a9e6b26505c4", "comment": "Malware payload", "value": "adca143972e707e0f5ee9e3075219e51724f5599", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624820394, "uuid": "49d4b9fb-ebb4-45ae-8dbb-0231b77efb56", "comment": "Malware payload", "value": "4b70e3f3e21112178263f0f78a17f9da30bb4ddcf84d0632640e570495186890c565b9dd5da11baadb6b99ab4f2fbaa6", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624820394, "uuid": "c5dba952-fdfd-44dd-974b-c546efc266c6", "value": "D784252864BFC05985E3EEA12EDCA8FBD89A55E3640C743701B4633B8B51B84DE4F479", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624820394, "uuid": "30eec335-5c79-4198-8c2b-2c6b9b12b49a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624820394, "uuid": "de46e4d8-f869-49de-ab67-9463ab1d1027", "value": "6144:LL5YqofbJodjLftK6KOhsXIeLdX6Tv/3zVL1kyTR:LL5Y3fbJodXftK6KOhsXnLdX6Tv/3zVn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624820394, "uuid": "d70339b1-532b-437e-82e6-2aba9e26fd2e", "value": 392584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624820394, "uuid": "159bb2bc-a824-46d1-8e1e-6ff118255a42", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624820394, "uuid": "4ad32a42-e590-4bc9-890b-2fa295306b67", "value": "32537a738e28be4492a76bd1fb6942cc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cce3fa92-d749-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624799753, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799753, "uuid": "a22dd3d1-6dd5-4375-901a-1a9b1c3745f3", "comment": "Malware payload (Mirai)", "value": "291ec3e492706d315f44715c57e85d36", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799753, "uuid": "f5c359da-a180-45c7-a921-f71204774c61", "comment": "Malware payload (Mirai)", "value": "5b56a70d32a972b7d21d267358ca1c887d94ff8f3e279bbf4ab1d191514361cf", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799753, "uuid": "8f490dc2-a15c-4ec0-8445-897b9dbb14f8", "comment": "Malware payload (Mirai)", "value": "0569a67a532a539457b6111dbe4afa679dce4521", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799753, "uuid": "c9e9fd08-014f-4a45-b7cf-5b2ad66b7fd0", "comment": "Malware payload (Mirai)", "value": "6e4bff85074e4a6602f77f69ee0b91b9e1ae263f6734ed1b436957f895786de684f58056eb3329000cc1af3fc11e36c3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799753, "uuid": "9be98d28-e0f6-40be-8ed4-1d9727d84c4c", "value": "9FB2D06C59FCB96ECFECECF9A0A50A155944E08C3349578D9763C85C7239A2AF1C90BC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799753, "uuid": "385e5508-c0c8-4f23-a41e-391b5496bc25", "value": "384:SnPxNuRTN/gJ7nrL2T27MJS8XVdzxDqjT6d2GQok0+VxKA8dVQIGJMjRWGVCz0Nx:SnPxNOenrL2TqMQ8XVdVY6d2G7k0wKrZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624799753, "uuid": "0f8c4458-98e5-4635-b45a-31d2910adf6a", "value": 24548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624799753, "uuid": "8f23dab9-3b04-4dfc-b772-196b450891bb", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799753, "uuid": "e76f80d9-65b4-4be4-9773-9b68d04c5387", "value": "291ec3e492706d315f44715c57e85d36", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c56c55e2-d722-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624782990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782990, "uuid": "d9404f4b-8d04-4f7b-b2d4-ec4994ef95e7", "comment": "Malware payload (Mirai)", "value": "c4dd96880ee77b773bf069fa7f7c7fd0", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782990, "uuid": "f017a496-c783-4813-9761-da39ffe93f20", "comment": "Malware payload (Mirai)", "value": "5c5d4b0bd958b8b78eee76bf0eb32d201b44ccd84023e82da07de838a7b97ac1", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782990, "uuid": "b474bbb9-cf06-4483-b93a-c58be974abfe", "comment": "Malware payload (Mirai)", "value": "85ad93d65ea6e7cd7f7d1cfca7102cf1d304eae9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782990, "uuid": "614cd9ed-9a58-47bb-a387-ddcb831151e1", "comment": "Malware payload (Mirai)", "value": "a0cf0ed1f70ef214d0e14f83ec7afb67887b421ab2e434773373e7caed95582a8e681b7b71d576a00e211a2c4844a219", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782990, "uuid": "a2674dda-7d33-4b06-8aa5-9aecf1f09a9d", "value": "92A32A5AF980AB11D5D526BAFE4E524A33131BBCE3EE71129D105F2027CBA6B0F37905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782990, "uuid": "37ae15e7-c400-479b-badc-713a2db41cef", "value": "3072:/hRAGD9bYYyZaRSdYnhNdMKeat9GE0pn:pRAGhbYtZaRSdYnhN2KrGT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624782990, "uuid": "62f12b39-430e-4981-b901-8b1a696dec5f", "value": 99860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624782990, "uuid": "bb3dcddb-8350-41a7-b491-ecc326c57b22", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782990, "uuid": "68145ead-02c5-4162-a474-c46ced40917e", "value": "c4dd96880ee77b773bf069fa7f7c7fd0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d929aa97-d75f-11eb-875b-42010a9c0053", "comment": "Malware payload (AveMariaRAT)", "timestamp": 1624809223, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809223, "uuid": "3d24de6e-1e5d-4ee3-a50a-0f10aaf191f3", "comment": "Malware payload (AveMariaRAT)", "value": "0c8dcf138d02fb48a29e4d106a071c93", "object_relation": "md5", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809223, "uuid": "48a1d592-4cc5-47ef-88a7-589a48f7daae", "comment": "Malware payload (AveMariaRAT)", "value": "5cda3b8edf28833303a9a49a51c211581f47e3b1900efdf0ea79b71e308f46b6", "object_relation": "sha256", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809223, "uuid": "a99bb404-8fb4-4396-bcd5-28049670a4e9", "comment": "Malware payload (AveMariaRAT)", "value": "37a80314fab2d811af6ffa5d8f5bfdb8db7a105b", "object_relation": "sha1", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809223, "uuid": "8fca9cd1-b029-4f76-ba9a-9886bce05c62", "comment": "Malware payload (AveMariaRAT)", "value": "3426c1aa6a0535388d240b99281663c99228b03e1ae461805abd5590566d3fe77d500276600fc90f5e064b487c2e7610", "object_relation": "sha3-384", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809223, "uuid": "ffeb45d6-0dfc-4237-857a-3ee9f402b5c8", "value": "20B39E13F7E54835F3B201B01ABD7E7ACBADF9701628C49FA394854B2D31846EA25397", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809223, "uuid": "cfa4e7ea-53e1-42df-bab1-c7162d506ea2", "value": "51a1d638436da72d7fa5fb524e02d427", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809223, "uuid": "c09365e9-f35f-4a83-b2d9-92fe48877e53", "value": "1536:h0jP7/L1B5rVmN8sxHv2M28ix8EUaJxWZoB4u0OVE01/:K1VmhaH8EFvW+0OVE05", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809223, "uuid": "63221284-5c8f-4991-80c3-55819fd3757e", "value": 112061, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809223, "uuid": "3ae2010f-1faf-4aed-a390-243cc93f07c4", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809223, "uuid": "30c05973-5d1e-4e49-9ade-6ed47ed42bf0", "value": "0c8dcf138d02fb48a29e4d106a071c93.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00413bf2-d74b-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624800269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800269, "uuid": "38356cbc-36a2-4a00-8eb4-30d0fd42e3da", "comment": "Malware payload (Mirai)", "value": "de8cfe1ca160afd36c3f64547e8059c8", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800269, "uuid": "9e2c3359-39f9-4279-aada-b706b3c77f48", "comment": "Malware payload (Mirai)", "value": "5d66762e37cdf83bed139d44a3b1ba37f6aebdd0e51510a5faeed7eaf380925d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800269, "uuid": "87aec013-ebdf-4ef3-8129-ff7c90e08efd", "comment": "Malware payload (Mirai)", "value": "59f4857750aa15231fca14370a7a72b2b89a76c1", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800269, "uuid": "43edfae2-8ffe-42d8-bb12-c480265d82fc", "comment": "Malware payload (Mirai)", "value": "f467696b048ee26e6878a31da03ccf0abbf9cc773b9321e758dd03c99fa33bdc85616e065d3a8100d827799dfe6a33d9", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800269, "uuid": "8c964d5c-91d9-4af7-9de1-bf4c2a60a44a", "value": "3F339E71C47C6D58D1A94274B9288E381763E60DAA571FF91686CA62C047FDCF22C3FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800269, "uuid": "80407c36-574a-4280-8d22-21aadc938216", "value": "768:5/COqtwHTc5HpGCUFvazxeUVSmGq0akyPcHEhOMp4RfoEGFYXKC4H1:5/7cs4oCqvazxvW5Ehpy2EXXKC4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624800269, "uuid": "ffa1cb78-0306-4d0e-8002-5b475d6fd247", "value": 54824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624800269, "uuid": "7b8bccef-35aa-4adb-a46a-cdd1bcfbbbac", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800269, "uuid": "c61c638c-c532-43c7-bb99-cdc17370c2f4", "value": "de8cfe1ca160afd36c3f64547e8059c8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6a39b344-d6e3-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624755779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624755779, "uuid": "7a9a5dab-4da0-4841-97f3-a376509716cf", "comment": "Malware payload (Mirai)", "value": "8143b5bf76863f4e621c0e23a5ad419a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624755779, "uuid": "f5f91e43-3e4f-444b-9c2d-3c45ce8fee80", "comment": "Malware payload (Mirai)", "value": "5dc0a5973558865bf5899df4c0e8760edf55a63d2bfcf153442c9fd26ca679f3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624755779, "uuid": "2c2f20da-4fa6-4b6f-8161-c38c99b27ebd", "comment": "Malware payload (Mirai)", "value": "31c515ff8edb5f891483c8353360459bb794de40", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624755779, "uuid": "1d49eafe-be87-42d0-8cd1-9f29aab031af", "comment": "Malware payload (Mirai)", "value": "faa3b173b32304d6623f33feb8357f3548415032e81cfe23b0d2d9d122362bbc5030a2bfa497ba3f2141abf9e6148f53", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624755779, "uuid": "05cda574-72b5-438a-a69e-1220c75d1b2e", "value": "7B131048FB99A32EC691F2FFEF49428E37250B957BFE3D2A9235014533C87386526514", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624755779, "uuid": "e035b5c7-38b0-4c9c-8406-06ed6a1ab8e4", "value": "768:IGpnC4VrT6l2myNHH3hy7a41AF+0aHB4+QTN23E8b/72vtaM9o6DBBxtdR+te2jp:TpCcmI3hy7SFmwNtOzlwBtue2jp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624755779, "uuid": "1bec8275-a846-4420-8ed2-221d2ec5dab7", "value": 44023, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624755779, "uuid": "be5d6ecd-a2d8-4b58-bd5d-cd7903292e7e", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624755779, "uuid": "4e539ec0-95a7-4223-a411-9cd735a127c9", "value": "8143b5bf76863f4e621c0e23a5ad419a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d07cef2-d768-11eb-875b-42010a9c0053", "comment": "Malware payload (BitRAT)", "timestamp": 1624812933, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812933, "uuid": "e6477302-7ab2-4c87-8144-9c9d41811026", "comment": "Malware payload (BitRAT)", "value": "2344bf0051cb3e80adb26fbf512808ad", "object_relation": "md5", "Tag": [ { "name": "BitRAT", "colour": "#52156C", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812933, "uuid": "9183219d-7669-41ff-8881-ff2358005792", "comment": "Malware payload (BitRAT)", "value": "5f4bd8751b7f69a3c41de37b2ffdb32a4434c4c9af179211f7047b18cfd34302", "object_relation": "sha256", "Tag": [ { "name": "BitRAT", "colour": "#52156C", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812933, "uuid": "ecaea0bc-281a-4ed4-a22e-cc6914c071fc", "comment": "Malware payload (BitRAT)", "value": "df76ae9149cb462408cdd015a417806838ba177c", "object_relation": "sha1", "Tag": [ { "name": "BitRAT", "colour": "#52156C", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812933, "uuid": "3b71aea8-0f74-4cbe-8f24-5ad0697d23be", "comment": "Malware payload (BitRAT)", "value": "383712452e8c4a560698b5340ead15677e394762f85cbcf961313262245004c7039dd7de8991a042467ef057b6856564", "object_relation": "sha3-384", "Tag": [ { "name": "BitRAT", "colour": "#52156C", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812933, "uuid": "eee49498-9bcc-4532-9c64-1a04da4b328b", "value": "8E6533F781129122FA5CD6B87A126F3D2532869392AD73E33D8F456B4E3C216BD41C36", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812933, "uuid": "74275907-d09d-4c13-a934-195ffc4e598c", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812933, "uuid": "4fa7668b-1a46-4fea-8fff-09f05e8a8d89", "value": "24576:8JmQ3QWWrDXNmFyC2SadnEHgeJhDIZyHvoUdEdNH4Nh564YI63PJwO5deB:8qrD9TC2SVACoUe91Jxl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624812933, "uuid": "f82902a3-61ba-45f3-9bbc-a3d89750aedc", "value": 1510912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624812933, "uuid": "9fe5411b-53c3-4096-bff1-a7bf53965211", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812933, "uuid": "0544f8b3-9002-45d8-888a-a72672b4c4a9", "value": "2344bf0051cb3e80adb26fbf512808ad.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d3eaf10-d75f-11eb-875b-42010a9c0053", "comment": "Malware payload (Smoke Loader)", "timestamp": 1624809068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809068, "uuid": "3ce4252c-722f-4a81-bab5-c40b6d9edfe4", "comment": "Malware payload (Smoke Loader)", "value": "e01eb424dd644fc04434ddcb6849fe44", "object_relation": "md5", "Tag": [ { "name": "Dofoil", "colour": "#47EB3E", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809068, "uuid": "46db6097-1085-4db3-b644-4f242b6426f7", "comment": "Malware payload (Smoke Loader)", "value": "5f70533863edb6571d58b52d9ff6a95dc8c34842e29076c9939e99e31bf782ee", "object_relation": "sha256", "Tag": [ { "name": "Dofoil", "colour": "#47EB3E", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809068, "uuid": "96123a35-4c23-4299-a2ee-01dfe1450ea4", "comment": "Malware payload (Smoke Loader)", "value": "c1f0ca3e05daa44399472891ef8d36cac60814d1", "object_relation": "sha1", "Tag": [ { "name": "Dofoil", "colour": "#47EB3E", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809068, "uuid": "31dc0cc1-d52e-4a0f-b1f0-e4c3d615c0e6", "comment": "Malware payload (Smoke Loader)", "value": "73ee56d02251fbfe53a738bfb0cbf4fe4ea83d5d053be89b0c48bfca7dd1eb4c24b45f8ecdb1c19b2b8b1fb3a7b961b3", "object_relation": "sha3-384", "Tag": [ { "name": "Dofoil", "colour": "#47EB3E", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#164A24", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809068, "uuid": "0df2b91c-cca9-4e3e-90e3-9e13b748c835", "value": "AC848C01A760C035F6F312F8897AD7ACA53DB9A05B2050CB62E5EEEE56346E1EC31357", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809068, "uuid": "7ba6c134-aacb-4cda-a608-9b31df089e88", "value": "c76f45ab523e8af383de4b12fbbc52d1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809068, "uuid": "9ac9d94a-f5de-42b6-a152-02c9d41fd610", "value": "6144:p6J8S2iSWwx+nCciJ8POuEuIGioBbPHobvVAin4ZU3fPkL:p7Px+nCfJDJuIGLBbHoHWY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809068, "uuid": "2a0b6004-1fa1-4abe-8eac-c49e2e2ac4a1", "value": 374784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809068, "uuid": "122e7aaf-32a2-4f4c-881c-2b4e9f9ebba9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809068, "uuid": "737d8e36-2ef2-4d19-8571-43ff9fe9ca40", "value": "e01eb424dd644fc04434ddcb6849fe44.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5c10c11b-d74a-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624799993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799993, "uuid": "06312e7b-9665-443b-a8a7-3ff73cfce65f", "comment": "Malware payload (Mirai)", "value": "f7eea2e2b98c148f47991e8a5e63c36f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799993, "uuid": "8071c4c7-2875-4b6f-ac4e-83d9e3d2058d", "comment": "Malware payload (Mirai)", "value": "6002d1f6c6e45e25fd3607528d19c25b18617317b2fb80aa63e822b242325066", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799993, "uuid": "c399aad8-62e5-47b3-9066-b5c9327b0840", "comment": "Malware payload (Mirai)", "value": "f4cfe946acde8d0d2b1da3cea0a0fa38e5fe2435", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799993, "uuid": "efab90cb-353c-41c8-87d7-746ce08bc12c", "comment": "Malware payload (Mirai)", "value": "3007d8e39368eaa171b3b94308408c4d034135423a45f18763b49028780210b44c964976bf0ebccb713e56e8061b3555", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799993, "uuid": "aaa6136a-d3da-49cf-ad99-f03524efd510", "value": "3AB2E17C429601EEEE63D9B563E60B702DB45737E8018C47A48DCB436F4A1E9B843D6C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799993, "uuid": "7906e2b9-2164-473f-880b-881db2d9ac45", "value": "384:0RtPJjgJUbyselGZ81T98eL9kwIKUQTL3cF0t0gSix0pRzZTCheV7e//JgGlzDpr:cPaUJelGC1LK1FQMc0XV24q//JgGlzDh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624799993, "uuid": "377d8753-60cd-40b8-811b-684eac71aa62", "value": 24052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624799993, "uuid": "3aaa042f-e3f4-4d5c-afce-d8307477f792", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799993, "uuid": "c4bafd2b-a03f-4205-8e44-4ab2af59f90e", "value": "f7eea2e2b98c148f47991e8a5e63c36f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52a80ca4-d766-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624812003, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812003, "uuid": "51e1e8d8-5abd-4301-be72-704ae7b66cfc", "comment": "Malware payload (Mirai)", "value": "29a3e5ff7ff40b417bb0c27207574641", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812003, "uuid": "1a33a002-6de3-4076-b20b-016692de06b4", "comment": "Malware payload (Mirai)", "value": "639c9dd724dcd400388129e0dc3b043bea80ea1911df4dec681c4dc22e678b33", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812003, "uuid": "ed412ae1-d019-402c-92cb-d3fc70be6ca1", "comment": "Malware payload (Mirai)", "value": "91c9b808523705aa51487f8d7d7de971e7a62b79", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812003, "uuid": "f5c2806c-32c3-4ef3-a369-3c3e065e1f9e", "comment": "Malware payload (Mirai)", "value": "9abd136169e14238b8c72669d0088c407f981eb2c2546fe74bc18e42ebafb7914b675c9cde56880fbf5ecee4c4caa2b8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812003, "uuid": "15936b63-98cf-474e-9882-e410e77851f0", "value": "C563965D2E219FACFFA886344BB35E20924C33E626E1C945E15DEA011E7034E745FFA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812003, "uuid": "bbadfdfa-943e-450e-8553-bc093feb4461", "value": "1536:58B83DOpSxUzpP+vntvnCEvnNY8QYdMyH2q9r0t3bCTeJqmH:qK3DUSq5sz2er0trCTeJbH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624812003, "uuid": "4cb5c58d-04a4-4cb9-801d-05eef6ef04b0", "value": 67564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624812003, "uuid": "dcfdcdfa-ae4d-4fad-a458-7b889dccfc8e", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812003, "uuid": "9b4dd7ee-f9cd-4bef-ac59-68c293df71ef", "value": "29a3e5ff7ff40b417bb0c27207574641", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02504819-d6ed-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624759899, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759899, "uuid": "39f96cf1-0ccf-4a43-9a41-bab0c08560aa", "comment": "Malware payload (Mirai)", "value": "0f1fa1099d312e64ec1c07ad41c3fcae", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759899, "uuid": "8ef4e458-40a2-44ba-85cf-28e2311e235f", "comment": "Malware payload (Mirai)", "value": "63c2cae1f3d04d81a4a1dcd773c62d7e9a71cf7e3ae0c5a9f931353e86f11651", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759899, "uuid": "41506e11-f564-4b5d-85f7-d29c94a2f906", "comment": "Malware payload (Mirai)", "value": "a4b86c26df090f9061e482eacbea76b798c01e66", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759899, "uuid": "a76711c9-e1ec-4a7c-807b-e176470c95a0", "comment": "Malware payload (Mirai)", "value": "2dc4773edbd9efa480c4f5d8a247ea554117c9c4c72fad88409505360d5a141e1d3880fd026fc0ff7039e65e811fcb50", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759899, "uuid": "65268a75-4c52-4ac8-b06c-559f79165896", "value": "04732886A9659FB7C006A4F025B55E740B26BD921E1F0ED86138FAD4427F9CEB00FB74", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759899, "uuid": "82e720e6-784f-44b0-b083-5976ecabbfa6", "value": "1536:2LjqwUfyg/JAhEMT2XcKNv+PPByq6QvojL7Ck4:2LODag/8EM6XDNQBy2vG7y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759899, "uuid": "0ba68fe6-b231-4448-9479-2f01cf163e37", "value": 76216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759899, "uuid": "082ecc99-c413-43ca-afaa-a68d450cd39c", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759899, "uuid": "ed5ee02c-288f-4f31-af9d-97c4161d43f0", "value": "0f1fa1099d312e64ec1c07ad41c3fcae", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "021d7301-d6ff-11eb-875b-42010a9c0053", "comment": "Malware payload (DiamondFox)", "timestamp": 1624767630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624767630, "uuid": "9909e62c-2963-4d41-b2c7-8172ec82e689", "comment": "Malware payload (DiamondFox)", "value": "7d7537d94bbec90155c8e0e0d0a15a66", "object_relation": "md5", "Tag": [ { "name": "DiamondFox", "colour": "#EB8395", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624767630, "uuid": "a9e72064-cbde-4e39-a4eb-577df2886ba2", "comment": "Malware payload (DiamondFox)", "value": "64565f657fa253edfad53f3cc7ab519382c6250fe47c75512650d50b379c2dad", "object_relation": "sha256", "Tag": [ { "name": "DiamondFox", "colour": "#EB8395", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624767630, "uuid": "bba290e9-b904-440a-aa3d-bb69b591469d", "comment": "Malware payload (DiamondFox)", "value": "0819b46577cb6017697ee99d8af4b96f9ca8c006", "object_relation": "sha1", "Tag": [ { "name": "DiamondFox", "colour": "#EB8395", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624767630, "uuid": "1624fe2b-f95c-40d0-b583-b78e8a75d197", "comment": "Malware payload (DiamondFox)", "value": "6db2be1410e64250d64758b6aefe645ce79bd91ae0f77d70621770fec9c26887c8f50cfa6ec7c425338e159e92874111", "object_relation": "sha3-384", "Tag": [ { "name": "DiamondFox", "colour": "#EB8395", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624767630, "uuid": "1fb0f734-18f3-40c0-91cc-6ce130867b9a", "value": "BE66332663518677C6A02A76DA4FB1B7B43DB7480F7520CF67C80B7A1C35A1922F079E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624767630, "uuid": "2c6cb8c5-d59f-4266-968d-78067e63c34b", "value": "c9adc83b45e363b21cd6b11b5da0501f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624767630, "uuid": "e10ccd77-eed5-42fb-8d8c-55c2d1b0b95b", "value": "98304:pAI+6p+goreqMswPavGIM45Uz8hyraVTe5fh8ndc3sTURdJvSf/rFijbHIRc:it6p+gyhio5UzQbMBZRvSf/cjbHIRc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624767630, "uuid": "c231da3d-9f7f-488a-b316-cb6b69ce73d9", "value": 6638686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624767630, "uuid": "4dcfd231-0b0b-48ef-8ef4-e488e0c7ada6", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624767630, "uuid": "7b508882-8e2a-4a07-b8a6-7d2814331bea", "value": "7D7537D94BBEC90155C8E0E0D0A15A66.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fd81bb29-d74a-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624800264, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800264, "uuid": "6bc590dd-396a-4608-9560-656f8f817377", "comment": "Malware payload (Mirai)", "value": "eae64bd1e26ae220a7a8513b6eda6f26", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800264, "uuid": "bcd6b94d-8fa2-4173-a894-39461b8334cc", "comment": "Malware payload (Mirai)", "value": "65f43526cbdd5b622582a0629379b046b0ff04ca14207a232bbe96b71453875a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800264, "uuid": "2e75b6f4-4da0-4613-a2ce-c53b0c114f46", "comment": "Malware payload (Mirai)", "value": "8ad69c9a4619215d2ab19196f58792c0baa72e44", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800264, "uuid": "8a8a8ff1-5439-406e-985d-c577dd750aca", "comment": "Malware payload (Mirai)", "value": "727a1daaac0513ab7457d7c828fecedeeea72e34cb133693033892fd944538819d8381d103f899dc54f7cd5490f15a7e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800264, "uuid": "c443485d-1e00-4fdc-923c-5ff9f6a3e9e4", "value": "F22301451B245401CBA12EBBDB99C313DBAE2B76D06925E06AA449833F41E9335A8FC7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800264, "uuid": "244b0592-1f6f-46b8-b897-875fb9ec305e", "value": "768:EHq8XdG1zv6dgQqzo/8r0Ak6DOXz9nDK5F9q3UELbyBZRUpjx6+KNn2Cau:EHq8XdKziiQL/8HKXNDcYLbSUpk5N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624800264, "uuid": "13fb4df4-bc56-4027-8b2b-712600f72d13", "value": 46848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624800264, "uuid": "ac4f9ac4-e43d-495a-937d-5ef630fbd42e", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800264, "uuid": "503f839e-ef89-4152-9f51-d5d9dd5633a6", "value": "eae64bd1e26ae220a7a8513b6eda6f26", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "445edff3-d6ec-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624759581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759581, "uuid": "1b209211-1e76-45cf-b265-9fde9fbcc4ba", "comment": "Malware payload (Mirai)", "value": "d466f09a48e49bbffd72e74ff753fc8c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759581, "uuid": "fbf2a2aa-2265-4357-b345-0c8353baa124", "comment": "Malware payload (Mirai)", "value": "675d7025b19c89f85fbbe91d82f1d95e09448b580ddcf0d24699e3dcdf44936a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759581, "uuid": "6d4edc8f-ea90-4e19-bd57-935c5bdbcdfc", "comment": "Malware payload (Mirai)", "value": "0dff8984a48f4af2010c6600055704a4a2f7c1f4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759581, "uuid": "e6be4a06-5749-46d7-80c7-7173eed7f92b", "comment": "Malware payload (Mirai)", "value": "f7c5692ffdd8d3e6980220b9dc4f655256becbf7edda6273c08c7834162e5823cd8ac147a99b0c9f806f22422fac8257", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759581, "uuid": "595c3195-e8b1-4276-b4c6-f8ad27b7920c", "value": "C2C2095979C2A62EC2D0D276FA3E629D7351A3D8C1DF3313CA145B017E87A1E1EA3B41", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759581, "uuid": "009194db-6864-4815-b323-102d3aad7185", "value": "768:2ksw+v2xN3gDTHSJ+HsDyPOQ21XzcyVtTak+pcY1:n+k+THScHs+x214rc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759581, "uuid": "b3ead7f8-5b93-4e4e-bd63-8bc2740fdc6d", "value": 26976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759581, "uuid": "ecd03510-0595-4119-a63d-a2015f6fc441", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759581, "uuid": "97883272-2d7d-4772-b250-c185c777deb2", "value": "d466f09a48e49bbffd72e74ff753fc8c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c689344d-d7a3-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624838397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838397, "uuid": "8b45583f-0c0e-47ff-8ede-396c27e96b7e", "comment": "Malware payload (Mirai)", "value": "255cac520e111e1b5747c61aae8465d3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838397, "uuid": "8c0555a5-557e-44dc-9d2b-f22f3812f69f", "comment": "Malware payload (Mirai)", "value": "6a02d80b1b1c6b1f2271dfc03ba47b79942cca6b7cd3f8383b8f2ef6ff44c237", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838397, "uuid": "2a16d0bc-2dbb-4153-bcf0-a04d0c29f35e", "comment": "Malware payload (Mirai)", "value": "830526a927570c7d0f602648b25ac7ccf8a5a2e9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838397, "uuid": "a89f6ca8-2aea-4dee-b469-f90c29762107", "comment": "Malware payload (Mirai)", "value": "5ab26cbe80dbf5598f5bcaf5558448f086b9be1aee09e41990ee75df8c6cd6ae3469da143db027ad3e3acc3386a2fb14", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624838397, "uuid": "cbbf5d29-f934-4d8d-913a-cce6eb3b46c7", "value": "F2539EA5C4AC9D98C6264678F614C839AB23A00C62A33DF6DA57C656845FDFCF01C7F2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624838397, "uuid": "324b440c-37f3-4e30-99f9-b0993f26064e", "value": "1536:K/ue90IlCalyZyuhx+vACs2U/SO/Sfs3zO/QSwtPlCXOi:KGejAGyZyuhxaU/Sjf+iYdtPlg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624838397, "uuid": "4d89f0d5-3f29-4913-bada-97fadc4afec3", "value": 66368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624838397, "uuid": "f16cd95f-c8d2-4c4c-94c5-ebd4355d08cf", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624838397, "uuid": "85b63b5a-2229-4b5e-8608-1777b33be877", "value": "255cac520e111e1b5747c61aae8465d3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6d33555-d788-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624826801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826801, "uuid": "bc4fc3f1-05db-4556-81a0-9d0598ac9758", "comment": "Malware payload", "value": "f65016bbd598906e3d9037903eca21be", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826801, "uuid": "5860567c-c611-47c6-94e6-2313909f3ba8", "comment": "Malware payload", "value": "6aff647179862c1a41491c061b55bfc86c3e63154ed564e0a81cae1b7f6d8150", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826801, "uuid": "74ab8dbf-f0b1-4570-983c-9f96bab345d1", "comment": "Malware payload", "value": "84f30737654751a6d29c71c2e3b45f3806567fc2", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826801, "uuid": "e275e4ad-89a3-4f7f-8697-7107ca08467c", "comment": "Malware payload", "value": "1fe9709b167708bdc995e3bba938030079911edaaf62ab1f93815d4649fcad56d02bf188b0f5ae5058fa15e4e1c6c835", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826801, "uuid": "ac4a3122-d7c7-4ae0-b700-932b6b5cd787", "value": "2893F892B800DFA7F40ED77A08D34725B670FBA24E531672731779A6AE322D43826F45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826801, "uuid": "323e3635-8abe-4a56-9010-e7c444cae351", "value": "1536:QKxXqX58NlGUGYgFQmjHdJANn9zofeQyBUgon2mz7k4xTmQ9VqXjewf2Le:TkX0luYWTo9ofeQyBUNTz7bmQ9VqXywp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624826801, "uuid": "f99486b5-666c-4c0f-bab7-77544488c9f6", "value": 91084, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624826801, "uuid": "9e8b33fa-82a9-4d06-962c-2f978a857ca9", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826801, "uuid": "96994ad1-455a-4aa9-a80b-2b666219469b", "value": "f65016bbd598906e3d9037903eca21be", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3880b760-d6ec-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624759561, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759561, "uuid": "463a21f1-28d4-4d6e-85af-1b2ee22cb261", "comment": "Malware payload (Mirai)", "value": "2b095cc6302818f893e82f9fc51f8735", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759561, "uuid": "9a27df55-8736-4ec0-90eb-8532dd47532b", "comment": "Malware payload (Mirai)", "value": "6e2eead73749209c1c13ffa13228d0e1ab6ff216d5e8f59bca2fa39a8578d169", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759561, "uuid": "15da9cef-5a12-4321-b0b2-2d1ad90f788a", "comment": "Malware payload (Mirai)", "value": "32aacb5222d47f714541c55a5485787e3ce6f8a2", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759561, "uuid": "ed962341-9ced-49da-af95-192158cc5410", "comment": "Malware payload (Mirai)", "value": "73efa83bcabd495d9376534608a641a610bdbb74ee522b2ae91a62f9a2f0de172a69d94b92c2f82e7bc4dc5bd15f3fcf", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759561, "uuid": "cd6ed1b5-ebca-49a9-b69f-2e90ce33e4ff", "value": "FDB32A5AFB408F03C4D51776BADF42463323DB54A3EB23065918AFB43F866AE4E63905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759561, "uuid": "599501be-b8bb-4bc2-ba95-e55593dc313d", "value": "1536:ptn/83sUrI9ZHQPC9X3CPp7gdlRiJiEAfi9twmSAW9SUkUzw/9W4fyyVEoM88E5Z:I3gRQPC9X3CP+GAf2Om5WHM/9W4Djr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759561, "uuid": "cc469607-5db3-4d5f-bc1a-486599720fca", "value": 108782, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759561, "uuid": "71d590d0-7490-4e0f-b951-7243a5f799ee", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759561, "uuid": "5001a228-079a-4771-8e61-2b357cbead85", "value": "2b095cc6302818f893e82f9fc51f8735", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c212b47f-d749-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624799735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799735, "uuid": "5ab7ba8c-aad4-461b-a3ae-a26d60882cfc", "comment": "Malware payload (Mirai)", "value": "8a22af54a4f80a21f2a8224db0ef76e4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799735, "uuid": "52869cf4-8073-413e-9f48-2b30ff6a5252", "comment": "Malware payload (Mirai)", "value": "6e89e91e232aaac438535165606c75789998cbb8fbfd403db040cb5c6c20087c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799735, "uuid": "206bde0a-37c9-4832-b354-40be98a48502", "comment": "Malware payload (Mirai)", "value": "e37da8ada16591442ec8c9409771cfd54ecba9fc", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799735, "uuid": "b4359053-ebcb-470f-a8ee-be74b6f6d5a2", "comment": "Malware payload (Mirai)", "value": "e8fb6cd790e1f4e224316f65e363872d7fad6aa4bbc43585fb5cb4e91b06f06976e4d2eb407dedcbd614389c038c25d2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799735, "uuid": "8dafd4fb-52f0-4025-b078-2ee8c8e0949e", "value": "7CA2B030617DA876C7329C3ACDFEC18A579D0DADB3D126A3680643BCB94A356487436B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799735, "uuid": "81a7b9e3-8fb7-4afe-b534-ebab61df6d0c", "value": "384:gyEdLVqASt9VNo8FY+3eZc08qTQ0ksn26j09Ho7rMRhymdGUop5hK:H0LVq193FYfW0/sTsN0+Gs3UozY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624799735, "uuid": "6826393a-55a4-40a1-be1c-acdecaeb0fad", "value": 22496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624799735, "uuid": "7f9eb0a1-9545-4cdf-8d18-f38721047f21", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799735, "uuid": "3338eceb-4f44-4537-81e0-99c99cc9373b", "value": "8a22af54a4f80a21f2a8224db0ef76e4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c28acf4-d76d-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624815079, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815079, "uuid": "473c4158-6d18-4de4-ac30-8dbbcc781c2d", "comment": "Malware payload (Mirai)", "value": "40b5088a2e393949a8d5862bac69592a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815079, "uuid": "be250bb1-c039-49f4-aeb7-492483169666", "comment": "Malware payload (Mirai)", "value": "71426a42a3b6b8f9c2a0162babdff3e2521f7f1a9b685e8af4fdfadde8acdffa", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815079, "uuid": "edbca2df-8231-4231-8580-29d9fce1d49b", "comment": "Malware payload (Mirai)", "value": "8c00566ef03f723bbc36d367394da7f257bcd2eb", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815079, "uuid": "77ae5dde-80a2-4524-ae3e-ccff79750e8b", "comment": "Malware payload (Mirai)", "value": "871e32e88eb70cd197888e95d80739ab259b8cf33aa29165f453af30ea4404146abe790e9f51c629d9c16ec9331ac8d7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815079, "uuid": "9df8eb0a-a1e4-450b-91ea-6f382f977d06", "value": "9CD2E120A1A6E352F270097FCF3905C076B552F6D3D736763E048E791DE280561BEBAA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815079, "uuid": "4e659c6e-4c62-4157-9c4b-1171acec6d14", "value": "384:hylWrkTuZ7JHY2k/0W2uDZhjadSd4K8/MW+e06A1u3wXNKM0eXzIhtQhymdGUop2:EdTy7J/02u15aG4rAuK7HDgas3Uoz5O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624815079, "uuid": "c8b9a2dc-b2a2-4907-86f6-c6004f928eb6", "value": 30388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624815079, "uuid": "aa8b7a7e-1e37-4cbc-a034-9877b5e8faf9", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815079, "uuid": "4b44e51a-e452-43c3-aa73-1fb0a73b934f", "value": "40b5088a2e393949a8d5862bac69592a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "800b8de7-d767-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624812509, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812509, "uuid": "979fc69e-aea5-4f25-b011-9ae3d2b63cd3", "comment": "Malware payload", "value": "f084795b207437699bd59ae42d0f95fa", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812509, "uuid": "1abbe118-2c7a-4d0b-961c-cbde6bf0ec67", "comment": "Malware payload", "value": "725e05473380845b888484c94414f03424794c8450abe0aa3a903997d6607815", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812509, "uuid": "7c89ea1d-eebf-461f-a6d2-58f66469a8b0", "comment": "Malware payload", "value": "b961f9faafba4b5dce49857d0b1a76afbb413272", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812509, "uuid": "c9d6eec2-71f0-424a-8067-b316981e409e", "comment": "Malware payload", "value": "d5c30e643b3e8300f1df9b10b493c1bec38c4b07f9b005dd7bd81d6dfe910a26edd109cac05749565625cfc0d74b81ef", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812509, "uuid": "f62427e1-9e2e-48e6-92a7-a12ab2a8017f", "value": "0F35F06BB654CA71F2681871C5CB41240FE56DD61E31DA137E98326D0E73F6EEE0A2C8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812509, "uuid": "6d470012-ad71-4fa6-81b8-6ef60683e6b5", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812509, "uuid": "afeebee4-dbf9-4abb-a2f1-a72bcd776ecb", "value": "24576:d6h0raS0qxLQpbgOKguowo4Vl/B1FYjfk:RraSxwRKghwo4+jf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624812509, "uuid": "937a339e-5e48-467f-be76-164309b4667e", "value": 1086464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624812509, "uuid": "4fafcd35-3130-4c46-8221-eb2346f22c59", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812509, "uuid": "6a05b8ea-e2ef-4b84-bc0c-cf03b4d79db8", "value": "f084795b207437699bd59ae42d0f95fa", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83f6078d-d767-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624812516, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812516, "uuid": "e833f90a-aaf8-4ae2-b9c6-68cf61a84248", "comment": "Malware payload (Mirai)", "value": "e7902b86c4b594433524cb413a06a671", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812516, "uuid": "090c9613-1be1-435c-af60-410ca0055db5", "comment": "Malware payload (Mirai)", "value": "78740a1eda10fb65b92a20608a03e373efcf88dc142b16f263ba000f1908de50", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812516, "uuid": "71133597-f53c-41ff-90a5-a6faf630802c", "comment": "Malware payload (Mirai)", "value": "3158d93d8189fc3c9e0f2508010d00b952904b82", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812516, "uuid": "de6dd2f9-2254-4a4d-9123-e62c9a831b0f", "comment": "Malware payload (Mirai)", "value": "4b1985d5ccd888edaaed932d92387ab0fab3d9e1e3d41fdfabf3160c09ca584abce1a08e39216ce01ca7a2804b3715ba", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812516, "uuid": "96a208c9-0dd2-4c2a-8f29-6ef01131a0bc", "value": "FC132986BC829966CAD01776B62E118E3321B3E9C1CF3217CD245F1177C9A2F4E37A56", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812516, "uuid": "bed538cd-a158-4a69-af4d-1410b77e59b4", "value": "768:4e29cZjBmP2XBDFlumI9NY+uanihajaer8pgwmiSWAySxoNZmBNT5:32uZFmP2XB3uVO5OihajaR2wnSJd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624812516, "uuid": "9e98a004-4ca1-42c6-ac86-364d6fe936d5", "value": 44128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624812516, "uuid": "2ee8ec5b-c606-43ba-b57d-f318999eb284", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812516, "uuid": "ca8c1137-19a1-4981-ba16-eb9caa1cd92d", "value": "e7902b86c4b594433524cb413a06a671", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ac1af09-d771-11eb-875b-42010a9c0053", "comment": "Malware payload (RedLineStealer)", "timestamp": 1624816849, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624816849, "uuid": "d8d06d4b-d817-4b27-803e-02b1db9343c8", "comment": "Malware payload (RedLineStealer)", "value": "063cf257f86e65738d63ed490d036e05", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624816849, "uuid": "e1b87623-9ad8-40d0-b3c5-4894e1fb6821", "comment": "Malware payload (RedLineStealer)", "value": "78c9143947a15b7e34e389b09786f18b9f6096570dcd41bf8bf78cc02b241d92", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624816849, "uuid": "e6a9b405-615d-4ec8-8a68-09e4e59b128c", "comment": "Malware payload (RedLineStealer)", "value": "45c20dae1953f03de46a0ad5a602ff874a33dad1", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624816849, "uuid": "cd4d034e-47b4-450a-8f7a-e3395dfa2055", "comment": "Malware payload (RedLineStealer)", "value": "6475807ee00db5abb6b96a6207e64118b054049b4e28d5149fbfe02387dfb4f3e875b33cd0145b4eb76d2eac58d837c6", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624816849, "uuid": "c2a9fe2a-7643-4f76-8259-ffa5a381941b", "value": "E785278CBBD4EAF2F76D20717039123A0EB81E2214D5E7FEBE6CB14D461A9412CB5875", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624816849, "uuid": "7e26baeb-da27-48f3-9b13-f8baeedd3b95", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624816849, "uuid": "0f0edbdb-1995-49a9-be95-4c891bc13d0d", "value": "24576:9NnqbO1brwerQIWONYxBqSOFOpOLwfAyX0gV2ozVwTGhPuYG:9JT5rweFWONYxcSMO9kh2VwTgI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624816849, "uuid": "150bdfe8-0d7e-472e-9b34-08f1f5a455a6", "value": 1867288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624816849, "uuid": "5bb9fa6f-07e0-4607-9452-742caf348e74", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624816849, "uuid": "5b874d84-71eb-4ab7-8922-8c752c87730d", "value": "063CF257F86E65738D63ED490D036E05.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd7ca3f6-d726-11eb-875b-42010a9c0053", "comment": "Malware payload (RaccoonStealer)", "timestamp": 1624784748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624784748, "uuid": "be220368-d510-41e5-bb07-a6a330dac92e", "comment": "Malware payload (RaccoonStealer)", "value": "bc206cdc8bb49c8200d9b1416ccc2f8c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624784748, "uuid": "3b5633bf-6f25-439b-9911-6b2f6699e07b", "comment": "Malware payload (RaccoonStealer)", "value": "7c1df4ec4e61caf8cabe52f448ede374870c45b482f6c53d49bae56668c990fb", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624784748, "uuid": "8ebaf0f9-680a-4ac6-ac95-ba59a23bc0ab", "comment": "Malware payload (RaccoonStealer)", "value": "422077aa1e6b2b2a8dc884b335717210a413de93", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624784748, "uuid": "389311e4-9493-44ad-b453-dd5947e78f05", "comment": "Malware payload (RaccoonStealer)", "value": "605c7df5d1c5a33051972e73db74a6b5016350eee0621ad57414af81bb38b524da3665196bca8b9444db26d21ff6ad92", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624784748, "uuid": "bdf3ff5d-f8af-4df7-9b2c-e96711cde8cd", "value": "89D4E000A6A0D035F5F772F89A7A9358693E7DB16B2040CF22E526DE5A347F0AD31727", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624784748, "uuid": "97caa26d-69d0-44c4-848a-a5adf674150d", "value": "123708792297e850a475b64837725c34", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624784748, "uuid": "5d98da2e-8e04-41b2-a13b-1b300573e11b", "value": "12288:8QTHDyAoLrIX1+nYQtW7v8mNUPZskgjzs2ZML6EFlM:8EDyAoGv8mNUPZIjzsH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624784748, "uuid": "a67f48ff-7a9d-4434-9dc1-bc4d3b035582", "value": 597504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624784748, "uuid": "541272f2-c50c-4af4-8e39-c0d182d9b14b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624784748, "uuid": "386d3ddd-88e0-4812-b941-a36381afd916", "value": "BC206CDC8BB49C8200D9B1416CCC2F8C.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6af39ef-d6ec-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624759880, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759880, "uuid": "02e2e366-f004-416d-aee7-16d33c85aa7a", "comment": "Malware payload (Mirai)", "value": "6255468ff29af8c971e89e3adcee1de2", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759880, "uuid": "a28ba178-0c88-4264-a6cc-f61993d06a8d", "comment": "Malware payload (Mirai)", "value": "7dc972346b9f82709bbcaabc30f126984468e60f2b085091471a9796ac4539b9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759880, "uuid": "3f2f90d5-e9cb-4075-836c-19f2b5e27944", "comment": "Malware payload (Mirai)", "value": "9a62c3f6144551b9996dff917803037d71119136", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759880, "uuid": "c6a87ad0-15f6-47d1-8498-a5720d8d881f", "comment": "Malware payload (Mirai)", "value": "c5e4917e195e0f6da6089a054906c2af1860c4a6c8d1734967671e3f803ac1da89731407bb645d5089df67aa0f2ea62a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759880, "uuid": "3144a164-fe35-4a46-9295-a52437c2a08c", "value": "EC93C52B7B130F23C0CA107112E30632A8B9DF9934BC9797A9E07D9D5F369843556AED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759880, "uuid": "db411f5d-fe8f-43cd-bca4-722a51f305f7", "value": "1536:PduvqA2fQ95WNbg11SYPN95ZItPXVtAc1:9ho5VPXPNPZilL1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759880, "uuid": "b621e422-fb3e-4ab4-a8a0-91944e76ad67", "value": 94568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759880, "uuid": "b6fc7107-9f24-4d4f-87c3-ae98ed91c34d", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759880, "uuid": "96d8b18b-fbc1-435b-96b7-8cec669c3468", "value": "6255468ff29af8c971e89e3adcee1de2", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ec573a9-d73d-11eb-875b-42010a9c0053", "comment": "Malware payload (RaccoonStealer)", "timestamp": 1624794307, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624794307, "uuid": "0d4913ea-2080-4e46-b5eb-8f83f0f6dcd4", "comment": "Malware payload (RaccoonStealer)", "value": "79c07e2481cc471cbee23083231a30c0", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624794307, "uuid": "efc38bde-a556-4ce8-a905-c4196e8ad0bb", "comment": "Malware payload (RaccoonStealer)", "value": "7dd9c77911362d3bee0d042ab4d9f9088bf4e9cd30b1c3b0082c02c7b86eec1b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624794307, "uuid": "ab0a53bf-3c46-4967-8b59-ec9244a90252", "comment": "Malware payload (RaccoonStealer)", "value": "9742a93b9e67804c216b8604a17c2771c0b61eb2", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624794307, "uuid": "791d704e-2283-4cab-820c-c0389b068f4f", "comment": "Malware payload (RaccoonStealer)", "value": "65a02aec48eb8604921381965d3a675f1cc277365dd1f86dfe6730c22348434e5ea429642cc6101de0670c3d828a6f97", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624794307, "uuid": "423b11a6-9392-4d2b-b59c-c0d2e8bac4d0", "value": "68D4D000B750C039E8F636F899BAA26C652E7EF15B2050CBA3D52FEE56345F0AD31617", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624794307, "uuid": "d0daa383-60b1-4b6e-87e2-acecafd0d69c", "value": "7a958e1aed1cf6e81fa8d2a601d98d8a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624794307, "uuid": "2602f11d-bc3e-4e70-ad9b-cbd9c348829e", "value": "12288:GOeYRzaMnMj33UoFG1ZZEoVRI9om2/C536hktZhQ7ClgD8KoyhBbg:dja6MbUoI6oVComrceZhQiKoyI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624794307, "uuid": "9867b2e1-30b1-4ede-bbbf-4c991b5fa218", "value": 609792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624794307, "uuid": "f7091ad7-81ec-4f4f-b0b4-fde9b09afe9f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624794307, "uuid": "0a6508ac-170c-447b-9172-1d199d8bddb8", "value": "79c07e2481cc471cbee23083231a30c0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa406875-d720-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624782220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782220, "uuid": "89156b0a-212e-4aad-80eb-34bc4b5efd19", "comment": "Malware payload (Mirai)", "value": "45aa6a03c32e1a6fb2b0c2728f6db851", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782220, "uuid": "45189264-f9b7-4142-afa5-89b87a769b4d", "comment": "Malware payload (Mirai)", "value": "7ec0c6d7f34e25c154cbd98b8a5b2715a5b88e1c69f9b809c99f6249fd5cf055", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782220, "uuid": "cfd8d1e8-b502-4d36-9125-b9349e162924", "comment": "Malware payload (Mirai)", "value": "2c0f02be1884d83326eda8d59b3f2728501f48f5", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782220, "uuid": "01c91579-788e-42d0-9ff4-f1e2937c9382", "comment": "Malware payload (Mirai)", "value": "a6ad591187ff47823f3d13ed12f570a38539836e2538729eb6f50b07b085449427e94bd13632496c8cc9565c09cfd5f1", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782220, "uuid": "c2ee7faf-3ad3-4b55-9d63-36ecfc7d4cf4", "value": "D4536C89EB43D4F1CD87017124BAB7AA8B71F0616068C657DBE82E30ED53A12971BB5C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782220, "uuid": "3d161f64-4758-4927-91c0-609fdc9d1e06", "value": "1536:d1Q2zxQaF8A3Ns45IKaP4fkjBUkoxUNZulS:rQ2zv8cNxaPFjBU76ZuI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624782220, "uuid": "9e48cf7c-d841-4c15-a3f5-f466bc05fc03", "value": 63532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624782220, "uuid": "af014e07-f7bb-4551-81ee-303c2eb369b6", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782220, "uuid": "a72e9f05-dc95-4f55-a299-46ac1b5d7780", "value": "45aa6a03c32e1a6fb2b0c2728f6db851", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed83a2e7-d72e-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624788211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788211, "uuid": "5eabfbbb-df01-4203-bc52-5c52ce076712", "comment": "Malware payload (Mirai)", "value": "8c3126652ac70b52c0232012274f462f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788211, "uuid": "df2886bf-9102-460b-8f1f-4fee7fae1b91", "comment": "Malware payload (Mirai)", "value": "7f51809a911f7c1ba630efd59d453a161ebf1580d74da74634cc76da43215de4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788211, "uuid": "3e2f2803-7460-4059-af44-55cb9f9bcbfb", "comment": "Malware payload (Mirai)", "value": "be23123c26f2c9185ef07e106a2e0eb8f100f1d2", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788211, "uuid": "84da4229-02dd-4cfe-b8b7-127d346df7ab", "comment": "Malware payload (Mirai)", "value": "5c0e52e8c35567bc318c9884c497dc5a93722ec58c607ce7979511fcd077d984ad14efb65b157ebc721b0c20606dcd39", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788211, "uuid": "19a093fd-dd3f-4c70-bf5b-dfd04fb92d73", "value": "4E531A8964021E5CEAD79CFD50B54F09CD552310A0A30B1FA6EBFDC33DB3269EE26649", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788211, "uuid": "a3bbd166-2e2b-49b7-a5b9-67b34c324e1c", "value": "1536:bcG5ssHFa4uWCw4wMuvWn7hoHg1pFcBfyH:bpCw4wp8oqpFcBS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624788211, "uuid": "9b7b063c-c5b2-4645-a700-1d20463fc75c", "value": 63112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624788211, "uuid": "fa2e77d4-ee1c-4861-ad04-d0f94182e4a8", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788211, "uuid": "9e7d1391-5244-43e7-8d68-2b90f518cadd", "value": "8c3126652ac70b52c0232012274f462f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97609fd0-d75f-11eb-875b-42010a9c0053", "comment": "Malware payload (ImminentRAT)", "timestamp": 1624809112, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809112, "uuid": "5b7c8d22-30fb-4699-9c9d-dbe49b7dcfa3", "comment": "Malware payload (ImminentRAT)", "value": "96f11a983ca4b33743fa1c63779d9344", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ImminentRAT", "colour": "#70C7AD", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809112, "uuid": "877506ae-79ec-4546-b066-109736f8fe5e", "comment": "Malware payload (ImminentRAT)", "value": "8067ef9073fdb633e0be1d590c03c0091b1801202ad070cf3872e8fda2a41639", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ImminentRAT", "colour": "#70C7AD", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809112, "uuid": "1fecd623-9748-437d-be45-f2c2919da0f8", "comment": "Malware payload (ImminentRAT)", "value": "18c313bf08c80fe859241bcfa6ee782a3e9539c7", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ImminentRAT", "colour": "#70C7AD", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809112, "uuid": "b814ef60-15ca-4025-8260-0045dc91c22e", "comment": "Malware payload (ImminentRAT)", "value": "60de257d2800d0f79727dc049a31dafc7ca6db9734ef23be8403d3f45e3a926c4f719c816af42791b3341b2fce87e7da", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "ImminentRAT", "colour": "#70C7AD", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809112, "uuid": "4aa11776-55c7-44e3-a21f-531a5c1759ec", "value": "BA556B9C3AA0319FD4B7CD3ECEA45C60EA58BD775B07851750B3169EAA1D887CF600B2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809112, "uuid": "1c8b0fc7-c2ca-46ad-8f3f-d32ff096acb7", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809112, "uuid": "7944d509-396a-4ace-aa9d-7fd41df51400", "value": "12288:dwYhZawoQC0Z0uH7h2ZsIfm+yWBGUATczdqOc4ClSTubgdIb+lmh3EXmPLl8/iL8:5Cn1ZsjM9A4z4ST9muk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809112, "uuid": "d243ad38-74c6-4ea4-b796-3b6b4587a932", "value": 1318400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809112, "uuid": "f5c852c4-b9d8-4c78-87b3-7fff0d1261e8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809112, "uuid": "cf6d26d8-1246-4979-81b2-71d6809cc568", "value": "96f11a983ca4b33743fa1c63779d9344.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe5b307b-d720-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624782227, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782227, "uuid": "0c6b12bc-7ba6-4c27-9ffa-8e9a10c45eeb", "comment": "Malware payload (Mirai)", "value": "76962cdf456ea94ecd064a782d9e70fb", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782227, "uuid": "9b75ae8c-f082-49e8-a9b8-5a85bd700518", "comment": "Malware payload (Mirai)", "value": "80b2cde8b089bf27f85b24ca4123747842b6a4a90fc15f3fba1bc42dea445d95", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782227, "uuid": "5abf576f-51f4-4355-a0b2-12346336a218", "comment": "Malware payload (Mirai)", "value": "e54d1549eb7fb0e238b355753bdf206d14ba8c1c", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782227, "uuid": "55425598-70e8-43ec-9bfe-21ac90acd07b", "comment": "Malware payload (Mirai)", "value": "b896ab9fa57c6920d40872f92d75d99f21d9c98d259933c39ae06029e8068036327e5f99693eff9577451557072390e5", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782227, "uuid": "878e3316-9d25-4323-963a-0ca49c9b860d", "value": "AA635C07648080FCC4DAC2B88F6FA537D9B375BA1279725E67D4BE126E4FD215F29A00", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782227, "uuid": "2962a117-a73e-44e6-a5e4-9f24390c3554", "value": "1536:6y1MZc6eg0vmplhamXRSD2Sn2PwuMvXgZQ3wQZm:6P+Fmplha8k2SEovXgZE7Zm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624782227, "uuid": "71c93868-156e-462a-93e1-b3550c1d2ca3", "value": 71824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624782227, "uuid": "8839508a-38dd-40fd-a916-fb2a1ea87734", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782227, "uuid": "843a58f4-ef89-4178-905e-bcf39df2b333", "value": "76962cdf456ea94ecd064a782d9e70fb", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17aa9254-d76e-11eb-875b-42010a9c0053", "comment": "Malware payload (CryptBot)", "timestamp": 1624815340, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815340, "uuid": "0816e06e-d72d-40a7-8307-88922ef61edd", "comment": "Malware payload (CryptBot)", "value": "663fdf847d6b11308415ff86ebffc275", "object_relation": "md5", "Tag": [ { "name": "CryptBot", "colour": "#EB0B67", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815340, "uuid": "24b5dbba-4e96-49e1-a2b8-12ed2dd630c6", "comment": "Malware payload (CryptBot)", "value": "820194153174a679179e3649a4ebac8f39b4fefd2836d19ae1241e4e520fae26", "object_relation": "sha256", "Tag": [ { "name": "CryptBot", "colour": "#EB0B67", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815340, "uuid": "ac9e9483-f093-449b-9ed1-0454ad6b2c3e", "comment": "Malware payload (CryptBot)", "value": "6167fdf3cd9a585a44f24eb15d414281edad2485", "object_relation": "sha1", "Tag": [ { "name": "CryptBot", "colour": "#EB0B67", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815340, "uuid": "1b5ca064-a27d-4d29-9478-5bbd60bda883", "comment": "Malware payload (CryptBot)", "value": "de5fe3ab5efc4af5e6a425298900db98e72ada1d3d2d7a86cedc44df7f287bd19946296b04c493ea8c6f057cb001e88f", "object_relation": "sha3-384", "Tag": [ { "name": "CryptBot", "colour": "#EB0B67", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815340, "uuid": "553e37be-c9be-4e79-b647-ecb74276bcd8", "value": "9684AD2132E0C072E1B32A394975D7B54BBBB4726B71A6CF6BC40A795F257C19A3130B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815340, "uuid": "2db694b7-14ed-4df1-b1b3-32a206672469", "value": "fb94e546a8dcb99d56b1ea3cb0a469de", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815340, "uuid": "3f6d73db-83b7-46a7-a805-ecc575b4e634", "value": "6144:p9ooz9blUiqVIqHsy6W8ud2hEHrFcpDh+jCvOYzfYFVB:p9oophqrsPW8udyEHrFhQOzj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624815340, "uuid": "f80b5f7f-c375-4502-b2d1-82b842956ffa", "value": 375296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624815340, "uuid": "91710d04-3f92-4dd2-985a-4d72b19c2501", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815340, "uuid": "c95c8ce8-208d-46ee-b3ba-5c76576224f0", "value": "663fdf847d6b11308415ff86ebffc275.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab63cc24-d74b-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624800556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800556, "uuid": "9614417f-0e58-48d7-9f97-23919246ba9c", "comment": "Malware payload (Mirai)", "value": "f28fbf46edabd31f573e22f77f21d5db", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800556, "uuid": "e81390a8-571d-4361-9cd5-2e8bf627a243", "comment": "Malware payload (Mirai)", "value": "8228b50ca44525ddc91b9532756db0edda605c696066faaff2417ab747b5cd7e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800556, "uuid": "6a6102dd-b3fc-418c-bbcb-5b35f52492c5", "comment": "Malware payload (Mirai)", "value": "3096ff837c45f2961f353f888b826acdf30b1618", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800556, "uuid": "205bddc1-8547-4dbd-896f-311b29351f60", "comment": "Malware payload (Mirai)", "value": "ae481a999036a8b12bb05d1e740c7662e1b9127433d49862d76264caa4872db0cfdc42aaf81c6f21af5db7e9589e8f0b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800556, "uuid": "9d16034d-8dd8-418f-a190-aab7c73f79e9", "value": "F7C2E145A56CCEF1C4F0E633FC668542BE9B0A7CD43E763332F42B6484A245B4A6D983", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800556, "uuid": "940027cb-ec44-442c-8c53-0b7acbd31c72", "value": "768:6scWgZHCxTcbK7lk0pue6zClm9q3UELKj:SpZNelJsWLE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624800556, "uuid": "bbc29d0e-f8e9-4f32-80fa-e31d8d79d12c", "value": 27488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624800556, "uuid": "7066e9d0-f23d-48c6-879d-39f28e794cc7", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800556, "uuid": "baf90115-04d1-4c6c-9359-c8370b2fe801", "value": "f28fbf46edabd31f573e22f77f21d5db", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dde09661-d789-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624827269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827269, "uuid": "d343c45a-f8b6-4e10-8277-7681e58297a5", "comment": "Malware payload", "value": "aee27a5ebedadf12beed294f59026162", "object_relation": "md5", "Tag": [ { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827269, "uuid": "08540eca-7b53-46eb-8c27-e4d441d73571", "comment": "Malware payload", "value": "82e560a078cd7bb4472d5af832a04c4bc8f1001bac97b1574efe9863d3f66550", "object_relation": "sha256", "Tag": [ { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827269, "uuid": "bd92ba28-e55f-4bff-8971-4806b4f7a1ad", "comment": "Malware payload", "value": "fa5153b6011c578ce85c8c6d2a431ee9b8be03ec", "object_relation": "sha1", "Tag": [ { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827269, "uuid": "20d307ad-2ead-4c57-a503-f174f4f81e8b", "comment": "Malware payload", "value": "0092726ac20c4ffb89d9563f480af7b317ae1a33baec4a851cd992577e3bf57d32777d311936cbe4669d9b917f646716", "object_relation": "sha3-384", "Tag": [ { "name": "Ransomware", "colour": "#D117B6", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#60FA63", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827269, "uuid": "87f194d8-2b04-4328-ae3d-5052de44b88c", "value": "593633F40C7A1BD6345522FA8C55EE8CC1AF798BB00D66B8F703AA5C7D88509CD72276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827269, "uuid": "d59eab60-4eb8-4602-9988-ed9b122d261e", "value": "98304:a7TUPOmgWEeBcQVltn58PsCYBy7PJUhfTJ2RMOMA8vNFDf8NCE3njOSLQJ0TsYnY:rFgaBcKltnOE7MPJUhLCMhN8NnjBEJYY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624827269, "uuid": "46869c09-e556-458d-8cba-35b2667b6473", "value": 5028024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624827269, "uuid": "a7f5d93c-21a4-46b5-84f5-26c83aa97f63", "value": "application/zip", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827269, "uuid": "97636af1-ae2f-48ca-b6f8-4440bc9fea59", "value": "82e560a078cd7bb4472d5af832a04c4bc8f1001bac97b1574efe9863d3f66550", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "08ee828a-d74f-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624802001, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624802001, "uuid": "809c52c8-9fa1-4523-8007-1f1f0ebb9ffb", "comment": "Malware payload (Mirai)", "value": "050e490c3fec8d9de6f25a0dc70c2943", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624802001, "uuid": "542fe52c-90b2-4f17-879b-8b32b7fa4e40", "comment": "Malware payload (Mirai)", "value": "82fe8f1102b31ffb9a15f8a468e4631b4521b72d9b387a568b06d06ddc484c85", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624802001, "uuid": "74d3727f-5098-4549-a62a-dc480a69bd0b", "comment": "Malware payload (Mirai)", "value": "f287898206a66f9639dab7fbd605441fafea6d7b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624802001, "uuid": "76a3161d-0ba4-4af2-ad42-143390c8f7a7", "comment": "Malware payload (Mirai)", "value": "365b161680cb1a194a60985ad35195db136babc85c638334c1be960b4cb9da8e92b084af5df05b848eaee8bb47acf0ec", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624802001, "uuid": "5e0c698c-8f16-4326-bd4f-d32656124fa5", "value": "5B334B25BA791D57C4E8647A63F7432AB2FA124E20B88F5D3D720F8DFF64580A9071B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624802001, "uuid": "f7807250-58d0-4f06-b0b5-870d8cbfd7bf", "value": "768:hoolq0kR/1NW181Y1aXd5jqxrAqJiLO+rSopoaLEgZ:hob0kR/1NM8mkXDjuJiPrSfa5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624802001, "uuid": "f219d9f8-6b37-4286-b89f-32a8b8eb2d96", "value": 52776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624802001, "uuid": "a82e5e6e-50f6-47e2-94b2-6a2b13d95efa", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624802001, "uuid": "fee0aa7f-78be-4a55-b51a-a5413c206565", "value": "050e490c3fec8d9de6f25a0dc70c2943", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a29cd790-d74b-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624800541, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800541, "uuid": "f07f7f25-3517-431f-8ec9-81cf11108882", "comment": "Malware payload (Mirai)", "value": "65e97be234ad0069fc299407b4edc890", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800541, "uuid": "2c159199-dbc1-44cb-a124-29b1e05c3672", "comment": "Malware payload (Mirai)", "value": "831ac804dd810e17c98b2630509ff5a0d585f946b5db7b99e11f02f8154b1924", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800541, "uuid": "44d6a923-b491-47b2-9cd4-99f91e47a364", "comment": "Malware payload (Mirai)", "value": "a6a7a0d867d9a5155d670d418f79ffd7762172cd", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800541, "uuid": "60ba1c45-469a-4882-b14d-d16d1da3e6a6", "comment": "Malware payload (Mirai)", "value": "d13c2c7587ac984164495a92064f77f85981510b9cf7483a3599f7dc1885267ada8d47795686d9cc9869375f1ee69999", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800541, "uuid": "ab80839c-f53f-444f-a9e1-886b35bdebfa", "value": "DD332956BC919A1ACAC4237BBA2F50AE331173D8D2DF3717CC141B147ACA91E4EB3691", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800541, "uuid": "d6b8fae5-ae07-43a4-9dcd-40322c70b82b", "value": "768:5irkFWJVvJR3Y5Tf0TY/X76pQKuVo3QI6VHwCqEXc6rBB7PRyUejmkB4m2N/EeAO:TFMxVY1f0qKusv65zNMSBBbkUpP/Dv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624800541, "uuid": "ff9ec47d-c091-4914-b989-eef1ef09cfc0", "value": 50544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624800541, "uuid": "ac59d9d9-dc88-4fe8-a885-5e00b7dfe3b4", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800541, "uuid": "317bc8f1-4753-46eb-bdea-b42f85290ee4", "value": "65e97be234ad0069fc299407b4edc890", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2443b278-d722-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624782720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782720, "uuid": "603725db-0193-4d10-90ad-90b81a0e89f1", "comment": "Malware payload (Mirai)", "value": "8206adc64bc715ba0ee0467cd51eae2c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782720, "uuid": "681bf3c2-33b3-49d4-9577-c8aed032dbe5", "comment": "Malware payload (Mirai)", "value": "8476d6135e96f6fe9832ede51b496fb78c14839cf608acb055b1a82fc9326218", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782720, "uuid": "61578d7d-8bd7-4afa-abf2-145925fd4071", "comment": "Malware payload (Mirai)", "value": "4a45d93140e7f799004103ddd2abd9060f7ff14a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782720, "uuid": "0b237114-e854-46b6-818f-68caf8bcd737", "comment": "Malware payload (Mirai)", "value": "ef5272f58d16f52064a6947ed7f596b297f029fc4421d7c44820b260bfe9d6b23d19b3649f7ba8740b5d19a6f8094779", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782720, "uuid": "3108baac-714d-48e7-808e-70bbe8b18f66", "value": "25A3B50EAB610EFBE86BDD374AE90B0634DC655722A83F353574D928F64A14B09E3C74", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782720, "uuid": "4c8d4809-a7c0-47ff-ba3e-7fdea933a0be", "value": "1536:fIziQP2e6cAZsG4b7JMmGbSY9LHxPJJZZCeVAYVnoQh4/4px:fkPpPu99PJJZLZ5Ggpx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624782720, "uuid": "d5973745-bf3e-478c-8a8b-2e4337c024eb", "value": 105732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624782720, "uuid": "ef4e8002-7c9c-4d83-9b1e-e45fe6c18287", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782720, "uuid": "4a6ec5ad-7da3-4a22-895c-5a7510eae812", "value": "8206adc64bc715ba0ee0467cd51eae2c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "92f22b5c-d721-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624782476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782476, "uuid": "6217178c-8c0b-4ed9-b229-cc295a197828", "comment": "Malware payload (Mirai)", "value": "e86506d602f4ed99103f5440010256ea", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782476, "uuid": "58bff7c5-0041-47e0-921b-210275561bdd", "comment": "Malware payload (Mirai)", "value": "873d5de4fc75988d49264900978a99dbb3e9c6aacb3d0f4f0a9187145151e578", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782476, "uuid": "c1dde530-2a22-4a59-b88d-e270dd77aa9c", "comment": "Malware payload (Mirai)", "value": "44d2a4a55b33724d10008c4c27915db3c225f810", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782476, "uuid": "5c6da23c-7925-434e-a275-5f8710eaa98b", "comment": "Malware payload (Mirai)", "value": "fba30c649d7d0f8aaacf79701b4300f93fd3a662bd7000f3263f1496fecdef89c5037743ec34928425c19d5788ee5a34", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782476, "uuid": "6064ee1b-ee31-4adc-a510-dc6e6fcd710a", "value": "F5733A45BD815613C6C52773FF9E838D771A2398F2EE72039E249F21778B96B0E2A440", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782476, "uuid": "8e7c5e26-d73b-4955-8baf-9bb03441ad0c", "value": "1536:9CRAXD631qx+Eu1vFOF6q/O563Bg9hLg4RTtA2vhFpH:PD63gIEubOYfhdd3pH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624782476, "uuid": "fa4157d2-36ac-469a-8d98-ba7ad34f554b", "value": 77152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624782476, "uuid": "11cb8859-50f6-4316-81da-c3096de610e9", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782476, "uuid": "8d3cdbd8-16d4-467f-afed-d0808cb0ef35", "value": "e86506d602f4ed99103f5440010256ea", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a3a3ebaf-d6eb-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624759311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759311, "uuid": "ac7b4953-5985-455f-b828-fb9ae774f939", "comment": "Malware payload (Mirai)", "value": "d3cd0f124d2e43b120def5ecd3651e37", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759311, "uuid": "e781df66-478f-4c38-8de1-653889d6f7fb", "comment": "Malware payload (Mirai)", "value": "889cc2a3e06c5770ff23017aa067cd8a01b8b410e143e9da63542ead7ce484da", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759311, "uuid": "d1e3d750-6a61-4e5e-82f0-96e008719017", "comment": "Malware payload (Mirai)", "value": "f426ea8b54618b0e6b954c88495ffcf71b696cae", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759311, "uuid": "7d1a4ded-a414-4ab7-8ca1-6f76a97b1c3b", "comment": "Malware payload (Mirai)", "value": "dcc3ff3dbf96353b51fcecbc926967eb9421777ae5b4bc69e3eea75e78c8c6165860678d1ba63a4639009a7c3634d8b0", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759311, "uuid": "b9393f1e-f230-4273-b3e2-b3014bd126b0", "value": "FDE2E1A288C5D160C0B174BA9EF98B42273B0FB10C6626197F609774FEB205AC5FDDA1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759311, "uuid": "75315ef2-5cc1-45e5-a922-3b219adb74cc", "value": "384:41vKHepDGwtMIrost94At8Vf2QPo1zxI1AUntY3SBrReBD7rOV1mdGUP4:SawNrpt94Ai2QPoY1nntqSpI23Uw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759311, "uuid": "7e27755f-8c88-41fa-8518-8a8171e5c9df", "value": 32396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759311, "uuid": "f61a6c62-4975-41e3-be3b-cf0c98945fde", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759311, "uuid": "dc018df2-61cd-4b22-85e7-3081b3ccbfe6", "value": "d3cd0f124d2e43b120def5ecd3651e37", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fce953c4-d6ec-11eb-875b-42010a9c0053", "comment": "Malware payload (Gafgyt)", "timestamp": 1624759890, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759890, "uuid": "a97a79c2-9e38-429a-86e6-05576e8b5b4e", "comment": "Malware payload (Gafgyt)", "value": "6330115d90dc220b32ac724eee94146b", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759890, "uuid": "785e9234-aa88-4d14-9886-ea70c275d1d4", "comment": "Malware payload (Gafgyt)", "value": "8a65f428240fde6b7ac45f3918f0271c1e3485aa16f782e604f254dd2d3dc29d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759890, "uuid": "e7eff064-e620-4ed8-ab9e-1503367be72f", "comment": "Malware payload (Gafgyt)", "value": "428cb6992df435159ccb7b3223c6e2f9929f154a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759890, "uuid": "a4bfff4e-b4a6-4d42-bc60-25cb757c3706", "comment": "Malware payload (Gafgyt)", "value": "ea1b0ae2df0434cda7c63054b1728db02f200f2cf44a3799ca9808f1d01ed6aeb8da8e49ebfa0fa61a304674a1273d48", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759890, "uuid": "f44af3b2-3c62-4d4e-a9c3-2428c5ec8e89", "value": "0982BF50559AAD81C2750CB7BDA4CD42364F573DF3DBB63B252047B8AED090B94B82CD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759890, "uuid": "3907489d-9c75-4cf5-bcc9-a1aab9236f6e", "value": "384:Axgqki6nXKR2eRR9Uo+V6kNYOEdnQSEByU63MGihymdGUop5h6:Ail6HL+VWQnBy/3MGis3Uozg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759890, "uuid": "a5aee6f1-e620-4d31-87d4-7641a67d20e9", "value": 18128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759890, "uuid": "1d3121da-1a08-4f99-ab19-4acca352620a", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759890, "uuid": "8d5c97f2-0033-4cd1-8f9f-05c0d99a6887", "value": "6330115d90dc220b32ac724eee94146b", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eff29452-d6ec-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624759869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759869, "uuid": "af0d07f4-13eb-4a7a-a5ef-09b56d84a020", "comment": "Malware payload (Mirai)", "value": "2f7aaedd20eecbd77a70f85af9fdc40d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759869, "uuid": "c8828dca-c5b2-48d7-a82b-3245b4a0460d", "comment": "Malware payload (Mirai)", "value": "8cc43db17480170fac3213518fe18d52a5648ce04060561d6359d6c589a4321c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759869, "uuid": "2cc47baf-2be4-4a2e-a914-6b8fc3be8193", "comment": "Malware payload (Mirai)", "value": "4aba8e8d8525b295faf44ee53a9b61cc08172b17", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759869, "uuid": "c9eeeead-e777-4466-92f5-e3c67d7659e8", "comment": "Malware payload (Mirai)", "value": "f5b882ee0de8043d0de2d25e9fec37d626eb0faa7051c5db1317ba64ecb389fa773b4d54903870b834d6b1d5eae9f5fc", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759869, "uuid": "d814aaf6-5258-4f14-95f5-9e2f30789655", "value": "F1E2F1B0D0AFEEE1E84880B54C5ABF588C20E7DEDC6414A89FF4356A9C8777426C06D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759869, "uuid": "862c3a5f-e673-4b1f-ab03-4a4b941b9ce8", "value": "768:xjxW8Jmif95393HHmveTIzi5V5W9/YEgPrmqzq4TelnbcuyD7UryqEK:xj9JmifZHmvecwVkuHJO4Qnouy8mqJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759869, "uuid": "fac3bd71-b275-4515-bf39-de3a8d3fbba2", "value": 33504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759869, "uuid": "69806b49-2086-48eb-b464-e5413a7e082f", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759869, "uuid": "75410d28-8218-44ea-b34b-ad3d1de46532", "value": "2f7aaedd20eecbd77a70f85af9fdc40d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db423610-d790-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624830271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624830271, "uuid": "fecdb42e-b13f-4736-a16b-906b10aff1ba", "comment": "Malware payload", "value": "f874e5a386d38db3efdc151c859f335d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624830271, "uuid": "56ab0a92-7f99-4dc8-b1b4-e6890a68bc45", "comment": "Malware payload", "value": "90e02782ecc5e1b25e8d3f41d33dcca79c0a23bbdeb510f4de48ee22db631316", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624830271, "uuid": "374ddc43-0f54-43b5-9451-f97234276ae1", "comment": "Malware payload", "value": "bf43cb5a409fecac18b3f952ad478b81155da015", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624830271, "uuid": "f3b2e80c-d12b-4656-b959-f7250faa510c", "comment": "Malware payload", "value": "ba853718f1c27da8fa9b700d652dca058a65a4a41ad670dcf622796a57b6145bd35daeec3f043df76e3b76f05d3573ff", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624830271, "uuid": "38cfd924-1f33-45f6-85d6-a7f1d17684e5", "value": "61250246B432D153D844AF301C06C3381735BDAB1F25CA1DAAC53EEBA7B319A3B4567A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624830271, "uuid": "01f4ba20-a290-46a7-bfe9-0eab425ecf3b", "value": "4328f7206db519cd4e82283211d98e83", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624830271, "uuid": "667f0b42-c2fc-4fc1-89c5-d0c5e772828c", "value": "24576:+jUjoEKqrm4JbJabpiUtTWnfWC4E4cfC8rfsx:+AjoV0m4JbJabpisWn++DrLsx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624830271, "uuid": "e3c60c9d-ad76-400f-b37d-c4633a95109c", "value": 966656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624830271, "uuid": "201f6725-e5d2-4841-b033-8f06394db7ab", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624830271, "uuid": "863c2bb1-ee48-40ea-98a9-9fa1f504027a", "value": "SecuriteInfo.com.W32.AIDetect.malware2.23226.5613", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "82860ac0-d794-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624831840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624831840, "uuid": "93bd00cd-9b57-49f1-80ef-2d688107e62d", "comment": "Malware payload", "value": "0a522f39888e083b1e2c010bd8d78b29", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624831840, "uuid": "b28b12c3-d81b-42ae-a35e-f678c14ad22e", "comment": "Malware payload", "value": "90ef0dacd3f993a784a8f2d884e065704920db45a5abe639f714306b89a2eef8", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624831840, "uuid": "0ed8b108-e6f4-432f-8b3a-c1019c14ec13", "comment": "Malware payload", "value": "2cfac136e48e6cf9653da3e1217ba684b8c0049f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624831840, "uuid": "73ec0b39-26bf-4b37-b318-963880e1def1", "comment": "Malware payload", "value": "358102752eb11b1993eebe87b20b47d67e38a2e0833e6a46e8658525544a751fe770031af02f8f5a321fba6d211b6cfe", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624831840, "uuid": "83886585-253a-495b-80eb-467593a0ba51", "value": "19451210B662D035E2FA16F88979936C573D7EB0972464CF63E42BEDA6346D0AC3134B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624831840, "uuid": "3d8cf92b-d677-45c9-be35-fe188f4cd6af", "value": "125e3e7cc1558104c6c521746bd08b89", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624831840, "uuid": "a0eaf972-1344-4921-97ba-467e6ffdc1d9", "value": "24576:6PlYpSDdld9SJigUGDuvqmpoDIUDSgCPfiyMIdRVKTlIGD:6RgrmpoEKSgZyM8wL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624831840, "uuid": "f5279948-6484-416b-8f2d-720a0a4f180f", "value": 1166336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624831840, "uuid": "7fcb61c1-02d5-42a9-80dd-4cb41031ebab", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624831840, "uuid": "222c4704-d3f4-41af-84db-304d28b708e8", "value": "0a522f39888e083b1e2c010bd8d78b29", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "07210a95-d6f9-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624765061, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765061, "uuid": "e25e2801-0d83-4b04-9d85-6c64a41f7f37", "comment": "Malware payload (Mirai)", "value": "b771251c63f265c6b164a3f340370e87", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765061, "uuid": "629202c8-fba4-46ec-89ce-d3070f47c98f", "comment": "Malware payload (Mirai)", "value": "93b1c8ca54db61b465e4eb2aadc68d297478561eccaeac5de5985b140d282a31", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765061, "uuid": "a0089a01-2e38-4984-9158-90a1ea6b0a0c", "comment": "Malware payload (Mirai)", "value": "29f6915b08bfd087bc8ac5c62918a448d986902b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765061, "uuid": "f4874c1e-79b1-43e7-b1a0-d479a80fcf2d", "comment": "Malware payload (Mirai)", "value": "a6c63b67da15b6a90f831db4c3e0d9ca0a67d50b1ed4a29c1f8294c9da5524ad3de9ff768076c8bbe5b9ae12ff7ea133", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765061, "uuid": "cb42b18a-bf9a-479f-89d7-b5b47a6109f1", "value": "F0B2F699B9D6CA06C9C15177FB0F829A3F255398F1EF33036F122F21668796A0F66144", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765061, "uuid": "320ca1bb-865c-457b-a86c-539341b50d2b", "value": "384:m/BsO0RR3cpd2/PTpfAkL5w9x+B5Xhml9AhFx4eNw7Vs6aSE:mplYcpk/PGKGwnmliSWw7gSE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624765061, "uuid": "7d8f6232-99f0-46f6-988a-2d3343222029", "value": 25576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624765061, "uuid": "19efa24c-db64-46cc-9b24-3fe4d7b01d2e", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765061, "uuid": "b6038c77-a462-4059-a536-0cde692a6f02", "value": "b771251c63f265c6b164a3f340370e87", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b364faa-d6ec-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624759592, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759592, "uuid": "ac453c67-ec11-4119-b048-59f62d5a7ee0", "comment": "Malware payload (Mirai)", "value": "e642d3b2bb5023dd32af00849ac28120", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759592, "uuid": "0e868fa9-717a-4523-b198-970543981a7a", "comment": "Malware payload (Mirai)", "value": "945db6bdf1160d3ba90fed866ba0621848cb2673190f3179f5cacc0bb520fe72", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759592, "uuid": "c9012f8b-cb32-4fe0-9e79-fcf3a9d0f996", "comment": "Malware payload (Mirai)", "value": "9ff81ced9ddf86a7f41775b3a6357874c26e463b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759592, "uuid": "72f0ba25-809b-4907-a6ce-3a6180c01bc0", "comment": "Malware payload (Mirai)", "value": "4d2bcab40c5df39a0013005a253519f0eae397f18396f508e79c62f8bce7ef0b3c38a6614d74844ab95ebd051bea90cd", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759592, "uuid": "3684c37c-6064-4fea-83c3-a8c10fd2325f", "value": "3B23A515BFA14FA7DCAFCD3349A8074134CDA41A22D53B357934D828F65B64F0AE38A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759592, "uuid": "64d858ba-2d2d-4e8b-b4bf-c5b884a5103f", "value": "768:xLmevteTPycrIZXuEXX5zAOIBne+eAcewCyxLZszrXi2eV7F1:xLmevteTPcZ+kXNitbFcD3VZszBe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759592, "uuid": "4df9305f-bb74-4e34-83aa-dfb86fe56197", "value": 48140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759592, "uuid": "4c8321b4-7076-46bc-acb5-fd431167b6df", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759592, "uuid": "7952012e-1d59-454c-80d2-e606cce2c14e", "value": "e642d3b2bb5023dd32af00849ac28120", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2eff155b-d7a3-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624838143, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838143, "uuid": "338048f5-dc84-4ae7-ad26-c2b09247ceb1", "comment": "Malware payload (Mirai)", "value": "553fa0a2d3c4dcdff60886edb9385195", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838143, "uuid": "0abd813e-120d-45b2-9669-a4920e59ea5b", "comment": "Malware payload (Mirai)", "value": "9595d123815da0cf265b397b4ab360fadacd3580a9cee96575b7bea06867b9b0", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838143, "uuid": "3bc7f191-51e0-4d2d-b1aa-78725b50538f", "comment": "Malware payload (Mirai)", "value": "fe9371198bb8e18f400365827e8ab45f09963177", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838143, "uuid": "6a0b1544-6a3b-4245-993b-53701a2e2896", "comment": "Malware payload (Mirai)", "value": "199680a1158f9f04ec31f908f8c0f9bd5881540feeb0dcc984dd25b6f03a428a27dfc7bccbbc7de427a6c3a312fd20d4", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624838143, "uuid": "157abc03-388a-4965-9e33-94a7aa8faf59", "value": "A893800AAF611FF7E89EDC374AD92B0524DD511A20AD7B39B930D818F25B30F19E3865", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624838143, "uuid": "78c0428a-640b-4a84-9391-59e0d1d3a02e", "value": "1536:NYCYxrXP40ODyPwHRQ9PlzTRfyToNoZqRi:qCYxrKDy46Ne", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624838143, "uuid": "8288ff13-3708-4110-832a-79d4212950c2", "value": 92100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624838143, "uuid": "c5c752de-36ee-48a4-8763-2d9bab00cd9b", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624838143, "uuid": "02944f22-eb3e-4e94-aefa-b848e1ea6239", "value": "553fa0a2d3c4dcdff60886edb9385195", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d811c93-d75f-11eb-875b-42010a9c0053", "comment": "Malware payload (RedLineStealer)", "timestamp": 1624809122, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809122, "uuid": "aec30ea2-7b53-4c5c-ac30-77510b9283c0", "comment": "Malware payload (RedLineStealer)", "value": "058008708b231b10585b60c309d69219", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809122, "uuid": "b8222bf2-ab5f-4bb5-ba38-43076d3eeb29", "comment": "Malware payload (RedLineStealer)", "value": "95dc83cadd34f15afa9fd684c6f931a756a9fc5e1cd7e069cf785e309e944a60", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809122, "uuid": "c804b498-6e0a-4448-b782-1c4e238075e8", "comment": "Malware payload (RedLineStealer)", "value": "2a01aa30db6473d85aa23289ba53dd1d8d4763e3", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809122, "uuid": "85d296ae-6ee6-49ca-aa0f-e3b798bbc261", "comment": "Malware payload (RedLineStealer)", "value": "d1a420d473ee1a11edf3a5b799a3c7cedcde88ed64f7756bff0b0100c4da46c8543d4e87df826012eaf428e0f61a0d5e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809122, "uuid": "7de0ccf1-d382-4eb7-b4a4-14d2aef6e5c1", "value": "61949D00FB90C035E6F611F84E7AD778A53CBAB2572451CBA2D52EEE57346E0AC3161B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809122, "uuid": "85ba15a5-c2ae-4f95-963d-fe0b8ee1bd89", "value": "c55a6c5b8dc5009c74a01bc124b7b217", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809122, "uuid": "1bb8d143-956f-41f0-9acd-6dc7aee62617", "value": "12288:xu9qLn5d40Q2zeV4FSs8UGIecgq+thpG:Ewd4J2G4FTsIeKi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809122, "uuid": "7dde3fd5-0d8f-43e8-a70d-7f982887ecd1", "value": 419840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809122, "uuid": "51c9753b-0807-4afb-b175-c97437e4c858", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809122, "uuid": "ae79f36c-7713-48d0-9e91-e3200f8a0fba", "value": "058008708b231b10585b60c309d69219.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef02056a-d789-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624827298, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827298, "uuid": "3f6fa686-d905-4635-8f0c-78e73621a2f3", "comment": "Malware payload", "value": "8e4fc472d9d3c21a353c90131f5813ba", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827298, "uuid": "38c32b8a-196a-4e11-b491-0e66fe891312", "comment": "Malware payload", "value": "996adc0da02472ca20f950e7482e415f86332393d73a077ea947c15525406e2f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827298, "uuid": "8ad1f351-5419-4247-b0b3-d7d082401deb", "comment": "Malware payload", "value": "97abe308730c41d33f230eba5c644aa43260ab1f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827298, "uuid": "55ab4f57-4ced-40b3-af11-d9e53787c6d3", "comment": "Malware payload", "value": "d11c21aeb39dd2f5753f3511719115a096ae1b70087b15b0ced70785e2f8f5221746c2726291a075f2e2e4248b6a6dec", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827298, "uuid": "9e6a0eac-4371-44b7-96a6-bca0e586c5fc", "value": "438523E3E485A630DCA55A75864E41833F65DCDA2D2043F6324AFE2DBC732D1972623B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827298, "uuid": "f0c818bb-c845-4f6d-841c-05038048256c", "value": "4328f7206db519cd4e82283211d98e83", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827298, "uuid": "1369f95e-703a-4382-9bca-b86d7dab6cd5", "value": "24576:z43hHDONgcR4v0Qx28gJfDxshxgxr2+e3WOu9/LAgHtkzElpRTYV/5glehazPJI:ChHsjwx28gJVwW0+U+MIt31Y55F41", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624827298, "uuid": "7802758a-3eab-4e91-b117-b5751251c6a2", "value": 1871640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624827298, "uuid": "b58a5cea-a382-480e-ad0e-2d062fee46f8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827298, "uuid": "907129af-41ef-4299-8e82-b34bc4afd090", "value": "8e4fc472d9d3c21a353c90131f5813ba", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "acbae905-d6ed-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624760185, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760185, "uuid": "416ebae7-53c7-4935-97b4-5828751a27ab", "comment": "Malware payload (Mirai)", "value": "4535f27f5ba162b10758b060ab16288d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760185, "uuid": "5f9f2c09-2f4a-4870-8555-930b99c0ff74", "comment": "Malware payload (Mirai)", "value": "998c7795b025d15a2de7fe90f6380f9665454ca1d4e3de3a9bfd7b3cf84924d5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760185, "uuid": "8f9fd0bd-c994-4cef-8aaf-1af1fb5d6402", "comment": "Malware payload (Mirai)", "value": "4724d1426649b875ee76df60cb2ea402ce1a1813", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760185, "uuid": "cca5c035-ff50-4f19-8e41-1d7b53b57c0e", "comment": "Malware payload (Mirai)", "value": "97966d7986158cedb87282513ad08ced9915d206d8c03b642b7e5d76a7d0c6f1d7065fe656cd0f5061b2cda4f2a30af5", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624760185, "uuid": "2183953e-a61e-45ae-9204-230ce886ee4f", "value": "BB13754E2A619FECF76C863847B78E206758339526E2D6C4D19CEE015FB034D641FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624760185, "uuid": "01925d5b-d1ce-422d-bf18-ece0effe3dcf", "value": "768:/wNdFv3tF0u4b1KTVEhzMv1i5Rq2+sOsrsWlsqsYlsxsstEdjOs2mvhnEOJKmPBw:s7VER/jtO/VKPZDKh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624760185, "uuid": "16118973-3bcd-4c87-ac23-1ceed91a4e3a", "value": 44540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624760185, "uuid": "1fca7174-f745-4548-8ce2-3ce15b1cb1c6", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624760185, "uuid": "af94b937-bf0e-4fd1-80e4-24190d7c8260", "value": "4535f27f5ba162b10758b060ab16288d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a40b4eb-d6f9-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624765067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765067, "uuid": "e804c692-4f27-4fe0-85f0-b670e4395ff2", "comment": "Malware payload (Mirai)", "value": "da68816808d31770d706fba5ffbc0401", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765067, "uuid": "ef17b58c-9a9a-475c-8695-91cb8735a7ea", "comment": "Malware payload (Mirai)", "value": "9abe4c25be1af023cc10007cdd53e08bf3fc43b8dfceac76df6ea2585ec48032", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765067, "uuid": "d32e2fe6-4cc4-4c3b-a896-b3e47ce67938", "comment": "Malware payload (Mirai)", "value": "f6d773e8988b4e68a9f668931a7870aa010b6c96", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765067, "uuid": "f8f3cc9e-4249-47aa-8644-7748fc5aa189", "comment": "Malware payload (Mirai)", "value": "e313939e607826178a447497ecad299a01f2bb35748fbb07cdfd5e27d85eed9b29f1e67a7e4b493487c1b44ceac02996", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765067, "uuid": "07172496-32ea-45bb-9022-a35bb7c9ae02", "value": "E4B22A82AA83F9F5F824C7B5D837AB727372F42F2459ED96DB5B1C34A842001D25329D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765067, "uuid": "487de21d-a0a1-4736-bdf7-43fa6a53c586", "value": "384:fIDU0VIjqfLKKor1aKMztkxI9489HdTwLvPV5l01yXA1djJq:wDU0qjMKKA/mJbdELvNr0EQ1djo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624765067, "uuid": "b831b771-1221-4300-b2cb-ae089382d8df", "value": 23592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624765067, "uuid": "9ed0d707-5d91-4c73-98b3-f6860b17bd9e", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765067, "uuid": "0a22dc80-e052-4f32-abd8-293cea217122", "value": "da68816808d31770d706fba5ffbc0401", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fc91167-d760-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624809368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809368, "uuid": "b75ba6ad-21e0-4771-bf0f-bb0426eee790", "comment": "Malware payload", "value": "e67ab4746de43ba3e9234c79f7ad8f6e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809368, "uuid": "b13f6110-c7ab-4fbd-af2f-74666064b48b", "comment": "Malware payload", "value": "9b04bd08d71680ffce4ea7d51e725a2eaa77f34a6316b9dafa89431cf8477174", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809368, "uuid": "3d93a8e7-aa79-4f14-ac2f-709c381ed25b", "comment": "Malware payload", "value": "4df1e84cef9d689d1c24dcd1a68d17c6e57bab80", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809368, "uuid": "7c6aa2fb-6aa0-4a4a-a447-bae14ad1edad", "comment": "Malware payload", "value": "88293fff2cd15303d3e586a4347355c310963a4dc768f61aadad08a32d5d0c3ec8fb9f1f731c82b319edbaf5db9ab8bf", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809368, "uuid": "36ded8ed-5f95-41dc-a95c-49a905845843", "value": "99F42226761D24F7CCD90AF420625AE147F2FCE6E481F3C92ED636AA29F67C5830154B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809368, "uuid": "864c99e2-101b-4a41-83ee-2927c1eaf6a7", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809368, "uuid": "92223cde-7b31-45af-9b62-ee73c523b54d", "value": "12288:AH4LSLzcg8p439AMIsk4eAP17GtMCIyNhPkfZjbXR4WaKPpMiZN23SagAjz40Lmf:fSXcgyCvLk4vdatjI0hPkZmWhHZc3zz8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809368, "uuid": "c4b8275f-d3eb-4b67-8256-bb72bad2b7e3", "value": 727552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809368, "uuid": "9ed3ac56-ef52-4c86-a23a-628097e60f46", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809368, "uuid": "86da0ac1-492a-44cc-88d6-0ca4334643fa", "value": "e67ab4746de43ba3e9234c79f7ad8f6e.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62e1f766-d74a-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624800005, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800005, "uuid": "26576184-b6a2-42dd-a3f0-8b083800b0d2", "comment": "Malware payload (Mirai)", "value": "6c06ff18cb7897c5b54384ac86eef0bd", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800005, "uuid": "2e5476bd-1f21-4970-9fd1-12c8eeef53b9", "comment": "Malware payload (Mirai)", "value": "9b6ec9061a2e3a6916a07c614cbe5daf21be909f8e783f2100d4c86675004960", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800005, "uuid": "3cce052a-9f3d-4005-a204-2f28fe3194e6", "comment": "Malware payload (Mirai)", "value": "295fac397c3731ae0a4af8f5d5b3fb41f4d0e9df", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800005, "uuid": "0e19ac02-b209-4f9a-bdd0-46ebaa1ac12e", "comment": "Malware payload (Mirai)", "value": "50806e7c98a68bb663250195f3325783313aaa0f9168a8233830e5607ea39c8a5d3b906a014a531b9cc9439f1cd6e10f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800005, "uuid": "5689279d-4634-40f0-abc4-d9669935fa96", "value": "03A2D1D5AD729CB6EEB6E0337BAE9C4683905CA2427C53D9E65AC09231FE21F4051DC4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800005, "uuid": "fcfb87f2-c1d6-450c-b808-496cdb8daf36", "value": "384:MyX206yHsN1bGmfzgce2fYtoUz6iISkwyHYdQ/ACPbyuuk17NyA:V2/Wmf75YtoorpyHjDbyI1wA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624800005, "uuid": "fddb1be2-72fa-4211-919b-91723f4a29da", "value": 21992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624800005, "uuid": "2d6b1962-1fa8-4ad1-aa2e-5363d8d43ba6", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800005, "uuid": "a6e8090d-0b96-42c4-9bc4-63f5f2349741", "value": "6c06ff18cb7897c5b54384ac86eef0bd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d347480-d738-11eb-875b-42010a9c0053", "comment": "Malware payload (RedLineStealer)", "timestamp": 1624792210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624792210, "uuid": "2e40f353-3b29-4ccf-8b44-33cb82103d8e", "comment": "Malware payload (RedLineStealer)", "value": "9e16bdb0e41a5fea9f946f08c5dbadd1", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624792210, "uuid": "3e353bcd-793f-41e8-93c0-99e0da21108d", "comment": "Malware payload (RedLineStealer)", "value": "9c3bd592fc9da10ff2b30b73f2195bad21df56f347eca2011904cf6d00a9a5e2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624792210, "uuid": "952b4a7c-920f-4cc1-8d87-02a28b3b28e8", "comment": "Malware payload (RedLineStealer)", "value": "f68c1ba33035486644a48040310d036bc08bb04b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624792210, "uuid": "238c20a2-1166-4e23-aaa2-224fc33f17e7", "comment": "Malware payload (RedLineStealer)", "value": "d6bc72f4027d5507c167503c62e55f2876df87407a46ff86f410d21c8285aa9a64082aa142e4525d4fa95295319b5aca", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624792210, "uuid": "afbc9e1d-27ba-4550-bbd7-60a076a4d8b2", "value": "219527893B9F83E1F7E4F5B1707A127E0E282E5634E1BF8DBF58B14D062A94358A0D51", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624792210, "uuid": "e5a60d0b-b8f4-46bf-80a6-3949583eec08", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624792210, "uuid": "e6ef9c9b-e0f4-44a5-839d-a0cf90a7fdb0", "value": "24576:e8aLyjsqO1brwerQIWONYxBqSOFdOLwfAyX0gV2ozVwTGhP2un:ehcsl5rweFWONYxcSM5kh2VwTg9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624792210, "uuid": "90e2da63-98e8-4d23-b7a7-a3e18033ba01", "value": 1931840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624792210, "uuid": "09504892-325e-4b34-a3da-614703c49e74", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624792210, "uuid": "572f9f63-557d-4a88-929a-b48cfb962ab2", "value": "9e16bdb0e41a5fea9f946f08c5dbadd1.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "827c9701-d75f-11eb-875b-42010a9c0053", "comment": "Malware payload (RedLineStealer)", "timestamp": 1624809077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809077, "uuid": "05e1edc0-af82-46ad-bb60-286b7d9693c2", "comment": "Malware payload (RedLineStealer)", "value": "a87b6f6dd35a823bbb58a84214966b85", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809077, "uuid": "2246718c-c3e4-4f87-8cfd-35ea5097aba2", "comment": "Malware payload (RedLineStealer)", "value": "9cb05c21522a78ee7a0b2da259e08efc87a3021cbfc9d466ebcd50aaf9ce5e29", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809077, "uuid": "5acb4ff7-c447-4786-abf3-52aa5fe615d7", "comment": "Malware payload (RedLineStealer)", "value": "48c74a278d91b2512fa848e9e1217190d6cc32e1", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809077, "uuid": "329cb872-596f-4833-8518-d642d1c67ffb", "comment": "Malware payload (RedLineStealer)", "value": "9d7990ce1a514f174223d9a3fea75719973cb7578dce6eb460a913bb152b77af181e8ba6f29eba6d67774ca042fec401", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809077, "uuid": "317bdf9a-176b-4d4b-9ce8-3bbec597453e", "value": "5C94AE00FB90C035E5F621F85E7AD6B8A53CBAB26B2450CB62D52EED57346E0AC31717", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809077, "uuid": "46a1627e-381c-418c-b867-fd2a5cc216d5", "value": "c55a6c5b8dc5009c74a01bc124b7b217", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809077, "uuid": "3dec16d2-7150-4ada-80e6-5c37223f89d8", "value": "12288:679qMnSd30Q7zr5vfVPjUsqKL2sS/YqUq:yEd3J7lfR4sSt7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809077, "uuid": "4c785774-0560-457a-83a4-9aa4ce557bc0", "value": 419840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809077, "uuid": "dfbc0115-2c4d-46fd-bdcd-58bf92f72982", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809077, "uuid": "7f9cd61e-4c77-49da-82b6-1abdc8802081", "value": "a87b6f6dd35a823bbb58a84214966b85.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b219bad7-d75f-11eb-875b-42010a9c0053", "comment": "Malware payload (ArkeiStealer)", "timestamp": 1624809157, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809157, "uuid": "28cf811e-cd17-4868-a1e2-87f7528f91b5", "comment": "Malware payload (ArkeiStealer)", "value": "96505bce1f94e268ad62ea8b36b6d486", "object_relation": "md5", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809157, "uuid": "96774022-6d88-4001-92dc-571b2a5162be", "comment": "Malware payload (ArkeiStealer)", "value": "9d4ae0f85b422c0a89e523338d6d130753dd66623674d65dac4c297be9be93ed", "object_relation": "sha256", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809157, "uuid": "8b90b079-646e-43c3-ab16-bfe646859e00", "comment": "Malware payload (ArkeiStealer)", "value": "f50ec4a50eb2b51fb596a9f569154d89e5831a6f", "object_relation": "sha1", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809157, "uuid": "38a3f949-6008-4c37-a3c5-612b56b0759c", "comment": "Malware payload (ArkeiStealer)", "value": "cb749e6b7e1e0e04760327da42ae461af541ec1bd2c7085ed2a39b8b7ffe612cf24b90b154d070536a32baa18d888e44", "object_relation": "sha3-384", "Tag": [ { "name": "ArkeiStealer", "colour": "#21CE25", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809157, "uuid": "535d968f-438f-473d-83a9-f8f6a2d4667e", "value": "22E4E010BA93C039F9F611F88969A3AC953D7EE05B2440C752D9EAEB1B385F1EC31356", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809157, "uuid": "68a9e19f-3d06-4d0f-b486-f97af01199fe", "value": "49f7d03a7898b500bdee4de1729ec84d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809157, "uuid": "d71c2b4c-2243-434d-b7bf-9d952350f385", "value": "12288:F7P9n4Oc/r7sQgUnqIklc5PPxuN6xf7Ko/CXOTRCa4GxuafwtRs87TvUp8gREfZH:t94OcXsQgUn4laP5xzKoqAR92a4vUbA5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809157, "uuid": "50a6a627-4e0d-40c9-8bca-196520cd6248", "value": 721408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809157, "uuid": "9ecf8cd8-237d-40bf-9e91-babf57714aee", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809157, "uuid": "14f5b08f-1ab2-4996-a9f4-d6f6496a0835", "value": "96505bce1f94e268ad62ea8b36b6d486.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89e8c868-d760-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624809519, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809519, "uuid": "eb58fda0-3636-4f37-ac61-c89df4739703", "comment": "Malware payload", "value": "7f8fbbedddc5c8f3a99398aa8895ad55", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "Jupyter", "colour": "#301341", "exportable": true, "hide_tag": false }, { "name": "Polazert", "colour": "#2F56A4", "exportable": true, "hide_tag": false }, { "name": "solarmarker", "colour": "#1340D1", "exportable": true, "hide_tag": false }, { "name": "Yellow Cockatoo", "colour": "#82FE98", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809519, "uuid": "e9357149-df7a-4801-a0c0-81e144d82762", "comment": "Malware payload", "value": "9e54e78644f56271cc3966a70b0d6ebd716173bb31373f4c6cfaa77920f60429", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "Jupyter", "colour": "#301341", "exportable": true, "hide_tag": false }, { "name": "Polazert", "colour": "#2F56A4", "exportable": true, "hide_tag": false }, { "name": "solarmarker", "colour": "#1340D1", "exportable": true, "hide_tag": false }, { "name": "Yellow Cockatoo", "colour": "#82FE98", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809519, "uuid": "4b7da9ec-b063-4d48-8abb-77ff8b903350", "comment": "Malware payload", "value": "75aa1decd8916b72d2f41e9a8dec7596178103df", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "Jupyter", "colour": "#301341", "exportable": true, "hide_tag": false }, { "name": "Polazert", "colour": "#2F56A4", "exportable": true, "hide_tag": false }, { "name": "solarmarker", "colour": "#1340D1", "exportable": true, "hide_tag": false }, { "name": "Yellow Cockatoo", "colour": "#82FE98", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809519, "uuid": "7b56178d-1ce3-469a-a412-f5522f407efc", "comment": "Malware payload", "value": "ac8d380ee00985f2d5532ff9d1a557db31fe13d2b800b8aa699aff5329a381263c2935ce088f45e8f9deeb9fc78c6190", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "Jupyter", "colour": "#301341", "exportable": true, "hide_tag": false }, { "name": "Polazert", "colour": "#2F56A4", "exportable": true, "hide_tag": false }, { "name": "solarmarker", "colour": "#1340D1", "exportable": true, "hide_tag": false }, { "name": "Yellow Cockatoo", "colour": "#82FE98", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809519, "uuid": "038a6ba1-04c8-4d06-b361-bb8cb5dcfb11", "value": "57E2060C7AFA411DE1BE9B7E88F0652543B974672A03F78E0AE912ED1823750C9D1B77", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809519, "uuid": "2dad0516-53a0-490c-9d47-29cfacc6b9da", "value": "dae02f32a21e03ce65412f6e56942daa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809519, "uuid": "542dcba2-ca7f-49ad-afa0-adb0ca98a9ea", "value": "768:/CftdoneXOMPP3eKdSVEUiukHZuSA+Ee0T:/ctdoefNu2uN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809519, "uuid": "1b2b6a42-9155-4d89-89a1-60caa3795ea6", "value": 31232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809519, "uuid": "8347a18b-f657-429f-8cd9-14a01feb7fc1", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809519, "uuid": "0d759881-cfa8-47be-a081-3e60dadd5598", "value": "ff7fa5c8-dae2-46f5-b13a-bf9193a079b6.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "971720a2-d787-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624826292, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826292, "uuid": "f909043d-576a-44c5-9362-7a9776e8b9f4", "comment": "Malware payload", "value": "43521f8d996282515c48039b5fb48d2a", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826292, "uuid": "262c5791-e99d-4e0d-84f1-308ffd3fea56", "comment": "Malware payload", "value": "a0ea32433ba72a970f807e9eada5af9072025d5784dd0cf0bcb9b8402f6fb190", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826292, "uuid": "1c53087a-436b-4657-93b2-64feb5f44c4c", "comment": "Malware payload", "value": "d78e9efabacdcaa059a351d97fd81805d3153048", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826292, "uuid": "690f520e-9c29-4e9e-9eca-95c7c3405023", "comment": "Malware payload", "value": "72e9a0a5ab11a6d4f29cc7287a920d227e2c40e2578ec588c6e9bca170a06f83f20c2b7624ddae364d3b8413249ff16f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826292, "uuid": "8ef877d1-33aa-446f-ad1b-e6c348ee9ba7", "value": "00833A43B72D0B43C49B6AF02DF727F08769F9A117A76580A10EBFC45772AB02512FA5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826292, "uuid": "b0dcbe04-8518-45be-809d-a64b27a62faa", "value": "1536:lQm/PYM4bk/7Wv9Sc4Q3XFKAR9Cg8l8EmQ9VqXjtWf2Xe:lVJnyoc4Q3XNl8l8EmQ9VqXBWf2Xe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624826292, "uuid": "28052a8d-e9df-4d3d-93c6-d819900905c3", "value": 84797, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624826292, "uuid": "7a8a4dcf-28b7-4a05-b277-f01e99dcdbd5", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826292, "uuid": "fc0d70ce-8887-4245-9056-817a3c645fc4", "value": "43521f8d996282515c48039b5fb48d2a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81ae51eb-d72f-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624788460, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788460, "uuid": "355392ef-7341-4d2e-85e0-4cf2c7b83392", "comment": "Malware payload (Mirai)", "value": "fa00bdf3a854f6ab8bb79ac49a7f6af1", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788460, "uuid": "291766f2-c6cc-49dd-b099-d490e14511da", "comment": "Malware payload (Mirai)", "value": "a1176035ef31795af5c1063b2a2800a8a6954a4eba00f73b017517f04f2e0aa5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788460, "uuid": "835b3a87-7fb1-469c-9bd4-14c19797ed1c", "comment": "Malware payload (Mirai)", "value": "2f0f0a9608e54065e7644835d40545ae77f5b5ba", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788460, "uuid": "6ae927f0-dc46-4565-bed7-01a2dc37fd2a", "comment": "Malware payload (Mirai)", "value": "2fe9f1b9099ac3e208967e84adb8aa051f30f01bd6a55aeb4191e224938611e7bd0fd443a42de02ba151b28a03daa031", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788460, "uuid": "746d307f-c962-454e-9efd-b0c1445cc2a4", "value": "ADD2E143449BA975C2204931FD2E5EC34E8717BDC6CB61F60530AE796BD045A9BBE283", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788460, "uuid": "1c6c802c-1394-4800-b8ba-62edfde9687c", "value": "768:ead9L0XZdTmLctQ4h9qQ8HB8A3cvaBQuWMu4cqys3Uoz5:eS9YjT7Tj58HB1cCBQuWF4cyz5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624788460, "uuid": "a6c858ff-1469-4003-a6f0-92aaaf078f89", "value": 30308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624788460, "uuid": "3151b153-c044-43e3-9ece-53dd20888394", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788460, "uuid": "32105596-dd07-46bf-a770-7a2facc85b17", "value": "fa00bdf3a854f6ab8bb79ac49a7f6af1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0fe06c74-d730-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624788698, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788698, "uuid": "22048a68-6ed3-4a14-aa74-cb2404cdcbc9", "comment": "Malware payload (Mirai)", "value": "2e61d532d6ff182483a7a5b042c618fd", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788698, "uuid": "28ffd88d-8eb7-449e-aa19-85cd568e314e", "comment": "Malware payload (Mirai)", "value": "a3b3d4a7eed27d55429009529da4a2db1518e8f8b426446a8511e1ebdba88f8d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788698, "uuid": "f82008b6-c9a8-4de6-9783-d7e2340d850f", "comment": "Malware payload (Mirai)", "value": "f58bad24d411dd268d82c98ecc6ad26b295d3b82", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788698, "uuid": "f8351150-52e5-4f02-9516-3276b4cd4032", "comment": "Malware payload (Mirai)", "value": "e8c1106b5388913de571c02fe135eddb7f20e33e91a970a19a1652eba124d45c7dd1779fed4f0778fa9f5ea211f655a7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788698, "uuid": "5baef7c5-cfe8-463e-97e5-6eb2655777a2", "value": "D873AE75C0ACDDE4C6154638F25199399B13A00DA5A33EFAEAC2C696505BBFCF1087F2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788698, "uuid": "43954444-4c37-49a9-8aeb-35fe8b203eac", "value": "1536:a/bMmbMJqa5wtczvnMrU9nE4rsSnyijHBfs3YCQTD5N6CEOr:aTMN4yhvnMrU1E6nyidf+585N6y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624788698, "uuid": "0c23721e-823c-4d41-9bd3-ccc7611461a2", "value": 74832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624788698, "uuid": "1a653496-680d-4471-a0ff-1444c89c05e2", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788698, "uuid": "1bc8c5bd-17ab-4d36-b429-3774716eb54b", "value": "2e61d532d6ff182483a7a5b042c618fd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be0e2b06-d722-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624782978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782978, "uuid": "f8e93f2e-86c7-4029-88e7-e9c8dd81eea2", "comment": "Malware payload (Mirai)", "value": "9092166a79c853c6a1cca8d27b417232", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782978, "uuid": "63c8de21-963f-41c3-a310-427ee10dcf88", "comment": "Malware payload (Mirai)", "value": "a501ee6c6c3c9e2723f2ffbec87b68b03fe3198c03144e06c7741b12b69a3a39", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782978, "uuid": "c71ebc74-6038-48e7-804e-427fdd84f1e1", "comment": "Malware payload (Mirai)", "value": "4fe0cd1c151cc1194896403c210e30b85f233b14", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782978, "uuid": "0c297b9e-a4a8-41b6-9e29-15e364233c3f", "comment": "Malware payload (Mirai)", "value": "c8d59c450a61fc080cbe528f447deb2f20f0345c3334306bbf9995eec05d2d66fde034fdcd85cfb0a30d931924fcc288", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782978, "uuid": "fbaa1055-e644-4137-8684-3add74255bc8", "value": "7D831997F800EDBEF80AD73B45934916B130A7A50E821E36A3177967ED361D44837EC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782978, "uuid": "060c5aa4-df87-411c-bd55-e11690b6227d", "value": "1536:k5Y6wEP7FviJYVWW8YOjiH83YyUvQZc6sBPqJss9d2tcLnO9jYpCgwehZDx:AY6wEFiy0jidyUvQZoBssOd2KtppwAZl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624782978, "uuid": "4d8629ad-6195-40ea-8c0a-aac5192ea651", "value": 83728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624782978, "uuid": "9f048b02-3e00-468f-92c1-34461d1f4ab1", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782978, "uuid": "9f8ef388-ab05-4e2d-b684-89bd2480c96d", "value": "9092166a79c853c6a1cca8d27b417232", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7884889-d6ed-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624760177, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760177, "uuid": "5d9708f8-d142-4261-9cb0-d5f5a13ade19", "comment": "Malware payload (Mirai)", "value": "8f8c41f2c49fc1bed40682214220b703", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760177, "uuid": "1a04e6d6-a37a-41c4-8bd8-09f6e8df6739", "comment": "Malware payload (Mirai)", "value": "a55a2318e95dcfbe2d2082ee569642034ab05168fa0142ff1009798131b61f52", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760177, "uuid": "df1c1542-1e6f-4ecf-93a3-cf08e678907e", "comment": "Malware payload (Mirai)", "value": "eea0b28b3b6a6f34dfbdc0740bcdac6a8a96f633", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760177, "uuid": "b0f67267-f04f-427c-8b44-b329c0598afe", "comment": "Malware payload (Mirai)", "value": "11e0b665825ba1092c8fccf3aa2a44338a838ebc7633954eda07d73aa3f4aa32719103424f9de20aeee07ddfd24b4792", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624760177, "uuid": "7d77d45d-4acd-44a1-97ab-64ffcf968a09", "value": "2AE2F14FD7F1B26A90F604742CAEF5A795485017A1AA83EA8FFF12750C47F801E61352", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624760177, "uuid": "3f4c21d9-32d1-416c-8567-d0ca38c14367", "value": "768:VWea3m1nME9wjX5+h48GSz82DFwrfUnbcuyD7Uryqz:Vy3sMvG48G0DFmfUnouy8mqz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624760177, "uuid": "ff754b87-5d6d-41ca-a7aa-d201dea6a39e", "value": 33216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624760177, "uuid": "fe6cd036-bb24-4efe-9bf5-1520d2d00ba9", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624760177, "uuid": "572f7043-d9fa-4a01-8c8c-737cb85b10ac", "value": "8f8c41f2c49fc1bed40682214220b703", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3b0468b-d788-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624826796, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826796, "uuid": "2e732162-d300-496a-bced-a72da13758fc", "comment": "Malware payload", "value": "cf6a92665454b3b359aecd87db7718d0", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826796, "uuid": "55ed56c9-70c7-4e03-aa94-60374db3d679", "comment": "Malware payload", "value": "a5d60afd20900928fdd94c9d7e0cad8cfcc6f4f854d1efd1a929eeb63b49ab34", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826796, "uuid": "4390170d-5b20-4ee3-9718-04fdd87acc08", "comment": "Malware payload", "value": "d22fc82ae264cd37d20e4645046e55f4b71c6c0f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826796, "uuid": "b477ce8a-220e-41a9-92db-26b4457cff1d", "comment": "Malware payload", "value": "6b3f98801aed0302638c8187c8a4a99582799ea0cc9efa8221d2a7694bf0b15726695cbf5061cf36d8363aee1fa322fa", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826796, "uuid": "5583c92b-213c-4de9-9896-ce66a1713784", "value": "9F931941F9418B27C2D237BAE78F435D77366A64A7D733016A356EB42BC27D82E39120", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826796, "uuid": "230869f4-8e0c-4469-a3af-d2d4d2dc5281", "value": "1536:jBkF9VQPAGZXz+MfgcqVq1ifTPTxHOJJqPHsCE7XumREqQ4b/X7XSee:GQFXzFT16ToqPHpmREqQ4bv7XSee", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624826796, "uuid": "c261a690-8299-4cec-ada6-7585efd9b024", "value": 92441, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624826796, "uuid": "e2996b4a-d889-45b2-9c5b-1b08f7db3e10", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826796, "uuid": "4b20b6c4-08d2-42b2-9291-018987a15213", "value": "cf6a92665454b3b359aecd87db7718d0", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c06b3a1-d752-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624803483, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624803483, "uuid": "50751fd9-8299-40a2-85ab-f6552c01e45a", "comment": "Malware payload", "value": "f47d50af7a09b6203612d13d7c254730", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624803483, "uuid": "d80c5471-c5c7-406b-87f7-df44236ee3ae", "comment": "Malware payload", "value": "a5f26aa6158f6fe8201d816582019635c1f349a2b560ca156d12a207a3543bdd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624803483, "uuid": "486321b7-ff39-47e8-980a-044f6ef286da", "comment": "Malware payload", "value": "f2fe7d14953db541f11b82dcbd6eebba8cfc9a44", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624803483, "uuid": "d83dcbf3-24c9-4958-b6ee-9eadc80aab6c", "comment": "Malware payload", "value": "c906186437008a7780b58f7f574f6a5f6ee47d02f4e815f8e2c4d84adf7c5c7fedc7f414e744bf96c96877e0d1947575", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624803483, "uuid": "69444600-10a7-40fa-8e02-b12c1ed4cdbf", "value": "A4351211B661C031E5F711F859FA939C6A3DBAF1972461CFA2D53EEE96346E0AC30207", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624803483, "uuid": "2ba18a17-77f1-4a25-a5c9-0806af3e160c", "value": "7a958e1aed1cf6e81fa8d2a601d98d8a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624803483, "uuid": "c5625324-591c-4caa-96c9-c4c48409d5fc", "value": "24576:/SsZdUQZLqLauWEhq6OD4+AsdJfU9W6T4gM9hkFvvcGwKw:/SsZdUnyDAsTV6n8+Fcv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624803483, "uuid": "af0a6fcc-77d1-472c-a8cf-a575c6b4f0c8", "value": 1159680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624803483, "uuid": "c551d842-03ef-40de-9129-1cc7b566023a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624803483, "uuid": "bf96abeb-acc0-44da-9c99-ccf5c4ffd175", "value": "f47d50af7a09b6203612d13d7c254730", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "83c5ad9e-d6fa-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624765700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765700, "uuid": "3015a2aa-c9ca-4e34-88e2-b7906174695e", "comment": "Malware payload (Mirai)", "value": "e79109689dc3336e4c341263d2e12403", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765700, "uuid": "2f2c5577-95bc-4c8e-b332-248967afaf0e", "comment": "Malware payload (Mirai)", "value": "a658307118a5bcd06cd5a616c83cbcc30f5f89b84e190db08aebb65dd641d138", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765700, "uuid": "6627bc80-4d39-41f4-a7d6-626c59f5bdf3", "comment": "Malware payload (Mirai)", "value": "aa881bdf1dd7e924f415b708608f19ef99107b6e", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765700, "uuid": "3cfe5398-2f92-4b10-a8dd-9076da669e14", "comment": "Malware payload (Mirai)", "value": "4d2ec0276667fab2e3cb79a6d55c3e570f0e53dd80497ceea42237bc71ca9a050dcfb930662e333010af7f70950e5b9a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765700, "uuid": "3328db6c-6e30-49c5-9538-5f16b06e0b5e", "value": "6B72E79C78D7EB1AC1E0D6BBFA0B9BA833A553D8D2DB37138514934C968365D8F12B40", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765700, "uuid": "b60c2a97-2f9e-4706-a461-148bb4838672", "value": "384:Qzz5XZfdsKFZ6bWacwtd2/PTEWsajfo5yS:4plsKGWwtk/Pa3gS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624765700, "uuid": "759fc294-ef7e-446f-886c-fb46cb7529d8", "value": 15996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624765700, "uuid": "636879dd-f865-49c7-80c3-90f6672f23d3", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765700, "uuid": "640796b7-5093-4789-b21c-958078ef51d6", "value": "e79109689dc3336e4c341263d2e12403", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "331b89ad-d6ec-11eb-875b-42010a9c0053", "comment": "Malware payload (WSHRAT)", "timestamp": 1624759552, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759552, "uuid": "c0ee94d3-d8a6-4a5a-8688-64788c0c7487", "comment": "Malware payload (WSHRAT)", "value": "8f0d80257ed844b8fe7dbf5ed3825bae", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "wshrat", "colour": "#3E84A4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759552, "uuid": "f1545121-accc-410c-af4d-88c10801726f", "comment": "Malware payload (WSHRAT)", "value": "a6c5cfb45f3ad2ad7140c002881e61cd8f292bba74813d9d2cd46510d3413661", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "wshrat", "colour": "#3E84A4", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759552, "uuid": "9040b5eb-2ce1-48a1-a8f6-b0d9ccac6b91", "comment": "Malware payload (WSHRAT)", "value": "8220744ac87cd32a5d4445b7342bb3ca7a7d0754", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "wshrat", "colour": "#3E84A4", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759552, "uuid": "6953ad71-2a9a-45e0-8474-8a7c8326dd0d", "comment": "Malware payload (WSHRAT)", "value": "0618ee32b8dad5fbef08f15fde8221fd392449a8fdf46ac1de1ab2a1a81c788a231f5b3d079a766032c465a3a7a0119c", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false }, { "name": "wshrat", "colour": "#3E84A4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759552, "uuid": "590a3c9c-ac39-4ba3-a61e-41f579df2f27", "value": "ACE48D2E1AF1AF7DF90AC1B661C55D012FA0ED61AD8AE90FBB6E3C911F30515FE02542", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759552, "uuid": "9d12b196-8a64-4ec6-86ca-814cba81d79b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759552, "uuid": "f0590f0a-0038-4eb5-8520-4edf18ea53b4", "value": "12288:PM6WlLoxtuPJzFexiG0F3t9x3/MgKW7VBNliWn6e9:PM6WlLoadFKint0gnl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759552, "uuid": "fd187899-f45d-4639-b5c4-9bab84e239d0", "value": 721352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759552, "uuid": "d31162d2-bb17-4811-acdf-f92126c803a0", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759552, "uuid": "3c40f1cb-8c2e-4988-8542-5c9d17cfc576", "value": "8F0D80257ED844B8FE7DBF5ED3825BAE.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2bc7fc0-d722-11eb-875b-42010a9c0053", "comment": "Malware payload (njrat)", "timestamp": 1624782959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782959, "uuid": "99a2e112-210f-4ecb-a1e8-e396e950fd4b", "comment": "Malware payload (njrat)", "value": "740abf7c6df16a1f692eac5ef3e5f77e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782959, "uuid": "65c76baf-4032-4e84-a63a-7ab268c4cba2", "comment": "Malware payload (njrat)", "value": "a7437a485c10ed8bbb83dcdab587dfaf454f9abb37099c7906e68a278e73147e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782959, "uuid": "ad58d498-f1be-4874-8a18-17b6d849de4e", "comment": "Malware payload (njrat)", "value": "a465975949c89470bd1571985691a2e7efb1fd93", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782959, "uuid": "b9e11c5a-67d2-40a7-9bf9-2185ba30bf48", "comment": "Malware payload (njrat)", "value": "9fb360286bcdb4c685fd560a81d376777a6e7f87bf103fc93c654df94ea629c58bb351c2868f3d1942c5da7f8280e11b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NjRAT", "colour": "#E5B690", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782959, "uuid": "74ad5961-db5f-4312-b776-32567d4d84c9", "value": "E9E208067BE94215D6BC5AFC8CB313214772E3838532EB6F9CDC88CA4B676D00645EE9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782959, "uuid": "a90edf54-9ec4-45d1-a33f-e44b8c3a2682", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782959, "uuid": "8871df81-b4b2-4983-9ff3-3902408e7937", "value": "384:t0bUe5XB4e0XSOfOLsw0Q0mS03AWTxtTUFQqzFiObbR:+T9BuRk555dYbR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624782959, "uuid": "f67c16a6-1187-498c-83c8-e96c8b81e2ba", "value": 32768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624782959, "uuid": "9abc3006-b232-40a6-8ef9-76d776314ae8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782959, "uuid": "53324c13-870c-475b-aa3b-36de6b700df5", "value": "740abf7c6df16a1f692eac5ef3e5f77e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17989caa-d771-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624816629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624816629, "uuid": "c4b69903-1ca3-456c-979f-a73d52539156", "comment": "Malware payload", "value": "623517064e82cb541f2c479032dde33d", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "Jupyter", "colour": "#301341", "exportable": true, "hide_tag": false }, { "name": "Polazert", "colour": "#2F56A4", "exportable": true, "hide_tag": false }, { "name": "solarmarker", "colour": "#1340D1", "exportable": true, "hide_tag": false }, { "name": "Yellow Cockatoo", "colour": "#82FE98", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624816629, "uuid": "bb71e0ff-d172-4c53-8fc0-8192d623b9aa", "comment": "Malware payload", "value": "a7cf635cb384c9fec9631f66a15ecfca9efb416bdb064b9124157d09724fe9e5", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "Jupyter", "colour": "#301341", "exportable": true, "hide_tag": false }, { "name": "Polazert", "colour": "#2F56A4", "exportable": true, "hide_tag": false }, { "name": "solarmarker", "colour": "#1340D1", "exportable": true, "hide_tag": false }, { "name": "Yellow Cockatoo", "colour": "#82FE98", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624816629, "uuid": "4f13b272-8e24-4d66-860c-642eec41e0e9", "comment": "Malware payload", "value": "2cd44664608cf79f5a2ba7fbac910cae5a469ade", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "Jupyter", "colour": "#301341", "exportable": true, "hide_tag": false }, { "name": "Polazert", "colour": "#2F56A4", "exportable": true, "hide_tag": false }, { "name": "solarmarker", "colour": "#1340D1", "exportable": true, "hide_tag": false }, { "name": "Yellow Cockatoo", "colour": "#82FE98", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624816629, "uuid": "4461d389-5f1d-43c1-9fd0-b3495f7451a5", "comment": "Malware payload", "value": "3f2570321bab7eaf9a49a9c709c03c5e7fa7f46bb5015f9c48c96d67f15a6a36b78f9636815be162567f890701bdb96e", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "Jupyter", "colour": "#301341", "exportable": true, "hide_tag": false }, { "name": "Polazert", "colour": "#2F56A4", "exportable": true, "hide_tag": false }, { "name": "solarmarker", "colour": "#1340D1", "exportable": true, "hide_tag": false }, { "name": "Yellow Cockatoo", "colour": "#82FE98", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624816629, "uuid": "5f95ecf4-6305-4ffc-9ac6-988c26adba39", "value": "AF73E31049CB6AFEEADC39F04A21D102A334FEE3AE45975D17EE04F769C991C02DD266", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624816629, "uuid": "bdeef22b-e0fc-4ab8-a115-1e4546f0682c", "value": "dae02f32a21e03ce65412f6e56942daa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624816629, "uuid": "1841bf40-eab3-471f-801b-b9a972f43002", "value": "1536:mmhwDU0JU0ImYi3UkbZo6d8Z+AucrLNxa7:mmhMb/G6/+nNx+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624816629, "uuid": "ad22a181-abe3-4ed5-b1b8-e07be7edcc12", "value": 80384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624816629, "uuid": "a2063b0f-8489-4820-bc50-42585d93b6a4", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624816629, "uuid": "8c73c63f-1f6a-431d-a773-35c05c60c82e", "value": "b3c07491-a899-467b-b033-5e30c97c8ab2.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc6ce44d-d788-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624826811, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826811, "uuid": "2a30f4c6-f939-4337-8fa8-2a4569853397", "comment": "Malware payload", "value": "e9c122061f315e09392397510f334188", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826811, "uuid": "83b6d7a8-2667-4364-9adb-c50a12a8b55c", "comment": "Malware payload", "value": "a7dbde8652e1df8ec5ae07db4b0cdfd9d4bf5dc10f84fe7b170a8e3166e61edd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826811, "uuid": "81872166-507e-47f5-9bc4-7ff1a36beb0d", "comment": "Malware payload", "value": "bc1b78b1495d3e73cba262e857600e32a5036ebd", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826811, "uuid": "60e79d8b-0339-4da1-9677-709d8f957330", "comment": "Malware payload", "value": "75e61d4da1f4a11d718871c808fcd12fe31df7b54fcf52c73044f4b4063f910f43a11566624a896e19c4457b2cd9dc74", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826811, "uuid": "c60eea1d-9258-4408-9271-2772f2c41454", "value": "06B3852A7E22EFFFE668863107F35F7087D5219226A19385F26CE6181E7128C1C5F764", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826811, "uuid": "100be49d-fc8b-421f-8850-9d799683d687", "value": "1536:27ju1Thpq+XvYC2rKy3eYxPGEEeRYYIn8vEC7ZXA4PUmkiSFxfC7xbXe:RvYBPGEu/nFs64PUmkiSFxfKxbXe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624826811, "uuid": "fc99042e-b20c-4914-b87f-673272b08100", "value": 113268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624826811, "uuid": "a061d444-fc65-4d2b-9a06-be720e1838b6", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826811, "uuid": "b4e0df46-d4f1-4148-ac9c-778a44eb2654", "value": "e9c122061f315e09392397510f334188", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3f806a4-d780-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624823360, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624823360, "uuid": "4d9caec8-02ce-4f2f-a051-43f2a633a295", "comment": "Malware payload", "value": "d28b88bb3820849bf9a7bdc3274d021d", "object_relation": "md5", "Tag": [ { "name": "covid19", "colour": "#BBFB81", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#F5A925", "exportable": true, "hide_tag": false }, { "name": "ohpfdpfjlqysasyl", "colour": "#233FC1", "exportable": true, "hide_tag": false }, { "name": "rustybuer", "colour": "#9300CF", "exportable": true, "hide_tag": false }, { "name": "xlsm", "colour": "#6BFEB7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624823360, "uuid": "465dde57-5b1e-4a10-8154-3c0531f3e3c4", "comment": "Malware payload", "value": "a8f8f28026bd423562cfdd1ffe100f947e69a477c4dc6bfa1d27826c6795f472", "object_relation": "sha256", "Tag": [ { "name": "covid19", "colour": "#BBFB81", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#F5A925", "exportable": true, "hide_tag": false }, { "name": "ohpfdpfjlqysasyl", "colour": "#233FC1", "exportable": true, "hide_tag": false }, { "name": "rustybuer", "colour": "#9300CF", "exportable": true, "hide_tag": false }, { "name": "xlsm", "colour": "#6BFEB7", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624823360, "uuid": "97d6574e-b3b3-4254-a64e-12775ccd555d", "comment": "Malware payload", "value": "3ff9c873d8824fb507bc03eae890df3064e5991f", "object_relation": "sha1", "Tag": [ { "name": "covid19", "colour": "#BBFB81", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#F5A925", "exportable": true, "hide_tag": false }, { "name": "ohpfdpfjlqysasyl", "colour": "#233FC1", "exportable": true, "hide_tag": false }, { "name": "rustybuer", "colour": "#9300CF", "exportable": true, "hide_tag": false }, { "name": "xlsm", "colour": "#6BFEB7", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624823360, "uuid": "09c9bb52-88ef-4172-bcff-1c657490116c", "comment": "Malware payload", "value": "26b921084b8576374cf9aa33033f7cbbad8793a494e57adba3b9dc828adbb620eb2645a1d428407babd1bb46affdbee5", "object_relation": "sha3-384", "Tag": [ { "name": "covid19", "colour": "#BBFB81", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#F5A925", "exportable": true, "hide_tag": false }, { "name": "ohpfdpfjlqysasyl", "colour": "#233FC1", "exportable": true, "hide_tag": false }, { "name": "rustybuer", "colour": "#9300CF", "exportable": true, "hide_tag": false }, { "name": "xlsm", "colour": "#6BFEB7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624823360, "uuid": "b8383e65-c707-4563-80d1-065c36f847b1", "value": "D893126976928154D253DF3C9F54F666353CAE399AC0DBC29803BF0C1EBDDC54AA4382", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624823360, "uuid": "480ab2c0-e31d-440f-a384-b17c906b5321", "value": "1536:CRR1eO6AN3Xok8JNDHCvJhk9xoj0wx26ZwgeR8MyN5K+E6sVN9edOSMl5Q:44ORNOrCzkfojvx26heR8K/xN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624823360, "uuid": "9292cf54-c24a-4623-ac98-3cb6f870a838", "value": 91136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624823360, "uuid": "da68f1a6-3758-4a44-8aa7-f09507288b2f", "value": "application/encrypted", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624823360, "uuid": "6965d13d-6791-41e1-b2f8-d75e4b2be538", "value": "document.xlsm", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c273592-d6fa-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624765714, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765714, "uuid": "b32f1f52-412e-4f63-a2be-62ddf7a313fa", "comment": "Malware payload (Mirai)", "value": "95409902dc9d015c5b68709c2b6261a6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765714, "uuid": "e9d80c09-2915-444e-8875-d1e12c0f7823", "comment": "Malware payload (Mirai)", "value": "aa490e3905fdffe3965646b8b9207112e6713fed81fc7d9ee6936442af0ae81b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765714, "uuid": "1f3e0e97-b1af-4cd1-9864-d4e5388cc0ee", "comment": "Malware payload (Mirai)", "value": "be392c045872e2035200f6a7ae9d22b493a3273b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765714, "uuid": "4e2509a3-6254-401a-9b61-6a6b78263b5f", "comment": "Malware payload (Mirai)", "value": "715a652a239fb8a5b91723c351ce1771ccda0259a6920152b63a1a7bcf5b00a8997582d69ba747aa63bb73d8b33b430d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765714, "uuid": "05a31408-aca8-4374-a603-2310a015a831", "value": "1EF296462A365FEDF729C63587B34A30A75833C566E0E184D36CD9004FB034E686F7A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765714, "uuid": "9f3e0ff3-2599-4b02-a709-ed3c7cebae7b", "value": "768:gpoNymYqc+44htCpAfWcLgEXgZMnMN9xMFNMVRL2rXdWvZeSSp2W:TomFS+lGSi1CXdWvZ7Sp2W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624765714, "uuid": "cd2ecfaa-58a5-46e4-b103-c63c8249b406", "value": 34660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624765714, "uuid": "6e716d03-a563-444a-8098-4e82f50aecf8", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765714, "uuid": "298d219e-1e06-45e6-85d7-5b7bb5b58dfe", "value": "95409902dc9d015c5b68709c2b6261a6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2a92601-d760-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624809641, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809641, "uuid": "f23acb3e-0924-4f12-baa2-9cc4e62d1232", "comment": "Malware payload", "value": "2bdef3fc231df877b1bba7af22418d79", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809641, "uuid": "af87aa42-9f2a-4d38-a1cb-b1ca003615f3", "comment": "Malware payload", "value": "ab9650083822108eddb2287e3c82728237e2ef8797494a88c926d320ad09ead2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809641, "uuid": "55c96074-3223-4150-b749-9e60bd4f429c", "comment": "Malware payload", "value": "36b8b16ab24034eb381d381cde8afb512758cda4", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809641, "uuid": "7f1006a1-5d2d-4086-b8fb-cdf28bc49053", "comment": "Malware payload", "value": "2dae29f6ca8a101ec923bc90dc1dd741c3451c0249102586edb3926d533c9a194bcf052a4da85f7b36c0b427dc63d422", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809641, "uuid": "433f37f7-e4f5-4d32-8186-ac86d77b4f6b", "value": "01350200B7A1D035E4FA12F8596AD2ACA72D7DB0A72450CF62E93FFE95751E0AD31207", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809641, "uuid": "541c78a7-bb9b-495a-afe8-bbb0c3173214", "value": "a962653d955d84619f2983b46b5dc610", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809641, "uuid": "b715fec7-bc4c-482b-9d0c-bb29e3a451ba", "value": "24576:P0SsZdYueMtavE3PfE0EComLxLSFejlSfU/ZZ1iBuxn+qMVRZ+4kNUj:8SsZdYY3XEjmLxeF8qoZ+nZhUU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809641, "uuid": "885a958a-a00e-4065-abfb-42bda4aef927", "value": 1159680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809641, "uuid": "4be5ae29-6670-4342-9d1d-1f9283aa76a2", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809641, "uuid": "a51a85ac-4298-4fa7-a6cd-63c2accf3a73", "value": "2bdef3fc231df877b1bba7af22418d79", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f37fad1-d748-11eb-875b-42010a9c0053", "comment": "Malware payload (Adware.FileTour)", "timestamp": 1624799140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799140, "uuid": "57c55056-4ec5-4a60-8278-7c07d15c8ee1", "comment": "Malware payload (Adware.FileTour)", "value": "e60c6622b2dae07de65b938e203ce0e4", "object_relation": "md5", "Tag": [ { "name": "Adware.FileTour", "colour": "#E1F2FE", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799140, "uuid": "6c17e9ec-4242-4c30-b058-e364cbc37f93", "comment": "Malware payload (Adware.FileTour)", "value": "ae29526b173b1142f21ed600d821be3b6d19ab9fad87884e015583f838881337", "object_relation": "sha256", "Tag": [ { "name": "Adware.FileTour", "colour": "#E1F2FE", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799140, "uuid": "106eba5c-e5cd-413f-8825-3270d999265b", "comment": "Malware payload (Adware.FileTour)", "value": "5631fb819560bfb4164347e50ac8744752f78949", "object_relation": "sha1", "Tag": [ { "name": "Adware.FileTour", "colour": "#E1F2FE", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799140, "uuid": "fcc942db-d09f-4731-9cd1-d8fc5fe7cdd3", "comment": "Malware payload (Adware.FileTour)", "value": "20455204e4fc81cfa3030163f3ad2cec232e6753ff168bbde905ec6694c5a01f3518404926ea0e80942d87545c26e9f1", "object_relation": "sha3-384", "Tag": [ { "name": "Adware.FileTour", "colour": "#E1F2FE", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799140, "uuid": "aa4d712b-83af-47fa-bd54-cbaa5b0e9b2d", "value": "920633A0FB9545F5C59209B19E4E3BF2B17EF34C47248CB3B771CA0A4E5CA61C23A496", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799140, "uuid": "8569ab9c-c1c4-4a0a-bf84-aea5c28a587e", "value": "32569d67dc210c5cb9a759b08da2bdb3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799140, "uuid": "13785e8b-f047-4ac4-9a26-b7ccc130b57e", "value": "98304:x018QUjmzjPEaVF8SDZNbyEUXVj4CvLUBsKANFpal:xk8QUjecaVRDZNGNjlLUCKiXal", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624799140, "uuid": "a4b0ff50-c98a-4c49-943b-16434ad3c9a7", "value": 3721320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624799140, "uuid": "e557e181-febe-4cf2-b8d2-c80a0ff326b8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799140, "uuid": "41377393-2144-4b0e-8961-709edb446f10", "value": "E60C6622B2DAE07DE65B938E203CE0E4.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "058121ac-d75a-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624806720, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806720, "uuid": "62408d0b-1ecd-40de-999b-87df2b0b5fe2", "comment": "Malware payload (Mirai)", "value": "ec9d5680e674d192c8eb2a149e6e0cea", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806720, "uuid": "0ec0a1de-48c1-499c-a670-3e585bc7f439", "comment": "Malware payload (Mirai)", "value": "aec90e99a4dcfd961f7eb1bcc43141574973ef043620592d9565f2c760be3e06", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806720, "uuid": "850c8f1b-54e1-42cd-aad1-ab5924b8707e", "comment": "Malware payload (Mirai)", "value": "9168ce300e2d31c6eada7744a3cab5a944842efb", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806720, "uuid": "30ded42b-fb69-4ed5-a235-abd36affaaeb", "comment": "Malware payload (Mirai)", "value": "a33296d955edb54f2affd9bfe834be9c45469978cd8b857cba9520f45e18c1a5f401f24f91527862eb8d267c864deaa9", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806720, "uuid": "2a767771-a4f7-459e-a20c-79544a7514ee", "value": "10D2F1016241FEE1C5B00235E9668A9B73267DB9D1D134FBCB3C0DECA6E9A1D87F4942", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806720, "uuid": "a6d55831-8854-4d61-9514-1ff98a4a4aea", "value": "768:vusHfRavjynNKnjFcZIhQzhKMXg89q3UEL7Q:HRwynNIOQQ1KMwFLE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624806720, "uuid": "28c28a69-dfdb-4788-981a-1e7cb8a3b311", "value": 29464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624806720, "uuid": "3ee101c2-9408-4d10-924d-36a08cdddbe8", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806720, "uuid": "d37498e5-c313-4817-97ff-bb3aa578bcd6", "value": "ec9d5680e674d192c8eb2a149e6e0cea", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96637fee-d78f-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624829726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624829726, "uuid": "8d42a8b7-750e-4411-8aee-8b87578ac3a7", "comment": "Malware payload", "value": "65148eb8a0222383b150f3df98eeb4a9", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624829726, "uuid": "61feb1c7-7e2f-4256-bb66-cc4dbd49343c", "comment": "Malware payload", "value": "af2a18f22d7d6aa8e9415336093f6d6c2a60197419601042250e48bfcf3f2d53", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624829726, "uuid": "8cc3b621-c1cd-4384-a196-813523119c25", "comment": "Malware payload", "value": "ccc99a4eb0434b7245bcbe9c0545ade11bdef598", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624829726, "uuid": "70f6cd50-79f6-48e6-898c-5985dd245cbb", "comment": "Malware payload", "value": "64c8ea1a3f7c7c368e69bf1b9e9868bba959d30bacb84465ce8b96f23384fded0837a697a2f1ec32d3ec6f5614b9bcbc", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624829726, "uuid": "0f4acf2e-2e82-40b6-aaeb-ee262950e5ce", "value": "0A441282FAC0ADFBC49791360E93D779F3729E140B83860717F13F2E6E758498529296", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624829726, "uuid": "f0736441-36c3-4813-ae75-090353f65d86", "value": "6144:SEtTqjFAlP9MUYvjfFiDBPWBG0MQ3IfU2rQ:SE9ZlP92wydMQ36UcQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624829726, "uuid": "fa607fbe-d178-49ec-b441-a0cb21276cd7", "value": 278528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624829726, "uuid": "b7e1f254-b1e3-41b9-a85e-3af663fba69e", "value": "application/x-msi", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624829726, "uuid": "e5b07c7d-306c-46fc-8ff0-ca84b9e0ca85", "value": "65148eb8a0222383b150f3df98eeb4a9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5c100ad-d766-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624812250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812250, "uuid": "ea799bc1-1585-4805-9bb3-90eb20621cd5", "comment": "Malware payload (Mirai)", "value": "28ca07cbe38279b25002923e78aecf02", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812250, "uuid": "e14e1592-3219-451d-ac38-caab3a345914", "comment": "Malware payload (Mirai)", "value": "af7a110b9654e30994c3f5ff1f79444adfe606f89f3685989e419acdd261321d", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812250, "uuid": "525a8122-02ea-4480-9eb7-60702e9069e1", "comment": "Malware payload (Mirai)", "value": "c8a0e9a597caae4877a97a032da4097a63ca058b", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812250, "uuid": "258e2870-8e1b-4551-bd90-f951a1b7398d", "comment": "Malware payload (Mirai)", "value": "8c5f57d438ebd563d67ed150f9388e40fdbc9743929026ee02ea21f90ddd986a5e5d1b4097445aa3dc266958b1b4d5f3", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812250, "uuid": "d2a728eb-b1c9-4a8f-bbef-7e7ed937580e", "value": "6A33280BA58181FCC559C17443FBB53AC876787E0639B1DA7BC8FF276D85E601E28889", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812250, "uuid": "27f193d0-0ef8-495a-876b-b82d2e9835c9", "value": "768:Dbs093tGOHn2PAe6nCAQTGWexrecbwBg4ubt7dwE1rjWb571H7wungg:M0937QAe6CAQiWexKg1xV1rs71H7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624812250, "uuid": "c67b57b1-ac8d-446b-bdd2-461e3caf3fec", "value": 54528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624812250, "uuid": "81d0fc3c-c650-4aa5-b2df-53258718589a", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812250, "uuid": "959dadc8-dbad-49a2-8dc0-8b413bce951f", "value": "28ca07cbe38279b25002923e78aecf02", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8031be5-d76b-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624814321, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624814321, "uuid": "086efcaf-dc6e-4211-a801-9af2b2170d64", "comment": "Malware payload", "value": "796b3e4674b68b33c906ce32c3275d83", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "rustybuer", "colour": "#9300CF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624814321, "uuid": "b84e9f69-05df-4b9a-ac07-301bb718b2c0", "comment": "Malware payload", "value": "afb5cbe324865253c7a9dcadbe66c66746ea360f0cd184a2f4e1bbf104533ccd", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "rustybuer", "colour": "#9300CF", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624814321, "uuid": "2ceadcf3-48aa-4fbe-ab3a-b090894a9593", "comment": "Malware payload", "value": "af8dc103b73c194816743ee22023a3cee934ac54", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "rustybuer", "colour": "#9300CF", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624814321, "uuid": "17114492-b10e-4e0e-adb6-5bb35e1575a9", "comment": "Malware payload", "value": "f323078a185cdf4d77d54010880cf93d231437f779fe6c28efc0b23e9b49e7aa1118949ffd5a4e8f1f1aae68276b74dd", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "rustybuer", "colour": "#9300CF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624814321, "uuid": "1b221206-f17d-4eae-84b3-6a903637979f", "value": "34660449AF57EBB044DE149615376E0F756863D61A30ABAF3A2C3AC03C49353152BF2E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624814321, "uuid": "c56bdab3-e201-4523-81fa-b58e2cfcc15f", "value": "b4a4f42eeacc77c5d3caaa7d5ec68819", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624814321, "uuid": "28262084-fd27-422a-8bd6-a710fadb69f3", "value": "196608:FaSSW6I52i0ezA2avJ25OjX7qo+YDuTNROilLZGfNaSvY9P0QmXSSZINaWMFUtnr:gSS6/3ahKOjrqquTNROilLZoazsQmrZ0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624814321, "uuid": "c05d8407-3cdb-4417-b43a-b9b011d1945b", "value": 7115776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624814321, "uuid": "023dd3d9-aa0b-4cb7-9538-2770f55e3053", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624814321, "uuid": "5e59585b-a03f-4828-b356-0b21bf0b25d4", "value": "SignerLib.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d088468-d6ec-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624759595, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759595, "uuid": "cb096a2d-22c2-4a2c-8000-85291a9fbf4c", "comment": "Malware payload (Mirai)", "value": "ae932836a7c760806a25a473ff1d3394", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759595, "uuid": "3104257d-e88e-4ab4-909e-e662b2c3ab8c", "comment": "Malware payload (Mirai)", "value": "b09c85e75f65a9acc4693957caf4b4c56dd808c7d0d657c1bc9f74a1bd772abe", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759595, "uuid": "034ce4ef-34ed-49a7-9b04-6cb4d127160d", "comment": "Malware payload (Mirai)", "value": "2b525a7b3267d8c0e5a779d0bc9d0d3b70bbce7a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759595, "uuid": "a1fc5830-c63e-4cde-a963-1c831ff9832c", "comment": "Malware payload (Mirai)", "value": "61a9db2a79e2e6ae6a6e611f4a20f20f46a2007f410fa01e78f16a001aacb47200dfa680656640eabc4a3eaebfb67507", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759595, "uuid": "40906a61-0d47-4c30-83be-17c727a2da6a", "value": "AEE2E111F0E9695CF99FEAF92D71CBE05FD04F4D26D984933282EE0A7BB55366100AC0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759595, "uuid": "51805763-3994-477d-ab0a-77ffd45d3e4b", "value": "768:mRb6NxYMUAX9uTKik9ef4Vb/xZBmyO4uVcqgw02NWX9A:fNPU8UTK/8wV7xn3O4u+qgw06WX6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759595, "uuid": "759fbdc2-eef8-4d18-889d-1ceba843588e", "value": 33172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759595, "uuid": "5dd6282c-6116-4cf9-964e-f6c957f37db5", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759595, "uuid": "a6655a7d-fe34-4f2f-a0c0-ba3b2574e436", "value": "ae932836a7c760806a25a473ff1d3394", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "003f769d-d75a-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624806711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806711, "uuid": "77068550-ae7c-4a28-9d5d-3a237e4df8b2", "comment": "Malware payload (Mirai)", "value": "f5c389b1852c6b6167179b6ddd698b2c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806711, "uuid": "084d3530-4b07-4fb0-84ae-2ec883e50820", "comment": "Malware payload (Mirai)", "value": "b0d41d260730bb7e7f26faf70acd5f7525ccc6a86a734a3c5ae2bcc0df11dfa4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806711, "uuid": "b90cd1f0-f136-455f-8fc4-dc175e51cd53", "comment": "Malware payload (Mirai)", "value": "03792e63f99bc4fadcdf9a2728250dc4a4e98a95", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806711, "uuid": "4350d4b0-2b7b-4601-8ba3-0f4b4b6944e5", "comment": "Malware payload (Mirai)", "value": "ef12394e6a4cc15b2786d784b76e2407252286da1c7d1aa6910beb57db1caeb678f6430c9830551c712fe3185c70929f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806711, "uuid": "57d34a8e-5d2a-40a0-a92c-2c0a53cd492a", "value": "B7B2D0717015F8B6C7E100B7ADEDCB83FB801EF8D0E873295469099DA6D5942AAF1147", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806711, "uuid": "7c7227ad-5076-4da0-a812-2e7beb03a023", "value": "768:fX9nxn8o9wnBoWzEQf2EjKb3pOUs3Uozp:ftn+o9wjfBAZozp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624806711, "uuid": "fcf4da50-fefb-4481-9eff-c39f602d6f03", "value": 25004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624806711, "uuid": "22dec87a-2a40-45e0-ac2f-5af162c071ca", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806711, "uuid": "f004738e-0d5b-4d62-b29b-1edb5fc00e13", "value": "f5c389b1852c6b6167179b6ddd698b2c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39d34a7e-d769-11eb-875b-42010a9c0053", "comment": "Malware payload (Loki)", "timestamp": 1624813250, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624813250, "uuid": "5097ec74-c76b-4327-8d0b-73fa04b07d83", "comment": "Malware payload (Loki)", "value": "184b50c6dfd0c9bd86a7a48400cad435", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624813250, "uuid": "7472de56-ed3e-43a3-b709-f38b652d3a12", "comment": "Malware payload (Loki)", "value": "b2d966627d3869c00b609a86055e0f1dbeec2091b969d6cf94ecf247e26213b1", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624813250, "uuid": "2193d9d3-b89e-450e-b54d-fe37d31a01f8", "comment": "Malware payload (Loki)", "value": "0dad34528984145595fa4eab4f2924b2f8db632b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624813250, "uuid": "a7e0e5a6-4ac3-43ba-9cdb-acfc3397982b", "comment": "Malware payload (Loki)", "value": "c1d16e7bc62af2d41ff0d4202d82eb96776a24ddff360d3c2141e9f3fa2f0cd014c164f71cddbc82595f7d244a413603", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "Loki", "colour": "#D4868A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624813250, "uuid": "a0d9b934-9a9f-4cda-9e88-80d4617a3d87", "value": "96058C246A9C4309F176EBBCC5B06E514EA9BD21D211C0DB2AD33E8FF732941CD5662E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624813250, "uuid": "fc05746b-5608-4102-9d8a-06e4bcdf086c", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624813250, "uuid": "c61599b0-a4bd-4971-9750-0c7dc4413b6d", "value": "24576:eA7bAy7XeSfp/GY7jY7l4HRrEgBYKhSBMZtGb2:rp7XeSNp7jxHRtlR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624813250, "uuid": "294398d9-41ab-46a1-be23-e914c9e95f4d", "value": 813056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624813250, "uuid": "a1ec3dd6-2bcf-4c84-b4b4-e34cbbdccc7a", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624813250, "uuid": "67c00f26-4b37-41f5-a384-2ee676a7a09e", "value": "184b50c6dfd0c9bd86a7a48400cad435.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94360436-d787-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624826287, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826287, "uuid": "93a1b463-a713-467d-850e-b9019966d113", "comment": "Malware payload", "value": "aa2d13719e6b100c49dbc960e493c3f1", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826287, "uuid": "4bcbaf63-3267-4015-93ef-5178ab9f2673", "comment": "Malware payload", "value": "b3c02dd54321ea52b0e4898ea997ff3e8528ca9b7390ce454edd00b7c703766c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826287, "uuid": "35ea6fc2-9448-4a49-91a3-f3b55b0122e4", "comment": "Malware payload", "value": "3692bc6505aebdac164bbf80089ba956fbc1775b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826287, "uuid": "c738428f-f2d5-4eb5-a550-ee66e226d2a2", "comment": "Malware payload", "value": "7d12897c3fd11611a176d4e5876cb56480dedbafc037bbd325397ab93015d141a5e6ac84004ed28986b3bd28a1ca6662", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "renesas", "colour": "#A6898B", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826287, "uuid": "9c5b1df9-62a5-46cd-894e-b3c3de3dfc31", "value": "E4733A47AD659FB7C056AAB525A359300B13F8215F0F2B89713CAAF8470F8CDB80E765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826287, "uuid": "3a80120b-6b29-4a8b-b698-a64bc07fd7bd", "value": "1536:Mwy558fBKepVIISJgtxqENpcCwS0oJismj9VqYLe8f26e:fYifIexSJgJcfS0oYsmj9VqYq8f26e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624826287, "uuid": "9420f852-f404-4933-800c-3590f8b0f16c", "value": 77750, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624826287, "uuid": "c9621313-aadb-40dd-9ca5-dee772068936", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826287, "uuid": "91fce9eb-482d-4b91-9c3f-eee3fb1a74e2", "value": "aa2d13719e6b100c49dbc960e493c3f1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f07ccea-d722-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624782711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782711, "uuid": "9e7cc55c-a0b7-48e4-b6e4-6502eb59f392", "comment": "Malware payload (Mirai)", "value": "089d27bdf86d8ca3f8fa860a5483f7f6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782711, "uuid": "fbe5a2c8-da31-4e26-a815-bf9c2f98fe8f", "comment": "Malware payload (Mirai)", "value": "b42c3dadc042d70e01a25f9146cc588ca10c6e36c0ab50e6d80f637d4365dd38", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782711, "uuid": "41a71dec-9de3-4e76-b3a0-02298e0619e0", "comment": "Malware payload (Mirai)", "value": "61c3a191f4be0fc89af27283d1c5421e230bcc93", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782711, "uuid": "368a68ab-a70b-4b99-af9b-8304810e4813", "comment": "Malware payload (Mirai)", "value": "a2a225808b11963b3664243b3a050758b808cd433b7e0f93306f370c4e710ff68997afd8820f7b7f387b066c03c91b4a", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782711, "uuid": "d894e4d4-5611-4ee2-a8f5-e30c80c422ae", "value": "1C537C8AFF42D5F0DC5304705037EB968B32E6365069DB6ADB692A30DD13A01E723B5E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782711, "uuid": "e0059e09-b82e-4bbb-9a79-e9ceb2926c62", "value": "1536:nbPNkrpF2tb2C1XLuikX0Wn6WPi6qq72xBR7lr6/2ChZN:bMF2tiXiM6WPi6qqyxBR7h6DhZN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624782711, "uuid": "906e1ead-f7b9-4ba2-974f-179491f71c5d", "value": 63132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624782711, "uuid": "c7a2bddb-7a64-40bf-967f-efe19dbe8b4d", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782711, "uuid": "e3066b36-3462-478f-a829-56a17b2f118b", "value": "089d27bdf86d8ca3f8fa860a5483f7f6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a904e02c-d6ed-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624760179, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760179, "uuid": "0e154d58-6af8-4009-9630-06f9d96e25d6", "comment": "Malware payload (Mirai)", "value": "6c9d8acb32f1245068f8521380d21ccc", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760179, "uuid": "16568661-36d9-4afd-9552-b06b740e6d85", "comment": "Malware payload (Mirai)", "value": "b43fd19dfeeb89507f9de162e7a727fa6024ca4b1d19cb5c44e53755200f2b66", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760179, "uuid": "f1a979a7-4f4f-4dad-b927-a0b085c3629a", "comment": "Malware payload (Mirai)", "value": "2507601c1256c6e3bb32f48ff079122f4c047ed3", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760179, "uuid": "d1e22e04-b935-47d8-872c-0cfc8dc81cf3", "comment": "Malware payload (Mirai)", "value": "ce9345cceb501f66e6147b72e5930c1aab053edb9192d1848b5bc553173418025ccd96504c59c081c9f4191cba1fbd5f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624760179, "uuid": "5069e05d-d0ff-4284-9b6e-0573c512a86b", "value": "BB83E693FC01EFABF40BE37644934815B530BFA60EA21A76B227789B9D360D51827F45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624760179, "uuid": "5c2a9581-5c3a-4940-9411-1c147020d2c8", "value": "1536:zLt6EReBGHo8F4v0f4h2IBf0bL0daSBncKyo7yR3p8:zLTeBGH8lh2KMm2Kyo7yR3p8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624760179, "uuid": "40d32e24-c20f-4d19-8ae4-905f0552ab4f", "value": 85220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624760179, "uuid": "1baaeecb-dddc-464a-b7a9-8ce6ddfef211", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624760179, "uuid": "30f7a20f-c2c3-4d25-bf3a-eec444bb150f", "value": "6c9d8acb32f1245068f8521380d21ccc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32b7e114-d788-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624826553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826553, "uuid": "9b719c49-96fc-4af8-8c92-3ef9d72002fe", "comment": "Malware payload", "value": "b734c04b62cc1ad2216227e76039b7a7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826553, "uuid": "53253ce3-f067-4d3a-b755-1241f40b4713", "comment": "Malware payload", "value": "b4d17fd889f2ccba3e61c9a5841fc133a006b42c20f33ecd0f8a15d8d2638ccb", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826553, "uuid": "d30d839e-15bf-49dd-8c66-05af83b587ec", "comment": "Malware payload", "value": "ee12577c447d7b9d92be67d960f6a8979e416502", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826553, "uuid": "ceeac742-b459-4590-9d9b-e943e3ea4bed", "comment": "Malware payload", "value": "88a1f6a8f27a84b2b8846b54e79b8aac66723f6d8b598b22cb2195ed52345edb17880f03ace285110da2eab9b904e13f", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826553, "uuid": "396b2a52-2ee3-48c0-ac52-30b4644edac3", "value": "A1931A41F9408B27C2D227BAE79F439D37366A5497D733026A257EB42BC27DC2E39520", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826553, "uuid": "c240ecd7-f5b9-4956-a653-d655918f3e72", "value": "1536:cQkE9VQPAWV83kb8Cw2HxD2jw50rOLEvApPzRxQMDoicKmbNNA+mCVrQAFW9OXkz:hQR83rGh5OApPNSKuY+mCVrQAFiOXkYe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624826553, "uuid": "bdf288e4-6f33-4e8f-816e-9474b8a897f4", "value": 97531, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624826553, "uuid": "3de15fd8-93ee-4bf1-9b60-f61545c51ac1", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826553, "uuid": "7111d8c8-f7ca-42a7-b954-c9eba009cb11", "value": "b734c04b62cc1ad2216227e76039b7a7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98eac199-d78f-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624829731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624829731, "uuid": "c1a180d7-9466-4504-8204-b8ed10e19453", "comment": "Malware payload", "value": "b9b88afd1783e9ad39b787736e65172e", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624829731, "uuid": "ea4b25cb-734c-4c28-ac5a-ae45ea34bc72", "comment": "Malware payload", "value": "b61a75bab2f47f346ccd0e0e58e748092b90ec271588c5aab7b9370d30c8eeda", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624829731, "uuid": "315910bc-442c-497c-af9e-35b9300a2cb3", "comment": "Malware payload", "value": "7ac968473cbc9f10b7758b855c3cc21736f9842f", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624829731, "uuid": "6f06e187-af45-4a1d-8b9a-0fe6be375007", "comment": "Malware payload", "value": "c78924668030817072d47b564555dfaa30baa0d3fa57aeea45f9875bf15938ad876d5fa4d52e6e301daa7472f1d46f20", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624829731, "uuid": "33b6a870-c256-46f4-8b6d-46e19651001e", "value": "4D441221B4D1493FC95783B11D778779E372ED118A02AA079B903D6F5E31ACB8F097A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624829731, "uuid": "43e1800c-e119-4b74-8c38-31f0b5e5f29a", "value": "6144:aEtTqjFAMYpy5kqXRdK35oNc8cs4N5hb15:aE9ZMYU5kqhMR8P4N5115", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624829731, "uuid": "8e239717-8351-435d-9970-d1568b60a73f", "value": 278528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624829731, "uuid": "2b8356fc-65bb-4183-b273-f1cfcdc27d45", "value": "application/x-msi", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624829731, "uuid": "9646513d-614d-4925-9fae-8cc01c552d14", "value": "b9b88afd1783e9ad39b787736e65172e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f2136a6-d789-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624827057, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827057, "uuid": "8e2c9ec4-50c8-4887-afef-8eb8e3ca76b3", "comment": "Malware payload", "value": "1effa561c4a75d19de1570bfa93761ea", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827057, "uuid": "26ee2639-c33a-4e9a-b904-f3f168e0a0ee", "comment": "Malware payload", "value": "b644f9b7fb046f0c4996267f24ac0f2ad52f579c4c80d1718279d61627f94703", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827057, "uuid": "63144db3-95e3-4d51-8951-500c89bb983b", "comment": "Malware payload", "value": "b0c62baa8e35d28abf381e6f4749c59b97839800", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827057, "uuid": "3794d0c6-f4af-40e8-ab32-f1db9194d2ca", "comment": "Malware payload", "value": "a17bb8c2cb22517d4ed57a3cb0c0ac79ee11d5229c8f545f7b8db17f275f145f8ad599f9981b6c81a8d9f657151f31a6", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827057, "uuid": "58ae68c0-f779-4817-aecc-b65e2bb21eeb", "value": "F9B33901D5508B27C2D2277AFB9F425D37332BA8939B33215A24BFB42BC279D1E39521", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827057, "uuid": "9a32aec6-5186-43f1-84b5-8be4fe125ed8", "value": "3072:wdAkae+l8tZ2hWJJoRXDELqzQbmTQOWsXAOn:wykae+l8BoRXDibmTQOWCAOn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624827057, "uuid": "d24c1d65-34e8-436f-bebb-32d57905e4d3", "value": 111521, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624827057, "uuid": "fe3a59ba-2cad-4d75-b3d3-2cc72fea7c37", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827057, "uuid": "a0856e8a-2a10-4dd2-896d-e9937782929b", "value": "1effa561c4a75d19de1570bfa93761ea", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7930bfa7-d74a-11eb-875b-42010a9c0053", "comment": "Malware payload (CryptBot)", "timestamp": 1624800042, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800042, "uuid": "b7308915-ee06-4005-900c-927f956472cf", "comment": "Malware payload (CryptBot)", "value": "93d771fb2c6c61879ae14a6d0189af90", "object_relation": "md5", "Tag": [ { "name": "CryptBot", "colour": "#EB0B67", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800042, "uuid": "3e49f9c0-70e3-4e9e-bf50-06cb0755cfb9", "comment": "Malware payload (CryptBot)", "value": "b6f7d08666ed5c5309dbd3902783735ee77c1d8ab19e410af5c687488f21557e", "object_relation": "sha256", "Tag": [ { "name": "CryptBot", "colour": "#EB0B67", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800042, "uuid": "58d4dc6a-e823-40bb-9141-b3ee9cc51c55", "comment": "Malware payload (CryptBot)", "value": "a89b66dcdc5d3ea540e2c2dc5ec4b482d362a593", "object_relation": "sha1", "Tag": [ { "name": "CryptBot", "colour": "#EB0B67", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800042, "uuid": "e63e1748-2d99-4de2-8385-087496a79bc2", "comment": "Malware payload (CryptBot)", "value": "c71b349cd2d421930afb786465bb87a438408b23e372360fc468f3f044b6b46380d6a279d404ff55aa04236bb32e7420", "object_relation": "sha3-384", "Tag": [ { "name": "CryptBot", "colour": "#EB0B67", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800042, "uuid": "7629894f-3849-4ee3-83de-06ac330adcc9", "value": "A1F4F000B691D035F5F712F45AB9A36CA53D7AB15B2411CB63D52BFE83B46E0AC31A0B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800042, "uuid": "27100585-ddf9-4183-9143-daae5222367f", "value": "c55a6c5b8dc5009c74a01bc124b7b217", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800042, "uuid": "93ae2021-070e-4a4f-bbeb-c1d60ebaa737", "value": "12288:NiGHbsHT8XiQOPRp584bNaChRKcGMxu+P9e4j0fKV6B18bYrcON/Td8yxd16PESJ:MhHQXoX58gnKcpxu+P9x68bwhxLn6L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624800042, "uuid": "f2c85e71-fbf2-4566-a16f-fddab2fb095e", "value": 793600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624800042, "uuid": "1722152d-8440-442a-a9e2-9454132b3180", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800042, "uuid": "093e93b4-8e62-4e11-bc42-ba4c1fa0c6ac", "value": "b6f7d08666ed5c5309dbd3902783735ee77c1d8ab19e4.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3d719a8-d783-11eb-875b-42010a9c0053", "comment": "Malware payload (NetSupport)", "timestamp": 1624824649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624824649, "uuid": "85c2a3a6-2b46-4e9b-97c8-27bc86d78105", "comment": "Malware payload (NetSupport)", "value": "10746b52483c97054843e943177d6c6e", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#A33C43", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624824649, "uuid": "718b2f61-4be8-4789-8f7f-7ea2ce72c985", "comment": "Malware payload (NetSupport)", "value": "b7e88d00739d77f482b500b254c222ae19171e68a5cd574eaee7b43f0cf79f1d", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#A33C43", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624824649, "uuid": "819c6d5b-d39a-4bd2-9693-1e139c780d8a", "comment": "Malware payload (NetSupport)", "value": "bf182a5f0831ed336bdb107ad3479151112aab7c", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#A33C43", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624824649, "uuid": "10d2cb9e-d34c-4306-9b6e-3fa543d9edfb", "comment": "Malware payload (NetSupport)", "value": "12ff5190c143f30d686514058db3311ba35b2cbf9e7723d4c2a583dde3431562a4c8480139876cacbd68b5a8d88fc8a5", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#A33C43", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624824649, "uuid": "51dc1112-7f31-43de-87d9-15c44fa74414", "value": "DDA523366EC65175C53D7CFA4F6B456DEABDDF3004389203A3E1271E0E3E6629221A63", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624824649, "uuid": "d5b9bdae-2ad6-49e9-8027-cbae5ca70277", "value": "dbb1eb5c3476069287a73206929932fd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624824649, "uuid": "8cb541c2-639e-4005-b773-20d9a1c25249", "value": "49152:GeOu/4AM8WR2tOS7QHjq/FDaT5RMk9HKW5zChT:GFvV8WRdS7Q9T5RMjm2hT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624824649, "uuid": "8410f2f0-88ae-40dd-ae7b-2d8bd6a7b742", "value": 2266667, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624824649, "uuid": "684dd561-ca40-4ac0-8291-a441142745d9", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624824649, "uuid": "a212f1dd-1ae4-4f5b-bbf7-5b801a015996", "value": "B7E88D00739D77F482B500B254C222AE19171E68A5CD5.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9b3db68-d788-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624826806, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826806, "uuid": "c707f120-bd8c-4524-ac81-aa27551bf90d", "comment": "Malware payload", "value": "d3d1ea6d071923decff9a64c0e679c4a", "object_relation": "md5", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826806, "uuid": "64f0c336-dfeb-44f4-bd98-0a54f308b277", "comment": "Malware payload", "value": "b87f12a396284de970d85c8fe2089a760f867fdb138e85e9b0305079c619dd85", "object_relation": "sha256", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826806, "uuid": "73d8f60a-2f1b-4137-ac93-8b077339b3d7", "comment": "Malware payload", "value": "7b518140521da850939fd41a5079fcb50f689dbe", "object_relation": "sha1", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826806, "uuid": "d882c2fd-9763-4cb9-aeea-3d86745976c3", "comment": "Malware payload", "value": "7a76cbad65251cd8da779caf3638ee9b005b3e2fe13f16cf309f0bcc9db6f685fc66a6df80a2df14d062325331e20909", "object_relation": "sha3-384", "Tag": [ { "name": "64", "colour": "#6D7DCF", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826806, "uuid": "9d66195e-e05d-4c76-9437-f1f68158a9aa", "value": "D4836B23A651C67BC0875BF92BDBD6615023B8B90B33720A73D8BDA92B36DC45D5D302", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826806, "uuid": "a41ae0e2-95c7-4b39-aefe-3f37170376d1", "value": "1536:eB7cH1LhKlBqIKVhuzdPQq0aJP9sWtjG7ew3nGLWODPPmoIYuOVje+ZNne:eRMhKlcluzdPv0o+QK7eknGL1DHmrYur", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624826806, "uuid": "20de9706-3ac6-4aaa-9a0e-c2485bed3c27", "value": 85796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624826806, "uuid": "e8a77922-dd5a-4c4b-9cb0-28f7d364e934", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826806, "uuid": "f8095c8e-4cde-4e10-a38d-0f3e5ca42081", "value": "d3d1ea6d071923decff9a64c0e679c4a", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f7c91fb-d796-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624832614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624832614, "uuid": "3b27db3a-7457-4508-a649-3d3c98710d95", "comment": "Malware payload (Mirai)", "value": "9c4d3505d2297c86d0b36d6e18993ff8", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624832614, "uuid": "c48f3cd5-120e-424f-9c3d-5a2309405e99", "comment": "Malware payload (Mirai)", "value": "b96bdfa0ed37329911c20b51f3ff5f948d368c928bc0aa656981b7671a6536f0", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624832614, "uuid": "98560fa7-ef1a-4e7d-bd35-58676ec382b6", "comment": "Malware payload (Mirai)", "value": "b75a70fbf8dcab8957573408f595bd864aaa7f56", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624832614, "uuid": "c7d5d63c-c088-4af1-95ff-52aaf749bffc", "comment": "Malware payload (Mirai)", "value": "25fe7d2aff4d9f6909cd5545f43a71d0183c72310d3a5dfbd6be72839f818ee14bd47ee6903d67b4817340efd8a24ad7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624832614, "uuid": "55600795-a560-4d69-b184-50628bae4036", "value": "6464D08AED41AF25E9C526BAFF1F024973734BACE3EA7110D624972037DA55B4F36044", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624832614, "uuid": "dc079f9d-1390-4e87-a72c-1dd2fd693064", "value": "6144:7O/QJHZweEL/NOjCHm7FZZncFabE5wKSDP99zBa77oNsKqqfPqOJ:78QpZsKCaiFabEDSDP99zBa/HKqoPqOJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624832614, "uuid": "e152a426-2ece-438e-82a3-57cf7796d1a1", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624832614, "uuid": "92e6420f-2748-439b-a5cc-b281b501aaf0", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624832614, "uuid": "d0541396-0265-4586-a8ce-38bfa1be82c6", "value": "9c4d3505d2297c86d0b36d6e18993ff8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86bbcaaf-d6fa-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624765705, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765705, "uuid": "85b8a776-e5e9-454f-a003-60e5dafb2014", "comment": "Malware payload (Mirai)", "value": "22d6ea30ac669e02a65a4471628e626d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765705, "uuid": "33ebc26c-98fa-4710-8f8d-b1cc8307e591", "comment": "Malware payload (Mirai)", "value": "baa81f5ef1ce9e2133c2891f15b31ed8405d40b10f2692b6d9cc2e60c63c891c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765705, "uuid": "c06223d8-5179-4e53-bde9-218ecaf82769", "comment": "Malware payload (Mirai)", "value": "0cae2c7ae95e48539b8f6f3ec41377c5e0925cb5", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765705, "uuid": "b5a3c393-8603-4e79-8f63-e83891467379", "comment": "Malware payload (Mirai)", "value": "97cb18de75c5bad166b532bf1c7547647e19146460728a34ee7ad02014788974ba3b199fc6a57c1fe8f03dcacbb63d1e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765705, "uuid": "219dd131-5493-4737-97a3-56e5f3d1bf66", "value": "4E03074AB9C19B05C5D112BAFA1E124E7313576CE3EFB3225E246B24678B57B0F3A805", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765705, "uuid": "a96b4a61-c4b5-401d-ba74-7734a327001b", "value": "768:UAnaKAAppS3NKuPkWx79U6miXt4+w1oo24YVTm6mhyKe/GB:UAnaupA0EV7Dmid4r1oo4ewK+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624765705, "uuid": "538a3861-82a6-4219-a8ee-7fdf24d799aa", "value": 38252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624765705, "uuid": "d254ffe8-508d-48ec-a653-33fc1f2c8ea0", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765705, "uuid": "fcdb33c7-8ba3-498a-a9ce-b1143bf3b7f6", "value": "22d6ea30ac669e02a65a4471628e626d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9e05b18-d749-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624799748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799748, "uuid": "e47a8805-1518-4750-9804-021a9aae9065", "comment": "Malware payload (Mirai)", "value": "83e15c88f8b3de05a015238eab6aec4c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799748, "uuid": "e46a31dc-6dd1-4a31-a943-64e935c91ad5", "comment": "Malware payload (Mirai)", "value": "babcde58eab4b9fab5520fa449c3e0b743b65b6347cfdff63839c0811dfaeda0", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799748, "uuid": "250f0328-249c-4253-9e89-3573ae0f2fc4", "comment": "Malware payload (Mirai)", "value": "1b87c818ba5f3c0214095a633f1bd454a215ff52", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799748, "uuid": "74c1f785-5e8e-4b08-99b6-a8a7c0ea014f", "comment": "Malware payload (Mirai)", "value": "aaac72f3e8a9b5d2d30c26560b2ae08e3bbeaa33503fd97e6a9742be182597990e402df70d10450d73c24795925fd24c", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799748, "uuid": "e33bcb57-c97b-4711-b383-64c060a08a7b", "value": "8B435C42325C0E47E1671EF5293F1BE083AEED9021F4F685264FE64A8276F73514AE9C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799748, "uuid": "6634d36d-bf83-4653-a497-a906412b534f", "value": "768:tkHKhP+HlNWjrqUqkuKKmR+8ApqA6/V4xTVNGFE6cngsGg6BZ4eSaCH1n:IWKBkuE63dQf4eJCd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624799748, "uuid": "49dd754d-45ec-4c37-bd96-88c2e68847cf", "value": 58588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624799748, "uuid": "93dd9582-a656-48f2-b3bd-828469ed8c58", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799748, "uuid": "faa715a0-1686-42e0-b5ad-de3175b81c51", "value": "83e15c88f8b3de05a015238eab6aec4c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0aa85801-d75a-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624806729, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806729, "uuid": "b7341248-f5fa-40b7-85b2-17a1cdd54dc5", "comment": "Malware payload (Mirai)", "value": "a7ef41eb7143c33bbaaff2ff46f6e4c8", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806729, "uuid": "f49cc221-2018-4bec-9e85-276eafbeeac7", "comment": "Malware payload (Mirai)", "value": "bb46dec052e44f731480d47a7dc187a9256c33ef034a16cf623fb346d46fe999", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806729, "uuid": "a181470f-f10e-4c04-a6e9-33fac4a73270", "comment": "Malware payload (Mirai)", "value": "12f16c0796924b7116d778dc5c1052bb48a30122", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806729, "uuid": "b4b139ed-8667-405a-830b-efde7940f206", "comment": "Malware payload (Mirai)", "value": "011aa6405c971242fc01e372dc87d6ebec819683398ca9f9a9bb17b46ac1293cf02550f86109e3fd2d539ef4059560e2", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806729, "uuid": "ed1c18a2-d93f-485e-acd3-36df3d5caf6e", "value": "D2A2D00821CDEE62D1B0903BE13CC357AADB43B652FE713E1E180B99A49491AD3BD949", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806729, "uuid": "1707d0b8-a95d-436a-be0c-8c847383463d", "value": "384:YD5mog4c6L5i4+stIW01vhQIE2TQKMpI8QwxZVFjfPnSbIqxphymdGUop5hXh:YDgoh/DxCvhdR4IjWVFbSNfs3UozJh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624806729, "uuid": "b6a91b9a-87c2-4490-bdee-a4e59c6fe4fe", "value": 22132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624806729, "uuid": "c64b6cb8-636a-4c5a-b3b3-90c850b85ead", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806729, "uuid": "e113f0bb-6eb0-4877-918f-cca65661449d", "value": "a7ef41eb7143c33bbaaff2ff46f6e4c8", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d896c5c-d6e9-11eb-875b-42010a9c0053", "comment": "Malware payload (Amadey)", "timestamp": 1624758308, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624758308, "uuid": "b8379575-2bf3-4bfd-9a63-88aaa8901c65", "comment": "Malware payload (Amadey)", "value": "f71e4b3d3c25323a8a48e0aeac61238c", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624758308, "uuid": "752f9fdf-fd0c-4865-a1c9-3d905600ef2b", "comment": "Malware payload (Amadey)", "value": "bd0654901617a429055e79b5f8d1de479e0a52da5bc0103169097b9310f4572b", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624758308, "uuid": "b5a24893-935b-47e2-83b0-9cecf46190fc", "comment": "Malware payload (Amadey)", "value": "ef8083815f381e5ef3a21d7681c90b82de35d6c7", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624758308, "uuid": "6917dc3b-cb61-48be-a5f9-aec580aa6c52", "comment": "Malware payload (Amadey)", "value": "5286db53b04f57f68682ac270f27f79349f349461d0b2ecfd7e980be1a12d875134b1dd098f7bab71c5e4a0cc34d6440", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "Amadey", "colour": "#BFD88D", "exportable": true, "hide_tag": false }, { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624758308, "uuid": "03686421-e2ce-45e4-80d5-5e271273745e", "value": "D1C36B72F1D18872D0790E7CDC5A92986A2EFE312E35155BB6E50E0D6D3A2C27D2C2D3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624758308, "uuid": "6680c8ce-ed84-4679-a970-39a2060ea69d", "value": "a02ab1a937fc1433a9abad7bc2badee6", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624758308, "uuid": "99ee65a7-61cb-4221-916d-18cd9185ab9d", "value": "3072:OeZmogDk+VPedGpqpm2pSBwkXWEfIvgpL2oAG9:OeZkgGPppvhfvpS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624758308, "uuid": "397660d9-02c0-4de5-b00c-641baea57b2d", "value": 127488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624758308, "uuid": "a14370e2-c76d-4cef-b0df-94efc47bc931", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624758308, "uuid": "e692aaee-2827-4b0d-9555-daf63a329481", "value": "f71e4b3d3c25323a8a48e0aeac61238c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "057856bb-d740-11eb-875b-42010a9c0053", "comment": "Malware payload (RedLineStealer)", "timestamp": 1624795553, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624795553, "uuid": "b7072a1e-54da-44c2-97a3-315a158acf6a", "comment": "Malware payload (RedLineStealer)", "value": "df9c22bffdef0b2a346849fd990dc8f2", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624795553, "uuid": "7c586c0c-e19f-4b2d-9950-76c02fff0bc1", "comment": "Malware payload (RedLineStealer)", "value": "c03f554ea97e4eb56f75dcf987e4512890ad499f058485875ffa9abe7be20da2", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624795553, "uuid": "6265255f-e55d-4bc4-9599-89747782cc5b", "comment": "Malware payload (RedLineStealer)", "value": "505ef2385be22d9567baa79afb5dfa83dcda113b", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624795553, "uuid": "2e0552c7-275e-4afd-a504-47176c4c8c0b", "comment": "Malware payload (RedLineStealer)", "value": "aa58c0af32669968dd8e47f6fe039c56df07d47fc04fe6b24b1b6b4b45e49029d8e4918c95ba07f779ae47cdd5cdfc83", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624795553, "uuid": "0ce7e0c8-7dc4-48ea-ab8c-8192962667ca", "value": "CEE35C2033A8871AD3EF4B7EF470441582F1E34B6262EB5B5E5476DE2B23B45A2117B3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624795553, "uuid": "dea1ac52-ace4-4034-a760-44cda254e5ec", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624795553, "uuid": "218e5d66-48bb-48de-8879-e4e1a27dc2cc", "value": "3072:K0q1JmOTM9hVgZ+rbZexpAP6Y2sSJqoD2X7BpGGoMTb3R35dINX9rdJx4:KiOI9s0r1exGoJqoDC1pGGoMTb3RDINN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624795553, "uuid": "515d44b1-9e87-490f-83d2-85638c8d4f53", "value": 144384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624795553, "uuid": "13a5458c-8807-4342-9940-b6268b09cf70", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624795553, "uuid": "ff19a1ac-64d9-4c80-aca7-082bb6cc5974", "value": "DF9C22BFFDEF0B2A346849FD990DC8F2.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "027aef0b-d74b-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624800272, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800272, "uuid": "bd132a07-c23b-48f4-9c39-7a1cd44a930e", "comment": "Malware payload (Mirai)", "value": "7c6394892dd56af2643bc2f8848bd768", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800272, "uuid": "48778e0f-ca30-4341-a7e1-df293b580694", "comment": "Malware payload (Mirai)", "value": "c2c5ac9de2acc304c5e55432e68a69540b4115cd0079972d4a46447d67291644", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800272, "uuid": "78690c9a-fc1c-49ac-aa74-3c865b00b936", "comment": "Malware payload (Mirai)", "value": "a3028a4182a264168ef772cec28ca8e1cc5c4202", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800272, "uuid": "ab60b1cb-a6bc-49b5-b935-a27b0bd60668", "comment": "Malware payload (Mirai)", "value": "d6a4cd4eab077b80169d835c07db1e4af0b03fb75090c875c12c0c16d4e2026da0da04f22fea884032659bd751694fb9", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800272, "uuid": "8df4c1a6-9910-4f45-b95b-3a050b0b6398", "value": "5E5349E6E801AE3CFC6FEABE84120909B522B65045630F3BB377FC93AC320A55957D45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800272, "uuid": "941733e1-4572-4bc9-a14b-36f9881ba0c6", "value": "1536:YZr3KCWAhWiPxgH6C90ubyWOeEm+tJSTD8p:Yx3zxuyuuxVfJiG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624800272, "uuid": "ead51bab-681e-4034-8708-0b5f64d571c3", "value": 62072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624800272, "uuid": "f677ab85-617f-4316-b4bd-328579ff08b5", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800272, "uuid": "929d4566-3f1e-43ee-a793-ea5d23c6c74b", "value": "7c6394892dd56af2643bc2f8848bd768", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01995dd0-d706-11eb-875b-42010a9c0053", "comment": "Malware payload (RedLineStealer)", "timestamp": 1624770636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624770636, "uuid": "790c940f-820a-44d3-85ec-6d96468f1537", "comment": "Malware payload (RedLineStealer)", "value": "a8a62cb32878ee76a93d2bade56157bc", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624770636, "uuid": "eb14e4a5-dcf4-4d3e-a26f-f4a4b59c061d", "comment": "Malware payload (RedLineStealer)", "value": "c381b3dad546854c8fb43d2d8df662e7af6d9bbd2084197bd09fb2367bc80ae0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624770636, "uuid": "c27dd4f4-9a3e-4a7c-b6af-5fd71ea1f116", "comment": "Malware payload (RedLineStealer)", "value": "3e4dc4d22925d9648440a57a80435689d90b3056", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624770636, "uuid": "997ea8bb-27ac-43fd-9983-04887ed78321", "comment": "Malware payload (RedLineStealer)", "value": "beb47f2e269a2291590b76a871ca144e72b46c3b519e7e0ce1278984f691c455b0a0ae71c89675d20c14bebb408b6a77", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624770636, "uuid": "bd5c7b14-ff9f-4752-8640-1c4a15fdca68", "value": "61B633BEB7355B4FFA200D3844AE1DAD76867A5C922B9403FF69BDAC321F1D0181D815", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624770636, "uuid": "5e08aff1-72fa-437c-b147-5baaaf3bc187", "value": "ced282d9b261d1462772017fe2f6972b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624770636, "uuid": "57b6a526-8067-48e4-ab60-9e7163db6240", "value": "196608:R3EB+GiHd8xUMR91lbIY7v/HapjcAygqlxwuQ+hl7Ok43GnBKr4ExxYb:hEc59UflbB7nWVcl2+likQr44eb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624770636, "uuid": "a3db2e40-38d3-4730-878b-fc4bdb5b72d6", "value": 10768713, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624770636, "uuid": "a82fb0ef-869a-47ee-a743-b84dcd35ae6e", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624770636, "uuid": "a8d3cc24-e99f-40bd-ac8c-20b80a4539d6", "value": "a8a62cb32878ee76a93d2bade56157bc.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc973558-d720-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624782224, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782224, "uuid": "7d454a69-f5b7-49bc-8912-ba2614c2603d", "comment": "Malware payload (Mirai)", "value": "d72919bf284da67ecf2a46b9432431e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782224, "uuid": "80fdf6f2-6b7a-4cc7-8f3b-0b8bfc0839eb", "comment": "Malware payload (Mirai)", "value": "c3db412ef561c4bb159b083a2a8bbbf9a9163d0477c37ce9300255d7adc70c8b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782224, "uuid": "ce80bc40-0f7c-4cd7-b409-271bc12a80e7", "comment": "Malware payload (Mirai)", "value": "2bc3a996a618b97f52d4d31896870dc88cac571e", "object_relation": "sha1", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782224, "uuid": "e16b17f2-5e0b-4280-88cf-a94a759ff014", "comment": "Malware payload (Mirai)", "value": "7f4393419a9775c21a5ea3357a65c0248e61308bcfb2766e152e35f27a654775c17f7f96795e4b25f7bedb8a85eb03e9", "object_relation": "sha3-384", "Tag": [ { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782224, "uuid": "44054661-ee4b-4c2f-8383-6ed8e4d9873c", "value": "9AB339917F07DEAEFD784BB51AA64F7472D4C1F230B58686D33A7E051B210929A08BCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782224, "uuid": "b2a587a1-185c-4dbe-a66d-e32e428fc4af", "value": "1536:EDSzqheHrW/aPMJoqWM5ee3zNbeGganqfSgu3AYd3iliZv975/8q47ZU8N+/CQov:pByaPMlzee3zvz94nO37tAc0Jyqd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624782224, "uuid": "2c2b2867-93da-4af2-93c3-adefd1eb5d1d", "value": 115440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624782224, "uuid": "c444d1e9-1c90-4530-a78b-c8ef2bfb5609", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782224, "uuid": "a1790804-a11f-4c8a-8f0b-87600ebd06e1", "value": "d72919bf284da67ecf2a46b9432431e4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d77a032-d6fa-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624765690, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765690, "uuid": "e84d1e56-3a03-48dc-97b1-fe05f2632360", "comment": "Malware payload (Mirai)", "value": "ccc53427d6fb14efbc5493b9777974e7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765690, "uuid": "582aa5c9-23cc-406b-996a-8fd3b231c663", "comment": "Malware payload (Mirai)", "value": "c46d477551cd1cbe9fb5ece5156076dfb95d1c457f4fcb0d50f800c6c63bc703", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765690, "uuid": "b0ded3a3-2ef7-4cb9-bd14-d247e1f8805c", "comment": "Malware payload (Mirai)", "value": "7aebe094d3fb699672c46c9e498c92d7e7b971a1", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765690, "uuid": "db2e1891-c4ac-489a-aff0-fdccc76df139", "comment": "Malware payload (Mirai)", "value": "f4f2e1aa77d146bd0dcac829213b412290c1a5c36ecd891402144699fcca7ab3649d3bdc52143ccdf7cd8903c61f6b63", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765690, "uuid": "fa362976-2779-4703-b729-8a0a53cd511f", "value": "B3D2F9A2F902FD7DF41DF77FC5060416B0B1B2A642820B3267B3786BDD761A60972E46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765690, "uuid": "4f9e359f-6ba5-4380-bddf-f700cab35119", "value": "768:HZbOaoROIzGJb/JNFhsIV6S5i8bdAzsBj1:HZ6RShOIUS5i82zsBj1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624765690, "uuid": "dc3b0046-c13e-4363-b518-62b797792cee", "value": 30304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624765690, "uuid": "6ea01b9c-7edf-4600-9319-62295af0a909", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765690, "uuid": "d8f8c530-cfa9-4e17-804a-994ebea6d3d4", "value": "ccc53427d6fb14efbc5493b9777974e7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f24541f7-d74d-11eb-875b-42010a9c0053", "comment": "Malware payload (RaccoonStealer)", "timestamp": 1624801534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624801534, "uuid": "abecaaf1-3e33-4ace-8880-0473af8d7435", "comment": "Malware payload (RaccoonStealer)", "value": "e9a21ecbb9dd174fab29f35bc830427f", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624801534, "uuid": "f4451891-53ba-4fd2-929e-5b49a51f437f", "comment": "Malware payload (RaccoonStealer)", "value": "c54228f797eb663e6a223ecf20f225f91bc2e1dfbea5ac84687ff87513a0dad5", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624801534, "uuid": "10d742bd-b314-42d2-bd99-3f40bdcf39dc", "comment": "Malware payload (RaccoonStealer)", "value": "51c13a1ce196ac6626ab644fb6b900ec3db913e5", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624801534, "uuid": "b768eb51-03ec-439a-b93a-1a7a786e2cf9", "comment": "Malware payload (RaccoonStealer)", "value": "12196946e5b468c38e133052fdcbfe7f1e12ad1265afbdc5bdb40c74bf6a08b56c79cbe81b24fb493b31200853bb760e", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624801534, "uuid": "073a804e-02f1-47e5-b7ed-d0001b17dbf5", "value": "77E423216602D037D6AAA6714584D322267FB97363B284CF3A20437DDD727E12EB4B77", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624801534, "uuid": "6f501a12-e3fc-45a8-b4a9-754b595437ae", "value": "d2062601d6f58bcd4b341aac7218fb3d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624801534, "uuid": "665945bf-792c-44fc-bcb5-c45336a5e41b", "value": "12288:oANtD/+GziyXRXi0JMOfKSRdIwcYc7G+yAdtkfX414NjBiPs:owVZOyXtJMOLvW79dQpjBiPs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624801534, "uuid": "0b393c03-a85c-4013-b290-9df133a0d88d", "value": 685064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624801534, "uuid": "eeccb8f5-57b6-4ad1-9194-9ce31094bc0f", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624801534, "uuid": "19b69561-24e9-42de-99a3-c933ba64488c", "value": "E9A21ECBB9DD174FAB29F35BC830427F.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab03e9ca-d6eb-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624759323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759323, "uuid": "9dca6f70-ed16-4afb-a29b-669b29c57935", "comment": "Malware payload (Mirai)", "value": "179423829d1addb9fb4efe9aff559928", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759323, "uuid": "9596c94f-8a12-489a-b537-87a3fe17f49e", "comment": "Malware payload (Mirai)", "value": "c782f9cdec637503472bc62d25348cefccc3de58244441547f3e2ed9b22c6c93", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759323, "uuid": "2fa76319-fd89-46d4-955d-8c3ff8dac393", "comment": "Malware payload (Mirai)", "value": "7532d6b90d9505f84e7d83c164e336661a581365", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759323, "uuid": "601a79e4-f51e-41cf-914b-82e436c0b33a", "comment": "Malware payload (Mirai)", "value": "17d76c3dfcb29e67970ada8c7d37c42310b8bd4ed15b60da0c903613ec5fd6563e9150dff8aaeaafc7a1e2abcedd4ee6", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759323, "uuid": "2c1e9dbb-e7c6-40f8-ae99-4b3642802087", "value": "F9F2E1DDC9B02C4AC2CD9A7D88011A305AA9F387374D4BCE9794BCADDF3494BB54E419", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759323, "uuid": "d8e3ab64-0782-4c0f-9bba-0f0a9709b1ce", "value": "768:TEf75wL2jLWAhXtMYWeFDNRxjtMMjitr13t26wOpGWRnxv:Ti7TLdhXtMUBR5gr190stxv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759323, "uuid": "5df858bd-7920-4165-853e-eb4be2342762", "value": 37412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759323, "uuid": "136e520b-4883-4e9a-85b2-a6b586e8a96d", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759323, "uuid": "5c30cbe1-9183-40b0-abb0-94b5464b3313", "value": "179423829d1addb9fb4efe9aff559928", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cf132c4-d759-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624806464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806464, "uuid": "d972475e-123d-4fe0-ad1c-deffca6382b2", "comment": "Malware payload (Mirai)", "value": "cbf67d093094f62c49432f764bbae657", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806464, "uuid": "653f733c-7227-4ce2-9083-6cf2b43aaf21", "comment": "Malware payload (Mirai)", "value": "ca73e295fc15d09fd00169ad431a04e9cd308dd825a03b8002f7cbf35403d1dd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806464, "uuid": "94205233-1ab4-4576-93a6-8958638275d7", "comment": "Malware payload (Mirai)", "value": "2a685525f6b8343edde18b2e2cd26cc80437a77b", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806464, "uuid": "c9243846-b1ae-4f87-829f-658030c9cd1d", "comment": "Malware payload (Mirai)", "value": "b4111d67fa85a611c96377bbb6343a11f47992675e0be5dc9c55e83eb4979ba90d9bbf1e6f584867af07bde8365f50ce", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806464, "uuid": "cd9cf8b9-1083-45cc-878b-3e9962cd6d98", "value": "2EB2D019C0AE3EB4FEDB7D785D45E2817FA15BDF7A618DC016C16A110222D281FDC6D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806464, "uuid": "36fded02-423b-42a6-b5a5-d5eba7b0f1f0", "value": "384:EA0AeimAzNCdvw1PwIWWtKfz9VuBFoeIoA8FXw2t7tTmojIorNM4uVcqgw05VxJ7:KApCdvwJr69VJoA8FZtxCo8D4uVcqgws", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624806464, "uuid": "e0030788-fd03-4f77-8ac6-c86ce50f5ca5", "value": 23936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624806464, "uuid": "09038965-f137-4388-8fde-9a27209f8314", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806464, "uuid": "73de7260-2367-480a-8b60-0c107275317c", "value": "cbf67d093094f62c49432f764bbae657", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "708db2ea-d75f-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624809047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809047, "uuid": "9fdf5e14-1760-4600-9046-a658829080bd", "comment": "Malware payload", "value": "b40b0f86e9177bc2e9cb7d8ba1be35ef", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809047, "uuid": "c1a22bd4-d721-4d69-996e-8dafc805dd7a", "comment": "Malware payload", "value": "cb5d5df92e65ff1479f94d44da362441532b4148d6167ccf1a541e5e04207102", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809047, "uuid": "d3de9fb0-4c9e-4d0f-836a-b187be947b88", "comment": "Malware payload", "value": "7b76a817bbeed1d425e7e3ad9b773c97a299e128", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809047, "uuid": "aaab1c7d-6d61-46f6-a2a2-b117d309d405", "comment": "Malware payload", "value": "bb21ac00692997f5e85c48a66bbe2c79f415224293522498d6ae9aa31657eb068cefcc5e7f54b1d8dc9700e3b6b92395", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809047, "uuid": "9d8d8c4e-89d6-4e43-bf36-851f8fcf5861", "value": "72E41202312959B7CC6906F520531E051771BC55A8C6FBC96ECA7CEF4AF1FCA0A21ADB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809047, "uuid": "15d67ccb-dd3b-4ef3-ab34-79a6388ca792", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809047, "uuid": "7790d36a-c4be-4629-96b5-a54f84998192", "value": "12288:VJ4Ld5Gvamrpoje0nyiUpvheSbwE1AxSyUgVxIISmhtE5aIeWLE1QUlw:Kd51GokFwVxzoBm7WaIhx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809047, "uuid": "2b4d1558-43f2-4a42-99d7-5915f961a20c", "value": 712704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809047, "uuid": "d89f33b6-a895-4f8b-aa82-3ec0e6371817", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809047, "uuid": "5c0290e0-2b59-49b2-86a1-7f1602bec2a8", "value": "b40b0f86e9177bc2e9cb7d8ba1be35ef.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c7e25f9-d7a3-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624838139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838139, "uuid": "91e4994f-74fe-4224-bd79-ddd8d3323924", "comment": "Malware payload (Mirai)", "value": "0538d5cb77e8b7ff57e46a24fdc1e34f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838139, "uuid": "8bbcb22d-9986-416e-9ffe-b6cc2241c835", "comment": "Malware payload (Mirai)", "value": "cc0724f9fea659261525483063fcb570f82839c1c629b1c64ae9f08eb7cb9868", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838139, "uuid": "682ea792-2084-4caa-83c1-8d21b5697f62", "comment": "Malware payload (Mirai)", "value": "a00288425ae8931ea5b3595b970e06ee91449788", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838139, "uuid": "385e0505-f847-4496-b2dc-a7d6f242a822", "comment": "Malware payload (Mirai)", "value": "65fcd120afe4011895b1028bc9b0dc549c70c45200d60d83d89ee4c1b57b6d64f53856e31b1810c7ebee87b2af9b42a0", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624838139, "uuid": "e01ff42f-af1e-41dd-9e40-a155b3679f7e", "value": "2A530A817C916A29C7D0577BEAAF108E3354ABD9D0DB7347CC044B917ACA90B0D67B86", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624838139, "uuid": "4586c44a-0b64-4cad-9452-9974474dd5ea", "value": "1536:dOxGfyRWiPLacGXWzM9l6yTzpl84ETjpk19y20Yvck6YceZWGzDsMH:dOxkyRWiPkjX0QckVcwLRH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624838139, "uuid": "7d6ec3b9-2bf6-41ae-bae4-c1079ce09cf4", "value": 62680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624838139, "uuid": "278ccaf9-01a8-41b2-a0f0-09240da7bd58", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624838139, "uuid": "4762b7d6-f366-44f5-8ca3-3675d38d8bc3", "value": "0538d5cb77e8b7ff57e46a24fdc1e34f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed13cc8d-d766-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624812262, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812262, "uuid": "31928cef-10b2-43ee-84b5-62d23a6a1734", "comment": "Malware payload (Mirai)", "value": "d99e910168c0b80643c6e17cf58ff170", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812262, "uuid": "f8adb5ac-e198-484b-b029-cec9a26e38d9", "comment": "Malware payload (Mirai)", "value": "cda04b9bd52076371423d4a978683ba51995c49335b056636c983f0a2197853d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812262, "uuid": "a5520098-073b-4988-9fe5-9d54d48ae823", "comment": "Malware payload (Mirai)", "value": "eaf66450fccdcf2aac41e7dbbeb2d462b321d7ce", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624812262, "uuid": "2aac9011-f80f-44d0-9d8d-ec1584042a91", "comment": "Malware payload (Mirai)", "value": "09b61639bb287a6ad8039154cf3ea4de8b2ea9cd89ecf08998b4fb1280ee021e4202837b7dcfee6bc4077ca1da692f39", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812262, "uuid": "2dffb7ab-ef18-40b1-b705-a4f8f6efb4bb", "value": "753308C4FA8B89F5D90749304067F13FCF31D5B941B1C6ADEF9A9F35CA67542A20228A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812262, "uuid": "d8f9240f-42dd-47e3-9df4-b0f96bb7680f", "value": "1536:nfyMY0q0Yv5qP69Dj0MGNLijIFtbL7YkOE1tP:fyMY6Yv5qP6BoNLiWtbfYBE15", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624812262, "uuid": "c5711641-b482-4966-abe2-2e4c8ec5db81", "value": 54032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624812262, "uuid": "7f539707-2db4-4be8-8e61-4e45d6c7a78a", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624812262, "uuid": "86ffd739-f6e4-42ef-b776-e506ce3e7c23", "value": "d99e910168c0b80643c6e17cf58ff170", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13eb8e7b-d730-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624788705, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788705, "uuid": "da730c91-60c0-44e4-82f9-0746fa0ba0e6", "comment": "Malware payload (Mirai)", "value": "5a894f5152dfdaeeaeec33d58c255f31", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788705, "uuid": "66dcb90b-23e6-4fcb-b6bf-670fba65c8c2", "comment": "Malware payload (Mirai)", "value": "ce605312ab1c6fd673ec3738f7555589c30be692ed31355dcbe41872a8ffa48c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788705, "uuid": "e6a9b4b2-67c8-451d-ba6d-92dabce7fff0", "comment": "Malware payload (Mirai)", "value": "e5e344e400e355eb6fa06cb1addc0be38ab039a9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788705, "uuid": "e282be9e-beb1-4186-b4ec-7b5bd7d219f7", "comment": "Malware payload (Mirai)", "value": "db38c804130327179f73e5f8021c3d23a476473cbace2cc44c4e20926a7e844b5399b28b4d1d2286cb7493f9fa756ee4", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788705, "uuid": "eb8869a6-bd2e-49d2-923b-c6687d04e700", "value": "96D2E1921FA04C71C730247DB4FFD5C27A054E7892B6316759380E5DDA9F2833A7835A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788705, "uuid": "c151a74e-2fa0-4dbd-a2f0-7a974556cbd4", "value": "768:6A/jZ9mNCyzZYSVsepp8yQ17Gl1tyclbs3Uoz5r:H7Z8F+Ydpp8J0l1wclGzF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624788705, "uuid": "8d9c552b-4f74-4b8c-9a58-6ab0509c4594", "value": 30380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624788705, "uuid": "c67c2e9b-7657-44b9-9e21-fb73fa6344fb", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788705, "uuid": "01bb698e-453e-41b1-a059-3bbc2ba287e3", "value": "5a894f5152dfdaeeaeec33d58c255f31", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c722597-d75a-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624806973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806973, "uuid": "3ac5b8f6-2606-42ca-8600-8775aeba93b3", "comment": "Malware payload (Mirai)", "value": "e8cd26b6cb2c6cdc71fb6bdefa6e6d46", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806973, "uuid": "6663df8b-0494-4bda-ad97-bfd174337dc1", "comment": "Malware payload (Mirai)", "value": "cedd8cc05fceb3cce0c3a175a4b2912271a11b8ce0142eb91a6664229b316d50", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806973, "uuid": "e9f44092-c759-4950-a836-98352029d179", "comment": "Malware payload (Mirai)", "value": "9be0ca551f977fd2177ee7c367d7ca263a5c4dda", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806973, "uuid": "6c5a09da-f6cd-48bc-913d-d65128e8a8d5", "comment": "Malware payload (Mirai)", "value": "ec7205840be4ff51eeeb14f06be7b5674d0288e4989a0d1da3eeb2d18747ff8c83ab45aadb1f3cc0eedaa8c26779a996", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806973, "uuid": "a3a740cb-2611-40d8-9bda-20fcaed259c7", "value": "4823F2432093BA03E03458FA8562CCCDB55EA67DB1BE77A725450E254C35DA3ECB18AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806973, "uuid": "b78f53a9-649b-4fbc-88c2-edf01010222c", "value": "768:nK7y1XGO1LCNgukEkvwtqPnH7u83nc0iFi+9q3UELWt/iw+kvBGg6+fYtrBHs:P12O1LCNguovDPH7Tcr0jLWhiw+kvBGe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624806973, "uuid": "488bdf41-601e-4347-abf6-d30ec8686925", "value": 48696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624806973, "uuid": "df84671d-9f32-42bc-9ff7-0c4669a9fc63", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806973, "uuid": "07b43a71-b080-4385-bd9e-36915af8b22b", "value": "e8cd26b6cb2c6cdc71fb6bdefa6e6d46", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c49bb86b-d749-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624799739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799739, "uuid": "1c0db627-c648-4c1f-8946-22d63f850543", "comment": "Malware payload (Mirai)", "value": "ba452a723ad59a28a9d2263baf2288a7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799739, "uuid": "8832c2e5-4e83-4e42-8598-be8ada0745c0", "comment": "Malware payload (Mirai)", "value": "d0d8e07dae2d166827e91a994c7bdf52bb552c341f85a23ec148321a70a0e73c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799739, "uuid": "aafafd27-5672-4918-b644-aaeb7c7710ff", "comment": "Malware payload (Mirai)", "value": "3898d35cf7098085ac71ce64bc2f8b7c8f56f39d", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799739, "uuid": "26ce9266-efd0-4ec8-9fc3-31abb5c8204a", "comment": "Malware payload (Mirai)", "value": "0eda250a8425f066a60a20adc43333aa75a73791d12689ff1a7ba048cba2888b4ca9c8a492c59d4a0d4321addc304ef5", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799739, "uuid": "95828f49-76b5-4642-a83e-c840f1314877", "value": "D5333CC6F401BE7CF91FD6BB4633490DB920A2548193072377BBFD93AC322A85916D46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799739, "uuid": "e50f8eb9-e30d-4f5f-b46f-431226c22ffa", "value": "768:EceKIZ8v6XCqeOXiBIStZHxOtMnjvuTFSwQ8deE4N7l68D/F+KhL:/XIMqqVZR4IjvxwQ8dEN7o8zF+k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624799739, "uuid": "2dc1fdf0-3318-45e2-bda0-7084fecf3df4", "value": 52280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624799739, "uuid": "888b8cef-01c9-40c6-84f5-970a459b94da", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799739, "uuid": "13ac5af8-7087-4f28-8ca5-835b185a66c3", "value": "ba452a723ad59a28a9d2263baf2288a7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09e8849a-d79c-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624835074, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624835074, "uuid": "4b228f73-21da-46db-8b7b-48a660d01649", "comment": "Malware payload", "value": "7dbba9d07062f561a14985f5aa81f925", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624835074, "uuid": "60fa4032-7246-420c-a50b-8c35618a2449", "comment": "Malware payload", "value": "d194f66a093586ecc369ace8e98312ab71cfd02928f89a4d730bafd2587e4248", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624835074, "uuid": "98ab6f91-1136-4302-891c-35b46953af50", "comment": "Malware payload", "value": "d918e56a5197785f2f6a2917bba7168ea7e3c63a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624835074, "uuid": "b47e1473-c230-4718-9d91-5cdba93f7dff", "comment": "Malware payload", "value": "9221804b33c2750898c63d439842a6d8b1e18af1963c78e95608471f522a4c083a38f341ad4652dd2d6bdbfe1cc76343", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624835074, "uuid": "3fcf2d4c-28ee-4615-a731-e4bd0e7fab88", "value": "62143A05DA805B57C6E337BAEB8E428D732347A867C7330549389BF43BC2B991E76461", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624835074, "uuid": "9176bb3c-2d7f-462d-a4d5-5d69d4d757eb", "value": "6144:CCGkqaXP7HN97R6l9B5hLr4UyOiSM/9jSmBwKBIe8X7:CCGkqaXP7HN9dQL5hLr4UU7/UmB1BIeo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624835074, "uuid": "a178c6d0-a6a3-4416-b378-19e12515d381", "value": 205249, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624835074, "uuid": "496fccfb-cebb-456b-8d06-9340c90ae2ed", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624835074, "uuid": "6fe91abd-8f90-41d0-8e8e-cb5132650663", "value": "7dbba9d07062f561a14985f5aa81f925", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9be6da6f-d78f-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624829736, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624829736, "uuid": "f2b0418c-ec23-4315-8eba-e15a7cd6e7f3", "comment": "Malware payload", "value": "688d59480397f64addffe5524e81dd9c", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624829736, "uuid": "b7b6950a-a347-4ce1-9583-d5a545c57c2e", "comment": "Malware payload", "value": "d21b9e2f6e54cd2b4ddfd1c18a28ed1df3870a06c2775b717144c10e22a2d5fb", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624829736, "uuid": "4c99dc30-da20-4804-93a7-228dd31e4ea7", "comment": "Malware payload", "value": "d35030b88b19c3492747a9978ac418afe62ecb43", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624829736, "uuid": "827e544f-5c68-45dd-b606-424a4372bf79", "comment": "Malware payload", "value": "50a550683a6d9dbd5c32741567ca0fcd93c607507d61829c777e29dd2b24641b7f5d2b8c4d025649f72290228fbb10e9", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624829736, "uuid": "fc631ff9-97a2-4432-a95c-519ea3b929e0", "value": "D2440225B2E4D5BBD59213704E788B7AEBBBAE001493521357947F2E3BB11D60B093E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624829736, "uuid": "b35c28f7-6797-4ae1-9471-1b6f371e64a0", "value": "6144:sEtTqjFAiCkMd/R45GKuSu6NTPm/22+fp3Z5t:sE9ZVJ49vu022hPb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624829736, "uuid": "bc641364-73db-4d5e-9e23-c30c34d916a6", "value": 278528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624829736, "uuid": "802abfb4-485c-4f13-948d-651a4b305cf9", "value": "application/x-msi", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624829736, "uuid": "043945fe-f6a2-4cd4-9949-df9eaec8d5f1", "value": "688d59480397f64addffe5524e81dd9c", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70ed772e-d759-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624806471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806471, "uuid": "3b57beca-6858-476e-a6ec-0e35ab964729", "comment": "Malware payload (Mirai)", "value": "5006539a53bae98531060c5c79cc5bf1", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806471, "uuid": "a9100aef-e3bc-4e18-a4bc-0b93aff753ee", "comment": "Malware payload (Mirai)", "value": "d6d33acf0ee9c5e2b1a23b07d709a3608ca536e29ffe28b1dba818bc345cf522", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806471, "uuid": "da656401-273d-421f-a204-e9429f8d9a27", "comment": "Malware payload (Mirai)", "value": "0ab82349c1ed0c9f25bd2f1fc4ff80556a5b0472", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806471, "uuid": "b325d0f7-e650-44db-a6ee-652364884bf6", "comment": "Malware payload (Mirai)", "value": "b53ddf60e641252358732f21b5b44b57de65d3d52bc11a206289bffd8da4962d06606be5fd21f676dba86de1d25b23e0", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806471, "uuid": "582a9c2e-130a-4d30-9cb8-0aa89995d001", "value": "F0C2D098174919E9D2F9C17843B817681DB40F5BF809EC8278F8F7629D8A4753027ED9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806471, "uuid": "3c6c849c-0806-4a77-af38-f86df7afb0d4", "value": "768:12G214DFyosXqgvV9o1ndB08uJgGlzDpbuR1JC:12GdDgosaaO1ndQVJuk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624806471, "uuid": "61de2377-0104-44d9-81cb-7997b4e63b31", "value": 26184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624806471, "uuid": "75189c00-6d57-43ae-957a-95aa513e9d1c", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806471, "uuid": "916d2d8c-ef5a-4885-9dde-04240c422d3f", "value": "5006539a53bae98531060c5c79cc5bf1", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21d70066-d722-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624782716, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782716, "uuid": "aed1afdc-f1c6-4d5c-8cf4-ea1981f14025", "comment": "Malware payload (Mirai)", "value": "681b67e0cb5df37e5e6b152d43bfa34f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782716, "uuid": "968d5ef5-c226-4a59-be3d-8f8e29d825a9", "comment": "Malware payload (Mirai)", "value": "d73d85faaab99933c25b4894509c2741dcb03fab7596502785d91063d384e9b4", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782716, "uuid": "6110ddcf-0998-4583-84d1-18ed57dca497", "comment": "Malware payload (Mirai)", "value": "82205048c10767131de456fdfa1fa080d8f1a197", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782716, "uuid": "2636e84c-10c0-4525-a587-44bae365aa1b", "comment": "Malware payload (Mirai)", "value": "0846f2ec631c91c9ad7f3b089a15f518c7b4468bce0c59bdbd13a642f3cf5731399febdbdfe267f6715a0d3803a44001", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782716, "uuid": "278fdd7f-f3b1-4e1e-9b6d-505ef832b64d", "value": "F8732A46B9815612C6C52777FB5F838D772A1398F2ED32039E249F21778B9AF0E2B401", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782716, "uuid": "fdae50b6-3790-4e18-be9d-c5af3fd45440", "value": "1536:JXapUoI2A21Bx+Euik0uePq/OMvqmHP8AWScJhKDspH:JWI2D7IEueuuPrSCRpH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624782716, "uuid": "ce66933b-12c0-43be-ab8f-4f122ae471d9", "value": 75256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624782716, "uuid": "9aee3fe2-ba99-470c-997d-a9e0ea85dfd9", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782716, "uuid": "6ed276e3-84a1-410e-ae8e-d3100a9b2ac9", "value": "681b67e0cb5df37e5e6b152d43bfa34f", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74b136f1-d76d-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624815067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815067, "uuid": "fbe497b8-09ae-46a1-bcb3-7a5e3919b5c5", "comment": "Malware payload (Mirai)", "value": "9ac00d89a700cd26218d67eed55b5673", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815067, "uuid": "48d67111-5a74-4716-9b4a-853504a8b4f7", "comment": "Malware payload (Mirai)", "value": "d8d32ae1ab6d9a768ccd4ab8a8b2f84a09653d92000ddad3487e4eee268b8524", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815067, "uuid": "44e5aa2a-bfa5-46ee-811e-eed4f8ca3838", "comment": "Malware payload (Mirai)", "value": "e73bbef18d8975dfcd043f2df978cad24bb7f5a9", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815067, "uuid": "e712666a-833e-4e0c-bbfd-92f4d0d56464", "comment": "Malware payload (Mirai)", "value": "e5d85bac961e3e0a466de5c867ebe1f0c8d05b0044993c56aaef91fac1f7298d63346b88158759e72ab147f486b91bb8", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815067, "uuid": "71120db2-a370-4e0d-aa20-9cad1f05e878", "value": "1ED2E1A6C8C52FC1FFE7BAF02594DE5B262A5E0D392BDC8914885B42F7018252E91DD4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815067, "uuid": "96c33199-5f98-4bc4-b102-dd3b9066e491", "value": "768:0qwA43xmHandvK0xBK6Zi9j002084uVcqgw09B:0qv1HI1K0xoDu0s4u+qgw09B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624815067, "uuid": "c61fcd5d-4d7f-4fe4-8b69-59f692b3bf04", "value": 28708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624815067, "uuid": "523429a9-aa30-4e73-93d7-f6bb3db1ea43", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815067, "uuid": "4fa5e0d1-1c64-4cd7-af83-aacfa3af2895", "value": "9ac00d89a700cd26218d67eed55b5673", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "103c5f5e-d76e-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624815328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815328, "uuid": "b2738a49-6f21-4fb5-b5e2-1bf513bef8af", "comment": "Malware payload (Mirai)", "value": "a080f02044ef62ee13dbbd0bd9f97024", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815328, "uuid": "1c96739c-8805-472f-9f54-3e9d585ef795", "comment": "Malware payload (Mirai)", "value": "d933c8e505ffcaedc95fe03c5ab3ab263f23ba24058939df18ef6c18ae650176", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815328, "uuid": "57c8acc0-b9d7-4128-b5b7-b48e52a53e86", "comment": "Malware payload (Mirai)", "value": "35286820dbdaf6392dbdc88a2d381301a4243bdc", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815328, "uuid": "fb14d303-3487-465c-b01f-bd59a6e36e25", "comment": "Malware payload (Mirai)", "value": "1350683242bef6daefca63766001fb278dadbc1cac3c2208b79151b40053ee015d7f8699179598d69cc2573d535ddf27", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815328, "uuid": "ce34994d-dc94-4472-b090-c633ab8d682a", "value": "E133F13C1739CF12CD761E35492D8A42719213F6BBA7BC43A1348B2C5A823D605E2DDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815328, "uuid": "095a522b-9dbd-4bee-9c07-c30dbd72234d", "value": "1536:AmKq5VYRX2TLNyLTL/8L/ldy+Y9b0phKa:AmTjRL83LkL9VWc8a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624815328, "uuid": "a7862d34-12a5-4795-8d3f-0fbb125b1b64", "value": 54268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624815328, "uuid": "f86e0b80-5d40-4d94-bc31-29fb8b45c86f", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815328, "uuid": "8b847b96-a73f-41bc-a549-a12878e1911b", "value": "a080f02044ef62ee13dbbd0bd9f97024", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01e18198-d721-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624782233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782233, "uuid": "a228163c-9085-4c7f-a5c2-704bf15b2f86", "comment": "Malware payload (Mirai)", "value": "749500b6598fece9c4ef86d501e6a167", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782233, "uuid": "8481d537-5591-4711-ad44-5f1b505f0c11", "comment": "Malware payload (Mirai)", "value": "d98b673fd0fe33e69110757b4f162926161a005767c8c71ba997f9a882180f2c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782233, "uuid": "b6f2f2e8-09b1-43f2-bb98-bbadf4d6aa32", "comment": "Malware payload (Mirai)", "value": "28fd935a5a5e2ccb15fabf8dc583a4462320dba2", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782233, "uuid": "41f384db-b115-4ef0-b3e0-3b61913c9324", "comment": "Malware payload (Mirai)", "value": "0a2f9fc7931fb1758826d36b28a8ee7d00965056d3b8500beda216ab1dfbe262768d16d6a55301d8e09142a62b4f5c6b", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782233, "uuid": "e5fd9b1f-8510-46c9-b643-4699855dee53", "value": "3A833A5AB9809B11C5C517BAFE1E524E731317BCE3DE72129E14AF30778B96B0E2A805", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782233, "uuid": "736fe6d0-3237-4f4e-8a17-8e4087ca9b83", "value": "1536:90nb0hik40tqXc/qDJlgUkauVhl+GpAi2XUkXJQ6HO5hvy8Y8ppe:m00l0tqsyrsaDXUkXJQ6uHa8ppe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624782233, "uuid": "8726832f-00da-4169-b81c-09b662c9a94f", "value": 87452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624782233, "uuid": "0965c142-d4d1-4143-a26c-98c5375d3dd9", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782233, "uuid": "4fa20589-d297-4b04-8ba5-eca5c17037f4", "value": "749500b6598fece9c4ef86d501e6a167", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b825f2d-d6ec-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624759566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759566, "uuid": "c2acf16a-7e6c-4b2b-81dc-309ee6c2d927", "comment": "Malware payload (Mirai)", "value": "10d0741ba80cdc8443f12b8abc0763a4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759566, "uuid": "abee9435-6f71-494e-9ba1-41317532e42f", "comment": "Malware payload (Mirai)", "value": "dc7cf2212f09482ac034eb7e9f89ef0cec8bc9532d4fe2db8a880c2e1e4ee8a2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759566, "uuid": "31cbaeb1-63b4-49b7-a6f8-387bdfdcb561", "comment": "Malware payload (Mirai)", "value": "bacbda681d565b9017a4a50be5f46b51347120e8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759566, "uuid": "74b2a8e0-366b-49fc-a16b-850feea66d8b", "comment": "Malware payload (Mirai)", "value": "d31635afef6ef128ba836ba7b3ed01e0bbd173d002b73689d26ff230723a5c3fbd2c92556c4d8497f91bf0a15a61c9a5", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759566, "uuid": "2f2e569f-8f84-4f83-96c1-69013ccc8aa8", "value": "5503F17A48537363D5322D36BA99898AF22916FC76F6306A268D4751FCC03886DFD310", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759566, "uuid": "d51f730b-5148-4ed6-a38a-93986dddf5c6", "value": "768:gWBVNV9o2DPD+aNuiQSO5rWysEzBN6Yd+xoklQ50WcP3Nq3U7i:R7dD+fRWybp+/dlBi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759566, "uuid": "65df99d8-e08f-437d-8cc1-9a825c92bc7b", "value": 38864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759566, "uuid": "ec2086e1-f5e7-49ef-a204-7ffacd5b61a6", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759566, "uuid": "d50d3e3a-3c70-49c1-a325-f416b19e62e9", "value": "10d0741ba80cdc8443f12b8abc0763a4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4381c200-d77f-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624822715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624822715, "uuid": "115aa720-8c8e-49d0-89c4-161a31d244b4", "comment": "Malware payload", "value": "2539dbed170613f776445dab9b62fac0", "object_relation": "md5", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "rustybuer", "colour": "#9300CF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624822715, "uuid": "20ae5a04-ac3e-4ecf-9340-c0cb4ffec936", "comment": "Malware payload", "value": "dc8c2d326143ff4334a7bdbafcb821ee9a525eb3248e676e4940baab8d0626a9", "object_relation": "sha256", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "rustybuer", "colour": "#9300CF", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624822715, "uuid": "472a25be-e2d2-47de-93f7-644a98ca595f", "comment": "Malware payload", "value": "8bbf033ffbf4e27f2fb2a8acfca74770e2fae471", "object_relation": "sha1", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "rustybuer", "colour": "#9300CF", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624822715, "uuid": "ec59e233-1232-4c95-b6a1-4a1e3bc70ae4", "comment": "Malware payload", "value": "ef531fb9d16cfba3c8b383b6683e84fb8d5114763ec697bdbe0ccdbba85dac58a2c99a700a3b7fec6f37be26093e47ea", "object_relation": "sha3-384", "Tag": [ { "name": "dll", "colour": "#4717AD", "exportable": true, "hide_tag": false }, { "name": "rustybuer", "colour": "#9300CF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624822715, "uuid": "5aac41cc-7f93-491a-ac93-2133aaf1d962", "value": "56C12873F8714172F7333A7C8892B8AF6A7CEF014A65566A28F92C4C1580C45EB29353", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624822715, "uuid": "98762455-44ae-4851-90ef-0bb4101886d0", "value": "08d73ecbe833f54c3be14e0ca3736cc2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624822715, "uuid": "da7f878d-a5ee-4f0d-927d-a9d0594889a7", "value": "96:N+4jG8Qz/Ufh+Hr7rQ2pGfx0ipYTN+e35FNI2cgpGiJI8W65XKBBb:N/GpbjHrg2pEx0ipYTNnFNI2LpLI8W6O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624822715, "uuid": "5ee7f6fb-5810-4e32-8188-bde5169d5dc7", "value": 6144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624822715, "uuid": "0f699c57-7832-47a4-99c0-1b79188a21e4", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624822715, "uuid": "32f5d8bb-9ee0-4975-aca1-ecedf58347a7", "value": "Test.dll", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e65e5a03-d75b-11eb-875b-42010a9c0053", "comment": "Malware payload (RaccoonStealer)", "timestamp": 1624807527, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624807527, "uuid": "ed8da7d6-e52c-440d-95d3-aaa8fbd5292f", "comment": "Malware payload (RaccoonStealer)", "value": "92cd2a3d51103b26eb62ed1f9b9ce4a8", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624807527, "uuid": "4111e625-ef6e-4aa6-aa86-92b1f2d9d957", "comment": "Malware payload (RaccoonStealer)", "value": "dda0eb627c08fbaa30cedd995f53ded1902e447c543a00f5950812dce24a9009", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624807527, "uuid": "c2e3f3c1-e63b-4a93-8fde-8d77bdb9a0f1", "comment": "Malware payload (RaccoonStealer)", "value": "0dec382c184164cfa513c78572c8d23158947ef2", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624807527, "uuid": "df2f980e-7b82-4eca-b29b-73cd0826b509", "comment": "Malware payload (RaccoonStealer)", "value": "2002f4c6209bf21bb65dfe6ea46ccb7909324c755ff618daf032d316be52387aec5d34e1b0830f73d31b22844f64c7ab", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624807527, "uuid": "f23f6b7b-6b48-440c-83c0-c1e580b924e5", "value": "E3D4D000BB41C039E9F732F4497AE368693EBDB1572411CBA3D52AEE46746F0AD31627", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624807527, "uuid": "22982778-3b16-4877-9ae7-f6746f59f51b", "value": "7a958e1aed1cf6e81fa8d2a601d98d8a", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624807527, "uuid": "85560d88-bfdf-4e6b-822e-480c1a7b5cad", "value": "12288:P/ezRzaBogLgqzovcPC2kp/AFyjLWy2rnKA/zDKjIIpsPZp:XEaagJUUq2Jmn2rn17CeL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624807527, "uuid": "f357773d-b78b-4dc2-a1d4-8286aff831b6", "value": 608768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624807527, "uuid": "84c426be-4381-4f57-8c56-91b4ae9d5c9c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624807527, "uuid": "a68a6bab-4b3c-4d69-8632-5b4de7f918be", "value": "92cd2a3d51103b26eb62ed1f9b9ce4a8.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6acce631-d75f-11eb-875b-42010a9c0053", "comment": "Malware payload (AveMariaRAT)", "timestamp": 1624809037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809037, "uuid": "1fa89bb3-2bf8-4d93-99e9-90172798f927", "comment": "Malware payload (AveMariaRAT)", "value": "b0bb8c959f97f1f4ed6c08b278729213", "object_relation": "md5", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809037, "uuid": "b0bb1124-ac4d-4bce-8115-df840360a202", "comment": "Malware payload (AveMariaRAT)", "value": "df8c2eaec3b1d41cbf52fb3c8713af569e70dad1a1473d9a481b05d3dfa61186", "object_relation": "sha256", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809037, "uuid": "01e05650-c823-4c23-becb-1b775a7a3d0f", "comment": "Malware payload (AveMariaRAT)", "value": "6c35dedef315cb60c7825ffea0518475d10e401e", "object_relation": "sha1", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809037, "uuid": "25f8fdd3-5dee-477c-8c90-ec70c8570192", "comment": "Malware payload (AveMariaRAT)", "value": "219eda90c1c2e96d361ff9e73e788208be5105c9b41ed426d3fecdfcf28ca946c4bab66e2deb48f36082f8f681f08278", "object_relation": "sha3-384", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809037, "uuid": "0a84c709-11ab-4b7d-9199-9b762ea4c85c", "value": "C6B39E13F7E54835F3B201B01ABD7E7ACBADF9701628C49FA394854B2D31846EA25397", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809037, "uuid": "1e459073-1a2a-4bda-bb38-8c0d98f9bfac", "value": "51a1d638436da72d7fa5fb524e02d427", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809037, "uuid": "ddee145d-e9cd-4389-a4db-534483badb11", "value": "1536:h0jP7/L1B5rVmN8sxHv2M28ix8EUaJxWZoB4u0OVE01:K1VmhaH8EFvW+0OVE0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809037, "uuid": "4b6b62de-f9f9-43b4-886f-d3c2db99377f", "value": 111101, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809037, "uuid": "bb02d276-ec59-473a-b232-db0fe94ee0de", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809037, "uuid": "3ff30bdf-132e-4748-ba30-61bdd1fa9185", "value": "b0bb8c959f97f1f4ed6c08b278729213.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0292f3e9-d75a-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624806715, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806715, "uuid": "f3d603e3-b10f-449b-a79e-e5c0f979b72a", "comment": "Malware payload", "value": "4c5c64ef5b3f94f1cafd072f1989fbc7", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806715, "uuid": "8fdb0cce-d0de-4f88-be09-a6ef515112f6", "comment": "Malware payload", "value": "e09931997c18281c3a4cb81710b11a2924ed9617e60106fccdc2d6564b81e40e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806715, "uuid": "dae76875-1f00-4377-8a3d-bdc61588911d", "comment": "Malware payload", "value": "8c914f0fb4b7c5f16bed8c4196a5141f2214c6a8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624806715, "uuid": "34284479-5771-4ded-8a26-fba5d5d8d772", "comment": "Malware payload", "value": "e85299b9335fe7be5383368e8984d80cc022f8eb5f9160a33ecd55aa2e3036ef2fb409a9484ef9107d3bb4c1beaf3320", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806715, "uuid": "85ab2795-70e9-4fe8-adf4-88e4fc446c23", "value": "BB255C243DA58421F3F52EFFCDB94518473DA9D22B83D62E64B4327D06D3292E8D349A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806715, "uuid": "2af9f3b5-5db3-4bb9-91f5-a92ee7a76ba6", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806715, "uuid": "669641de-fd15-4261-8475-1756f4ddf990", "value": "12288:UHKwZErvlCU7wuo3rSmvCmVtF4MIkf5fsBdsI8nBCUiqvobn2QogY:UHKwarvgUXuF4mhEsdBpi5b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624806715, "uuid": "f9f2b76e-ce95-4223-954d-a3f45dd4143e", "value": 965632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624806715, "uuid": "08df71bc-77e1-4c54-9859-3622d56b5c0d", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624806715, "uuid": "148f7b9b-bc95-43c2-a2d6-3c18048843f2", "value": "4c5c64ef5b3f94f1cafd072f1989fbc7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "273aeedf-d7a3-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624838130, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838130, "uuid": "7b4d07cd-2f19-46aa-a8a3-28f5f133baef", "comment": "Malware payload (Mirai)", "value": "b0943e979d990bb0d599842d22ab9966", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838130, "uuid": "8e2b41d9-5ccb-4fa9-b3d7-ce4e453cdf34", "comment": "Malware payload (Mirai)", "value": "e1608a7d47214235b0835d8f9fba505e3263f7c3c5ff1977f3ce49fc9df6a0ba", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838130, "uuid": "50257c3a-105b-44db-9c5e-7cfa6d6fc663", "comment": "Malware payload (Mirai)", "value": "b16256fe737e7022203cc27b9a24b755b2fba515", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624838130, "uuid": "c93bb0b0-dd60-4d9f-9b8d-051c6da21937", "comment": "Malware payload (Mirai)", "value": "d32cbe34a54641d84f8e885d29708a2bb756354cd421b544278a1963d2b42b1cd098fa254a7e6aef48e136ede3dc8d8e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624838130, "uuid": "a8de5fe2-49f3-435f-822e-8e61974b05d9", "value": "E0831981B9809E15C6C5177BFA6F108D331247A9E2DEB353CD145F6477CA82B0E37A8A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624838130, "uuid": "d23d7f69-7d4c-443e-9174-84c9ee6a5974", "value": "1536:29n7/xkRBFg3yFhk20WtEu+1F4YPjaduBcPYO9mrsplDKZUlQBKXAVan1X+F8Jy0:gJTyHknWt/+L4qjmugd9mrsplDKZUlQa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624838130, "uuid": "9c274ec2-55d4-4837-b4b1-1a156dc8260d", "value": 83072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624838130, "uuid": "a6bbd83d-056b-4fbc-9bcf-37c19b239a13", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624838130, "uuid": "9ba65380-073a-4480-a3e2-5aa9ab84e671", "value": "b0943e979d990bb0d599842d22ab9966", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9fed2de0-d78f-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624829742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624829742, "uuid": "63d8fdac-5104-4057-ab21-29f75395cfee", "comment": "Malware payload", "value": "13f3d3c796b6df4aa50759f1216a96e7", "object_relation": "md5", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624829742, "uuid": "916abb53-0a2d-4014-9ce6-dd30862318a1", "comment": "Malware payload", "value": "e17c6fdddc41bc1200df93f2303ea35ac0d230e04e7641f1b589bf2a9a7d1e3e", "object_relation": "sha256", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624829742, "uuid": "3b240f75-fbac-4521-8b6f-c2cb86d10a59", "comment": "Malware payload", "value": "4412b4aaaa6a921f5dfacd08fcc53f97adcdc94d", "object_relation": "sha1", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624829742, "uuid": "1f909b73-1a5d-4150-a783-8a039291c326", "comment": "Malware payload", "value": "c7a02d39da9301d81b991f1e14fe3e0a56b2258767679fc8d995bf0dece02078d9169bd94cc1bfbe34b02687dd497830", "object_relation": "sha3-384", "Tag": [ { "name": "msi", "colour": "#4F84E1", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624829742, "uuid": "6d668faa-e1ed-49fc-afaf-3c11f5d2642f", "value": "9844121A70D1417FD89986B51CFB873A97F78E001926120313F07B1EBEB1D8646A67A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624829742, "uuid": "fc269d64-82b1-43ae-9628-873dd93b936c", "value": "6144:cEtTqjFA5JxUTHMcdKYl58wqpGdGyzGWLK0/Gtv:cE9Z53UTHLoYvjqs3//Ev", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624829742, "uuid": "6dfd09f2-59d5-44cd-b9a5-880323c60596", "value": 278528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624829742, "uuid": "3147b620-9f16-43f7-a047-4539a319ea00", "value": "application/x-msi", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624829742, "uuid": "9149dd1e-a2bd-404a-9d14-62622d7d2f55", "value": "13f3d3c796b6df4aa50759f1216a96e7", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9f72c68-d6ec-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624759885, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759885, "uuid": "d3ee9fd6-864a-49d2-97ad-c79f5c8d1a19", "comment": "Malware payload (Mirai)", "value": "45777b5c2fb7f11e671b97ebd9585386", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759885, "uuid": "954f3fb8-0578-43d6-abc7-ad3a81d1ae05", "comment": "Malware payload (Mirai)", "value": "e1dbf2c930308901ecdea01b20865bcad29e62cb5b9e7c09d85ae9bbb8d9a53e", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759885, "uuid": "41285a02-ea73-4b6d-81b2-50815c3a031c", "comment": "Malware payload (Mirai)", "value": "3227c54cb130cf78d03c9cd4675b5476ea1b5bda", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759885, "uuid": "1a9181bb-1edc-4f7c-983f-f9a3d8c6b6eb", "comment": "Malware payload (Mirai)", "value": "033bbbe2134151be89dd07294533671b56f574fe826cbe78ead39008a27584d2f34b1d66396def3946ae165fe93ec721", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759885, "uuid": "736d96eb-7745-4528-8689-9c52fee2eb2b", "value": "1172C065367C4FA7CB0A6B374A4EEC9E4020CC50499FEA673759935A4DEF1784933848", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759885, "uuid": "cdd41061-fd67-4231-b056-c90bec992b19", "value": "384:MnaZU0+t6zx4p3PdduVejhEijo+9FBau6X/7O8Tunbeo2MMv1R2:UeGyx49ldkelEijlPau6P7OFbeoc2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759885, "uuid": "73619628-2117-4ebc-8f76-92ee3b6ff942", "value": 17296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759885, "uuid": "fa116173-ffe4-49e3-a5f2-e1eb66207e1e", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759885, "uuid": "44115928-72a7-4046-8164-bac4598b9e9d", "value": "45777b5c2fb7f11e671b97ebd9585386", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f477547c-d72e-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624788223, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788223, "uuid": "c52cd706-3116-4d5f-92fd-7a65fcf63158", "comment": "Malware payload (Mirai)", "value": "91364a8a2f9ccfc2da7ca6ab4911d1b6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788223, "uuid": "ed7980fa-be19-4881-bf52-93275fd27f12", "comment": "Malware payload (Mirai)", "value": "e3f2dc76a71c2fb42aab5fe86c5b6ef3d42ce55333f2a2644818bfa118c3aa76", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788223, "uuid": "85112f7c-ec54-49d1-9014-ace44657af93", "comment": "Malware payload (Mirai)", "value": "c06b9fb16fc8572b1905642b0abc60b8b56f63f6", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788223, "uuid": "4ed3c25c-0875-46b0-81a3-305ee60b4898", "comment": "Malware payload (Mirai)", "value": "e5e4efeb565d04e01f74d6d0d3b86dbd49cd6b837c719b3c5407e8f19bf0c6ddd4f27249cccdb3f5397f3752c93538aa", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788223, "uuid": "35db9e0b-a749-43a4-8e2c-eaa95786381f", "value": "5FF2E068D32FA921CD643BB0CC79124461EA2A28F2EFFF663D045A142CDBF4905A519A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788223, "uuid": "79c2bb9b-cf41-4abe-94e2-fd6297301959", "value": "768:N0+nlpok8WjS/R186FB7tvufvFsbnaKzWnUj/cH5F9q3UEL5r:/EiQi65ufvGbauWo/caLl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624788223, "uuid": "eada367e-d262-49f7-be3e-061be65b20d4", "value": 34916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624788223, "uuid": "288cbd98-0f5e-4357-8b60-2378319195da", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788223, "uuid": "58e70597-4820-4e0b-b5e3-45882614a026", "value": "91364a8a2f9ccfc2da7ca6ab4911d1b6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8bd04c2-d70e-11eb-875b-42010a9c0053", "comment": "Malware payload (Formbook)", "timestamp": 1624774379, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624774379, "uuid": "be527603-52bd-4bda-ae54-d8d0f30d792d", "comment": "Malware payload (Formbook)", "value": "91f15b1cbc1fa8ef9784fba74b325ed0", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624774379, "uuid": "c04d8db7-62fa-4120-b9fa-d776e3ca1971", "comment": "Malware payload (Formbook)", "value": "e47843b7ef3c9825c787ff7fae69cfbd4759a21e81da4e800746af5b7937c45b", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624774379, "uuid": "b9c60aa8-5a55-49ff-9820-7b9771fdf849", "comment": "Malware payload (Formbook)", "value": "bcd440f3592aee9e0cdb80764e454ae61ff95b05", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624774379, "uuid": "cb693a79-4acc-4838-884f-a3a9652732e6", "comment": "Malware payload (Formbook)", "value": "0642bfadc1ac422dd6b96e434f1b5087b98710c56c2c18d4d6bb3b9f046f5cc4d7d7e2c5d24b61f041f49a3d246dfd78", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "FormBook", "colour": "#7E8116", "exportable": true, "hide_tag": false }, { "name": "INVOICE", "colour": "#75F0D5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624774379, "uuid": "abb09ded-a109-42eb-b0da-1cbfdf402c95", "value": "0F453A6C3AA0319ED4B7CD3ECAA45C64EB58BD77570B811760B3169EAB1D847CF600B2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624774379, "uuid": "d2ffaae5-eb2e-400f-bd03-15a9996f878b", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624774379, "uuid": "69e64f83-74da-4fdf-8299-750a93a63f92", "value": "12288:PvZjqgQdPYrLmnLA1Y7koBMWhIedqFVJsv4jOCpsprLjpdoe24INXJZLPkl9rMXK:PvxdqLA1ukeXy0qFVrXAke24wJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624774379, "uuid": "42e19b7f-356a-4764-b4e6-662c8430ab1e", "value": 1180160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624774379, "uuid": "7e7a6385-b934-43e9-ad39-792fa49b8a53", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624774379, "uuid": "150d6028-b906-453a-9cb1-7dba250219df", "value": "Confirma PI#4042021 INVOICE.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d45e4b7c-d75f-11eb-875b-42010a9c0053", "comment": "Malware payload (RedLineStealer)", "timestamp": 1624809214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809214, "uuid": "c6e81184-d8c6-43df-8021-34dc4340784b", "comment": "Malware payload (RedLineStealer)", "value": "8915eb36f98c7d764b57acde87e7959c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809214, "uuid": "8a3ba098-307f-44ff-bda7-b350d89e4d0d", "comment": "Malware payload (RedLineStealer)", "value": "e532f96929100f739e70571ed93a7d7233a649e73a1c2dabc7ba0dd526d23b68", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809214, "uuid": "808e75c4-9d5b-4bb6-87b6-c528767f8a88", "comment": "Malware payload (RedLineStealer)", "value": "15100a25236e647ce830f3fed916c826a568bd05", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809214, "uuid": "fc6c8492-7a00-477e-9cd1-afaf81b0248e", "comment": "Malware payload (RedLineStealer)", "value": "ce83aa91ab2cdcd8d9ae19a12dcc21b796baa1b6d0159914e411af3977e1cc6ceca25a93801ab9acac376dfea39dba70", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809214, "uuid": "d9055c96-d49d-4694-9e24-91ffb82ee5f7", "value": "BFD533628229DCD3C7D36630DA06C5306310E91DA63BDA7DB54777683AA37830A5FE4E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809214, "uuid": "424458ee-87cd-41d0-86ca-89cfd4f2dddd", "value": "4328f7206db519cd4e82283211d98e83", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809214, "uuid": "d30648b2-6ed1-4d5d-a590-a96d7af215fa", "value": "49152:HyupE/Aoo265rrm10Nx4dvd/jOS3iaq5UyAqblFzFZjrjeSKHBEia0nleeBtKx:ANoDrrtivd/viCl8bRr/0dc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809214, "uuid": "3f01a746-d15e-47af-972a-20bf00c86e52", "value": 2786396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809214, "uuid": "32ee1541-0da6-43ca-9ab3-5c9c263afc2b", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809214, "uuid": "22086401-d971-4218-b51c-e93b2da301be", "value": "8915eb36f98c7d764b57acde87e7959c.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7983b76a-d76d-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624815075, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815075, "uuid": "e553b244-b7ee-42ba-a290-13b07fd9135b", "comment": "Malware payload (Mirai)", "value": "6e31c66f20d6dd71da71d1d8a0fe9664", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815075, "uuid": "8b331922-62b9-4f8f-b06c-3dc486b87182", "comment": "Malware payload (Mirai)", "value": "e60315a2f9e2f44df12d9176f90344ea95efa00b097e08afcc4a7e2cb2526c10", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815075, "uuid": "43d818a8-1138-4eb8-a928-60f90af36912", "comment": "Malware payload (Mirai)", "value": "45e6a97c577fefa19efdf31e79830655db1ac37a", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815075, "uuid": "f6231140-283b-41eb-a4b2-0d5fa4aa9b2b", "comment": "Malware payload (Mirai)", "value": "ae3349984394621a1851399acfafda6cd736d8a5abacfc9477ce85b45802b916c40867c1305ff835e53b79d6e8c7d902", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815075, "uuid": "777b4650-bda5-471f-ba41-9e626e70b6b1", "value": "3BD2D06572958C73E8F09C37EFEC12936B8E10FCCA6173732954442878E00298DB99E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815075, "uuid": "459b5699-fd8f-4ea8-b0a5-8e1f9c58f1f0", "value": "768:A0PwnF5ax5wGIq1sDAY6VK+Rxd5roPKQyns3UozO:G5e5w8S76j5rjKzO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624815075, "uuid": "59430cbb-6b84-4a9d-9904-e0ef36a18a71", "value": 30324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624815075, "uuid": "14ff88b3-ad75-406c-9a49-8250502b7bb0", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815075, "uuid": "bf4b180a-c88f-4cd9-9f2f-3c919223f786", "value": "6e31c66f20d6dd71da71d1d8a0fe9664", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2cb06e5-d6ec-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624759873, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759873, "uuid": "99e659d6-22f1-498b-b6da-a30bb0752f35", "comment": "Malware payload (Mirai)", "value": "cdae5023f1f4708ff501d0d9576fa7be", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759873, "uuid": "6665d956-50a7-4c39-a9af-5f97a73d0f52", "comment": "Malware payload (Mirai)", "value": "e6f20e73af6cc393dd139b32117a8681e15edfe61c157f3509d1e740184b3d5c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759873, "uuid": "5f7d6a08-aa9b-45b4-88eb-6552830f0248", "comment": "Malware payload (Mirai)", "value": "e2ff4950953f55112d339905f1c85588e3f87888", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759873, "uuid": "2afbb547-37e2-40be-bc08-d52118a304cf", "comment": "Malware payload (Mirai)", "value": "ae23bcfe0ea4ce35eede95d7cf08aa550fc34fb8f33e9572e69ec7f0c22d15f91134272315007b6b41e087d015d87bf7", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759873, "uuid": "a2da4330-0af3-45d7-8bde-1cd2ef6866f1", "value": "A8F2E03D820258B6D5BB007EF7ED5B613A934FD95409D80D37099B908E929BCBC1BE88", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759873, "uuid": "89084ec7-af8b-44bc-9223-2d15e1f6b5ab", "value": "768:waDdaZIWM0yV+csDc5oVcFguWi7/CgHsoL2gOZ9JgGlzDpxYsCPa/x2:wmV50mFsDd6PwgOZXVrYNaM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759873, "uuid": "90669365-555a-497e-9606-d20e79166f45", "value": 37024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759873, "uuid": "edfb16b3-e4f9-4809-9857-d3a61baec889", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759873, "uuid": "bf357258-3cbc-4f4d-88d9-db1dd4fb0238", "value": "cdae5023f1f4708ff501d0d9576fa7be", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f42d6b9-d6eb-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624759304, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759304, "uuid": "fe4ac219-b009-496f-9ca5-a1289ffab4f1", "comment": "Malware payload (Mirai)", "value": "c8cb2ac3289f049d31c30477b09fcbed", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759304, "uuid": "4768a93b-8b25-42bf-a2ed-a459929b8d9f", "comment": "Malware payload (Mirai)", "value": "e7efa588f921eebd451b66a82f9a2b731512a69211cfa353d2a589842f913a0a", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759304, "uuid": "84fe424d-b58b-4c26-881a-cf6e9bde0ad0", "comment": "Malware payload (Mirai)", "value": "ca422bd6bbb312dcc1b5914a522ec34a93127fdf", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624759304, "uuid": "92cea648-7fd8-4db5-93f9-f43e84c904f7", "comment": "Malware payload (Mirai)", "value": "d0b1e731f81fd61c45d9d48c6872099fa47b8449afa6670e4f95e02076593ecae3f2e5bdbf38f04b3803f8b618722dde", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "motorola", "colour": "#68384D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759304, "uuid": "d5b83f57-98bb-4b32-9213-ce8f6e70d1f4", "value": "F6F21A9AB800AD7CF81BFB7E54078909B531775546920B3363B3FC87ADB22AC5923D45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759304, "uuid": "72273592-1ffb-4db8-9e87-a09c158c599b", "value": "768:UyFPo5Ptx4+5QaPVxN8erUy+1ievPAIGpkuW:U6CDnPVxN8erK1iegILuW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624759304, "uuid": "cd0f75a9-d365-4fa4-af25-3568f22e871a", "value": 36188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624759304, "uuid": "fc44cad7-c839-4305-8bfa-e5ccc8fc26f0", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624759304, "uuid": "6f5e0d77-dd69-4a72-bb7f-84b2373445ff", "value": "c8cb2ac3289f049d31c30477b09fcbed", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "797f9c07-d6fa-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624765683, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765683, "uuid": "fc997df7-e039-440e-bace-23b7d6fb6fd2", "comment": "Malware payload (Mirai)", "value": "0ec6bcb0424b8ad4c51f7ec9fcb120c9", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765683, "uuid": "7d0c8eb4-942d-4ade-be1a-42f51c3a7aa4", "comment": "Malware payload (Mirai)", "value": "ea9e73a11640db042a9e7e31e2bfb7cc4bc3e8f7fb7322fe613299697bd4defd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765683, "uuid": "d5f120dd-0c26-4e83-b663-d9877b40feef", "comment": "Malware payload (Mirai)", "value": "4f157cd4282c04f0200d5904f35c1e516125eead", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624765683, "uuid": "1d60c616-e9ff-4163-9256-d3a9c25d2bd8", "comment": "Malware payload (Mirai)", "value": "cef97a9647306f3a4466ac3dd70f475258f478bf6b5a07f63fc642f7dd354276829d699460a028daa7e46131b0d21ecc", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765683, "uuid": "80a58b05-4907-4af4-8e18-0a456a189841", "value": "34A31A5AFB808F07C0D22775BADF42513323DB55E7DB23065628ABF43F867AA4E22505", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765683, "uuid": "aa05c2df-3db6-423d-91ae-3f6530cb9a8f", "value": "1536:jAnA8J5A0E/UdhO0kWs4alfEiVTWfBGeiCT3AJCwPwzzw/9bK0vmsifgs:QJ+0E/UdhO0kWkbTUKCT3jwoM/9yIs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624765683, "uuid": "b8edac27-749f-4414-b31b-abe506b00c23", "value": 98353, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624765683, "uuid": "45f9bb37-e8b7-43bf-b7dd-00f98e8b77cf", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624765683, "uuid": "b610ac0f-11f1-405a-8d20-6976857121fa", "value": "0ec6bcb0424b8ad4c51f7ec9fcb120c9", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4309245a-d790-11eb-875b-42010a9c0053", "comment": "Malware payload (RaccoonStealer)", "timestamp": 1624830016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624830016, "uuid": "c8f85475-e1cd-45a1-9026-22576563c813", "comment": "Malware payload (RaccoonStealer)", "value": "48f86a336a26aef9cc04f57b916084f3", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624830016, "uuid": "a710071c-73b4-4203-9766-ae14bb4d2249", "comment": "Malware payload (RaccoonStealer)", "value": "ece0bf5f701aefb5b0b02973ce91b1afd1265f98c6fba30413ea878d243cf350", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624830016, "uuid": "34a38542-78ba-418b-87e0-3b6bcbdca4c6", "comment": "Malware payload (RaccoonStealer)", "value": "835796cb983aad04c3e7b86b9bd3fbfd246d6ba4", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624830016, "uuid": "e230a0cf-5abc-4575-9ba1-588acf804a38", "comment": "Malware payload (RaccoonStealer)", "value": "80ad905e367bb2ac0ad2629d397fa1823346a9041b61347f9e566a5f889aaaa43590b572d204e304f7390147fd820ccc", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RaccoonStealer", "colour": "#C0516A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624830016, "uuid": "ac6a77ff-f970-41df-ac8b-317aac972092", "value": "C8D4D010B6A0C035F3FB72F49A76936CA4697DA16F6640CB12D92ADE46347F0AC31727", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624830016, "uuid": "ac687b3d-a862-4a49-b348-0cd12a708743", "value": "b067534ac0be7011ca2eacbb5ad9dcfe", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624830016, "uuid": "c465fb18-f473-4f69-bd9d-167044a51d6d", "value": "12288:t/TTUw7y3LYkiy2NYY2XzSSRbt3BpohfUy/1B+U6X2+/IYAPQFtl:tTUw79C2NYY2hRbt3oUy9QV2inh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624830016, "uuid": "a212fb19-3a04-4ff7-97e8-456850761775", "value": 624128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624830016, "uuid": "4a54e916-f90c-4254-b8d5-f2a467cf0f76", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624830016, "uuid": "7ef03104-e078-411a-9666-5cba5c694d0b", "value": "48F86A336A26AEF9CC04F57B916084F3.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "362f9d6d-d788-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624826558, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826558, "uuid": "9bf5bacb-2a32-4a39-aef7-d855a2bac775", "comment": "Malware payload", "value": "fec032393a254babcfc7cc4148fc25fd", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826558, "uuid": "cd265cb5-ebdf-4b86-970e-7df5fcec4a65", "comment": "Malware payload", "value": "ed33c8c9ed0f40b53dffcd84d8c0df5dccd2db9953661c16f743c2f9d595591f", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826558, "uuid": "a3a376fe-0fa6-4f45-a067-40dc421439dc", "comment": "Malware payload", "value": "d20e89274efa9403098df6ac34dcbf7a6ef4c9e8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624826558, "uuid": "466d4451-128d-4734-8dc1-7349c8b72b88", "comment": "Malware payload", "value": "ae4fd008dc9d6a89d9c36f9e1b4ddba769e0afdb8fe6c2c18e1242bc7705ff9a2d4f89ae8c93f7067b70cd2cde7ab997", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#8C9C05", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826558, "uuid": "d889c7cf-b57d-406b-9768-562ede6a15c0", "value": "D9734D42E652CAB3C8930BB6029B5B264A31FC3A1E2B9F59F31D7CF49B124C87217755", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826558, "uuid": "d002add3-87c4-454a-817c-00db0440f244", "value": "1536:0+xNVpGQWuKv8xKBnq5PeOj5zMLTS5qmLI2VOCjXUfJRk:nNT830xKBnq9eGAS5qmU2VOCbUfJRk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624826558, "uuid": "7047419c-8239-41f1-9e77-6f74c0f914c6", "value": 74017, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624826558, "uuid": "6c2eaec1-63b2-4a82-ac57-d820e1cd55ac", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624826558, "uuid": "a3425a28-d2cb-4168-97cd-babe87c7270a", "value": "fec032393a254babcfc7cc4148fc25fd", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7a2628c-d75f-11eb-875b-42010a9c0053", "comment": "Malware payload (AveMariaRAT)", "timestamp": 1624809166, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809166, "uuid": "e0713f12-af9f-40d0-bff8-47802bd582a1", "comment": "Malware payload (AveMariaRAT)", "value": "816149a12b24cb31edec50ee0f51e38d", "object_relation": "md5", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809166, "uuid": "41f63248-2e4e-403d-ad94-2b0acf3ba490", "comment": "Malware payload (AveMariaRAT)", "value": "ed5fffe5ebcfd9dfd7b4f9db7ff8273d284169218f677a1c2de7e7547e28b661", "object_relation": "sha256", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809166, "uuid": "f68a7f4a-599d-46fd-90ac-b125927231f2", "comment": "Malware payload (AveMariaRAT)", "value": "ff5053415af61bfbf9e4f43ed347011c21cb0090", "object_relation": "sha1", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809166, "uuid": "101cc205-3fed-4b42-92ee-94ce7986ceba", "comment": "Malware payload (AveMariaRAT)", "value": "4f3a5401671f010294dfbcc2113b2c1353fe08651d836d086cfd4891d82d63d9c779800e812d8337c0d3516983104220", "object_relation": "sha3-384", "Tag": [ { "name": "AveMariaRAT", "colour": "#8ACDA3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809166, "uuid": "7a2d2392-26af-4562-a622-e78d921c50de", "value": "E7B39E13F7E54835F3B201B01ABD7E7ACBADF9701628C49FA394854B2D31846EA25397", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809166, "uuid": "fde56b84-0891-41d1-aeba-ac9b45c92039", "value": "51a1d638436da72d7fa5fb524e02d427", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809166, "uuid": "2476e30a-ea55-41a1-9e08-1e8216b0caae", "value": "1536:h0jP7/L1B5rVmN8sxHv2M28ix8EUaJxWZoB4u0OVE01K:K1VmhaH8EFvW+0OVE0U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809166, "uuid": "5503492e-1420-42c3-b05d-1c455a088891", "value": 111573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809166, "uuid": "733e71bc-6708-4203-b7ec-4abb5393de91", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809166, "uuid": "03d039ad-db2b-4030-a5c1-76d4ec3886d6", "value": "816149a12b24cb31edec50ee0f51e38d.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3023987-d79c-11eb-875b-42010a9c0053", "comment": "Malware payload (BitRAT)", "timestamp": 1624835438, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624835438, "uuid": "7cda2d18-0e7f-4769-9a1b-d753eee75185", "comment": "Malware payload (BitRAT)", "value": "51c5b90e39a471b71750df24ebc69155", "object_relation": "md5", "Tag": [ { "name": "BitRAT", "colour": "#52156C", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624835438, "uuid": "9bdcfb8f-649d-4fb8-89c2-735103128ed1", "comment": "Malware payload (BitRAT)", "value": "edb2077ae4bfdc5b987c2191fe2afad2746453533a5f300df530a26014f45298", "object_relation": "sha256", "Tag": [ { "name": "BitRAT", "colour": "#52156C", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624835438, "uuid": "170075e1-8da0-4ebe-b5d0-e3806bccd06a", "comment": "Malware payload (BitRAT)", "value": "141a78b848889b3d832940a484533977a725e2ad", "object_relation": "sha1", "Tag": [ { "name": "BitRAT", "colour": "#52156C", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624835438, "uuid": "b0b4c2d6-abeb-42fe-9ef7-e06dfdf004a9", "comment": "Malware payload (BitRAT)", "value": "3d21deca507fdf9f545f9e85791d8ddc046d0daeb9c5d92ef42962a5d3e2f2816c8e4db6fbb0b4560f967b293111da4e", "object_relation": "sha3-384", "Tag": [ { "name": "BitRAT", "colour": "#52156C", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RAT", "colour": "#C46D93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624835438, "uuid": "c3fbae5b-c3bf-49b3-9ddd-735bf2481f3a", "value": "C9662327B7191041D0D29C3AD823EFB032B12E669BD0783432D67EFB6136BE56A1651F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624835438, "uuid": "f91baa32-a6f9-4d7c-ac60-047ad8ab2c9f", "value": "ae28306bf70f5963ea0555dfe529913b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624835438, "uuid": "fa604405-2bf7-4b4d-856c-01a3eb6c11df", "value": "98304:zX6OQ/8VlovPDuc7xwPtswZvPshkLxddIIxx3cCRe9E1hCY21:zX6OLGnac7xw1vPsGzCIxx37e4oY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624835438, "uuid": "183df58f-6b45-47e3-96c2-85ea0d2977c5", "value": 7074304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624835438, "uuid": "6429c3a2-5aae-4c42-a7d9-91c5c5a82dd8", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624835438, "uuid": "d86cc85c-5c95-46c2-8076-eb8a11c7e9c0", "value": "51C5B90E39A471B71750DF24EBC69155.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71c5ed3a-d6fc-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624766529, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624766529, "uuid": "462cad1e-bd05-4e8e-b0c4-edda56b61880", "comment": "Malware payload (Mirai)", "value": "bb0e028bd2c751f4585d68c8af2b04e4", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624766529, "uuid": "d5c77e08-3fc6-48db-92c1-666d02ddd6cf", "comment": "Malware payload (Mirai)", "value": "eef9a0628a5d929678e8917a13f9fd79b7ec0e6c78439d024561ca4290502a99", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624766529, "uuid": "3e4e69c4-09c6-4f86-b411-2e45cb487b79", "comment": "Malware payload (Mirai)", "value": "377ff7566aaae294ec4183cdc8120af326391aea", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624766529, "uuid": "4f14600b-c52b-4f17-ae51-d39ced065b3f", "comment": "Malware payload (Mirai)", "value": "7c237c1e765e1da78bb2e84e62abcfd7276a6896cb7d538888bc7fc49be10df36fd37a1d77c1f8890dda71dd62de7689", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#77E303", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624766529, "uuid": "f58683dc-af23-4480-a0cd-5f4356e7531a", "value": "B9E24B35BE62186FC4C85E7A55E74725B6F6434F38F88A3B3C220E9CBF04A447253669", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624766529, "uuid": "5708a4b6-76dc-421b-9728-1e3d5adfdaf7", "value": "384:OGHQmVI7tBJ3aXoOCZM4P8IFU+pMqdY9HlMaGACqqEjDw:OwQmVI7l33FNO+uKaGACqqEjDw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624766529, "uuid": "625f7744-d170-4c58-82b0-64c614bffab0", "value": 32920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624766529, "uuid": "64b9e75e-5588-40c4-a8ac-dbcf5e9e6073", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624766529, "uuid": "22b7838b-7318-44d0-b942-3abdb8bd811b", "value": "bb0e028bd2c751f4585d68c8af2b04e4", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5fe8b53d-d720-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624781961, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624781961, "uuid": "f4b4850e-a30c-4769-95cf-3505a077aa68", "comment": "Malware payload (Mirai)", "value": "5e2b4696b1b681bd0022d9908d2c887d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624781961, "uuid": "318b4ec6-c3a8-4ec4-87c6-fc1afb31efd1", "comment": "Malware payload (Mirai)", "value": "efd12995dffe4e2b0b4b308115970dd93cdd91f5dde5a38987003f64e67a27ac", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624781961, "uuid": "979007fc-dcb4-40e7-b726-ec14c6c516c4", "comment": "Malware payload (Mirai)", "value": "44d1931bc7b4498729c474b75b686beea26d9946", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624781961, "uuid": "e0a9d0e2-0117-4511-af58-89f0d152f186", "comment": "Malware payload (Mirai)", "value": "a2ef1c6d6213ccc2b93a9bcd07af89d24ce0ab700237595977b7cbd4599eafc57ff2ba190491b1eec8924d77dc9d7ff3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "intel", "colour": "#6F8ECA", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624781961, "uuid": "2df88b5c-05da-421f-815c-2dc112dcb40a", "value": "E2538D85EA82D9F4EC4340759477D7E68B33EA365068DB26CB642930DD63901EB37B8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624781961, "uuid": "cc1a26ef-56f5-4a20-a82c-36a638c4c675", "value": "1536:h+gTr2S9tTiKUOSyVqC8Hmzt4fUbgUIRpwpeZN:fTrHTVSbC8Hwt3bgUKRZN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624781961, "uuid": "6667b585-a9f1-47ec-98b2-5f00f5e9a6d9", "value": 63004, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624781961, "uuid": "858b415c-8e7a-44c3-ae2b-fd85f72d0169", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624781961, "uuid": "4b44e45a-cb19-41e6-b448-e7ac1e0f52c8", "value": "5e2b4696b1b681bd0022d9908d2c887d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12941eee-d76e-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624815332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815332, "uuid": "5ad32f49-de11-4940-a7f9-ceee2bd98782", "comment": "Malware payload (Mirai)", "value": "789e5d835d0ba6a883bc8cd5122923f6", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815332, "uuid": "57cd4434-b5dc-476c-ae6d-1ec5430b8feb", "comment": "Malware payload (Mirai)", "value": "efd7e9daf9dd34ad91b8ea487d2404c3d77f1ef263a4dff5926aba8ab6fd1ad6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815332, "uuid": "2db49aa5-a92e-4d89-afe1-cb94bcf607c8", "comment": "Malware payload (Mirai)", "value": "e1884b58f171e1fa81a5a2e98acd9f8f6843b2b2", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624815332, "uuid": "18f0fe50-707d-4e34-9411-f35059bdfc36", "comment": "Malware payload (Mirai)", "value": "39790aeae992d00dd998d67ddff40147e84040302984d3029ca47eeaeec66a98f4286a7bbc6903c583f773169cc0d76d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815332, "uuid": "d9d6464b-47fc-458b-9981-ad0f7b08dcc7", "value": "E4E2F1249F011C99C5E1F0BD02BA0BC0AEE40FA8A943E956EE4DCDD7C7D1939B6C16C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815332, "uuid": "029d429d-7c9c-46a4-bc60-c75af8e6d3a6", "value": "768:KxW9fiewQbqt8tXUPn9xaKjO3xpWpOCJZuclBow7hOFJgGlzDpbuR1JL:Ko9fieV+9ryBpWZJMQGwNOVJu9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624815332, "uuid": "4242d27c-0c27-405c-bbc1-1750366169c3", "value": 31324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624815332, "uuid": "0079c5ce-b509-42eb-b8fd-1c599d272fe7", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624815332, "uuid": "43253e43-3f4a-491e-814a-82b94a34545c", "value": "789e5d835d0ba6a883bc8cd5122923f6", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1790efa3-d730-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624788711, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788711, "uuid": "0917e150-c0be-45a7-a985-773907d85037", "comment": "Malware payload (Mirai)", "value": "d64200bc72257d283630683429e29b29", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788711, "uuid": "5de1aa82-3b53-494a-bac2-a4e79e33983a", "comment": "Malware payload (Mirai)", "value": "f00492820e75a20bc7a9c2316109a9fe5bc6c92c617fb77027f2c7ae0d0720c5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788711, "uuid": "8cbc14fc-2acf-4501-b437-9525f6d8c11b", "comment": "Malware payload (Mirai)", "value": "2d30454e4ff65f4567885b5f35573a9074e88993", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788711, "uuid": "738cffee-dc7e-425d-9faa-03e982206edc", "comment": "Malware payload (Mirai)", "value": "9176daac0207f11c93fae7fe08aaf0f3dbd3d186d1cad3a5e920595e231a79076f56d87ea70ecfd5256fd60292d2c7e3", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788711, "uuid": "64b494d9-f217-4f38-9453-93dfbf21b748", "value": "F6E2E06D54A059C3CFEE1CBBA0FD02FA8AD2F142B452CE18EB221DC46A1615B94CD0B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788711, "uuid": "274db10d-3eb4-4bd7-abdd-0a4a3614dc2c", "value": "768:K/tv3D1sZ4LKFDvljx7UA6EVZfNh65rB5Wv:afD18nFDvlOv5dI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624788711, "uuid": "80ad5cbc-0014-4976-810b-88e86e13afcf", "value": 32476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624788711, "uuid": "825a6bf0-a648-4fa8-8085-b42ed3111898", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788711, "uuid": "f0e9d0e2-7453-411a-9e64-33f8abbdea6d", "value": "d64200bc72257d283630683429e29b29", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a88e3d75-d74b-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624800551, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800551, "uuid": "40a4a0cb-286d-47da-a1f8-b106b36e5d15", "comment": "Malware payload (Mirai)", "value": "079b10d7c129c8853449a7e273db449d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800551, "uuid": "0b6bf60c-29fe-4223-a2e3-9249070f6466", "comment": "Malware payload (Mirai)", "value": "f11a9f79521efce10cbee5308416e4a02a46f74ff9c8c220ceeafd638b703dbf", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800551, "uuid": "970396cb-b222-455b-8b8e-f61026d1af38", "comment": "Malware payload (Mirai)", "value": "a37c7bcdb90cf761759dfd7bb5a1d49e9d4c3318", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624800551, "uuid": "27068537-6408-4bc9-ab83-26007ab2879a", "comment": "Malware payload (Mirai)", "value": "6201ab7576683c4ff5db39cf02b8160f90d02b6cedde15b3fa76ffd7667b797312f9cf6a65faefb5de12e890ee84baec", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800551, "uuid": "b7f6f662-aebf-4fa8-9dfd-33baf1f996b5", "value": "20630946BC918E11C5C513BAFA2E118E331367A8E3DE72238E146F2437CA96F0E7B555", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800551, "uuid": "8dcc2c85-ed4e-45bd-96b2-8bc94efcc752", "value": "1536:b4nBuIPkzEYSHw2uchjraiLG1WlgwDC8M7BznIBiEzMImh:kuI2ElTuyjuiW3wGgzMImh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624800551, "uuid": "1c9c9439-fed1-40c5-bc9b-421140dce78f", "value": 71088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624800551, "uuid": "1425708b-4be0-45fa-a399-0589bcf4a0c3", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624800551, "uuid": "75e7d2ca-561b-411c-aaf2-b82ec15f3d3a", "value": "079b10d7c129c8853449a7e273db449d", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6243d98f-d720-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624781965, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624781965, "uuid": "379cbd41-cd58-4557-9aa1-b5d7737e9185", "comment": "Malware payload (Mirai)", "value": "d0b1ab925629fcbff73c65ef0a9963fc", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624781965, "uuid": "c86bf562-6972-41ab-8f67-70d8dffe0e35", "comment": "Malware payload (Mirai)", "value": "f1b62a5da590d2c74fc66c9a43fdde83e80c6377863f26cc25805f856af1d77c", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624781965, "uuid": "8b27bb6a-c776-43e2-a01a-8ddfec7e8535", "comment": "Malware payload (Mirai)", "value": "fac808ff9f0124e8d6a5e22bfdf872523d284f7c", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624781965, "uuid": "3ada5900-4fe6-40b7-84b8-9bcf6693e4de", "comment": "Malware payload (Mirai)", "value": "e96f695399ab072589608b0d555856f0502da91762bf5e0578c889bc791883e2bc43bce8a5ec258f136eba0775a51660", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624781965, "uuid": "855a59d8-98b8-4bb3-9960-179ff51013eb", "value": "D2A3A65E2D229FBDF7ACC33447B74E31A65863D626E1C681E1ACC6011F7024E645FBA8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624781965, "uuid": "60be675b-9e24-4bec-aeb9-dcb12c40e294", "value": "1536:OpgzWY9OPuj5qyrjpes26mUiFgh1ia+e7mI5/Lxn/Aceh2Cp5Hp97:OAHr5qyrjf26pig3+e7r5/L9YDtp97", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624781965, "uuid": "347c0b96-a84d-402c-af36-fa90e8493db5", "value": 105732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624781965, "uuid": "d67765c1-799d-4e47-9aa6-bd7be34d0e7b", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624781965, "uuid": "138aeb66-5886-4461-8837-2b973ba1aecd", "value": "d0b1ab925629fcbff73c65ef0a9963fc", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1bc3260b-d783-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624824367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624824367, "uuid": "9a15ed1b-276b-4f5f-bd29-776938a8fd79", "comment": "Malware payload", "value": "f075127a4fc47d414040202f704e15e5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624824367, "uuid": "b6d01619-3fe3-43ce-82c0-33a95271287a", "comment": "Malware payload", "value": "f2d0ccaa6f2a2b271af90a8f28bd08efb2c42676f32251fc8a6790bde2854fd6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624824367, "uuid": "1e32057d-3aa9-49d3-9482-f41f6561e112", "comment": "Malware payload", "value": "183df2e8852f2c14c0826404c20bab8ee9a0e68f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624824367, "uuid": "217104b6-62e1-414f-a489-5b098b1682f4", "comment": "Malware payload", "value": "6162de5b0a3db5504aabd23cdbed24ad7d2e573f42b97d172f9e0ae6d4b67de42bf18ae51f3c94d326fd3a302a0a7f25", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624824367, "uuid": "ad46a9d7-5056-424f-97a7-b4ba746a8bcc", "value": "09C66C027690CD25E0B9B332C76618B067677C59EF57C7D71884BFDA3836742AC09B2A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624824367, "uuid": "a8edb544-272a-486a-98ba-11deaf3717fb", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624824367, "uuid": "c58ad0bc-efac-4f26-a4bf-52cfe320b717", "value": "196608:aK5MVgBZbBhTIhTChTBhTAhTZhT3hTbhTKhT3hTzK+qabhT8n4smEOCMgWeMy3jT:5MVgBZe+qamAEOCugs1fj6a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624824367, "uuid": "ee757e2e-4864-425f-94fb-e85c8eeb14df", "value": 12569088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624824367, "uuid": "b279ab4e-f9c6-4d1e-8ce2-4a1c6b1171af", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624824367, "uuid": "95766c26-aa86-4073-8399-27f3191fe773", "value": "f075127a4fc47d414040202f704e15e5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4a04bac-d76c-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624814825, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624814825, "uuid": "d1260c6a-f679-4adf-8c5a-a0d04f78eee0", "comment": "Malware payload (Mirai)", "value": "611b22bc4834debd1aa548ebce8ce309", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624814825, "uuid": "d0f140e7-66f7-4171-a492-fbf72295be45", "comment": "Malware payload (Mirai)", "value": "f48b0f8659bb16ebce49f8e75db0f2a10e5d95f6d4bd8b40c26b7a061aa318d2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624814825, "uuid": "3aec426d-f36c-41d2-9da6-c1db8d335057", "comment": "Malware payload (Mirai)", "value": "683e735782d25293344f31108b5aea38dda0d3c7", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624814825, "uuid": "a333c308-864c-488b-aecd-358d7ae9ec6f", "comment": "Malware payload (Mirai)", "value": "c51ee6c3e2d692b17e50d0f8ae00b257d276b490fe0c4759bac0c724b4521bff5b0381aa2796b48a1dfc2ecffc83011d", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624814825, "uuid": "3442c406-18c4-4c94-87a6-2abb09b18d2b", "value": "F7F2E161AB1A6DA0C9704D73CE8C07CA5A050FF9F0E7BC33179B097041E165669B8EDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624814825, "uuid": "10d24393-7a2a-4282-92d9-bb76d2121976", "value": "768:SpibTRwbuuMf8TnCr7P8uPb6U5uELDe7H5wJRn/9q3UEL5m:SEb1EnwN2U5PLDe1onuLw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624814825, "uuid": "5f828903-fc8d-41bd-b836-cc4d2974ae82", "value": 34908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624814825, "uuid": "2f57ad50-5e7e-4e27-8d3e-9d925121df60", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624814825, "uuid": "9a99f319-4697-4c41-83be-29c1550aff84", "value": "611b22bc4834debd1aa548ebce8ce309", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6006eff-d6ed-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624760174, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760174, "uuid": "014cdb4e-f359-488d-a086-08c664d86f67", "comment": "Malware payload (Mirai)", "value": "4cc4e468baa0aceea44dfaa9928d0279", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760174, "uuid": "914dadf6-06df-47c3-a0e3-4f0c85f9b1ed", "comment": "Malware payload (Mirai)", "value": "f4d851908e900d9201597f898cbb4420772a935901f25a77b31fc80e7cbc88b3", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760174, "uuid": "fd6259bc-f9a8-4bbb-a1bb-7b7243e3b549", "comment": "Malware payload (Mirai)", "value": "6b8fa303ace96cf4b3beedb7eca43baaf8c508f8", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624760174, "uuid": "234ed61d-9ca7-4d52-9102-d64f4c01d97f", "comment": "Malware payload (Mirai)", "value": "cb0999bc62e6fbbafefb79ca5a319fb3fcc95504d6e82cc0d6082ab0134523019187a933b7c4391c97722cdbda998810", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624760174, "uuid": "3d0f7d5a-6e8d-42e2-86e5-1f8c6e6a5e7e", "value": "25E2E03263883924D3C24471D02DC4E7B725A238BE97B771193891B8BCB5ADB8D76643", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624760174, "uuid": "197f745a-9c7d-4ae4-8edb-da9686cdb8ea", "value": "768:8RaSWXAE+9mtTlJB8TwimB00g1walxsDCOo0z2kQ3UM:nZwEOmthJBWEBDcxKiL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624760174, "uuid": "2bdaf3e4-7504-4e31-995a-b092c3e8a9fe", "value": 33848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624760174, "uuid": "794af8ed-f696-4c01-aa95-e23b41404a4f", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624760174, "uuid": "439e200c-2521-4ce8-99e5-f675e64052f1", "value": "4cc4e468baa0aceea44dfaa9928d0279", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5eed9c67-d74a-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624799998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799998, "uuid": "27b16acf-1bac-4d51-befd-d81b31aace6c", "comment": "Malware payload (Mirai)", "value": "4d84826f505ea5a04b2d65cff4ecf126", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799998, "uuid": "db2fcafe-67d1-4f3f-b2d2-5a155e18714d", "comment": "Malware payload (Mirai)", "value": "f623bc541982d105a119b32ca5f91f33d629a4d9766c362a78f72cfbb7380ea6", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799998, "uuid": "972d9230-d61c-4790-a0d4-2dd9a83e4182", "comment": "Malware payload (Mirai)", "value": "38bd3172d04056f9ed86c096ea2c7e37564251c1", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624799998, "uuid": "b95e20ea-7fcc-4291-8443-74f82a04563e", "comment": "Malware payload (Mirai)", "value": "109a4dfdfbb9a5c203f5f15d1d4e975dd65023486b1b4887d5da23f81d0d16aeb4d90521d790ebcf000b0fa24b7f1fc1", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#0BD886", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799998, "uuid": "ecf7d55b-c307-4433-92bf-5a087beb8e92", "value": "42431856BDD58A06C9C413BBFA2E019D332523D8E1EE32179D212F1077CA92F0EA7656", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799998, "uuid": "dcf4a0f7-f2c2-4a7c-bf1f-fd2fd73dc518", "value": "768:l8qJpobHQkO+hlB296B9GvhlZvWnwl5bw+KD0VbFB7POvyenvUk1J62Ngx31ctBF:jJObW+7B29lZflBYD05FBbayKUagZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624799998, "uuid": "11356755-23db-4d77-9de9-448bf1a60ae3", "value": 60024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624799998, "uuid": "d170d831-b5ab-4d30-8c0f-08eae7248932", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624799998, "uuid": "3a2c91ef-8bd7-464f-8397-4e43c5dbf275", "value": "4d84826f505ea5a04b2d65cff4ecf126", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cef04673-d760-11eb-875b-42010a9c0053", "comment": "Malware payload (RedLineStealer)", "timestamp": 1624809635, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809635, "uuid": "389aba08-b62d-40c6-a663-9c63ccaf13a1", "comment": "Malware payload (RedLineStealer)", "value": "f1891122d6c88a47ecbb8f8395d3abfe", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809635, "uuid": "fafc5d4f-6150-4b34-9673-7dfb5f1f7e15", "comment": "Malware payload (RedLineStealer)", "value": "f6522707e686c4a0a2e63cedbfb3477dd73c265f06c238a24cc2fbf9b9b40a58", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809635, "uuid": "d2716cfc-6568-445f-911d-1b62a137e132", "comment": "Malware payload (RedLineStealer)", "value": "2ddb6b0c5062236fe3a90d3736335f78fa9b7cea", "object_relation": "sha1", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624809635, "uuid": "cc720cc4-b1bd-4159-b19e-3562f91adf22", "comment": "Malware payload (RedLineStealer)", "value": "44eb2703d2a33e538b6123b6fbd49a20ec33840e4db51edf200ff1bdaba0fbad17af8eb36a8094d0327e93c52c09dade", "object_relation": "sha3-384", "Tag": [ { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#0C3887", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809635, "uuid": "69a0fc3b-6af9-40be-91bd-74d85c08ddc2", "value": "940633D87128B9DFCAB6E3749B054D05F69022B363A34307605B31D4E5BEA9BCF941CA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809635, "uuid": "a8625e59-6e47-438f-91e2-2a41905ca3a8", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809635, "uuid": "7e2b6eaa-7b79-468a-9d7d-6c6f28fed4c7", "value": "98304:Wvd/NIL2HTH6bWm2XddZgNGJcM/aAyd8zeJ9g0n:ydzS+qEcMCAydCag0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624809635, "uuid": "8cfcf322-93c6-449c-ba5d-ae82300043d7", "value": 3736064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624809635, "uuid": "74602946-dfdf-45c6-9326-7c8e13fc8789", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624809635, "uuid": "cee0f9e9-ade6-4fbe-9535-3f11a8cd406a", "value": "F1891122D6C88A47ECBB8F8395D3ABFE.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be3e4572-d750-11eb-875b-42010a9c0053", "comment": "Malware payload (DiamondFox)", "timestamp": 1624802735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624802735, "uuid": "ef1faa66-2b5a-423e-bd14-11b02624f0dc", "comment": "Malware payload (DiamondFox)", "value": "208532e2a4c461ba3f8771e5f2c42965", "object_relation": "md5", "Tag": [ { "name": "DiamondFox", "colour": "#EB8395", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624802735, "uuid": "ec49a151-cf53-47ba-88b5-fca80d9776b6", "comment": "Malware payload (DiamondFox)", "value": "f89110f497e2a39c3fc34329b16e5528564bae652fda61cd07410b27e046fdf3", "object_relation": "sha256", "Tag": [ { "name": "DiamondFox", "colour": "#EB8395", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624802735, "uuid": "334cad4f-3cef-458f-9008-d21de05e5fbc", "comment": "Malware payload (DiamondFox)", "value": "33bbc2bdbf7caa1d5871315c6f423717ce9ca33f", "object_relation": "sha1", "Tag": [ { "name": "DiamondFox", "colour": "#EB8395", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624802735, "uuid": "d0c09024-4a12-4e60-8003-b1308c9f59e3", "comment": "Malware payload (DiamondFox)", "value": "9434c19521fa907301bb4a08b8d46f4e8c388676096cae6ea30f7f418b81390835b7b59d19aa05b9aa5eedbe4c27b4c5", "object_relation": "sha3-384", "Tag": [ { "name": "DiamondFox", "colour": "#EB8395", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624802735, "uuid": "abdf7bac-2d65-4fda-8526-2acb905f22c1", "value": "60C533A9E33C42F5F73D2A36525746158AB2DE57320DC9AFCE1D10490F63B026A07B7A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624802735, "uuid": "6af07516-2d97-4300-a795-d2bb0fd1a1d4", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624802735, "uuid": "86873e34-f33f-4f19-afe4-91c603dd07d0", "value": "49152:QRvqS0mHytg5TlXPZPJ2Jy1CKklMYpMgKiHmnk0yPP9WUz:m10mIgxd151CBlVpMeGnk0sEU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624802735, "uuid": "51c80215-47e1-43c4-a54e-2b38b3ffc2b6", "value": 2606080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624802735, "uuid": "6c234cdd-c018-495e-be16-9197d7c384d1", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624802735, "uuid": "df9686da-3664-4b06-ab89-6076621a315c", "value": "208532e2a4c461ba3f8771e5f2c42965.exe", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "340abf92-d78b-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624827843, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827843, "uuid": "4394bed5-bb5d-496c-ac2a-350f296857f2", "comment": "Malware payload", "value": "f0f9feb8ed1589744ef25302ccaf6c6e", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827843, "uuid": "daad42ec-e83a-4612-947d-c9bf5500bb41", "comment": "Malware payload", "value": "fa6bb71a87feb5e587dc62cc22c3fb5d447c1206bdfb3c18e9f73192f3deddd5", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827843, "uuid": "e8aea334-f91e-4557-9985-f459159f6475", "comment": "Malware payload", "value": "8163f97386ba1fcb49cafa03d024bc6467964713", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624827843, "uuid": "4e1aaa26-34b0-4280-9440-45b1b4a938e6", "comment": "Malware payload", "value": "d4cc473e43b3fe0cdb199cc419002296137840fe1b9f6e751c0cb0c8af925dda356e7220eba7e555ccdfb76efdfc719e", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#F7D566", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827843, "uuid": "09592930-153c-415a-96bd-d20e2b60ef0f", "value": "61D4D000BB51C035F5B636F8996A92A8693D7EF05B2410CB62D4FBEE47386F1ED31216", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827843, "uuid": "18846abc-d149-4a9f-a715-3a83bed9240d", "value": "49f7d03a7898b500bdee4de1729ec84d", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827843, "uuid": "c7c0ae22-1c2d-4c06-975e-07af805f4d46", "value": "12288:1wteb4RPkX0ebw1hLKRbQTGu6BCD0zkfbRMUPR:IesaehLKCGoD0zabBR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624827843, "uuid": "b857a543-d229-49fd-a862-2006aeebe7b8", "value": 636928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624827843, "uuid": "fd7b4448-4de8-4454-95bd-76f9cc501f3c", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624827843, "uuid": "bfdf8be0-cfdc-4725-84aa-b780339f0cef", "value": "f0f9feb8ed1589744ef25302ccaf6c6e", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69146537-d79b-11eb-875b-42010a9c0053", "comment": "Malware payload", "timestamp": 1624834804, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624834804, "uuid": "c6ef99f5-a3e1-4a5a-92ad-dbc4f66ad939", "comment": "Malware payload", "value": "43eec34ab63b90f072b462512c3223d5", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624834804, "uuid": "972be35e-104f-4472-8bbf-80968c404832", "comment": "Malware payload", "value": "faabfe5dfc64dc288ba532a14ad6416afc8c81418ccbf2411760bf25f91d6939", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624834804, "uuid": "1409f8f8-aa09-4d1a-9374-5c971093c506", "comment": "Malware payload", "value": "2552ea09d897f43eebcfe16948e113ca63fb375f", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624834804, "uuid": "53d564d7-60d4-4a18-9fdf-ffaf1853dfd9", "comment": "Malware payload", "value": "d72440c7e672fd0066872dcd31c674f89d3b3b3be303245624d093edffe30c5bba7152caa973e947a3807dfee32780ae", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#8F1124", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624834804, "uuid": "6ead421b-fd7a-42ea-9fb5-1f6ab9bb2647", "value": "53C56C12B654DE02C06D2637D9CF401487FCED227A76EA2A7F8A335D62573A75C0A1CE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1624834804, "uuid": "54cf9b45-5f1f-4f9d-9d71-fcc68b735b96", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624834804, "uuid": "ae323c68-1c0a-4a8d-97c0-627074e6fb53", "value": "49152:jFSnRoQcMDVJeGA5x/xQC2Bp48SWeWZMxs7UXUmQlZrk:jFSnRoQcoaYeTx8Zmkpk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624834804, "uuid": "2d5497d9-61d6-43b7-9b52-4ea9294bc505", "value": 2724864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624834804, "uuid": "468339a5-0318-4bed-a2f5-077cd27119d3", "value": "application/x-dosexec", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624834804, "uuid": "61693a86-b0ea-4485-9def-9f731681af2d", "value": "43eec34ab63b90f072b462512c3223d5", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8fdf1584-d721-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624782471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782471, "uuid": "46278014-ca19-4db1-bbb7-4b0293be3805", "comment": "Malware payload (Mirai)", "value": "dfedd312fbe8c739648da418a73213b3", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782471, "uuid": "1a577aca-e3bc-44ad-b601-d79c08216d3e", "comment": "Malware payload (Mirai)", "value": "fbbc0a7725e5225e3efac3c34fe8a341e285c13ac680eb8fa0af8cd68f5416f9", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782471, "uuid": "20a11100-658c-478e-94c6-5a5f1af67a3b", "comment": "Malware payload (Mirai)", "value": "2af47bb5ccc801d259b30105e581bac9cea0e0ee", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624782471, "uuid": "3941ace5-70ac-43de-b431-dd0ec88714e1", "comment": "Malware payload (Mirai)", "value": "89a1f309ecb00751a623d24bec82a7c44d4c82bbabedc0ec54e1d8d49581a15158616d95c13a73504d33bcb65b41c908", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false }, { "name": "powerpc", "colour": "#AC591A", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782471, "uuid": "985ca483-a545-4a63-a2c3-68bac05606fd", "value": "5F733B42731C0943D1672EF0363B67F1D3ABA9D12298E684390E9F49D1F6A326285EDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782471, "uuid": "99a4ffdb-0b28-4829-865c-d2949e2bf411", "value": "1536:YyAb9fPk6rGMSH2V1u1Vhp+NfydodcGJvbKtgpDH:Yv9/GMSHKuQNfyGpllpDH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624782471, "uuid": "fbac126b-b3db-46a5-a952-6a353704acae", "value": 75356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624782471, "uuid": "d19454f7-c0d7-45b4-87ce-57e8147465bc", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624782471, "uuid": "332f28e7-018c-48ac-82c7-44077138bf6d", "value": "dfedd312fbe8c739648da418a73213b3", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f15e25b1-d72e-11eb-875b-42010a9c0053", "comment": "Malware payload (Mirai)", "timestamp": 1624788218, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788218, "uuid": "04e35197-1a2b-4fd5-a277-0bf5e95da1bb", "comment": "Malware payload (Mirai)", "value": "d296d5e91142fb9627ecabbcb7b68375", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788218, "uuid": "c506adb3-abc0-498c-bfd1-e2f093b02b48", "comment": "Malware payload (Mirai)", "value": "fc881032828937d4598c48a328c20a983d1872d54939acea01c997f4e4b902bd", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha1", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788218, "uuid": "9d45cf25-e52e-4c47-ab5f-9a00f1e7adcb", "comment": "Malware payload (Mirai)", "value": "d5548102f26e69bebc28b0d1294177c7ee3b1e85", "object_relation": "sha1", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "sha3-384", "category": "Payload delivery", "to_ids": true, "timestamp": 1624788218, "uuid": "8d31597c-4ba0-40b6-b0ca-f20a592ee5be", "comment": "Malware payload (Mirai)", "value": "9d28a2cf2c752e5629547084d20498dbfa0bf3e4819865047890701d395ceeedf6c4487119118af6fda9e33a96fef334", "object_relation": "sha3-384", "Tag": [ { "name": "32", "colour": "#7B90DC", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#CD6A22", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#CE983B", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#19EF39", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788218, "uuid": "756f709d-58a5-4ec2-82fe-87de0c027a48", "value": "3DE2E17C9B5161EDED1680BC99F30B532F6207F2B502CC226A5456838AAC0D579536CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788218, "uuid": "e165625f-7e02-400a-a17b-3cb1320daeb9", "value": "768:u1+D5be5PEG1R9CkEhpSpeZ9nuSzyGp/zJgGlzDpbuR1JI:u1+DJe5LQkEh3nFyGp/pVJuu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1624788218, "uuid": "ff2c2b81-596a-484b-9539-26d4cc16f459", "value": 31300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Artifacts dropped", "to_ids": false, "timestamp": 1624788218, "uuid": "f1a9cef7-8727-4ce7-9630-4c36c15d28de", "value": "application/x-executable", "object_relation": "mime-type", "disable_correlation": true }, { "type": "filename", "category": "Payload delivery", "to_ids": false, "timestamp": 1624788218, "uuid": "ab982c95-ec25-4f59-9d9f-0ceeb82202d2", "value": "d296d5e91142fb9627ecabbcb7b68375", "object_relation": "filename" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ] } }